Linux · Security advisory · July 1, 2022

ELSA-2022-5338: Security update for 31 packages

ELSA-2022-5338, released July 1, 2022, fixes 1 CVE across 31 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
1
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0437
91st percentile

Fixed package versions

ProductReleaseFixed in
rubyol 80:2.6.10-109.module+el8.6.0+20693+52f02d9c
ruby-develol 80:2.6.10-109.module+el8.6.0+20693+52f02d9c
ruby-docol 80:2.6.10-109.module+el8.6.0+20693+52f02d9c
ruby-libsol 80:2.6.10-109.module+el8.6.0+20693+52f02d9c
rubygem-abrtol 80:0.3.0-4.module+el8.1.0+5406+ce01f9b9
rubygem-abrt-docol 80:0.3.0-4.module+el8.1.0+5406+ce01f9b9
rubygem-bigdecimalol 80:1.4.1-109.module+el8.6.0+20693+52f02d9c
rubygem-bsonol 80:4.5.0-1.module+el8.4.0+20235+1e5b8be3
rubygem-bson-docol 80:4.5.0-1.module+el8.4.0+20235+1e5b8be3
rubygem-bundlerol 80:1.17.2-109.module+el8.6.0+20693+52f02d9c
rubygem-did_you_meanol 80:1.3.0-109.module+el8.6.0+20693+52f02d9c
rubygem-io-consoleol 80:0.4.7-109.module+el8.6.0+20693+52f02d9c
rubygem-irbol 80:1.0.0-109.module+el8.6.0+20693+52f02d9c
rubygem-jsonol 80:2.1.0-109.module+el8.6.0+20693+52f02d9c
rubygem-minitestol 80:5.11.3-109.module+el8.6.0+20693+52f02d9c
rubygem-mongool 80:2.8.0-1.module+el8.1.0+5406+ce01f9b9
rubygem-mongo-docol 80:2.8.0-1.module+el8.1.0+5406+ce01f9b9
rubygem-mysql2ol 80:0.5.2-1.module+el8.4.0+20235+1e5b8be3
rubygem-mysql2-docol 80:0.5.2-1.module+el8.4.0+20235+1e5b8be3
rubygem-net-telnetol 80:0.2.0-109.module+el8.6.0+20693+52f02d9c
rubygem-opensslol 80:2.1.2-109.module+el8.6.0+20693+52f02d9c
rubygem-pgol 80:1.1.4-1.module+el8.4.0+20235+1e5b8be3
rubygem-pg-docol 80:1.1.4-1.module+el8.4.0+20235+1e5b8be3
rubygem-power_assertol 80:1.1.3-109.module+el8.6.0+20693+52f02d9c
rubygem-psychol 80:3.1.0-109.module+el8.6.0+20693+52f02d9c
rubygem-rakeol 80:12.3.3-109.module+el8.6.0+20693+52f02d9c
rubygem-rdocol 80:6.1.2.1-109.module+el8.6.0+20693+52f02d9c
rubygem-test-unitol 80:3.2.9-109.module+el8.6.0+20693+52f02d9c
rubygem-xmlrpcol 80:0.3.0-109.module+el8.6.0+20693+52f02d9c
rubygemsol 80:3.0.3.1-109.module+el8.6.0+20693+52f02d9c
rubygems-develol 80:3.0.3.1-109.module+el8.6.0+20693+52f02d9c

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2022-28739 ruby: Ruby is an extensible, interpreted, object-oriented, scripting language 8.8 0.0437 None reported
Showing 1 to 1 of 1 1