Red Hat Security Advisory

RHSA-2018:3738

ruby security update

Released 2018-11-29 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Client (v. 7) ruby-2.0.0.648-34.el7_6, ruby-irb-2.0.0.648-34.el7_6, ruby-libs-2.0.0.648-34.el7_6 +6
Red Hat Enterprise Linux Client Optional (v. 7) ruby-devel-2.0.0.648-34.el7_6, ruby-doc-2.0.0.648-34.el7_6, ruby-tcltk-2.0.0.648-34.el7_6 +3
Red Hat Enterprise Linux ComputeNode (v. 7) ruby-2.0.0.648-34.el7_6, ruby-irb-2.0.0.648-34.el7_6, ruby-libs-2.0.0.648-34.el7_6 +6
Red Hat Enterprise Linux ComputeNode Optional (v. 7) ruby-devel-2.0.0.648-34.el7_6, ruby-doc-2.0.0.648-34.el7_6, ruby-tcltk-2.0.0.648-34.el7_6 +3
Red Hat Enterprise Linux Server (v. 7) ruby-2.0.0.648-34.el7_6, ruby-irb-2.0.0.648-34.el7_6, ruby-libs-2.0.0.648-34.el7_6 +7
Red Hat Enterprise Linux Server Optional (v. 7) ruby-devel-2.0.0.648-34.el7_6, ruby-doc-2.0.0.648-34.el7_6, ruby-tcltk-2.0.0.648-34.el7_6 +3
Red Hat Enterprise Linux Workstation (v. 7) ruby-2.0.0.648-34.el7_6, ruby-irb-2.0.0.648-34.el7_6, ruby-libs-2.0.0.648-34.el7_6 +6
Red Hat Enterprise Linux Workstation Optional (v. 7) ruby-devel-2.0.0.648-34.el7_6, ruby-doc-2.0.0.648-34.el7_6, ruby-tcltk-2.0.0.648-34.el7_6 +3
Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) ruby-2.0.0.648-34.el7_6, ruby-irb-2.0.0.648-34.el7_6, ruby-libs-2.0.0.648-34.el7_6 +6
Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) ruby-devel-2.0.0.648-34.el7_6, ruby-doc-2.0.0.648-34.el7_6, ruby-tcltk-2.0.0.648-34.el7_6 +3

TI-2018-11751 CVE-2018-16395 · GHSA-mmrq-6999-72v8

MEDIUM 55

An issue was discovered in the OpenSSL library in Ruby before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.2, and 2.6.x before 2.6.0-preview3.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.10715 Published 2018-11-16 Partial fix · 2.0.9, 2.1.2