Synopsis

Important: ruby security update

Type/Severity

Security Advisory: Important

Topic

An update for ruby is now available for Red Hat Enterprise Linux 7.5 Extended Update Support.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.

Security Fix(es):

• ruby: OpenSSL::X509::Name equality check does not work correctly (CVE-2018-16395)
  

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.5 x86_64
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 7.5 s390x
• Red Hat Enterprise Linux for Power, big endian - Extended Update Support 7.5 ppc64
• Red Hat Enterprise Linux EUS Compute Node 7.5 x86_64
• Red Hat Enterprise Linux for Power, little endian - Extended Update Support 7.5 ppc64le

Fixes

• BZ - 1643086 - CVE-2018-16395 ruby: OpenSSL::X509::Name equality check does not work correctly

CVEs

• CVE-2018-16395

References

• https://access.redhat.com/security/updates/classification/#important

Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.5

SRPM
ruby-2.0.0.648-34.el7_5.src.rpm	SHA-256: c8a1288ba8c20597aaac1f4b3d6aa9121691dc1b4b368dcce9b89e9ba40ec2e8
x86_64
ruby-2.0.0.648-34.el7_5.x86_64.rpm	SHA-256: 51176a679cb06de3867cac223571acb908895ad690c936b7b1b942996b9e1984
ruby-debuginfo-2.0.0.648-34.el7_5.i686.rpm	SHA-256: dc5c1a3883af4548056c8dbbbcb1874951bf30908494a33a9f1080c46ba953f7
ruby-debuginfo-2.0.0.648-34.el7_5.x86_64.rpm	SHA-256: b9f20e4987eb02d89a970a478cb8efe397435de4a260c7fefe82e83e290b6ef5
ruby-debuginfo-2.0.0.648-34.el7_5.x86_64.rpm	SHA-256: b9f20e4987eb02d89a970a478cb8efe397435de4a260c7fefe82e83e290b6ef5
ruby-devel-2.0.0.648-34.el7_5.x86_64.rpm	SHA-256: 5e822a0ee2bbe7d8ed0ec45f74d3fda2f5bb39bcbc2adf2bb6b8fd48716a7bde
ruby-doc-2.0.0.648-34.el7_5.noarch.rpm	SHA-256: db8b17dffda3470a23c4198d082416d38eb6800dc1fce0cc07f4eb2d2d72a544
ruby-irb-2.0.0.648-34.el7_5.noarch.rpm	SHA-256: e4f24d74c67b3f24aef91fc66fc05defd85d66fb566a801bb9c8328762726312
ruby-libs-2.0.0.648-34.el7_5.i686.rpm	SHA-256: eaaaf8a0a0be6a512a40b24e2cbf6d29a7546e2e0b3a8f3fc832b8eea32d2de0
ruby-libs-2.0.0.648-34.el7_5.x86_64.rpm	SHA-256: 19f645edd1990b8381c030e5ea8e5962c0508a29fd0b6e8b55b2c63fa46a041d
ruby-tcltk-2.0.0.648-34.el7_5.x86_64.rpm	SHA-256: f3286eff79d8f116283891a298eaa8428d4e36501aee983fc883eca472b3aadf
rubygem-bigdecimal-1.2.0-34.el7_5.x86_64.rpm	SHA-256: 988db73406a5422666f3ffb8e834be291520bc2f06559be3d473ebf9e0a40bbb
rubygem-io-console-0.4.2-34.el7_5.x86_64.rpm	SHA-256: 19b2b5a6b467aef20cb90b73c045f681ee3cf4086cb645d4db0df9bd61277f6f
rubygem-json-1.7.7-34.el7_5.x86_64.rpm	SHA-256: 57bd479472302b7cab488baee78a5a1b9b3524ce06db9424cb6c1c0fc0fb2d38
rubygem-minitest-4.3.2-34.el7_5.noarch.rpm	SHA-256: 487af8e38006f2bab66b8ca356c8cfe678234d3d7bee7b2f4b455a7aa765d6b6
rubygem-psych-2.0.0-34.el7_5.x86_64.rpm	SHA-256: 76c853c062ce8b3116836b13cbe928ae2bbf2e0406b58e9fabe1e94ca394bef3
rubygem-rake-0.9.6-34.el7_5.noarch.rpm	SHA-256: 68c23c41c0b16ccecefbe840fd31f086449ad9a9fc3457e4d5d366d4d5c47419
rubygem-rdoc-4.0.0-34.el7_5.noarch.rpm	SHA-256: db9c7a2bd6bb185ed9c5dc0b97b944650d6d17c8a2c2eaadeeb94df5debbdaeb
rubygems-2.0.14.1-34.el7_5.noarch.rpm	SHA-256: 2ac75a0b1155086cb2261b7ae7f760afec4691135c73220d96389f83c0315583
rubygems-devel-2.0.14.1-34.el7_5.noarch.rpm	SHA-256: 7daad4866f2bbbc3bb536d2036d7ad75187e7fd6ce94171d83bb593312cf3964

