# CVE-2019-8324: ruby: Ruby is an extensible, interpreted, object-oriented, scripting language

CVE-2019-8324 is fixed in 34 products on 1 platform, first by libruby2.5 2.5.1-1ubuntu1.2, released March 26, 2019. It is not reported as exploited. Patch Radar priority: High.

- Web page: https://patchblox.com/security/cve/CVE-2019-8324
- Priority: High
- CVSS: 8.8 (Important)
- EPSS: 0.0322
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Mar 26, 2019

## Description

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.  Security Fix(es):  * rubygems: Installing a malicious gem may lead to arbitrary code execution (CVE-2019-8324)  For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | libruby2.5 Ubuntu 18.04.6 LTS (bionic) | 2.5.1-1ubuntu1.2 | [libruby2.5 2.5.1-1ubuntu1.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libruby2.5-2.5.1-1ubuntu1.2.md) | Mar 26, 2019 |
| Linux | ruby RHEL 8 | 0:2.5.3-104.module+el8.0.0+3250+4b7d6d43 | [RHSA-2019:1972](https://patchblox.com/security/data/fix/linux/rhsa-2019-1972.md) | Aug 7, 2019 |
| Linux | ruby ol 8 | 0:2.5.3-104.module+el8.0.0+5238+4f9ac61b | [ELSA-2019-1972](https://patchblox.com/security/data/fix/linux/elsa-2019-1972.md) | Aug 5, 2019 |
| Linux | ruby-devel RHEL 8 | 0:2.5.3-104.module+el8.0.0+3250+4b7d6d43 | [RHSA-2019:1972](https://patchblox.com/security/data/fix/linux/rhsa-2019-1972.md) | Aug 7, 2019 |
| Linux | ruby-devel ol 8 | 0:2.5.3-104.module+el8.0.0+5238+4f9ac61b | [ELSA-2019-1972](https://patchblox.com/security/data/fix/linux/elsa-2019-1972.md) | Aug 5, 2019 |
| Linux | ruby-doc RHEL 8 | 0:2.5.3-104.module+el8.0.0+3250+4b7d6d43 | [RHSA-2019:1972](https://patchblox.com/security/data/fix/linux/rhsa-2019-1972.md) | Aug 7, 2019 |
| Linux | ruby-doc ol 8 | 0:2.5.3-104.module+el8.0.0+5238+4f9ac61b | [ELSA-2019-1972](https://patchblox.com/security/data/fix/linux/elsa-2019-1972.md) | Aug 5, 2019 |
| Linux | ruby-irb RHEL 8 | 0:2.5.3-104.module+el8.0.0+3250+4b7d6d43 | [RHSA-2019:1972](https://patchblox.com/security/data/fix/linux/rhsa-2019-1972.md) | Aug 7, 2019 |
| Linux | ruby-irb ol 8 | 0:2.5.3-104.module+el8.0.0+5238+4f9ac61b | [ELSA-2019-1972](https://patchblox.com/security/data/fix/linux/elsa-2019-1972.md) | Aug 5, 2019 |
| Linux | ruby-libs RHEL 8 | 0:2.5.3-104.module+el8.0.0+3250+4b7d6d43 | [RHSA-2019:1972](https://patchblox.com/security/data/fix/linux/rhsa-2019-1972.md) | Aug 7, 2019 |
| Linux | ruby-libs ol 8 | 0:2.5.3-104.module+el8.0.0+5238+4f9ac61b | [ELSA-2019-1972](https://patchblox.com/security/data/fix/linux/elsa-2019-1972.md) | Aug 5, 2019 |
| Linux | ruby2.5 Ubuntu 18.04.6 LTS (bionic) | 2.5.1-1ubuntu1.2 | [ruby2.5 2.5.1-1ubuntu1.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-ruby2.5-2.5.1-1ubuntu1.2.md) | Mar 26, 2019 |
| Linux | rubygem-abrt RHEL 8 | 0:0.3.0-4.module+el8.0.0+3250+4b7d6d43 | [RHSA-2019:1972](https://patchblox.com/security/data/fix/linux/rhsa-2019-1972.md) | Aug 7, 2019 |
| Linux | rubygem-abrt ol 8 | 0:0.3.0-4.module+el8.0.0+5238+4f9ac61b | [ELSA-2019-1972](https://patchblox.com/security/data/fix/linux/elsa-2019-1972.md) | Aug 5, 2019 |
