Red Hat Security Advisory

RHSA-2020:2839

ruby security update

Released 2020-07-07 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux ComputeNode EUS (v. 7.6) ruby-2.0.0.648-38.el7_6, ruby-irb-2.0.0.648-38.el7_6, ruby-libs-2.0.0.648-38.el7_6 +6
Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6) ruby-devel-2.0.0.648-38.el7_6, ruby-doc-2.0.0.648-38.el7_6, ruby-tcltk-2.0.0.648-38.el7_6 +3
Red Hat Enterprise Linux Server EUS (v. 7.6) ruby-2.0.0.648-38.el7_6, ruby-irb-2.0.0.648-38.el7_6, ruby-libs-2.0.0.648-38.el7_6 +7
Red Hat Enterprise Linux Server Optional EUS (v. 7.6) ruby-devel-2.0.0.648-38.el7_6, ruby-doc-2.0.0.648-38.el7_6, ruby-tcltk-2.0.0.648-38.el7_6 +3
Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) ruby-2.0.0.648-38.el7_6, ruby-irb-2.0.0.648-38.el7_6, ruby-libs-2.0.0.648-38.el7_6 +6
Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) ruby-devel-2.0.0.648-38.el7_6, ruby-doc-2.0.0.648-38.el7_6, ruby-tcltk-2.0.0.648-38.el7_6 +3

TI-2018-11752 CVE-2018-16396 · GHSA-xh4x-ph6p-vmxh

MEDIUM 46

An issue was discovered in Ruby before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.2, and 2.6.x before 2.6.0-preview3.

CVSS 3.0HIGH 8.1 Network No auth No interaction EPSS 0.07968 Published 2018-11-16 Partial fix