Skip to content
OpenAdvisories
High RHSA-2019:1151 1 CVE

Red Hat Security Advisory: rh-ruby23-ruby security update

Published Sep 13, 2024 · Updated Jun 28, 2026

Ecosystem: Red Hat

Fixed packages 40

ReleasePackageFixed in
Red Hat · RHEL 3 rhel_software_collections:3::el6 rh-ruby23-ruby 0:2.3.8-70.el6
Red Hat · RHEL 3 rhel_software_collections:3::el6 rh-ruby23-ruby-debuginfo 0:2.3.8-70.el6
Red Hat · RHEL 3 rhel_software_collections:3::el6 rh-ruby23-ruby-devel 0:2.3.8-70.el6
Red Hat · RHEL 3 rhel_software_collections:3::el6 rh-ruby23-ruby-doc 0:2.3.8-70.el6
Red Hat · RHEL 3 rhel_software_collections:3::el6 rh-ruby23-ruby-irb 0:2.3.8-70.el6
Red Hat · RHEL 3 rhel_software_collections:3::el6 rh-ruby23-ruby-libs 0:2.3.8-70.el6
Red Hat · RHEL 3 rhel_software_collections:3::el6 rh-ruby23-ruby-tcltk 0:2.3.8-70.el6
Red Hat · RHEL 3 rhel_software_collections:3::el6 rh-ruby23-rubygem-bigdecimal 0:1.2.8-70.el6
Red Hat · RHEL 3 rhel_software_collections:3::el6 rh-ruby23-rubygem-did_you_mean 0:1.0.0-70.el6
Red Hat · RHEL 3 rhel_software_collections:3::el6 rh-ruby23-rubygem-io-console 0:0.4.5-70.el6
Red Hat · RHEL 3 rhel_software_collections:3::el6 rh-ruby23-rubygem-json 0:1.8.3.1-70.el6
Red Hat · RHEL 3 rhel_software_collections:3::el6 rh-ruby23-rubygem-minitest 0:5.8.5-70.el6
Red Hat · RHEL 3 rhel_software_collections:3::el6 rh-ruby23-rubygem-net-telnet 0:0.1.1-70.el6
Red Hat · RHEL 3 rhel_software_collections:3::el6 rh-ruby23-rubygem-power_assert 0:0.2.6-70.el6
Red Hat · RHEL 3 rhel_software_collections:3::el6 rh-ruby23-rubygem-psych 0:2.1.0.1-70.el6
Red Hat · RHEL 3 rhel_software_collections:3::el6 rh-ruby23-rubygem-rake 0:10.4.2-70.el6
Red Hat · RHEL 3 rhel_software_collections:3::el6 rh-ruby23-rubygem-rdoc 0:4.2.1-70.el6
Red Hat · RHEL 3 rhel_software_collections:3::el6 rh-ruby23-rubygem-test-unit 0:3.1.5-70.el6
Red Hat · RHEL 3 rhel_software_collections:3::el6 rh-ruby23-rubygems 0:2.5.2.3-70.el6
Red Hat · RHEL 3 rhel_software_collections:3::el6 rh-ruby23-rubygems-devel 0:2.5.2.3-70.el6
Red Hat · RHEL 3 rhel_software_collections:3::el7 rh-ruby23-ruby 0:2.3.8-70.el7
Red Hat · RHEL 3 rhel_software_collections:3::el7 rh-ruby23-ruby-debuginfo 0:2.3.8-70.el7
Red Hat · RHEL 3 rhel_software_collections:3::el7 rh-ruby23-ruby-devel 0:2.3.8-70.el7
Red Hat · RHEL 3 rhel_software_collections:3::el7 rh-ruby23-ruby-doc 0:2.3.8-70.el7
Red Hat · RHEL 3 rhel_software_collections:3::el7 rh-ruby23-ruby-irb 0:2.3.8-70.el7
Red Hat · RHEL 3 rhel_software_collections:3::el7 rh-ruby23-ruby-libs 0:2.3.8-70.el7
Red Hat · RHEL 3 rhel_software_collections:3::el7 rh-ruby23-ruby-tcltk 0:2.3.8-70.el7
Red Hat · RHEL 3 rhel_software_collections:3::el7 rh-ruby23-rubygem-bigdecimal 0:1.2.8-70.el7
Red Hat · RHEL 3 rhel_software_collections:3::el7 rh-ruby23-rubygem-did_you_mean 0:1.0.0-70.el7
Red Hat · RHEL 3 rhel_software_collections:3::el7 rh-ruby23-rubygem-io-console 0:0.4.5-70.el7
Red Hat · RHEL 3 rhel_software_collections:3::el7 rh-ruby23-rubygem-json 0:1.8.3.1-70.el7
Red Hat · RHEL 3 rhel_software_collections:3::el7 rh-ruby23-rubygem-minitest 0:5.8.5-70.el7
Red Hat · RHEL 3 rhel_software_collections:3::el7 rh-ruby23-rubygem-net-telnet 0:0.1.1-70.el7
Red Hat · RHEL 3 rhel_software_collections:3::el7 rh-ruby23-rubygem-power_assert 0:0.2.6-70.el7
Red Hat · RHEL 3 rhel_software_collections:3::el7 rh-ruby23-rubygem-psych 0:2.1.0.1-70.el7
Red Hat · RHEL 3 rhel_software_collections:3::el7 rh-ruby23-rubygem-rake 0:10.4.2-70.el7
Red Hat · RHEL 3 rhel_software_collections:3::el7 rh-ruby23-rubygem-rdoc 0:4.2.1-70.el7
Red Hat · RHEL 3 rhel_software_collections:3::el7 rh-ruby23-rubygem-test-unit 0:3.1.5-70.el7
Red Hat · RHEL 3 rhel_software_collections:3::el7 rh-ruby23-rubygems 0:2.5.2.3-70.el7
Red Hat · RHEL 3 rhel_software_collections:3::el7 rh-ruby23-rubygems-devel 0:2.5.2.3-70.el7

Vulnerabilities 1

  • High 8.8
    CVE-2019-8324

    Code injection in RubyGems

    An issue was discovered in RubyGems 2.6 and later through 3.0.2. A crafted gem with a multi-line name is not handled correctly. Therefore, an attacker could inject arbitrary code to the stub line of gemspec, which is eval-ed by code in ensure_loadable_spec du…

    ruby2.3 ruby ruby2.5 jruby Debian Ubuntu Alpine RubyGems

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1692520
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_1151.json
  • report
    https://access.redhat.com/security/cve/CVE-2019-8324
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2019-8324
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2019-8324
  • article
    https://blog.rubygems.org/2019/03/05/security-advisories-2019-03.html
  • article
    https://www.ruby-lang.org/en/news/2019/03/05/multiple-vulnerabilities-in-rubygems/