Linux · Security advisory · September 13, 2022
ALSA-2022:6450: Security update for 28 packages
ALSA-2022:6450, released September 13, 2022, fixes 4 CVEs across 28 products. None of them is reported as exploited. Patch Radar priority: High.
High
CVEs closed
4
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0437
91st percentile
Priority of the 4 CVEs
Patch now 0
Urgent 0
High 4
Routine 0
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| ruby | almalinux 8 | 3.0.4-141.module_el8.6.0+3263+41cde0c0 |
| ruby-default-gems | almalinux 8 | 3.0.4-141.module_el8.6.0+3263+41cde0c0 |
| ruby-devel | almalinux 8 | 3.0.4-141.module_el8.6.0+3263+41cde0c0 |
| ruby-doc | almalinux 8 | 3.0.4-141.module_el8.6.0+3263+41cde0c0 |
| ruby-libs | almalinux 8 | 3.0.4-141.module_el8.6.0+3263+41cde0c0 |
| rubygem-abrt | almalinux 8 | 0.4.0-1.module_el8.5.0+2595+0c654ebc |
| rubygem-abrt-doc | almalinux 8 | 0.4.0-1.module_el8.5.0+2595+0c654ebc |
| rubygem-bigdecimal | almalinux 8 | 3.0.0-141.module_el8.6.0+3263+41cde0c0 |
| rubygem-bundler | almalinux 8 | 2.2.33-141.module_el8.6.0+3263+41cde0c0 |
| rubygem-io-console | almalinux 8 | 0.5.7-141.module_el8.6.0+3263+41cde0c0 |
| rubygem-irb | almalinux 8 | 1.3.5-141.module_el8.6.0+3263+41cde0c0 |
| rubygem-json | almalinux 8 | 2.5.1-141.module_el8.6.0+3263+41cde0c0 |
| rubygem-minitest | almalinux 8 | 5.14.2-141.module_el8.6.0+3263+41cde0c0 |
| rubygem-mysql2 | almalinux 8 | 0.5.3-1.module_el8.5.0+2595+0c654ebc |
| rubygem-mysql2-doc | almalinux 8 | 0.5.3-1.module_el8.5.0+2595+0c654ebc |
| rubygem-pg | almalinux 8 | 1.2.3-1.module_el8.5.0+2595+0c654ebc |
| rubygem-pg-doc | almalinux 8 | 1.2.3-1.module_el8.5.0+2595+0c654ebc |
| rubygem-power_assert | almalinux 8 | 1.2.0-141.module_el8.6.0+3263+41cde0c0 |
| rubygem-psych | almalinux 8 | 3.3.2-141.module_el8.6.0+3263+41cde0c0 |
| rubygem-rake | almalinux 8 | 13.0.3-141.module_el8.6.0+3263+41cde0c0 |
| rubygem-rbs | almalinux 8 | 1.4.0-141.module_el8.6.0+3263+41cde0c0 |
| rubygem-rdoc | almalinux 8 | 6.3.3-141.module_el8.6.0+3263+41cde0c0 |
| rubygem-rexml | almalinux 8 | 3.2.5-141.module_el8.6.0+3263+41cde0c0 |
| rubygem-rss | almalinux 8 | 0.2.9-141.module_el8.6.0+3263+41cde0c0 |
| rubygem-test-unit | almalinux 8 | 3.3.7-141.module_el8.6.0+3263+41cde0c0 |
| rubygem-typeprof | almalinux 8 | 0.15.2-141.module_el8.6.0+3263+41cde0c0 |
| rubygems | almalinux 8 | 3.2.33-141.module_el8.6.0+3263+41cde0c0 |
| rubygems-devel | almalinux 8 | 3.2.33-141.module_el8.6.0+3263+41cde0c0 |
CVEs this fix closes
| Priority | CVE | Title | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| High | CVE-2022-28739 | ruby: Ruby is an extensible, interpreted, object-oriented, scripting language | 8.8 | 0.0437 | None reported | |
| High | CVE-2021-41817 | ruby: Ruby is an extensible, interpreted, object-oriented, scripting language | 7.7 | 0.0346 | None reported | |
| High | CVE-2021-41819 | ruby: Ruby is an extensible, interpreted, object-oriented, scripting language | 7.7 | 0.0315 | None reported | |
| High | CVE-2022-28738 | libruby3.0: A double free was found in the Regexp compiler in Ruby 3.x before 3.0.4 and 3.1.x before 3.1.2 | 9.8 | 0.0314 | None reported |
Showing 1 to 4 of 4
1