Linux · Security advisory · July 7, 2021

ELSA-2021-2588: Security update for 31 packages

ELSA-2021-2588, released July 7, 2021, fixes 9 CVEs across 31 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
9
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0681
94th percentile

Priority of the 9 CVEs

Patch now 0 Urgent 0 High 6 Routine 3

Fixed package versions

ProductReleaseFixed in
rubyol 80:2.6.7-107.module+el8.4.0+20235+1e5b8be3
ruby-develol 80:2.6.7-107.module+el8.4.0+20235+1e5b8be3
ruby-docol 80:2.6.7-107.module+el8.4.0+20235+1e5b8be3
ruby-libsol 80:2.6.7-107.module+el8.4.0+20235+1e5b8be3
rubygem-abrtol 80:0.3.0-4.module+el8.1.0+5406+ce01f9b9
rubygem-abrt-docol 80:0.3.0-4.module+el8.1.0+5406+ce01f9b9
rubygem-bigdecimalol 80:1.4.1-107.module+el8.4.0+20235+1e5b8be3
rubygem-bsonol 80:4.5.0-1.module+el8.4.0+20235+1e5b8be3
rubygem-bson-docol 80:4.5.0-1.module+el8.4.0+20235+1e5b8be3
rubygem-bundlerol 80:1.17.2-107.module+el8.4.0+20235+1e5b8be3
rubygem-did_you_meanol 80:1.3.0-107.module+el8.4.0+20235+1e5b8be3
rubygem-io-consoleol 80:0.4.7-107.module+el8.4.0+20235+1e5b8be3
rubygem-irbol 80:1.0.0-107.module+el8.4.0+20235+1e5b8be3
rubygem-jsonol 80:2.1.0-107.module+el8.4.0+20235+1e5b8be3
rubygem-minitestol 80:5.11.3-107.module+el8.4.0+20235+1e5b8be3
rubygem-mongool 80:2.8.0-1.module+el8.1.0+5406+ce01f9b9
rubygem-mongo-docol 80:2.8.0-1.module+el8.1.0+5406+ce01f9b9
rubygem-mysql2ol 80:0.5.2-1.module+el8.4.0+20235+1e5b8be3
rubygem-mysql2-docol 80:0.5.2-1.module+el8.4.0+20235+1e5b8be3
rubygem-net-telnetol 80:0.2.0-107.module+el8.4.0+20235+1e5b8be3
rubygem-opensslol 80:2.1.2-107.module+el8.4.0+20235+1e5b8be3
rubygem-pgol 80:1.1.4-1.module+el8.4.0+20235+1e5b8be3
rubygem-pg-docol 80:1.1.4-1.module+el8.4.0+20235+1e5b8be3
rubygem-power_assertol 80:1.1.3-107.module+el8.4.0+20235+1e5b8be3
rubygem-psychol 80:3.1.0-107.module+el8.4.0+20235+1e5b8be3
rubygem-rakeol 80:12.3.3-107.module+el8.4.0+20235+1e5b8be3
rubygem-rdocol 80:6.1.2-107.module+el8.4.0+20235+1e5b8be3
rubygem-test-unitol 80:3.2.9-107.module+el8.4.0+20235+1e5b8be3
rubygem-xmlrpcol 80:0.3.0-107.module+el8.4.0+20235+1e5b8be3
rubygemsol 80:3.0.3.1-107.module+el8.4.0+20235+1e5b8be3
rubygems-develol 80:3.0.3.1-107.module+el8.4.0+20235+1e5b8be3

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2020-10663 pcs: The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities. Security Fix(... 7.5 0.0681 None reported
High CVE-2019-16201 ruby: Ruby is an extensible, interpreted, object-oriented, scripting language 7.5 0.0509 None reported
High CVE-2021-28965 ruby: Ruby is an extensible, interpreted, object-oriented, scripting language 7.5 0.0506 None reported
High CVE-2019-16255 ruby: Ruby is an extensible, interpreted, object-oriented, scripting language 8.1 0.0419 None reported
High CVE-2020-25613 ruby: Ruby is an extensible, interpreted, object-oriented, scripting language 7.5 0.0382 None reported
High CVE-2019-3881 ruby: Ruby is an extensible, interpreted, object-oriented, scripting language 7.0 0.0053 None reported
Routine CVE-2019-16254 ruby: Ruby is an extensible, interpreted, object-oriented, scripting language 5.3 0.0457 None reported
Routine CVE-2019-15845 rubygem-minitest: Ruby is an extensible, interpreted, object-oriented, scripting language 6.5 0.0329 None reported
Routine CVE-2020-10933 ruby-irb: Ruby is an extensible, interpreted, object-oriented, scripting language 5.3 0.0253 None reported
Showing 1 to 9 of 9 1