| Linux | rubygem-abrt-doc RHEL 8 | 0:0.3.0-4.module+el8.0.0+3250+4b7d6d43 | [RHSA-2019:1972](https://patchblox.com/security/data/fix/linux/rhsa-2019-1972.md) | Aug 7, 2019 |
| Linux | rubygem-abrt-doc ol 8 | 0:0.3.0-4.module+el8.0.0+5238+4f9ac61b | [ELSA-2019-1972](https://patchblox.com/security/data/fix/linux/elsa-2019-1972.md) | Aug 5, 2019 |
| Linux | rubygem-bigdecimal RHEL 8 | 0:1.3.4-104.module+el8.0.0+3250+4b7d6d43 | [RHSA-2019:1972](https://patchblox.com/security/data/fix/linux/rhsa-2019-1972.md) | Aug 7, 2019 |
| Linux | rubygem-bigdecimal ol 8 | 0:1.3.4-104.module+el8.0.0+5238+4f9ac61b | [ELSA-2019-1972](https://patchblox.com/security/data/fix/linux/elsa-2019-1972.md) | Aug 5, 2019 |
| Linux | rubygem-bson RHEL 8 | 0:4.3.0-2.module+el8.0.0+3250+4b7d6d43 | [RHSA-2019:1972](https://patchblox.com/security/data/fix/linux/rhsa-2019-1972.md) | Aug 7, 2019 |
| Linux | rubygem-bson ol 8 | 0:4.3.0-2.module+el8.0.0+5238+4f9ac61b | [ELSA-2019-1972](https://patchblox.com/security/data/fix/linux/elsa-2019-1972.md) | Aug 5, 2019 |
| Linux | rubygem-bson-doc RHEL 8 | 0:4.3.0-2.module+el8.0.0+3250+4b7d6d43 | [RHSA-2019:1972](https://patchblox.com/security/data/fix/linux/rhsa-2019-1972.md) | Aug 7, 2019 |
| Linux | rubygem-bson-doc ol 8 | 0:4.3.0-2.module+el8.0.0+5238+4f9ac61b | [ELSA-2019-1972](https://patchblox.com/security/data/fix/linux/elsa-2019-1972.md) | Aug 5, 2019 |
| Linux | rubygem-bundler RHEL 8 | 0:1.16.1-3.module+el8.0.0+3250+4b7d6d43 | [RHSA-2019:1972](https://patchblox.com/security/data/fix/linux/rhsa-2019-1972.md) | Aug 7, 2019 |
| Linux | rubygem-bundler ol 8 | 0:1.16.1-3.module+el8.0.0+5238+4f9ac61b | [ELSA-2019-1972](https://patchblox.com/security/data/fix/linux/elsa-2019-1972.md) | Aug 5, 2019 |
| Linux | rubygem-bundler-doc RHEL 8 | 0:1.16.1-3.module+el8.0.0+3250+4b7d6d43 | [RHSA-2019:1972](https://patchblox.com/security/data/fix/linux/rhsa-2019-1972.md) | Aug 7, 2019 |
| Linux | rubygem-bundler-doc ol 8 | 0:1.16.1-3.module+el8.0.0+5238+4f9ac61b | [ELSA-2019-1972](https://patchblox.com/security/data/fix/linux/elsa-2019-1972.md) | Aug 5, 2019 |
| Linux | rubygem-did_you_mean RHEL 8 | 0:1.2.0-104.module+el8.0.0+3250+4b7d6d43 | [RHSA-2019:1972](https://patchblox.com/security/data/fix/linux/rhsa-2019-1972.md) | Aug 7, 2019 |
| Linux | rubygem-did_you_mean ol 8 | 0:1.2.0-104.module+el8.0.0+5238+4f9ac61b | [ELSA-2019-1972](https://patchblox.com/security/data/fix/linux/elsa-2019-1972.md) | Aug 5, 2019 |
| Linux | rubygem-io-console RHEL 8 | 0:0.4.6-104.module+el8.0.0+3250+4b7d6d43 | [RHSA-2019:1972](https://patchblox.com/security/data/fix/linux/rhsa-2019-1972.md) | Aug 7, 2019 |
| Linux | rubygem-io-console ol 8 | 0:0.4.6-104.module+el8.0.0+5238+4f9ac61b | [ELSA-2019-1972](https://patchblox.com/security/data/fix/linux/elsa-2019-1972.md) | Aug 5, 2019 |
| Linux | rubygem-json RHEL 8 | 0:2.1.0-104.module+el8.0.0+3250+4b7d6d43 | [RHSA-2019:1972](https://patchblox.com/security/data/fix/linux/rhsa-2019-1972.md) | Aug 7, 2019 |
