Linux · Security advisory · September 13, 2022

RHSA-2022:6450: Security update for 28 packages

RHSA-2022:6450, released September 13, 2022, fixes 4 CVEs across 28 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
4
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0437
91st percentile

Priority of the 4 CVEs

Patch now 0 Urgent 0 High 4 Routine 0

Fixed package versions

ProductReleaseFixed in
rubyRHEL 80:3.0.4-141.module+el8.6.0+16311+3e5e17e9
ruby-default-gemsRHEL 80:3.0.4-141.module+el8.6.0+16311+3e5e17e9
ruby-develRHEL 80:3.0.4-141.module+el8.6.0+16311+3e5e17e9
ruby-docRHEL 80:3.0.4-141.module+el8.6.0+16311+3e5e17e9
ruby-libsRHEL 80:3.0.4-141.module+el8.6.0+16311+3e5e17e9
rubygem-abrtRHEL 80:0.4.0-1.module+el8.5.0+11580+845038eb
rubygem-abrt-docRHEL 80:0.4.0-1.module+el8.5.0+11580+845038eb
rubygem-bigdecimalRHEL 80:3.0.0-141.module+el8.6.0+16311+3e5e17e9
rubygem-bundlerRHEL 80:2.2.33-141.module+el8.6.0+16311+3e5e17e9
rubygem-io-consoleRHEL 80:0.5.7-141.module+el8.6.0+16311+3e5e17e9
rubygem-irbRHEL 80:1.3.5-141.module+el8.6.0+16311+3e5e17e9
rubygem-jsonRHEL 80:2.5.1-141.module+el8.6.0+16311+3e5e17e9
rubygem-minitestRHEL 80:5.14.2-141.module+el8.6.0+16311+3e5e17e9
rubygem-mysql2RHEL 80:0.5.3-1.module+el8.5.0+11580+845038eb
rubygem-mysql2-docRHEL 80:0.5.3-1.module+el8.5.0+11580+845038eb
rubygem-pgRHEL 80:1.2.3-1.module+el8.5.0+11580+845038eb
rubygem-pg-docRHEL 80:1.2.3-1.module+el8.5.0+11580+845038eb
rubygem-power_assertRHEL 80:1.2.0-141.module+el8.6.0+16311+3e5e17e9
rubygem-psychRHEL 80:3.3.2-141.module+el8.6.0+16311+3e5e17e9
rubygem-rakeRHEL 80:13.0.3-141.module+el8.6.0+16311+3e5e17e9
rubygem-rbsRHEL 80:1.4.0-141.module+el8.6.0+16311+3e5e17e9
rubygem-rdocRHEL 80:6.3.3-141.module+el8.6.0+16311+3e5e17e9
rubygem-rexmlRHEL 80:3.2.5-141.module+el8.6.0+16311+3e5e17e9
rubygem-rssRHEL 80:0.2.9-141.module+el8.6.0+16311+3e5e17e9
rubygem-test-unitRHEL 80:3.3.7-141.module+el8.6.0+16311+3e5e17e9
rubygem-typeprofRHEL 80:0.15.2-141.module+el8.6.0+16311+3e5e17e9
rubygemsRHEL 80:3.2.33-141.module+el8.6.0+16311+3e5e17e9
rubygems-develRHEL 80:3.2.33-141.module+el8.6.0+16311+3e5e17e9

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2022-28739 ruby: Ruby is an extensible, interpreted, object-oriented, scripting language 8.8 0.0437 None reported
High CVE-2021-41817 ruby: Ruby is an extensible, interpreted, object-oriented, scripting language 7.7 0.0346 None reported
High CVE-2021-41819 ruby: Ruby is an extensible, interpreted, object-oriented, scripting language 7.7 0.0315 None reported
High CVE-2022-28738 libruby3.0: A double free was found in the Regexp compiler in Ruby 3.x before 3.0.4 and 3.1.x before 3.1.2 9.8 0.0314 None reported
Showing 1 to 4 of 4 1