Red Hat Security Advisory

RHSA-2020:2769

ruby security update

Released 2020-06-30 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Server AUS (v. 7.4) ruby-2.0.0.648-37.el7_4, ruby-irb-2.0.0.648-37.el7_4, ruby-libs-2.0.0.648-37.el7_4 +6
Red Hat Enterprise Linux Server E4S (v. 7.4) ruby-2.0.0.648-37.el7_4, ruby-irb-2.0.0.648-37.el7_4, ruby-libs-2.0.0.648-37.el7_4 +6
Red Hat Enterprise Linux Server Optional AUS (v. 7.4) ruby-devel-2.0.0.648-37.el7_4, ruby-doc-2.0.0.648-37.el7_4, ruby-tcltk-2.0.0.648-37.el7_4 +3
Red Hat Enterprise Linux Server Optional E4S (v. 7.4) ruby-devel-2.0.0.648-37.el7_4, ruby-doc-2.0.0.648-37.el7_4, ruby-tcltk-2.0.0.648-37.el7_4 +3
Red Hat Enterprise Linux Server Optional TUS (v. 7.4) ruby-devel-2.0.0.648-37.el7_4, ruby-doc-2.0.0.648-37.el7_4, ruby-tcltk-2.0.0.648-37.el7_4 +3
Red Hat Enterprise Linux Server TUS (v. 7.4) ruby-2.0.0.648-37.el7_4, ruby-irb-2.0.0.648-37.el7_4, ruby-libs-2.0.0.648-37.el7_4 +6

Fixes 6 records

TI-2018-11752 CVE-2018-16396 · GHSA-xh4x-ph6p-vmxh

An issue was discovered in Ruby before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.2, and…

MEDIUM 46

An issue was discovered in Ruby before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.2, and 2.6.x before 2.6.0-preview3.

CVSS 3.0HIGH 8.1 Network No auth No interaction EPSS 0.07968 Published 2018-11-16 Partial fix

TI-2019-05977 CVE-2019-8324 · GHSA-76wm-422q-92mq

An issue was discovered in RubyGems 2.6 and later through 3.0.2.

MEDIUM 44

An issue was discovered in RubyGems 2.6 and later through 3.0.2.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.03219 Published 2019-06-17 Fixed in 2.7.9, 3.0.2 CWE-94

TI-2019-05978 CVE-2019-8325 · GHSA-4wm8-fjv7-j774

An issue was discovered in RubyGems 2.6 and later through 3.0.2.

LOW 39

An issue was discovered in RubyGems 2.6 and later through 3.0.2.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03281 Published 2019-06-17 Partial fix · 2.7.9, 3.0.2 CWE-74

TI-2019-05976 CVE-2019-8323 · GHSA-3h4r-pjv6-cph9

An issue was discovered in RubyGems 2.6 and later through 3.0.2.

LOW 39

An issue was discovered in RubyGems 2.6 and later through 3.0.2.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03281 Published 2019-06-17 Partial fix · 2.7.9, 3.0.2 CWE-74

TI-2019-05975 CVE-2019-8322 · GHSA-mh37-8c3g-3fgc

An issue was discovered in RubyGems 2.6 and later through 3.0.2.

LOW 39

An issue was discovered in RubyGems 2.6 and later through 3.0.2.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03281 Published 2019-06-17 Partial fix · 2.7.9, 3.0.2 CWE-74

TI-2019-05974 CVE-2019-8321 · GHSA-fr32-gr5c-xq5c

An issue was discovered in RubyGems 2.6 and later through 3.0.2.

LOW 39

An issue was discovered in RubyGems 2.6 and later through 3.0.2.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03281 Published 2019-06-17 Partial fix · 2.7.9, 3.0.2 CWE-88