<?xml version="1.0" encoding="utf-8"?>
  <?xml-stylesheet type="text/xsl" href="sa-render.xsl"?>
  <update from="huaweicloud.com" type="security" status="stable" version="1">
    <id>HCE2-SA-2023-0163</id>
    <title>An update for ruby is now available for HCE 2.0</title>
    <severity>Important</severity>
    <release>HCE 2.0</release>
    <issued date="2023-03-27 08:19:43"/>
    <updated date="2023-03-27 08:19:43"/>
    <references>
      <reference href="https://nvd.nist.gov/vuln/detail/CVE-2021-33621" id="CVE-2021-33621" title="CVE-2021-33621 Base Score: 8.8 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" type="cve"/>
    </references>
    <description>Security Fix(es):

The cgi gem before 0.1.0.2, 0.2.x before 0.2.2, and 0.3.x before 0.3.5 for Ruby allows HTTP response splitting. This is relevant to applications that use untrusted user input either to generate an HTTP response or to create a CGI::Cookie object. (CVE-2021-33621)
</description>
    <pkglist>
      <collection short="HCE 2.0" package="ruby">
        <name>HCE 2.0</name>
        <package arch="noarch" name="rubygems" version="3.2.32" release="122.r7.hce2">
          <filename>rubygems-3.2.32-122.r7.hce2.noarch.rpm</filename>
        </package>
        <package arch="noarch" name="rubygems-devel" version="3.2.32" release="122.r7.hce2">
          <filename>rubygems-devel-3.2.32-122.r7.hce2.noarch.rpm</filename>
        </package>
        <package arch="aarch64" name="rubygem-bigdecimal" version="3.0.0" release="122.r7.hce2">
          <filename>rubygem-bigdecimal-3.0.0-122.r7.hce2.aarch64.rpm</filename>
        </package>
        <package arch="noarch" name="rubygem-did_you_mean" version="1.5.0" release="122.r7.hce2">
          <filename>rubygem-did_you_mean-1.5.0-122.r7.hce2.noarch.rpm</filename>
        </package>
        <package arch="aarch64" name="rubygem-io-console" version="0.5.7" release="122.r7.hce2">
          <filename>rubygem-io-console-0.5.7-122.r7.hce2.aarch64.rpm</filename>
        </package>
        <package arch="aarch64" name="rubygem-json" version="2.5.1" release="122.r7.hce2">
          <filename>rubygem-json-2.5.1-122.r7.hce2.aarch64.rpm</filename>
        </package>
        <package arch="noarch" name="rubygem-minitest" version="5.14.2" release="122.r7.hce2">
          <filename>rubygem-minitest-5.14.2-122.r7.hce2.noarch.rpm</filename>
        </package>
        <package arch="aarch64" name="rubygem-openssl" version="2.2.1" release="122.r7.hce2">
          <filename>rubygem-openssl-2.2.1-122.r7.hce2.aarch64.rpm</filename>
        </package>
        <package arch="noarch" name="rubygem-power_assert" version="1.2.0" release="122.r7.hce2">
          <filename>rubygem-power_assert-1.2.0-122.r7.hce2.noarch.rpm</filename>
        </package>
        <package arch="aarch64" name="rubygem-psych" version="3.3.2" release="122.r7.hce2">
          <filename>rubygem-psych-3.3.2-122.r7.hce2.aarch64.rpm</filename>
        </package>
        <package arch="noarch" name="rubygem-rake" version="13.0.3" release="122.r7.hce2">
          <filename>rubygem-rake-13.0.3-122.r7.hce2.noarch.rpm</filename>
        </package>
        <package arch="noarch" name="rubygem-rbs" version="1.4.0" release="122.r7.hce2">
          <filename>rubygem-rbs-1.4.0-122.r7.hce2.noarch.rpm</filename>
        </package>
        <package arch="noarch" name="rubygem-rdoc" version="6.3.3" release="122.r7.hce2">
          <filename>rubygem-rdoc-6.3.3-122.r7.hce2.noarch.rpm</filename>
        </package>
        <package arch="noarch" name="rubygem-rexml" version="3.2.5" release="122.r7.hce2">
          <filename>rubygem-rexml-3.2.5-122.r7.hce2.noarch.rpm</filename>
        </package>
        <package arch="noarch" name="rubygem-rss" version="0.2.9" release="122.r7.hce2">
          <filename>rubygem-rss-0.2.9-122.r7.hce2.noarch.rpm</filename>
        </package>
        <package arch="noarch" name="rubygem-test-unit" version="3.3.7" release="122.r7.hce2">
          <filename>rubygem-test-unit-3.3.7-122.r7.hce2.noarch.rpm</filename>
        </package>
        <package arch="noarch" name="rubygem-typeprof" version="0.15.2" release="122.r7.hce2">
          <filename>rubygem-typeprof-0.15.2-122.r7.hce2.noarch.rpm</filename>
        </package>
        <package arch="aarch64" name="ruby" version="3.0.3" release="122.r7.hce2">
          <filename>ruby-3.0.3-122.r7.hce2.aarch64.rpm</filename>
        </package>
        <package arch="aarch64" name="ruby-devel" version="3.0.3" release="122.r7.hce2">
          <filename>ruby-devel-3.0.3-122.r7.hce2.aarch64.rpm</filename>
        </package>
        <package arch="noarch" name="ruby-help" version="3.0.3" release="122.r7.hce2">
          <filename>ruby-help-3.0.3-122.r7.hce2.noarch.rpm</filename>
        </package>
        <package arch="noarch" name="ruby-irb" version="3.0.3" release="122.r7.hce2">
          <filename>ruby-irb-3.0.3-122.r7.hce2.noarch.rpm</filename>
        </package>
        <package arch="x86_64" name="rubygem-bigdecimal" version="3.0.0" release="122.r7.hce2">
          <filename>rubygem-bigdecimal-3.0.0-122.r7.hce2.x86_64.rpm</filename>
        </package>
        <package arch="x86_64" name="rubygem-io-console" version="0.5.7" release="122.r7.hce2">
          <filename>rubygem-io-console-0.5.7-122.r7.hce2.x86_64.rpm</filename>
        </package>
        <package arch="x86_64" name="rubygem-json" version="2.5.1" release="122.r7.hce2">
          <filename>rubygem-json-2.5.1-122.r7.hce2.x86_64.rpm</filename>
        </package>
        <package arch="x86_64" name="rubygem-openssl" version="2.2.1" release="122.r7.hce2">
          <filename>rubygem-openssl-2.2.1-122.r7.hce2.x86_64.rpm</filename>
        </package>
        <package arch="x86_64" name="rubygem-psych" version="3.3.2" release="122.r7.hce2">
          <filename>rubygem-psych-3.3.2-122.r7.hce2.x86_64.rpm</filename>
        </package>
        <package arch="x86_64" name="ruby" version="3.0.3" release="122.r7.hce2">
          <filename>ruby-3.0.3-122.r7.hce2.x86_64.rpm</filename>
        </package>
        <package arch="x86_64" name="ruby-devel" version="3.0.3" release="122.r7.hce2">
          <filename>ruby-devel-3.0.3-122.r7.hce2.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
