Linux · Red Hat · Security advisory · June 29, 2021

RHSA-2021:2588: Security update for 31 packages

RHSA-2021:2588, released June 29, 2021, fixes 9 CVEs across 31 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
9
None rated Critical
Exploited
0
None reported
Highest CVSS
8.1
Base score, 0 to 10
Highest EPSS
0.0681
94th percentile

Priority of the 9 CVEs

Patch now 0 Urgent 0 High 6 Routine 3

Fixed package versions

ProductReleaseFixed in
rubyRHEL 80:2.6.7-107.module+el8.4.0+10830+bbd85cce
ruby-develRHEL 80:2.6.7-107.module+el8.4.0+10830+bbd85cce
ruby-docRHEL 80:2.6.7-107.module+el8.4.0+10830+bbd85cce
ruby-libsRHEL 80:2.6.7-107.module+el8.4.0+10830+bbd85cce
rubygem-abrtRHEL 80:0.3.0-4.module+el8.1.0+3653+beb38eb0
rubygem-abrt-docRHEL 80:0.3.0-4.module+el8.1.0+3653+beb38eb0
rubygem-bigdecimalRHEL 80:1.4.1-107.module+el8.4.0+10830+bbd85cce
rubygem-bsonRHEL 80:4.5.0-1.module+el8.1.0+3653+beb38eb0
rubygem-bson-docRHEL 80:4.5.0-1.module+el8.1.0+3653+beb38eb0
rubygem-bundlerRHEL 80:1.17.2-107.module+el8.4.0+10830+bbd85cce
rubygem-did_you_meanRHEL 80:1.3.0-107.module+el8.4.0+10830+bbd85cce
rubygem-io-consoleRHEL 80:0.4.7-107.module+el8.4.0+10830+bbd85cce
rubygem-irbRHEL 80:1.0.0-107.module+el8.4.0+10830+bbd85cce
rubygem-jsonRHEL 80:2.1.0-107.module+el8.4.0+10830+bbd85cce
rubygem-minitestRHEL 80:5.11.3-107.module+el8.4.0+10830+bbd85cce
rubygem-mongoRHEL 80:2.8.0-1.module+el8.1.0+3653+beb38eb0
rubygem-mongo-docRHEL 80:2.8.0-1.module+el8.1.0+3653+beb38eb0
rubygem-mysql2RHEL 80:0.5.2-1.module+el8.1.0+3653+beb38eb0
rubygem-mysql2-docRHEL 80:0.5.2-1.module+el8.1.0+3653+beb38eb0
rubygem-net-telnetRHEL 80:0.2.0-107.module+el8.4.0+10830+bbd85cce
rubygem-opensslRHEL 80:2.1.2-107.module+el8.4.0+10830+bbd85cce
rubygem-pgRHEL 80:1.1.4-1.module+el8.1.0+3653+beb38eb0
rubygem-pg-docRHEL 80:1.1.4-1.module+el8.1.0+3653+beb38eb0
rubygem-power_assertRHEL 80:1.1.3-107.module+el8.4.0+10830+bbd85cce
rubygem-psychRHEL 80:3.1.0-107.module+el8.4.0+10830+bbd85cce
rubygem-rakeRHEL 80:12.3.3-107.module+el8.4.0+10830+bbd85cce
rubygem-rdocRHEL 80:6.1.2-107.module+el8.4.0+10830+bbd85cce
rubygem-test-unitRHEL 80:3.2.9-107.module+el8.4.0+10830+bbd85cce
rubygem-xmlrpcRHEL 80:0.3.0-107.module+el8.4.0+10830+bbd85cce
rubygemsRHEL 80:3.0.3.1-107.module+el8.4.0+10830+bbd85cce
rubygems-develRHEL 80:3.0.3.1-107.module+el8.4.0+10830+bbd85cce

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
High CVE-2020-10663 pcs: The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities. Security Fix(...7.5 0.0681 None reported
High CVE-2019-16201 ruby: Ruby is an extensible, interpreted, object-oriented, scripting language7.5 0.0509 None reported
High CVE-2021-28965 ruby: Ruby is an extensible, interpreted, object-oriented, scripting language7.5 0.0506 None reported
High CVE-2019-16255 ruby: Ruby is an extensible, interpreted, object-oriented, scripting language8.1 0.0419 None reported
High CVE-2020-25613 ruby: Ruby is an extensible, interpreted, object-oriented, scripting language7.5 0.0382 None reported
High CVE-2019-3881 ruby: Ruby is an extensible, interpreted, object-oriented, scripting language7.0 0.0053 None reported
Routine CVE-2019-16254 ruby: Ruby is an extensible, interpreted, object-oriented, scripting language5.3 0.0457 None reported
Routine CVE-2019-15845 rubygem-minitest: Ruby is an extensible, interpreted, object-oriented, scripting language6.5 0.0329 None reported
Routine CVE-2020-10933 ruby-irb: Ruby is an extensible, interpreted, object-oriented, scripting language5.3 0.0253 None reported
Showing 1 to 9 of 9 1

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.