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 7.5

SRPM
ruby-2.0.0.648-34.el7_5.src.rpm	SHA-256: c8a1288ba8c20597aaac1f4b3d6aa9121691dc1b4b368dcce9b89e9ba40ec2e8
s390x
ruby-2.0.0.648-34.el7_5.s390x.rpm	SHA-256: b4caa3ab9098279b2d499c8f70c90ea2c97cb749c91165e2cc840fac97c83285
ruby-debuginfo-2.0.0.648-34.el7_5.s390.rpm	SHA-256: 433884972345763d5db8150d52dca512a006f8756dfa1cf933181d5c1a756a15
ruby-debuginfo-2.0.0.648-34.el7_5.s390x.rpm	SHA-256: 54a9d19337ac6cb7e65539a54c9348740196a4e954a6c300d8bc92270e900696
ruby-debuginfo-2.0.0.648-34.el7_5.s390x.rpm	SHA-256: 54a9d19337ac6cb7e65539a54c9348740196a4e954a6c300d8bc92270e900696
ruby-devel-2.0.0.648-34.el7_5.s390x.rpm	SHA-256: 1dca6762792d3bc0973a72664ea0d5fec5d1c3da62f43266055ff6cb31ab2384
ruby-doc-2.0.0.648-34.el7_5.noarch.rpm	SHA-256: db8b17dffda3470a23c4198d082416d38eb6800dc1fce0cc07f4eb2d2d72a544
ruby-irb-2.0.0.648-34.el7_5.noarch.rpm	SHA-256: e4f24d74c67b3f24aef91fc66fc05defd85d66fb566a801bb9c8328762726312
ruby-libs-2.0.0.648-34.el7_5.s390.rpm	SHA-256: b64fc11abce0fa18bfcce1d8755df38aedb51339ff6982a8507771b4e7089e0e
ruby-libs-2.0.0.648-34.el7_5.s390x.rpm	SHA-256: d6f6fc3d8f38ea75cc0022869d1b13350f434be5ad9707bd8157a17456a520bc
ruby-tcltk-2.0.0.648-34.el7_5.s390x.rpm	SHA-256: 7dbddd8c9de69635578243fbb5b156c46c2d65f3ae3b84e77c9cca776f577770
rubygem-bigdecimal-1.2.0-34.el7_5.s390x.rpm	SHA-256: 222339ee7562e9a2f5ec1be6a202d4caf696f15b71b4b8b8ba92b4f488507980
rubygem-io-console-0.4.2-34.el7_5.s390x.rpm	SHA-256: 372d9d457f2cf084d84a2f3b2d1f8d9fd53121fe948f8dbae95fb506dd240314
rubygem-json-1.7.7-34.el7_5.s390x.rpm	SHA-256: 5daf78a0b79da1f8c00cc61ade41428aad0cc6ba42cda6eae3558a6a6c6960e3
rubygem-minitest-4.3.2-34.el7_5.noarch.rpm	SHA-256: 487af8e38006f2bab66b8ca356c8cfe678234d3d7bee7b2f4b455a7aa765d6b6
rubygem-psych-2.0.0-34.el7_5.s390x.rpm	SHA-256: 13af1f5b3d6dfb46da2fe7197d3b79d62c5989e48443abd15bf271e3e03bc1d9
rubygem-rake-0.9.6-34.el7_5.noarch.rpm	SHA-256: 68c23c41c0b16ccecefbe840fd31f086449ad9a9fc3457e4d5d366d4d5c47419
rubygem-rdoc-4.0.0-34.el7_5.noarch.rpm	SHA-256: db9c7a2bd6bb185ed9c5dc0b97b944650d6d17c8a2c2eaadeeb94df5debbdaeb
rubygems-2.0.14.1-34.el7_5.noarch.rpm	SHA-256: 2ac75a0b1155086cb2261b7ae7f760afec4691135c73220d96389f83c0315583
rubygems-devel-2.0.14.1-34.el7_5.noarch.rpm	SHA-256: 7daad4866f2bbbc3bb536d2036d7ad75187e7fd6ce94171d83bb593312cf3964

