Linux · Security advisory · June 11, 2024
RHSA-2024:3838: Security update for 22 packages
RHSA-2024:3838, released June 11, 2024, fixes 6 CVEs across 22 products. None of them is reported as exploited. Patch Radar priority: Urgent.
Urgent
CVEs closed
6
1 rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0264
85th percentile
Priority of the 6 CVEs
Patch now 0
Urgent 1
High 3
Routine 2
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| ruby | RHEL 9 | 0:3.0.7-162.el9_4 |
| ruby-default-gems | RHEL 9 | 0:3.0.7-162.el9_4 |
| ruby-devel | RHEL 9 | 0:3.0.7-162.el9_4 |
| ruby-doc | RHEL 9 | 0:3.0.7-162.el9_4 |
| ruby-libs | RHEL 9 | 0:3.0.7-162.el9_4 |
| rubygem-bigdecimal | RHEL 9 | 0:3.0.0-162.el9_4 |
| rubygem-bundler | RHEL 9 | 0:2.2.33-162.el9_4 |
| rubygem-io-console | RHEL 9 | 0:0.5.7-162.el9_4 |
| rubygem-irb | RHEL 9 | 0:1.3.5-162.el9_4 |
| rubygem-json | RHEL 9 | 0:2.5.1-162.el9_4 |
| rubygem-minitest | RHEL 9 | 0:5.14.2-162.el9_4 |
| rubygem-power_assert | RHEL 9 | 0:1.2.1-162.el9_4 |
| rubygem-psych | RHEL 9 | 0:3.3.2-162.el9_4 |
| rubygem-rake | RHEL 9 | 0:13.0.3-162.el9_4 |
| rubygem-rbs | RHEL 9 | 0:1.4.0-162.el9_4 |
| rubygem-rdoc | RHEL 9 | 0:6.3.4.1-162.el9_4 |
| rubygem-rexml | RHEL 9 | 0:3.2.5-162.el9_4 |
| rubygem-rss | RHEL 9 | 0:0.2.9-162.el9_4 |
| rubygem-test-unit | RHEL 9 | 0:3.3.7-162.el9_4 |
| rubygem-typeprof | RHEL 9 | 0:0.15.2-162.el9_4 |
| rubygems | RHEL 9 | 0:3.2.33-162.el9_4 |
| rubygems-devel | RHEL 9 | 0:3.2.33-162.el9_4 |
CVEs this fix closes
| Priority | CVE | Title | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Urgent | CVE-2024-27280 | Ruby: Processing a file may lead to a denial-of-service or potentially disclose memory contents | 9.8 | 0.0236 | None reported | |
| High | CVE-2023-28755 | ruby: Ruby is an extensible, interpreted, object-oriented, scripting language | 8.8 | 0.0264 | None reported | |
| High | CVE-2021-33621 | ruby: Ruby is an extensible, interpreted, object-oriented, scripting language | 8.8 | 0.0245 | None reported | |
| High | CVE-2023-28756 | ruby: Ruby is an extensible, interpreted, object-oriented, scripting language | 8.8 | 0.0245 | None reported | |
| Routine | CVE-2024-27281 | ruby: Ruby is an extensible, interpreted, object-oriented, scripting language | 6.6 | 0.0157 | None reported | |
| Routine | CVE-2024-27282 | ruby: Ruby is an extensible, interpreted, object-oriented, scripting language | 6.6 | 0.0066 | None reported |
Showing 1 to 6 of 6
1