Linux · Security advisory · February 24, 2022

RHSA-2022:0672: Security update for 32 packages

RHSA-2022:0672, released February 24, 2022, fixes 3 CVEs across 32 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
3
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0305
87th percentile

Priority of the 3 CVEs

Patch now 0 Urgent 0 High 3 Routine 0

Fixed package versions

ProductReleaseFixed in
rubyRHEL 80:2.5.9-109.module+el8.5.0+14275+d9c243ca
ruby-develRHEL 80:2.5.9-109.module+el8.5.0+14275+d9c243ca
ruby-docRHEL 80:2.5.9-109.module+el8.5.0+14275+d9c243ca
ruby-irbRHEL 80:2.5.9-109.module+el8.5.0+14275+d9c243ca
ruby-libsRHEL 80:2.5.9-109.module+el8.5.0+14275+d9c243ca
rubygem-abrtRHEL 80:0.3.0-4.module+el8.1.0+3656+f80bfa1d
rubygem-abrt-docRHEL 80:0.3.0-4.module+el8.1.0+3656+f80bfa1d
rubygem-bigdecimalRHEL 80:1.3.4-109.module+el8.5.0+14275+d9c243ca
rubygem-bsonRHEL 80:4.3.0-2.module+el8.1.0+3656+f80bfa1d
rubygem-bson-docRHEL 80:4.3.0-2.module+el8.1.0+3656+f80bfa1d
rubygem-bundlerRHEL 80:1.16.1-4.module+el8.5.0+13840+ec418553
rubygem-bundler-docRHEL 80:1.16.1-4.module+el8.5.0+13840+ec418553
rubygem-did_you_meanRHEL 80:1.2.0-109.module+el8.5.0+14275+d9c243ca
rubygem-io-consoleRHEL 80:0.4.6-109.module+el8.5.0+14275+d9c243ca
rubygem-jsonRHEL 80:2.1.0-109.module+el8.5.0+14275+d9c243ca
rubygem-minitestRHEL 80:5.10.3-109.module+el8.5.0+14275+d9c243ca
rubygem-mongoRHEL 80:2.5.1-2.module+el8.1.0+3656+f80bfa1d
rubygem-mongo-docRHEL 80:2.5.1-2.module+el8.1.0+3656+f80bfa1d
rubygem-mysql2RHEL 80:0.4.10-4.module+el8.1.0+3656+f80bfa1d
rubygem-mysql2-docRHEL 80:0.4.10-4.module+el8.1.0+3656+f80bfa1d
rubygem-net-telnetRHEL 80:0.1.1-109.module+el8.5.0+14275+d9c243ca
rubygem-opensslRHEL 80:2.1.2-109.module+el8.5.0+14275+d9c243ca
rubygem-pgRHEL 80:1.0.0-2.module+el8.1.0+3656+f80bfa1d
rubygem-pg-docRHEL 80:1.0.0-2.module+el8.1.0+3656+f80bfa1d
rubygem-power_assertRHEL 80:1.1.1-109.module+el8.5.0+14275+d9c243ca
rubygem-psychRHEL 80:3.0.2-109.module+el8.5.0+14275+d9c243ca
rubygem-rakeRHEL 80:12.3.3-109.module+el8.5.0+14275+d9c243ca
rubygem-rdocRHEL 80:6.0.1.1-109.module+el8.5.0+14275+d9c243ca
rubygem-test-unitRHEL 80:3.2.7-109.module+el8.5.0+14275+d9c243ca
rubygem-xmlrpcRHEL 80:0.3.0-109.module+el8.5.0+14275+d9c243ca
rubygemsRHEL 80:2.7.6.3-109.module+el8.5.0+14275+d9c243ca
rubygems-develRHEL 80:2.7.6.3-109.module+el8.5.0+14275+d9c243ca

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2021-31810 ruby: Ruby is an extensible, interpreted, object-oriented, scripting language 7.4 0.0305 None reported
High CVE-2021-32066 ruby: Ruby is an extensible, interpreted, object-oriented, scripting language 7.4 0.0291 None reported
High CVE-2021-31799 ruby-devel: Ruby is an extensible, interpreted, object-oriented, scripting language 7.4 0.0148 None reported
Showing 1 to 3 of 3 1