Linux · Security advisory · April 1, 2024

RHSA-2024:1576: Security update for 27 packages

RHSA-2024:1576, released April 1, 2024, fixes 4 CVEs across 27 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
4
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0264
85th percentile

Priority of the 4 CVEs

Patch now 0 Urgent 0 High 4 Routine 0

Fixed package versions

ProductReleaseFixed in
rubyRHEL 90:3.1.4-143.module+el9.3.0+21558+96b51efd
ruby-bundled-gemsRHEL 90:3.1.4-143.module+el9.3.0+21558+96b51efd
ruby-default-gemsRHEL 90:3.1.4-143.module+el9.3.0+21558+96b51efd
ruby-develRHEL 90:3.1.4-143.module+el9.3.0+21558+96b51efd
ruby-docRHEL 90:3.1.4-143.module+el9.3.0+21558+96b51efd
ruby-libsRHEL 90:3.1.4-143.module+el9.3.0+21558+96b51efd
rubygem-bigdecimalRHEL 90:3.1.1-143.module+el9.3.0+21558+96b51efd
rubygem-bundlerRHEL 90:2.3.26-143.module+el9.3.0+21558+96b51efd
rubygem-io-consoleRHEL 90:0.5.11-143.module+el9.3.0+21558+96b51efd
rubygem-irbRHEL 90:1.4.1-143.module+el9.3.0+21558+96b51efd
rubygem-jsonRHEL 90:2.6.1-143.module+el9.3.0+21558+96b51efd
rubygem-minitestRHEL 90:5.15.0-143.module+el9.3.0+21558+96b51efd
rubygem-mysql2RHEL 90:0.5.4-1.module+el9.1.0+15737+76195479
rubygem-mysql2-docRHEL 90:0.5.4-1.module+el9.1.0+15737+76195479
rubygem-pgRHEL 90:1.3.5-1.module+el9.1.0+15737+76195479
rubygem-pg-docRHEL 90:1.3.5-1.module+el9.1.0+15737+76195479
rubygem-power_assertRHEL 90:2.0.1-143.module+el9.3.0+21558+96b51efd
rubygem-psychRHEL 90:4.0.4-143.module+el9.3.0+21558+96b51efd
rubygem-rakeRHEL 90:13.0.6-143.module+el9.3.0+21558+96b51efd
rubygem-rbsRHEL 90:2.7.0-143.module+el9.3.0+21558+96b51efd
rubygem-rdocRHEL 90:6.4.0-143.module+el9.3.0+21558+96b51efd
rubygem-rexmlRHEL 90:3.2.5-143.module+el9.3.0+21558+96b51efd
rubygem-rssRHEL 90:0.2.9-143.module+el9.3.0+21558+96b51efd
rubygem-test-unitRHEL 90:3.5.3-143.module+el9.3.0+21558+96b51efd
rubygem-typeprofRHEL 90:0.21.3-143.module+el9.3.0+21558+96b51efd
rubygemsRHEL 90:3.3.26-143.module+el9.3.0+21558+96b51efd
rubygems-develRHEL 90:3.3.26-143.module+el9.3.0+21558+96b51efd

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2023-28755 ruby: Ruby is an extensible, interpreted, object-oriented, scripting language 8.8 0.0264 None reported
High CVE-2021-33621 ruby: Ruby is an extensible, interpreted, object-oriented, scripting language 8.8 0.0245 None reported
High CVE-2023-28756 ruby: Ruby is an extensible, interpreted, object-oriented, scripting language 8.8 0.0245 None reported
High CVE-2023-36617 ruby: Ruby is an extensible, interpreted, object-oriented, scripting language 8.8 0.0170 None reported
Showing 1 to 4 of 4 1