Red Hat Enterprise Linux for Power, big endian - Extended Update Support 7.5

SRPM
ruby-2.0.0.648-34.el7_5.src.rpm	SHA-256: c8a1288ba8c20597aaac1f4b3d6aa9121691dc1b4b368dcce9b89e9ba40ec2e8
ppc64
ruby-2.0.0.648-34.el7_5.ppc64.rpm	SHA-256: 90633fc3906ae4f9088bbf4ade5ce1c963b4a0c8022d9bafbf8a156d2e58f6d8
ruby-debuginfo-2.0.0.648-34.el7_5.ppc.rpm	SHA-256: 690cbaf7e1c7199d4f24326091cd5b26805a15c167d1b1e8fb1d77372419f62a
ruby-debuginfo-2.0.0.648-34.el7_5.ppc64.rpm	SHA-256: 85e5dc9466514637c57ae62e4c190bff56775d7c7678810a268059152e3fa70e
ruby-debuginfo-2.0.0.648-34.el7_5.ppc64.rpm	SHA-256: 85e5dc9466514637c57ae62e4c190bff56775d7c7678810a268059152e3fa70e
ruby-devel-2.0.0.648-34.el7_5.ppc64.rpm	SHA-256: e1795d41c0378cd67f93708f38ca415625afea407473bf7f2b5949eab668cb3a
ruby-doc-2.0.0.648-34.el7_5.noarch.rpm	SHA-256: db8b17dffda3470a23c4198d082416d38eb6800dc1fce0cc07f4eb2d2d72a544
ruby-irb-2.0.0.648-34.el7_5.noarch.rpm	SHA-256: e4f24d74c67b3f24aef91fc66fc05defd85d66fb566a801bb9c8328762726312
ruby-libs-2.0.0.648-34.el7_5.ppc.rpm	SHA-256: 924cc2a259b38cf4b374d5ab4161f5a2700c641808deae5095809ce49b3f21a8
ruby-libs-2.0.0.648-34.el7_5.ppc64.rpm	SHA-256: 6ab12d7b07497784626e7cd404ebb53ea0c80ec143cb85a67bf8692e195fa926
ruby-tcltk-2.0.0.648-34.el7_5.ppc64.rpm	SHA-256: 3e439524c097be07a70b2ea6f99ed38d1432cb1326570042a43959d0f2dac1bb
rubygem-bigdecimal-1.2.0-34.el7_5.ppc64.rpm	SHA-256: b0cb88bfaa414d07c2bab64da874c9a64825a9a877112589535bce6c05aad593
rubygem-io-console-0.4.2-34.el7_5.ppc64.rpm	SHA-256: 9b813e0ef97fc770d4a303f11c3eb8fd7ee8c08a8198f4c5929cab94330ffb35
rubygem-json-1.7.7-34.el7_5.ppc64.rpm	SHA-256: 35bd44cb9a743d28a0fc32489320b70634255d9e37d6aa6083fa62b8ca09f382
rubygem-minitest-4.3.2-34.el7_5.noarch.rpm	SHA-256: 487af8e38006f2bab66b8ca356c8cfe678234d3d7bee7b2f4b455a7aa765d6b6
rubygem-psych-2.0.0-34.el7_5.ppc64.rpm	SHA-256: 53406cae8e67e48011c0700479e7e43bea639340c31be872f1c3fab382e30531
rubygem-rake-0.9.6-34.el7_5.noarch.rpm	SHA-256: 68c23c41c0b16ccecefbe840fd31f086449ad9a9fc3457e4d5d366d4d5c47419
rubygem-rdoc-4.0.0-34.el7_5.noarch.rpm	SHA-256: db9c7a2bd6bb185ed9c5dc0b97b944650d6d17c8a2c2eaadeeb94df5debbdaeb
rubygems-2.0.14.1-34.el7_5.noarch.rpm	SHA-256: 2ac75a0b1155086cb2261b7ae7f760afec4691135c73220d96389f83c0315583
rubygems-devel-2.0.14.1-34.el7_5.noarch.rpm	SHA-256: 7daad4866f2bbbc3bb536d2036d7ad75187e7fd6ce94171d83bb593312cf3964

