Linux · Security advisory · August 7, 2019

RHSA-2019:1972: Security update for 32 packages

RHSA-2019:1972, released August 7, 2019, fixes 1 CVE across 32 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
1
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0322
88th percentile

Fixed package versions

ProductReleaseFixed in
rubyRHEL 80:2.5.3-104.module+el8.0.0+3250+4b7d6d43
ruby-develRHEL 80:2.5.3-104.module+el8.0.0+3250+4b7d6d43
ruby-docRHEL 80:2.5.3-104.module+el8.0.0+3250+4b7d6d43
ruby-irbRHEL 80:2.5.3-104.module+el8.0.0+3250+4b7d6d43
ruby-libsRHEL 80:2.5.3-104.module+el8.0.0+3250+4b7d6d43
rubygem-abrtRHEL 80:0.3.0-4.module+el8.0.0+3250+4b7d6d43
rubygem-abrt-docRHEL 80:0.3.0-4.module+el8.0.0+3250+4b7d6d43
rubygem-bigdecimalRHEL 80:1.3.4-104.module+el8.0.0+3250+4b7d6d43
rubygem-bsonRHEL 80:4.3.0-2.module+el8.0.0+3250+4b7d6d43
rubygem-bson-docRHEL 80:4.3.0-2.module+el8.0.0+3250+4b7d6d43
rubygem-bundlerRHEL 80:1.16.1-3.module+el8.0.0+3250+4b7d6d43
rubygem-bundler-docRHEL 80:1.16.1-3.module+el8.0.0+3250+4b7d6d43
rubygem-did_you_meanRHEL 80:1.2.0-104.module+el8.0.0+3250+4b7d6d43
rubygem-io-consoleRHEL 80:0.4.6-104.module+el8.0.0+3250+4b7d6d43
rubygem-jsonRHEL 80:2.1.0-104.module+el8.0.0+3250+4b7d6d43
rubygem-minitestRHEL 80:5.10.3-104.module+el8.0.0+3250+4b7d6d43
rubygem-mongoRHEL 80:2.5.1-2.module+el8.0.0+3250+4b7d6d43
rubygem-mongo-docRHEL 80:2.5.1-2.module+el8.0.0+3250+4b7d6d43
rubygem-mysql2RHEL 80:0.4.10-4.module+el8.0.0+3250+4b7d6d43
rubygem-mysql2-docRHEL 80:0.4.10-4.module+el8.0.0+3250+4b7d6d43
rubygem-net-telnetRHEL 80:0.1.1-104.module+el8.0.0+3250+4b7d6d43
rubygem-opensslRHEL 80:2.1.2-104.module+el8.0.0+3250+4b7d6d43
rubygem-pgRHEL 80:1.0.0-2.module+el8.0.0+3250+4b7d6d43
rubygem-pg-docRHEL 80:1.0.0-2.module+el8.0.0+3250+4b7d6d43
rubygem-power_assertRHEL 80:1.1.1-104.module+el8.0.0+3250+4b7d6d43
rubygem-psychRHEL 80:3.0.2-104.module+el8.0.0+3250+4b7d6d43
rubygem-rakeRHEL 80:12.3.0-104.module+el8.0.0+3250+4b7d6d43
rubygem-rdocRHEL 80:6.0.1-104.module+el8.0.0+3250+4b7d6d43
rubygem-test-unitRHEL 80:3.2.7-104.module+el8.0.0+3250+4b7d6d43
rubygem-xmlrpcRHEL 80:0.3.0-104.module+el8.0.0+3250+4b7d6d43
rubygemsRHEL 80:2.7.6-104.module+el8.0.0+3250+4b7d6d43
rubygems-develRHEL 80:2.7.6-104.module+el8.0.0+3250+4b7d6d43

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2019-8324 ruby: Ruby is an extensible, interpreted, object-oriented, scripting language 7.2 0.0322 None reported
Showing 1 to 1 of 1 1