Linux · Security advisory · November 14, 2023

RHSA-2023:7025: Security update for 32 packages

RHSA-2023:7025, released November 14, 2023, fixes 4 CVEs across 32 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
4
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0437
91st percentile

Priority of the 4 CVEs

Patch now 0 Urgent 0 High 4 Routine 0

Fixed package versions

ProductReleaseFixed in
rubyRHEL 80:2.5.9-111.module+el8.9.0+19193+435404ae
ruby-develRHEL 80:2.5.9-111.module+el8.9.0+19193+435404ae
ruby-docRHEL 80:2.5.9-111.module+el8.9.0+19193+435404ae
ruby-irbRHEL 80:2.5.9-111.module+el8.9.0+19193+435404ae
ruby-libsRHEL 80:2.5.9-111.module+el8.9.0+19193+435404ae
rubygem-abrtRHEL 80:0.3.0-4.module+el8.9.0+19193+435404ae
rubygem-abrt-docRHEL 80:0.3.0-4.module+el8.9.0+19193+435404ae
rubygem-bigdecimalRHEL 80:1.3.4-111.module+el8.9.0+19193+435404ae
rubygem-bsonRHEL 80:4.3.0-2.module+el8.9.0+19193+435404ae
rubygem-bson-docRHEL 80:4.3.0-2.module+el8.9.0+19193+435404ae
rubygem-bundlerRHEL 80:1.16.1-4.module+el8.9.0+19193+435404ae
rubygem-bundler-docRHEL 80:1.16.1-4.module+el8.9.0+19193+435404ae
rubygem-did_you_meanRHEL 80:1.2.0-111.module+el8.9.0+19193+435404ae
rubygem-io-consoleRHEL 80:0.4.6-111.module+el8.9.0+19193+435404ae
rubygem-jsonRHEL 80:2.1.0-111.module+el8.9.0+19193+435404ae
rubygem-minitestRHEL 80:5.10.3-111.module+el8.9.0+19193+435404ae
rubygem-mongoRHEL 80:2.5.1-2.module+el8.9.0+19193+435404ae
rubygem-mongo-docRHEL 80:2.5.1-2.module+el8.9.0+19193+435404ae
rubygem-mysql2RHEL 80:0.4.10-4.module+el8.9.0+19193+435404ae
rubygem-mysql2-docRHEL 80:0.4.10-4.module+el8.9.0+19193+435404ae
rubygem-net-telnetRHEL 80:0.1.1-111.module+el8.9.0+19193+435404ae
rubygem-opensslRHEL 80:2.1.2-111.module+el8.9.0+19193+435404ae
rubygem-pgRHEL 80:1.0.0-3.module+el8.9.0+19193+435404ae
rubygem-pg-docRHEL 80:1.0.0-3.module+el8.9.0+19193+435404ae
rubygem-power_assertRHEL 80:1.1.1-111.module+el8.9.0+19193+435404ae
rubygem-psychRHEL 80:3.0.2-111.module+el8.9.0+19193+435404ae
rubygem-rakeRHEL 80:12.3.3-111.module+el8.9.0+19193+435404ae
rubygem-rdocRHEL 80:6.0.1.1-111.module+el8.9.0+19193+435404ae
rubygem-test-unitRHEL 80:3.2.7-111.module+el8.9.0+19193+435404ae
rubygem-xmlrpcRHEL 80:0.3.0-111.module+el8.9.0+19193+435404ae
rubygemsRHEL 80:2.7.6.3-111.module+el8.9.0+19193+435404ae
rubygems-develRHEL 80:2.7.6.3-111.module+el8.9.0+19193+435404ae

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2022-28739 ruby: Ruby is an extensible, interpreted, object-oriented, scripting language 8.8 0.0437 None reported
High CVE-2023-28755 ruby: Ruby is an extensible, interpreted, object-oriented, scripting language 8.8 0.0264 None reported
High CVE-2021-33621 ruby: Ruby is an extensible, interpreted, object-oriented, scripting language 8.8 0.0245 None reported
High CVE-2023-28756 ruby: Ruby is an extensible, interpreted, object-oriented, scripting language 8.8 0.0245 None reported
Showing 1 to 4 of 4 1