RHSA-2021:2587

See a problem?
Please try reporting it to the source first.

Source

https://access.redhat.com/errata/RHSA-2021:2587

Import Source

https://security.access.redhat.com/data/osv/RHSA-2021:2587.json

JSON Data

https://api.test.osv.dev/v1/vulns/RHSA-2021:2587

Upstream

CVE-2019-15845

CVE-2019-16201

CVE-2019-16254

CVE-2019-16255

CVE-2020-10663

CVE-2020-10933

CVE-2020-25613

CVE-2021-28965

Published

2024-10-21T23:26:42Z

Modified

2025-09-11T11:40:07Z

Severity

8.1 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator

Summary

Red Hat Security Advisory: ruby:2.5 security, bug fix, and enhancement update

Details

References

Affected packages

Red Hat:enterprise_linux:8::appstream

ruby-2.5.9

Package

Name: ruby-2.5.9
Purl: pkg:rpm/redhat/ruby

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

107.module+el8.4.0+10822+fe4fffb1.x86_64.rpm-ruby:2

ruby-debuginfo-2.5.9

Package

Name: ruby-debuginfo-2.5.9
Purl: pkg:rpm/redhat/ruby-debuginfo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

107.module+el8.4.0+10822+fe4fffb1.x86_64.rpm-ruby:2

ruby-debugsource-2.5.9

Package

Name: ruby-debugsource-2.5.9
Purl: pkg:rpm/redhat/ruby-debugsource

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

107.module+el8.4.0+10822+fe4fffb1.x86_64.rpm-ruby:2

ruby-devel-2.5.9

Package

Name: ruby-devel-2.5.9
Purl: pkg:rpm/redhat/ruby-devel

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

107.module+el8.4.0+10822+fe4fffb1.x86_64.rpm-ruby:2

ruby-doc-2.5.9

Package

Name: ruby-doc-2.5.9
Purl: pkg:rpm/redhat/ruby-doc

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

107.module+el8.4.0+10822+fe4fffb1.noarch.rpm-ruby:2

ruby-irb-2.5.9

Package

Name: ruby-irb-2.5.9
Purl: pkg:rpm/redhat/ruby-irb

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

107.module+el8.4.0+10822+fe4fffb1.noarch.rpm-ruby:2

ruby-libs-2.5.9

Package

Name: ruby-libs-2.5.9
Purl: pkg:rpm/redhat/ruby-libs

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

107.module+el8.4.0+10822+fe4fffb1.x86_64.rpm-ruby:2

ruby-libs-debuginfo-2.5.9

Package

Name: ruby-libs-debuginfo-2.5.9
Purl: pkg:rpm/redhat/ruby-libs-debuginfo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

107.module+el8.4.0+10822+fe4fffb1.x86_64.rpm-ruby:2

rubygem-abrt-0.3.0

Package

Name: rubygem-abrt-0.3.0
Purl: pkg:rpm/redhat/rubygem-abrt

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.module+el8.1.0+3656+f80bfa1d.src.rpm-ruby:2

rubygem-abrt-doc-0.3.0

Package

Name: rubygem-abrt-doc-0.3.0
Purl: pkg:rpm/redhat/rubygem-abrt-doc

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.module+el8.1.0+3656+f80bfa1d.noarch.rpm-ruby:2

rubygem-bigdecimal-1.3.4

Package

Name: rubygem-bigdecimal-1.3.4
Purl: pkg:rpm/redhat/rubygem-bigdecimal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

107.module+el8.4.0+10822+fe4fffb1.x86_64.rpm-ruby:2

rubygem-bigdecimal-debuginfo-1.3.4

Package

Name: rubygem-bigdecimal-debuginfo-1.3.4
Purl: pkg:rpm/redhat/rubygem-bigdecimal-debuginfo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

107.module+el8.4.0+10822+fe4fffb1.x86_64.rpm-ruby:2

rubygem-bson-4.3.0

Package

Name: rubygem-bson-4.3.0
Purl: pkg:rpm/redhat/rubygem-bson

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.module+el8.1.0+3656+f80bfa1d.x86_64.rpm-ruby:2

rubygem-bson-debuginfo-4.3.0

Package

Name: rubygem-bson-debuginfo-4.3.0
Purl: pkg:rpm/redhat/rubygem-bson-debuginfo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.module+el8.1.0+3656+f80bfa1d.x86_64.rpm-ruby:2

rubygem-bson-debugsource-4.3.0

Package

Name: rubygem-bson-debugsource-4.3.0
Purl: pkg:rpm/redhat/rubygem-bson-debugsource

