Linux · Security advisory · May 14, 2025

RHSA-2025:7539: Security update for 32 packages

RHSA-2025:7539, released May 14, 2025, fixes 2 CVEs across 32 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
2
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.1063
95th percentile

Priority of the 2 CVEs

Patch now 0 Urgent 0 High 2 Routine 0

Fixed package versions

ProductReleaseFixed in
rubyRHEL 80:2.5.9-114.module+el8.10.0+23088+750dc6ca
ruby-develRHEL 80:2.5.9-114.module+el8.10.0+23088+750dc6ca
ruby-docRHEL 80:2.5.9-114.module+el8.10.0+23088+750dc6ca
ruby-irbRHEL 80:2.5.9-114.module+el8.10.0+23088+750dc6ca
ruby-libsRHEL 80:2.5.9-114.module+el8.10.0+23088+750dc6ca
rubygem-abrtRHEL 80:0.3.0-4.module+el8.10.0+22021+135c76a8
rubygem-abrt-docRHEL 80:0.3.0-4.module+el8.10.0+22021+135c76a8
rubygem-bigdecimalRHEL 80:1.3.4-114.module+el8.10.0+23088+750dc6ca
rubygem-bsonRHEL 80:4.3.0-2.module+el8.9.0+19193+435404ae
rubygem-bson-docRHEL 80:4.3.0-2.module+el8.9.0+19193+435404ae
rubygem-bundlerRHEL 80:1.16.1-5.module+el8.10.0+23088+750dc6ca
rubygem-bundler-docRHEL 80:1.16.1-5.module+el8.10.0+23088+750dc6ca
rubygem-did_you_meanRHEL 80:1.2.0-114.module+el8.10.0+23088+750dc6ca
rubygem-io-consoleRHEL 80:0.4.6-114.module+el8.10.0+23088+750dc6ca
rubygem-jsonRHEL 80:2.1.0-114.module+el8.10.0+23088+750dc6ca
rubygem-minitestRHEL 80:5.10.3-114.module+el8.10.0+23088+750dc6ca
rubygem-mongoRHEL 80:2.5.1-2.module+el8.9.0+19193+435404ae
rubygem-mongo-docRHEL 80:2.5.1-2.module+el8.9.0+19193+435404ae
rubygem-mysql2RHEL 80:0.4.10-4.module+el8.9.0+19193+435404ae
rubygem-mysql2-docRHEL 80:0.4.10-4.module+el8.9.0+19193+435404ae
rubygem-net-telnetRHEL 80:0.1.1-114.module+el8.10.0+23088+750dc6ca
rubygem-opensslRHEL 80:2.1.2-114.module+el8.10.0+23088+750dc6ca
rubygem-pgRHEL 80:1.0.0-3.module+el8.9.0+19193+435404ae
rubygem-pg-docRHEL 80:1.0.0-3.module+el8.9.0+19193+435404ae
rubygem-power_assertRHEL 80:1.1.1-114.module+el8.10.0+23088+750dc6ca
rubygem-psychRHEL 80:3.0.2-114.module+el8.10.0+23088+750dc6ca
rubygem-rakeRHEL 80:12.3.3-114.module+el8.10.0+23088+750dc6ca
rubygem-rdocRHEL 80:6.0.1.1-114.module+el8.10.0+23088+750dc6ca
rubygem-test-unitRHEL 80:3.2.7-114.module+el8.10.0+23088+750dc6ca
rubygem-xmlrpcRHEL 80:0.3.0-114.module+el8.10.0+23088+750dc6ca
rubygemsRHEL 80:2.7.6.3-114.module+el8.10.0+23088+750dc6ca
rubygems-develRHEL 80:2.7.6.3-114.module+el8.10.0+23088+750dc6ca

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2019-19012 oniguruma: Oniguruma is a regular expressions library that supports a variety of character encodings 7.5 0.1063 None reported
High CVE-2021-43809 rubygem-bundler: This update for rubygem-bundler fixes the following issues: - CVE-2021-43809: Fixed remote execution via Gemfile arg... 7.5 0.0291 None reported
Showing 1 to 2 of 2 1