# ELSA-2021-2587: Security update for 2 packages

ELSA-2021-2587, released July 2, 2021, fixes 8 CVEs across 2 products. None of them is reported as exploited. Patch Radar priority: High.

- Web page: https://patchblox.com/security/fix/linux/elsa-2021-2587
- Platform: Linux
- Released: Jul 2, 2021
- Priority: High (Closes CVE-2020-10663, high severity)
- CVEs: 8, exploited: 0, on CISA KEV: 0
- Vendor advisory: https://linux.oracle.com/errata/ELSA-2021-2587.html

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [ruby-irb](https://patchblox.com/security/data/product/linux/ruby-irb.md) | ol 8 | 0:2.5.9-107.module+el8.4.0+20203+c00aa653 |
| [rubygem-bundler-doc](https://patchblox.com/security/data/product/linux/rubygem-bundler-doc.md) | ol 8 | 0:1.16.1-3.module+el8.3.0+7756+e45777e9 |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2020-10663](https://patchblox.com/security/data/cve/CVE-2020-10663.md) | High | pcs: The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities.  Security Fix(... | 7.5 | 0.0681 |  |
| [CVE-2019-16201](https://patchblox.com/security/data/cve/CVE-2019-16201.md) | High | ruby: Ruby is an extensible, interpreted, object-oriented, scripting language | 7.5 | 0.0509 |  |
| [CVE-2021-28965](https://patchblox.com/security/data/cve/CVE-2021-28965.md) | High | ruby: Ruby is an extensible, interpreted, object-oriented, scripting language | 7.5 | 0.0506 |  |
| [CVE-2019-16255](https://patchblox.com/security/data/cve/CVE-2019-16255.md) | High | ruby: Ruby is an extensible, interpreted, object-oriented, scripting language | 8.1 | 0.0419 |  |
| [CVE-2020-25613](https://patchblox.com/security/data/cve/CVE-2020-25613.md) | High | ruby: Ruby is an extensible, interpreted, object-oriented, scripting language | 7.5 | 0.0382 |  |
| [CVE-2019-16254](https://patchblox.com/security/data/cve/CVE-2019-16254.md) | Routine | ruby: Ruby is an extensible, interpreted, object-oriented, scripting language | 5.3 | 0.0457 |  |
| [CVE-2019-15845](https://patchblox.com/security/data/cve/CVE-2019-15845.md) | Routine | rubygem-minitest: Ruby is an extensible, interpreted, object-oriented, scripting language | 6.5 | 0.0329 |  |
| [CVE-2020-10933](https://patchblox.com/security/data/cve/CVE-2020-10933.md) | Routine | ruby-irb: Ruby is an extensible, interpreted, object-oriented, scripting language | 5.3 | 0.0253 |  |

---

Data as of 2026-11-07T12:40:37Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo