Red Hat Security AdvisoryRHSA-2019:1150
rh-ruby24-ruby security, bug fix, and enhancement update
Released 2019-05-13 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6) rh-ruby24-ruby-2.4.6-92.el6, rh-ruby24-ruby-devel-2.4.6-92.el6, rh-ruby24-ruby-doc-2.4.6-92.el6 +17
- Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7) rh-ruby24-ruby-2.4.6-92.el7, rh-ruby24-ruby-devel-2.4.6-92.el7, rh-ruby24-ruby-doc-2.4.6-92.el7 +17
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4) rh-ruby24-ruby-2.4.6-92.el7, rh-ruby24-ruby-devel-2.4.6-92.el7, rh-ruby24-ruby-doc-2.4.6-92.el7 +17
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5) rh-ruby24-ruby-2.4.6-92.el7, rh-ruby24-ruby-devel-2.4.6-92.el7, rh-ruby24-ruby-doc-2.4.6-92.el7 +17
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6) rh-ruby24-ruby-2.4.6-92.el7, rh-ruby24-ruby-devel-2.4.6-92.el7, rh-ruby24-ruby-doc-2.4.6-92.el7 +17
- Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6) rh-ruby24-ruby-2.4.6-92.el6, rh-ruby24-ruby-devel-2.4.6-92.el6, rh-ruby24-ruby-doc-2.4.6-92.el6 +17
- Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7) rh-ruby24-ruby-2.4.6-92.el7, rh-ruby24-ruby-devel-2.4.6-92.el7, rh-ruby24-ruby-doc-2.4.6-92.el7 +17
Fixes 6 records
Priority MEDIUM 44
An issue was discovered in RubyGems 2.6 and later through 3.0.2.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.03219 · Published 2019-06-17 · Fixed in 2.7.9, 3.0.2 CWE-94
Priority LOW 39
An issue was discovered in RubyGems 2.6 and later through 3.0.2.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.03281 · Published 2019-06-17 · Partial fix · 2.7.9, 3.0.2 CWE-74
Priority LOW 39
An issue was discovered in RubyGems 2.6 and later through 3.0.2.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.03281 · Published 2019-06-17 · Partial fix · 2.7.9, 3.0.2 CWE-74
Priority LOW 39
An issue was discovered in RubyGems 2.6 and later through 3.0.2.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.03281 · Published 2019-06-17 · Partial fix · 2.7.9, 3.0.2 CWE-74
Priority LOW 39
An issue was discovered in RubyGems 2.6 and later through 3.0.2.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.03281 · Published 2019-06-17 · Partial fix · 2.7.9, 3.0.2 CWE-88
Priority LOW 39
A Directory Traversal issue was discovered in RubyGems 2.7.6 and later through 3.0.2.
CVSS 3.0HIGH 7.4· Network · No auth · No interaction · EPSS 0.04193 · Published 2019-06-06 · Partial fix · 2.7.9, 3.0.3 CWE-22