Linux · Security advisory · April 2, 2024

ELSA-2024-1576: Security update for 27 packages

ELSA-2024-1576, released April 2, 2024, fixes 4 CVEs across 27 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
4
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0264
85th percentile

Priority of the 4 CVEs

Patch now 0 Urgent 0 High 4 Routine 0

Fixed package versions

ProductReleaseFixed in
rubyol 90:3.1.4-143.module+el9.3.0+90207+bf8fadcb
ruby-bundled-gemsol 90:3.1.4-143.module+el9.3.0+90207+bf8fadcb
ruby-default-gemsol 90:3.1.4-143.module+el9.3.0+90207+bf8fadcb
ruby-develol 90:3.1.4-143.module+el9.3.0+90207+bf8fadcb
ruby-docol 90:3.1.4-143.module+el9.3.0+90207+bf8fadcb
ruby-libsol 90:3.1.4-143.module+el9.3.0+90207+bf8fadcb
rubygem-bigdecimalol 90:3.1.1-143.module+el9.3.0+90207+bf8fadcb
rubygem-bundlerol 90:2.3.26-143.module+el9.3.0+90207+bf8fadcb
rubygem-io-consoleol 90:0.5.11-143.module+el9.3.0+90207+bf8fadcb
rubygem-irbol 90:1.4.1-143.module+el9.3.0+90207+bf8fadcb
rubygem-jsonol 90:2.6.1-143.module+el9.3.0+90207+bf8fadcb
rubygem-minitestol 90:5.15.0-143.module+el9.3.0+90207+bf8fadcb
rubygem-mysql2ol 90:0.5.4-1.module+el9.1.0+20815+286161bd
rubygem-mysql2-docol 90:0.5.4-1.module+el9.1.0+20815+286161bd
rubygem-pgol 90:1.3.5-1.module+el9.1.0+20815+286161bd
rubygem-pg-docol 90:1.3.5-1.module+el9.1.0+20815+286161bd
rubygem-power_assertol 90:2.0.1-143.module+el9.3.0+90207+bf8fadcb
rubygem-psychol 90:4.0.4-143.module+el9.3.0+90207+bf8fadcb
rubygem-rakeol 90:13.0.6-143.module+el9.3.0+90207+bf8fadcb
rubygem-rbsol 90:2.7.0-143.module+el9.3.0+90207+bf8fadcb
rubygem-rdocol 90:6.4.0-143.module+el9.3.0+90207+bf8fadcb
rubygem-rexmlol 90:3.2.5-143.module+el9.3.0+90207+bf8fadcb
rubygem-rssol 90:0.2.9-143.module+el9.3.0+90207+bf8fadcb
rubygem-test-unitol 90:3.5.3-143.module+el9.3.0+90207+bf8fadcb
rubygem-typeprofol 90:0.21.3-143.module+el9.3.0+90207+bf8fadcb
rubygemsol 90:3.3.26-143.module+el9.3.0+90207+bf8fadcb
rubygems-develol 90:3.3.26-143.module+el9.3.0+90207+bf8fadcb

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2023-28755 ruby: Ruby is an extensible, interpreted, object-oriented, scripting language 8.8 0.0264 None reported
High CVE-2021-33621 ruby: Ruby is an extensible, interpreted, object-oriented, scripting language 8.8 0.0245 None reported
High CVE-2023-28756 ruby: Ruby is an extensible, interpreted, object-oriented, scripting language 8.8 0.0245 None reported
High CVE-2023-36617 ruby: Ruby is an extensible, interpreted, object-oriented, scripting language 8.8 0.0170 None reported
Showing 1 to 4 of 4 1