Red Hat Enterprise Linux EUS Compute Node 7.5

SRPM
ruby-2.0.0.648-34.el7_5.src.rpm	SHA-256: c8a1288ba8c20597aaac1f4b3d6aa9121691dc1b4b368dcce9b89e9ba40ec2e8
x86_64
ruby-2.0.0.648-34.el7_5.x86_64.rpm	SHA-256: 51176a679cb06de3867cac223571acb908895ad690c936b7b1b942996b9e1984
ruby-debuginfo-2.0.0.648-34.el7_5.i686.rpm	SHA-256: dc5c1a3883af4548056c8dbbbcb1874951bf30908494a33a9f1080c46ba953f7
ruby-debuginfo-2.0.0.648-34.el7_5.x86_64.rpm	SHA-256: b9f20e4987eb02d89a970a478cb8efe397435de4a260c7fefe82e83e290b6ef5
ruby-debuginfo-2.0.0.648-34.el7_5.x86_64.rpm	SHA-256: b9f20e4987eb02d89a970a478cb8efe397435de4a260c7fefe82e83e290b6ef5
ruby-devel-2.0.0.648-34.el7_5.x86_64.rpm	SHA-256: 5e822a0ee2bbe7d8ed0ec45f74d3fda2f5bb39bcbc2adf2bb6b8fd48716a7bde
ruby-doc-2.0.0.648-34.el7_5.noarch.rpm	SHA-256: db8b17dffda3470a23c4198d082416d38eb6800dc1fce0cc07f4eb2d2d72a544
ruby-irb-2.0.0.648-34.el7_5.noarch.rpm	SHA-256: e4f24d74c67b3f24aef91fc66fc05defd85d66fb566a801bb9c8328762726312
ruby-libs-2.0.0.648-34.el7_5.i686.rpm	SHA-256: eaaaf8a0a0be6a512a40b24e2cbf6d29a7546e2e0b3a8f3fc832b8eea32d2de0
ruby-libs-2.0.0.648-34.el7_5.x86_64.rpm	SHA-256: 19f645edd1990b8381c030e5ea8e5962c0508a29fd0b6e8b55b2c63fa46a041d
ruby-tcltk-2.0.0.648-34.el7_5.x86_64.rpm	SHA-256: f3286eff79d8f116283891a298eaa8428d4e36501aee983fc883eca472b3aadf
rubygem-bigdecimal-1.2.0-34.el7_5.x86_64.rpm	SHA-256: 988db73406a5422666f3ffb8e834be291520bc2f06559be3d473ebf9e0a40bbb
rubygem-io-console-0.4.2-34.el7_5.x86_64.rpm	SHA-256: 19b2b5a6b467aef20cb90b73c045f681ee3cf4086cb645d4db0df9bd61277f6f
rubygem-json-1.7.7-34.el7_5.x86_64.rpm	SHA-256: 57bd479472302b7cab488baee78a5a1b9b3524ce06db9424cb6c1c0fc0fb2d38
rubygem-minitest-4.3.2-34.el7_5.noarch.rpm	SHA-256: 487af8e38006f2bab66b8ca356c8cfe678234d3d7bee7b2f4b455a7aa765d6b6
rubygem-psych-2.0.0-34.el7_5.x86_64.rpm	SHA-256: 76c853c062ce8b3116836b13cbe928ae2bbf2e0406b58e9fabe1e94ca394bef3
rubygem-rake-0.9.6-34.el7_5.noarch.rpm	SHA-256: 68c23c41c0b16ccecefbe840fd31f086449ad9a9fc3457e4d5d366d4d5c47419
rubygem-rdoc-4.0.0-34.el7_5.noarch.rpm	SHA-256: db9c7a2bd6bb185ed9c5dc0b97b944650d6d17c8a2c2eaadeeb94df5debbdaeb
rubygems-2.0.14.1-34.el7_5.noarch.rpm	SHA-256: 2ac75a0b1155086cb2261b7ae7f760afec4691135c73220d96389f83c0315583
rubygems-devel-2.0.14.1-34.el7_5.noarch.rpm	SHA-256: 7daad4866f2bbbc3bb536d2036d7ad75187e7fd6ce94171d83bb593312cf3964

