ruby:2.5 security update

2019-08-0500:00:00

linux.oracle.com

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

JSON

ruby
[2.5.3-104]

Prohibit arbitrary code execution when installing a malicious gem.
Resolves: CVE-2019-8324
rubygem-mongo
[2.5.1-2]
Disable tests to fix FTBFS by dropped MongoDB module.
Resolves: rhbz#1710863
rubygem-pg
[1.0.0-2]
Assign a random testing port.

OSVersionArchitecturePackageVersionFilename
oracle linux8srcruby< 2.5.3-104.moduleruby-2.5.3-104.module+el8.0.0+5238+4f9ac61b.src.rpm
oracle linux8srcrubygem-abrt< 0.3.0-4.modulerubygem-abrt-0.3.0-4.module+el8.0.0+5238+4f9ac61b.src.rpm
oracle linux8srcrubygem-bson< 4.3.0-2.modulerubygem-bson-4.3.0-2.module+el8.0.0+5238+4f9ac61b.src.rpm
oracle linux8srcrubygem-bundler< 1.16.1-3.modulerubygem-bundler-1.16.1-3.module+el8.0.0+5238+4f9ac61b.src.rpm
oracle linux8srcrubygem-mongo< 2.5.1-2.modulerubygem-mongo-2.5.1-2.module+el8.0.0+5238+4f9ac61b.src.rpm
oracle linux8srcrubygem-mysql2< 0.4.10-4.modulerubygem-mysql2-0.4.10-4.module+el8.0.0+5238+4f9ac61b.src.rpm
oracle linux8srcrubygem-pg< 1.0.0-2.modulerubygem-pg-1.0.0-2.module+el8.0.0+5238+4f9ac61b.src.rpm
oracle linux8aarch64ruby< 2.5.3-104.moduleruby-2.5.3-104.module+el8.0.0+5238+4f9ac61b.aarch64.rpm
oracle linux8aarch64ruby-devel< 2.5.3-104.moduleruby-devel-2.5.3-104.module+el8.0.0+5238+4f9ac61b.aarch64.rpm
oracle linux8noarchruby-doc< 2.5.3-104.moduleruby-doc-2.5.3-104.module+el8.0.0+5238+4f9ac61b.noarch.rpm

OS	Version	Architecture	Package	Version	Filename
oracle linux	8	src	ruby	< 2.5.3-104.module	ruby-2.5.3-104.module+el8.0.0+5238+4f9ac61b.src.rpm
oracle linux	8	src	rubygem-abrt	< 0.3.0-4.module	rubygem-abrt-0.3.0-4.module+el8.0.0+5238+4f9ac61b.src.rpm
oracle linux	8	src	rubygem-bson	< 4.3.0-2.module	rubygem-bson-4.3.0-2.module+el8.0.0+5238+4f9ac61b.src.rpm
oracle linux	8	src	rubygem-bundler	< 1.16.1-3.module	rubygem-bundler-1.16.1-3.module+el8.0.0+5238+4f9ac61b.src.rpm
oracle linux	8	src	rubygem-mongo	< 2.5.1-2.module	rubygem-mongo-2.5.1-2.module+el8.0.0+5238+4f9ac61b.src.rpm
oracle linux	8	src	rubygem-mysql2	< 0.4.10-4.module	rubygem-mysql2-0.4.10-4.module+el8.0.0+5238+4f9ac61b.src.rpm
oracle linux	8	src	rubygem-pg	< 1.0.0-2.module	rubygem-pg-1.0.0-2.module+el8.0.0+5238+4f9ac61b.src.rpm
oracle linux	8	aarch64	ruby	< 2.5.3-104.module	ruby-2.5.3-104.module+el8.0.0+5238+4f9ac61b.aarch64.rpm
oracle linux	8	aarch64	ruby-devel	< 2.5.3-104.module	ruby-devel-2.5.3-104.module+el8.0.0+5238+4f9ac61b.aarch64.rpm
oracle linux	8	noarch	ruby-doc	< 2.5.3-104.module	ruby-doc-2.5.3-104.module+el8.0.0+5238+4f9ac61b.noarch.rpm