| Linux | rubygem-json ol 8 | 0:2.1.0-104.module+el8.0.0+5238+4f9ac61b | [ELSA-2019-1972](https://patchblox.com/security/data/fix/linux/elsa-2019-1972.md) | Aug 5, 2019 |
| Linux | rubygem-minitest RHEL 8 | 0:5.10.3-104.module+el8.0.0+3250+4b7d6d43 | [RHSA-2019:1972](https://patchblox.com/security/data/fix/linux/rhsa-2019-1972.md) | Aug 7, 2019 |
| Linux | rubygem-minitest ol 8 | 0:5.10.3-104.module+el8.0.0+5238+4f9ac61b | [ELSA-2019-1972](https://patchblox.com/security/data/fix/linux/elsa-2019-1972.md) | Aug 5, 2019 |
| Linux | rubygem-mongo RHEL 8 | 0:2.5.1-2.module+el8.0.0+3250+4b7d6d43 | [RHSA-2019:1972](https://patchblox.com/security/data/fix/linux/rhsa-2019-1972.md) | Aug 7, 2019 |
| Linux | rubygem-mongo ol 8 | 0:2.5.1-2.module+el8.0.0+5238+4f9ac61b | [ELSA-2019-1972](https://patchblox.com/security/data/fix/linux/elsa-2019-1972.md) | Aug 5, 2019 |
| Linux | rubygem-mongo-doc RHEL 8 | 0:2.5.1-2.module+el8.0.0+3250+4b7d6d43 | [RHSA-2019:1972](https://patchblox.com/security/data/fix/linux/rhsa-2019-1972.md) | Aug 7, 2019 |
| Linux | rubygem-mongo-doc ol 8 | 0:2.5.1-2.module+el8.0.0+5238+4f9ac61b | [ELSA-2019-1972](https://patchblox.com/security/data/fix/linux/elsa-2019-1972.md) | Aug 5, 2019 |
| Linux | rubygem-mysql2 RHEL 8 | 0:0.4.10-4.module+el8.0.0+3250+4b7d6d43 | [RHSA-2019:1972](https://patchblox.com/security/data/fix/linux/rhsa-2019-1972.md) | Aug 7, 2019 |
| Linux | rubygem-mysql2 ol 8 | 0:0.4.10-4.module+el8.0.0+5238+4f9ac61b | [ELSA-2019-1972](https://patchblox.com/security/data/fix/linux/elsa-2019-1972.md) | Aug 5, 2019 |
| Linux | rubygem-mysql2-doc RHEL 8 | 0:0.4.10-4.module+el8.0.0+3250+4b7d6d43 | [RHSA-2019:1972](https://patchblox.com/security/data/fix/linux/rhsa-2019-1972.md) | Aug 7, 2019 |
| Linux | rubygem-mysql2-doc ol 8 | 0:0.4.10-4.module+el8.0.0+5238+4f9ac61b | [ELSA-2019-1972](https://patchblox.com/security/data/fix/linux/elsa-2019-1972.md) | Aug 5, 2019 |
| Linux | rubygem-net-telnet RHEL 8 | 0:0.1.1-104.module+el8.0.0+3250+4b7d6d43 | [RHSA-2019:1972](https://patchblox.com/security/data/fix/linux/rhsa-2019-1972.md) | Aug 7, 2019 |
| Linux | rubygem-net-telnet ol 8 | 0:0.1.1-104.module+el8.0.0+5238+4f9ac61b | [ELSA-2019-1972](https://patchblox.com/security/data/fix/linux/elsa-2019-1972.md) | Aug 5, 2019 |
| Linux | rubygem-openssl RHEL 8 | 0:2.1.2-104.module+el8.0.0+3250+4b7d6d43 | [RHSA-2019:1972](https://patchblox.com/security/data/fix/linux/rhsa-2019-1972.md) | Aug 7, 2019 |
| Linux | rubygem-openssl ol 8 | 0:2.1.2-104.module+el8.0.0+5238+4f9ac61b | [ELSA-2019-1972](https://patchblox.com/security/data/fix/linux/elsa-2019-1972.md) | Aug 5, 2019 |
| Linux | rubygem-pg RHEL 8 | 0:1.0.0-2.module+el8.0.0+3250+4b7d6d43 | [RHSA-2019:1972](https://patchblox.com/security/data/fix/linux/rhsa-2019-1972.md) | Aug 7, 2019 |
| Linux | rubygem-pg ol 8 | 0:1.0.0-2.module+el8.0.0+5238+4f9ac61b | [ELSA-2019-1972](https://patchblox.com/security/data/fix/linux/elsa-2019-1972.md) | Aug 5, 2019 |
| Linux | rubygem-pg-doc RHEL 8 | 0:1.0.0-2.module+el8.0.0+3250+4b7d6d43 | [RHSA-2019:1972](https://patchblox.com/security/data/fix/linux/rhsa-2019-1972.md) | Aug 7, 2019 |
