Red Hat Security Advisory

RHSA-2019:1148

rh-ruby25-ruby security, bug fix, and enhancement update

Released 2019-05-13 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7) rh-ruby25-ruby-2.5.5-7.el7, rh-ruby25-ruby-devel-2.5.5-7.el7, rh-ruby25-ruby-doc-2.5.5-7.el7 +17
Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4) rh-ruby25-ruby-2.5.5-7.el7, rh-ruby25-ruby-devel-2.5.5-7.el7, rh-ruby25-ruby-doc-2.5.5-7.el7 +17
Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5) rh-ruby25-ruby-2.5.5-7.el7, rh-ruby25-ruby-devel-2.5.5-7.el7, rh-ruby25-ruby-doc-2.5.5-7.el7 +17
Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6) rh-ruby25-ruby-2.5.5-7.el7, rh-ruby25-ruby-devel-2.5.5-7.el7, rh-ruby25-ruby-doc-2.5.5-7.el7 +17
Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7) rh-ruby25-ruby-2.5.5-7.el7, rh-ruby25-ruby-devel-2.5.5-7.el7, rh-ruby25-ruby-doc-2.5.5-7.el7 +17

Fixes 6 records

TI-2019-05977 CVE-2019-8324 · GHSA-76wm-422q-92mq

An issue was discovered in RubyGems 2.6 and later through 3.0.2.

MEDIUM 44

An issue was discovered in RubyGems 2.6 and later through 3.0.2.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.03219 Published 2019-06-17 Fixed in 2.7.9, 3.0.2 CWE-94

TI-2019-05978 CVE-2019-8325 · GHSA-4wm8-fjv7-j774

An issue was discovered in RubyGems 2.6 and later through 3.0.2.

LOW 39

An issue was discovered in RubyGems 2.6 and later through 3.0.2.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03281 Published 2019-06-17 Partial fix · 2.7.9, 3.0.2 CWE-74

TI-2019-05976 CVE-2019-8323 · GHSA-3h4r-pjv6-cph9

An issue was discovered in RubyGems 2.6 and later through 3.0.2.

LOW 39

An issue was discovered in RubyGems 2.6 and later through 3.0.2.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03281 Published 2019-06-17 Partial fix · 2.7.9, 3.0.2 CWE-74

TI-2019-05975 CVE-2019-8322 · GHSA-mh37-8c3g-3fgc

An issue was discovered in RubyGems 2.6 and later through 3.0.2.

LOW 39

An issue was discovered in RubyGems 2.6 and later through 3.0.2.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03281 Published 2019-06-17 Partial fix · 2.7.9, 3.0.2 CWE-74

TI-2019-05974 CVE-2019-8321 · GHSA-fr32-gr5c-xq5c

An issue was discovered in RubyGems 2.6 and later through 3.0.2.

LOW 39

An issue was discovered in RubyGems 2.6 and later through 3.0.2.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03281 Published 2019-06-17 Partial fix · 2.7.9, 3.0.2 CWE-88

TI-2019-05973 CVE-2019-8320 · GHSA-5x32-c9mf-49cc

A Directory Traversal issue was discovered in RubyGems 2.7.6 and later through 3.0.2.

LOW 39

A Directory Traversal issue was discovered in RubyGems 2.7.6 and later through 3.0.2.

CVSS 3.0HIGH 7.4 Network No auth No interaction EPSS 0.04193 Published 2019-06-06 Partial fix · 2.7.9, 3.0.3 CWE-22