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 7.5

SRPM
ruby-2.0.0.648-34.el7_5.src.rpm	SHA-256: c8a1288ba8c20597aaac1f4b3d6aa9121691dc1b4b368dcce9b89e9ba40ec2e8
ppc64le
ruby-2.0.0.648-34.el7_5.ppc64le.rpm	SHA-256: d313a6d3990da02fcc3d693000095cdbadd0e49a68395e4979cc54fdf2e464fb
ruby-debuginfo-2.0.0.648-34.el7_5.ppc64le.rpm	SHA-256: b0cd7dab1c15ec0a281e42f38caf94bd8c6c89cdf9b3e6c5948b021f1e6ecc56
ruby-debuginfo-2.0.0.648-34.el7_5.ppc64le.rpm	SHA-256: b0cd7dab1c15ec0a281e42f38caf94bd8c6c89cdf9b3e6c5948b021f1e6ecc56
ruby-devel-2.0.0.648-34.el7_5.ppc64le.rpm	SHA-256: 36d5224a5b5f4232e077a296d0da5b8ff4d69730bb7b614a671091af10de2894
ruby-doc-2.0.0.648-34.el7_5.noarch.rpm	SHA-256: db8b17dffda3470a23c4198d082416d38eb6800dc1fce0cc07f4eb2d2d72a544
ruby-irb-2.0.0.648-34.el7_5.noarch.rpm	SHA-256: e4f24d74c67b3f24aef91fc66fc05defd85d66fb566a801bb9c8328762726312
ruby-libs-2.0.0.648-34.el7_5.ppc64le.rpm	SHA-256: 83fb6971c0f279dd5d917d904b712e22c835b79ea716c75fed9e7fdd08ac820c
ruby-tcltk-2.0.0.648-34.el7_5.ppc64le.rpm	SHA-256: 9298e80a01e3e9fec0901087c69126c739f2e3185597bbaf7926068beeb5e31b
rubygem-bigdecimal-1.2.0-34.el7_5.ppc64le.rpm	SHA-256: b9b08760270b0a9975c7824697726bbbfec4a5d59b0dbb294bf3d85d55906991
rubygem-io-console-0.4.2-34.el7_5.ppc64le.rpm	SHA-256: 2d0f43d3e9e7f5f26dc4768ab389eaaad64571fef95cc4bb50a01557828343a5
rubygem-json-1.7.7-34.el7_5.ppc64le.rpm	SHA-256: 05863cce6d109dad97c06fa1bb8003f585893986a96a1ed1b7863e5ac555e22d
rubygem-minitest-4.3.2-34.el7_5.noarch.rpm	SHA-256: 487af8e38006f2bab66b8ca356c8cfe678234d3d7bee7b2f4b455a7aa765d6b6
rubygem-psych-2.0.0-34.el7_5.ppc64le.rpm	SHA-256: 48d7e89aea4d0b62198ec7d95d38355484378ae4fee399c0cc96925f800339be
rubygem-rake-0.9.6-34.el7_5.noarch.rpm	SHA-256: 68c23c41c0b16ccecefbe840fd31f086449ad9a9fc3457e4d5d366d4d5c47419
rubygem-rdoc-4.0.0-34.el7_5.noarch.rpm	SHA-256: db9c7a2bd6bb185ed9c5dc0b97b944650d6d17c8a2c2eaadeeb94df5debbdaeb
rubygems-2.0.14.1-34.el7_5.noarch.rpm	SHA-256: 2ac75a0b1155086cb2261b7ae7f760afec4691135c73220d96389f83c0315583
rubygems-devel-2.0.14.1-34.el7_5.noarch.rpm	SHA-256: 7daad4866f2bbbc3bb536d2036d7ad75187e7fd6ce94171d83bb593312cf3964