Linux · Security advisory · August 3, 2022

ELSA-2022-5779: Security update for 32 packages

ELSA-2022-5779, released August 3, 2022, fixes 2 CVEs across 32 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
2
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0346
89th percentile

Priority of the 2 CVEs

Patch now 0 Urgent 0 High 2 Routine 0

Fixed package versions

ProductReleaseFixed in
rubyol 80:2.5.9-110.module+el8.6.0+20712+84e27c2d
ruby-develol 80:2.5.9-110.module+el8.6.0+20712+84e27c2d
ruby-docol 80:2.5.9-110.module+el8.6.0+20712+84e27c2d
ruby-irbol 80:2.5.9-110.module+el8.6.0+20712+84e27c2d
ruby-libsol 80:2.5.9-110.module+el8.6.0+20712+84e27c2d
rubygem-abrtol 80:0.3.0-4.module+el8.3.0+7756+e45777e9
rubygem-abrt-docol 80:0.3.0-4.module+el8.3.0+7756+e45777e9
rubygem-bigdecimalol 80:1.3.4-110.module+el8.6.0+20712+84e27c2d
rubygem-bsonol 80:4.3.0-2.module+el8.3.0+7756+e45777e9
rubygem-bson-docol 80:4.3.0-2.module+el8.3.0+7756+e45777e9
rubygem-bundlerol 80:1.16.1-4.module+el8.6.0+20712+84e27c2d
rubygem-bundler-docol 80:1.16.1-4.module+el8.6.0+20712+84e27c2d
rubygem-did_you_meanol 80:1.2.0-110.module+el8.6.0+20712+84e27c2d
rubygem-io-consoleol 80:0.4.6-110.module+el8.6.0+20712+84e27c2d
rubygem-jsonol 80:2.1.0-110.module+el8.6.0+20712+84e27c2d
rubygem-minitestol 80:5.10.3-110.module+el8.6.0+20712+84e27c2d
rubygem-mongool 80:2.5.1-2.module+el8.3.0+7756+e45777e9
rubygem-mongo-docol 80:2.5.1-2.module+el8.3.0+7756+e45777e9
rubygem-mysql2ol 80:0.4.10-4.module+el8.3.0+7756+e45777e9
rubygem-mysql2-docol 80:0.4.10-4.module+el8.3.0+7756+e45777e9
rubygem-net-telnetol 80:0.1.1-110.module+el8.6.0+20712+84e27c2d
rubygem-opensslol 80:2.1.2-110.module+el8.6.0+20712+84e27c2d
rubygem-pgol 80:1.0.0-2.module+el8.3.0+7756+e45777e9
rubygem-pg-docol 80:1.0.0-2.module+el8.3.0+7756+e45777e9
rubygem-power_assertol 80:1.1.1-110.module+el8.6.0+20712+84e27c2d
rubygem-psychol 80:3.0.2-110.module+el8.6.0+20712+84e27c2d
rubygem-rakeol 80:12.3.3-110.module+el8.6.0+20712+84e27c2d
rubygem-rdocol 80:6.0.1.1-110.module+el8.6.0+20712+84e27c2d
rubygem-test-unitol 80:3.2.7-110.module+el8.6.0+20712+84e27c2d
rubygem-xmlrpcol 80:0.3.0-110.module+el8.6.0+20712+84e27c2d
rubygemsol 80:2.7.6.3-110.module+el8.6.0+20712+84e27c2d
rubygems-develol 80:2.7.6.3-110.module+el8.6.0+20712+84e27c2d

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2021-41817 ruby: Ruby is an extensible, interpreted, object-oriented, scripting language 7.7 0.0346 None reported
High CVE-2021-41819 ruby: Ruby is an extensible, interpreted, object-oriented, scripting language 7.7 0.0315 None reported
Showing 1 to 2 of 2 1