| Linux | rubygem-pg-doc ol 8 | 0:1.0.0-2.module+el8.0.0+5238+4f9ac61b | [ELSA-2019-1972](https://patchblox.com/security/data/fix/linux/elsa-2019-1972.md) | Aug 5, 2019 |
| Linux | rubygem-power_assert RHEL 8 | 0:1.1.1-104.module+el8.0.0+3250+4b7d6d43 | [RHSA-2019:1972](https://patchblox.com/security/data/fix/linux/rhsa-2019-1972.md) | Aug 7, 2019 |
| Linux | rubygem-power_assert ol 8 | 0:1.1.1-104.module+el8.0.0+5238+4f9ac61b | [ELSA-2019-1972](https://patchblox.com/security/data/fix/linux/elsa-2019-1972.md) | Aug 5, 2019 |
| Linux | rubygem-psych RHEL 8 | 0:3.0.2-104.module+el8.0.0+3250+4b7d6d43 | [RHSA-2019:1972](https://patchblox.com/security/data/fix/linux/rhsa-2019-1972.md) | Aug 7, 2019 |
| Linux | rubygem-psych ol 8 | 0:3.0.2-104.module+el8.0.0+5238+4f9ac61b | [ELSA-2019-1972](https://patchblox.com/security/data/fix/linux/elsa-2019-1972.md) | Aug 5, 2019 |
| Linux | rubygem-rake RHEL 8 | 0:12.3.0-104.module+el8.0.0+3250+4b7d6d43 | [RHSA-2019:1972](https://patchblox.com/security/data/fix/linux/rhsa-2019-1972.md) | Aug 7, 2019 |
| Linux | rubygem-rake ol 8 | 0:12.3.0-104.module+el8.0.0+5238+4f9ac61b | [ELSA-2019-1972](https://patchblox.com/security/data/fix/linux/elsa-2019-1972.md) | Aug 5, 2019 |
| Linux | rubygem-rdoc RHEL 8 | 0:6.0.1-104.module+el8.0.0+3250+4b7d6d43 | [RHSA-2019:1972](https://patchblox.com/security/data/fix/linux/rhsa-2019-1972.md) | Aug 7, 2019 |
| Linux | rubygem-rdoc ol 8 | 0:6.0.1-104.module+el8.0.0+5238+4f9ac61b | [ELSA-2019-1972](https://patchblox.com/security/data/fix/linux/elsa-2019-1972.md) | Aug 5, 2019 |
| Linux | rubygem-test-unit RHEL 8 | 0:3.2.7-104.module+el8.0.0+3250+4b7d6d43 | [RHSA-2019:1972](https://patchblox.com/security/data/fix/linux/rhsa-2019-1972.md) | Aug 7, 2019 |
| Linux | rubygem-test-unit ol 8 | 0:3.2.7-104.module+el8.0.0+5238+4f9ac61b | [ELSA-2019-1972](https://patchblox.com/security/data/fix/linux/elsa-2019-1972.md) | Aug 5, 2019 |
| Linux | rubygem-xmlrpc RHEL 8 | 0:0.3.0-104.module+el8.0.0+3250+4b7d6d43 | [RHSA-2019:1972](https://patchblox.com/security/data/fix/linux/rhsa-2019-1972.md) | Aug 7, 2019 |
| Linux | rubygem-xmlrpc ol 8 | 0:0.3.0-104.module+el8.0.0+5238+4f9ac61b | [ELSA-2019-1972](https://patchblox.com/security/data/fix/linux/elsa-2019-1972.md) | Aug 5, 2019 |
| Linux | rubygems RHEL 8 | 0:2.7.6-104.module+el8.0.0+3250+4b7d6d43 | [RHSA-2019:1972](https://patchblox.com/security/data/fix/linux/rhsa-2019-1972.md) | Aug 7, 2019 |
| Linux | rubygems ol 8 | 0:2.7.6-104.module+el8.0.0+5238+4f9ac61b | [ELSA-2019-1972](https://patchblox.com/security/data/fix/linux/elsa-2019-1972.md) | Aug 5, 2019 |
| Linux | rubygems-devel RHEL 8 | 0:2.7.6-104.module+el8.0.0+3250+4b7d6d43 | [RHSA-2019:1972](https://patchblox.com/security/data/fix/linux/rhsa-2019-1972.md) | Aug 7, 2019 |
| Linux | rubygems-devel ol 8 | 0:2.7.6-104.module+el8.0.0+5238+4f9ac61b | [ELSA-2019-1972](https://patchblox.com/security/data/fix/linux/elsa-2019-1972.md) | Aug 5, 2019 |

---

Data as of 2026-11-07T18:46:35Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.