Linux · Security advisory · February 16, 2022

RHSA-2022:0543: Security update for 30 packages

RHSA-2022:0543, released February 16, 2022, fixes 4 CVEs across 30 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
4
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0631
93rd percentile

Priority of the 4 CVEs

Patch now 0 Urgent 0 High 4 Routine 0

Fixed package versions

ProductReleaseFixed in
rubyRHEL 80:2.6.9-108.module+el8.5.0+13719+08a8ba32
ruby-develRHEL 80:2.6.9-108.module+el8.5.0+13719+08a8ba32
ruby-docRHEL 80:2.6.9-108.module+el8.5.0+13719+08a8ba32
ruby-libsRHEL 80:2.6.9-108.module+el8.5.0+13719+08a8ba32
rubygem-abrtRHEL 80:0.3.0-4.module+el8.1.0+3653+beb38eb0
rubygem-abrt-docRHEL 80:0.3.0-4.module+el8.1.0+3653+beb38eb0
rubygem-bigdecimalRHEL 80:1.4.1-108.module+el8.5.0+13719+08a8ba32
rubygem-bsonRHEL 80:4.5.0-1.module+el8.1.0+3653+beb38eb0
rubygem-bson-docRHEL 80:4.5.0-1.module+el8.1.0+3653+beb38eb0
rubygem-did_you_meanRHEL 80:1.3.0-108.module+el8.5.0+13719+08a8ba32
rubygem-io-consoleRHEL 80:0.4.7-108.module+el8.5.0+13719+08a8ba32
rubygem-irbRHEL 80:1.0.0-108.module+el8.5.0+13719+08a8ba32
rubygem-jsonRHEL 80:2.1.0-108.module+el8.5.0+13719+08a8ba32
rubygem-minitestRHEL 80:5.11.3-108.module+el8.5.0+13719+08a8ba32
rubygem-mongoRHEL 80:2.8.0-1.module+el8.1.0+3653+beb38eb0
rubygem-mongo-docRHEL 80:2.8.0-1.module+el8.1.0+3653+beb38eb0
rubygem-mysql2RHEL 80:0.5.2-1.module+el8.1.0+3653+beb38eb0
rubygem-mysql2-docRHEL 80:0.5.2-1.module+el8.1.0+3653+beb38eb0
rubygem-net-telnetRHEL 80:0.2.0-108.module+el8.5.0+13719+08a8ba32
rubygem-opensslRHEL 80:2.1.2-108.module+el8.5.0+13719+08a8ba32
rubygem-pgRHEL 80:1.1.4-1.module+el8.1.0+3653+beb38eb0
rubygem-pg-docRHEL 80:1.1.4-1.module+el8.1.0+3653+beb38eb0
rubygem-power_assertRHEL 80:1.1.3-108.module+el8.5.0+13719+08a8ba32
rubygem-psychRHEL 80:3.1.0-108.module+el8.5.0+13719+08a8ba32
rubygem-rakeRHEL 80:12.3.3-108.module+el8.5.0+13719+08a8ba32
rubygem-rdocRHEL 80:6.1.2.1-108.module+el8.5.0+13719+08a8ba32
rubygem-test-unitRHEL 80:3.2.9-108.module+el8.5.0+13719+08a8ba32
rubygem-xmlrpcRHEL 80:0.3.0-108.module+el8.5.0+13719+08a8ba32
rubygemsRHEL 80:3.0.3.1-108.module+el8.5.0+13719+08a8ba32
rubygems-develRHEL 80:3.0.3.1-108.module+el8.5.0+13719+08a8ba32

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2020-36327 rubygem-bundler: This update for rubygem-bundler fixes the following issues: - CVE-2020-36327: Fixed bundler choosing a dependency so... 8.8 0.0631 None reported
High CVE-2021-31810 ruby: Ruby is an extensible, interpreted, object-oriented, scripting language 7.4 0.0305 None reported
High CVE-2021-32066 ruby: Ruby is an extensible, interpreted, object-oriented, scripting language 7.4 0.0291 None reported
High CVE-2021-31799 ruby-devel: Ruby is an extensible, interpreted, object-oriented, scripting language 7.4 0.0148 None reported
Showing 1 to 4 of 4 1