PublicDateAtUSN: 2021-07-15 00:00:00 UTC
Candidate: CVE-2021-31799
PublicDate: 2021-07-30 14:15:00 UTC
References:
 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-31799
 https://www.ruby-lang.org/en/news/2021/05/02/os-command-injection-in-rdoc/
 https://github.com/ruby/ruby/commit/b1c73f239fe9af97de837331849f55d67c27561e (master)
 https://github.com/ruby/ruby/commit/483f303d02e768b69e476e0b9be4ab2f26389522 (2.7)
 https://ubuntu.com/security/notices/USN-5020-1
Description:
 In RDoc 3.11 through 6.x before 6.3.1, as distributed with Ruby through
 3.0.1, it is possible to execute arbitrary code via | and tags in a
 filename.
Ubuntu-Description:
Notes:
Mitigation:
Bugs:
Priority: medium
Discovered-by:
Assigned-to: leosilva
CVSS:
 nvd: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H [7.0 HIGH]

Patches_ruby1.9.1:
upstream_ruby1.9.1: needs-triage
trusty_ruby1.9.1: ignored (out of standard support)
trusty/esm_ruby1.9.1: DNE
xenial_ruby1.9.1: DNE
bionic_ruby1.9.1: DNE
focal_ruby1.9.1: DNE
groovy_ruby1.9.1: DNE
hirsute_ruby1.9.1: DNE
impish_ruby1.9.1: DNE
jammy_ruby1.9.1: DNE
devel_ruby1.9.1: DNE

Patches_ruby2.0:
upstream_ruby2.0: needs-triage
trusty_ruby2.0: ignored (out of standard support)
trusty/esm_ruby2.0: DNE
xenial_ruby2.0: DNE
bionic_ruby2.0: DNE
focal_ruby2.0: DNE
groovy_ruby2.0: DNE
hirsute_ruby2.0: DNE
impish_ruby2.0: DNE
jammy_ruby2.0: DNE
devel_ruby2.0: DNE

Patches_ruby2.3:
upstream_ruby2.3: needs-triage
trusty_ruby2.3: DNE
trusty/esm_ruby2.3: DNE
xenial_ruby2.3: ignored (end of standard support, was needed)
esm-infra/xenial_ruby2.3: released (2.3.1-2~ubuntu16.04.16+esm1)
bionic_ruby2.3: DNE
focal_ruby2.3: DNE
groovy_ruby2.3: DNE
hirsute_ruby2.3: DNE
impish_ruby2.3: DNE
jammy_ruby2.3: DNE
devel_ruby2.3: DNE

Patches_ruby2.5:
upstream_ruby2.5: needs-triage
trusty_ruby2.5: DNE
trusty/esm_ruby2.5: DNE
xenial_ruby2.5: DNE
bionic_ruby2.5: released (2.5.1-1ubuntu1.10)
focal_ruby2.5: DNE
groovy_ruby2.5: DNE
hirsute_ruby2.5: DNE
impish_ruby2.5: DNE
jammy_ruby2.5: DNE
devel_ruby2.5: DNE

Patches_ruby2.7:
upstream_ruby2.7: needs-triage
trusty_ruby2.7: DNE
trusty/esm_ruby2.7: DNE
xenial_ruby2.7: DNE
bionic_ruby2.7: DNE
focal_ruby2.7: released (2.7.0-5ubuntu1.5)
groovy_ruby2.7: released (2.7.1-3ubuntu1.4)
hirsute_ruby2.7: released (2.7.2-4ubuntu1.2)
impish_ruby2.7: released (2.7.4-1ubuntu1)