Linux · Security advisory · November 5, 2019

RHBA-2019:3384: Security update for 32 packages

RHBA-2019:3384, released November 5, 2019, fixes 5 CVEs across 32 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
5
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0419
90th percentile

Priority of the 5 CVEs

Patch now 0 Urgent 0 High 1 Routine 4

Fixed package versions

ProductReleaseFixed in
rubyRHEL 80:2.5.5-105.module+el8.1.0+3656+f80bfa1d
ruby-develRHEL 80:2.5.5-105.module+el8.1.0+3656+f80bfa1d
ruby-docRHEL 80:2.5.5-105.module+el8.1.0+3656+f80bfa1d
ruby-irbRHEL 80:2.5.5-105.module+el8.1.0+3656+f80bfa1d
ruby-libsRHEL 80:2.5.5-105.module+el8.1.0+3656+f80bfa1d
rubygem-abrtRHEL 80:0.3.0-4.module+el8.1.0+3656+f80bfa1d
rubygem-abrt-docRHEL 80:0.3.0-4.module+el8.1.0+3656+f80bfa1d
rubygem-bigdecimalRHEL 80:1.3.4-105.module+el8.1.0+3656+f80bfa1d
rubygem-bsonRHEL 80:4.3.0-2.module+el8.1.0+3656+f80bfa1d
rubygem-bson-docRHEL 80:4.3.0-2.module+el8.1.0+3656+f80bfa1d
rubygem-bundlerRHEL 80:1.16.1-3.module+el8.1.0+3656+f80bfa1d
rubygem-bundler-docRHEL 80:1.16.1-3.module+el8.1.0+3656+f80bfa1d
rubygem-did_you_meanRHEL 80:1.2.0-105.module+el8.1.0+3656+f80bfa1d
rubygem-io-consoleRHEL 80:0.4.6-105.module+el8.1.0+3656+f80bfa1d
rubygem-jsonRHEL 80:2.1.0-105.module+el8.1.0+3656+f80bfa1d
rubygem-minitestRHEL 80:5.10.3-105.module+el8.1.0+3656+f80bfa1d
rubygem-mongoRHEL 80:2.5.1-2.module+el8.1.0+3656+f80bfa1d
rubygem-mongo-docRHEL 80:2.5.1-2.module+el8.1.0+3656+f80bfa1d
rubygem-mysql2RHEL 80:0.4.10-4.module+el8.1.0+3656+f80bfa1d
rubygem-mysql2-docRHEL 80:0.4.10-4.module+el8.1.0+3656+f80bfa1d
rubygem-net-telnetRHEL 80:0.1.1-105.module+el8.1.0+3656+f80bfa1d
rubygem-opensslRHEL 80:2.1.2-105.module+el8.1.0+3656+f80bfa1d
rubygem-pgRHEL 80:1.0.0-2.module+el8.1.0+3656+f80bfa1d
rubygem-pg-docRHEL 80:1.0.0-2.module+el8.1.0+3656+f80bfa1d
rubygem-power_assertRHEL 80:1.1.1-105.module+el8.1.0+3656+f80bfa1d
rubygem-psychRHEL 80:3.0.2-105.module+el8.1.0+3656+f80bfa1d
rubygem-rakeRHEL 80:12.3.0-105.module+el8.1.0+3656+f80bfa1d
rubygem-rdocRHEL 80:6.0.1-105.module+el8.1.0+3656+f80bfa1d
rubygem-test-unitRHEL 80:3.2.7-105.module+el8.1.0+3656+f80bfa1d
rubygem-xmlrpcRHEL 80:0.3.0-105.module+el8.1.0+3656+f80bfa1d
rubygemsRHEL 80:2.7.6.2-105.module+el8.1.0+3656+f80bfa1d
rubygems-develRHEL 80:2.7.6.2-105.module+el8.1.0+3656+f80bfa1d

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2019-8320 rubygem-io-console: For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.1 Release Notes linked from t... 7.4 0.0419 None reported
Routine CVE-2019-8321 ruby: For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.1 Release Notes linked from t... 5.3 0.0328 None reported
Routine CVE-2019-8322 ruby: For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.1 Release Notes linked from t... 5.3 0.0328 None reported
Routine CVE-2019-8323 ruby: For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.1 Release Notes linked from t... 5.3 0.0328 None reported
Routine CVE-2019-8325 ruby: For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.1 Release Notes linked from t... 5.3 0.0328 None reported
Showing 1 to 5 of 5 1