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.module+el8.1.0+3656+f80bfa1d.x86_64.rpm-ruby:2

rubygem-bson-doc-4.3.0

Package

Name: rubygem-bson-doc-4.3.0
Purl: pkg:rpm/redhat/rubygem-bson-doc

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.module+el8.1.0+3656+f80bfa1d.noarch.rpm-ruby:2

rubygem-bundler-1.16.1

Package

Name: rubygem-bundler-1.16.1
Purl: pkg:rpm/redhat/rubygem-bundler

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

3.module+el8.1.0+3656+f80bfa1d.src.rpm-ruby:2

rubygem-bundler-doc-1.16.1

Package

Name: rubygem-bundler-doc-1.16.1
Purl: pkg:rpm/redhat/rubygem-bundler-doc

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

3.module+el8.1.0+3656+f80bfa1d.noarch.rpm-ruby:2

rubygem-did_you_mean-1.2.0

Package

Name: rubygem-did_you_mean-1.2.0
Purl: pkg:rpm/redhat/rubygem-did_you_mean

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

107.module+el8.4.0+10822+fe4fffb1.noarch.rpm-ruby:2

rubygem-io-console-0.4.6

Package

Name: rubygem-io-console-0.4.6
Purl: pkg:rpm/redhat/rubygem-io-console

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

107.module+el8.4.0+10822+fe4fffb1.x86_64.rpm-ruby:2

rubygem-io-console-debuginfo-0.4.6

Package

Name: rubygem-io-console-debuginfo-0.4.6
Purl: pkg:rpm/redhat/rubygem-io-console-debuginfo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

107.module+el8.4.0+10822+fe4fffb1.x86_64.rpm-ruby:2

rubygem-json-2.1.0

Package

Name: rubygem-json-2.1.0
Purl: pkg:rpm/redhat/rubygem-json

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

107.module+el8.4.0+10822+fe4fffb1.x86_64.rpm-ruby:2

rubygem-json-debuginfo-2.1.0

Package

Name: rubygem-json-debuginfo-2.1.0
Purl: pkg:rpm/redhat/rubygem-json-debuginfo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

107.module+el8.4.0+10822+fe4fffb1.x86_64.rpm-ruby:2

rubygem-minitest-5.10.3

Package

Name: rubygem-minitest-5.10.3
Purl: pkg:rpm/redhat/rubygem-minitest

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

107.module+el8.4.0+10822+fe4fffb1.noarch.rpm-ruby:2

rubygem-mongo-2.5.1

Package

Name: rubygem-mongo-2.5.1
Purl: pkg:rpm/redhat/rubygem-mongo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.module+el8.1.0+3656+f80bfa1d.src.rpm-ruby:2

rubygem-mongo-doc-2.5.1

Package

Name: rubygem-mongo-doc-2.5.1
Purl: pkg:rpm/redhat/rubygem-mongo-doc

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.module+el8.1.0+3656+f80bfa1d.noarch.rpm-ruby:2

rubygem-mysql2-0.4.10

Package

Name: rubygem-mysql2-0.4.10
Purl: pkg:rpm/redhat/rubygem-mysql2

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.module+el8.1.0+3656+f80bfa1d.x86_64.rpm-ruby:2

rubygem-mysql2-debuginfo-0.4.10

Package

Name: rubygem-mysql2-debuginfo-0.4.10
Purl: pkg:rpm/redhat/rubygem-mysql2-debuginfo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.module+el8.1.0+3656+f80bfa1d.x86_64.rpm-ruby:2

rubygem-mysql2-debugsource-0.4.10

Package

Name: rubygem-mysql2-debugsource-0.4.10
Purl: pkg:rpm/redhat/rubygem-mysql2-debugsource

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.module+el8.1.0+3656+f80bfa1d.x86_64.rpm-ruby:2

rubygem-mysql2-doc-0.4.10

Package

Name: rubygem-mysql2-doc-0.4.10
Purl: pkg:rpm/redhat/rubygem-mysql2-doc

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.module+el8.1.0+3656+f80bfa1d.noarch.rpm-ruby:2

rubygem-net-telnet-0.1.1

Package

Name: rubygem-net-telnet-0.1.1
Purl: pkg:rpm/redhat/rubygem-net-telnet

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

107.module+el8.4.0+10822+fe4fffb1.noarch.rpm-ruby:2

rubygem-openssl-2.1.2

Package

Name: rubygem-openssl-2.1.2
Purl: pkg:rpm/redhat/rubygem-openssl

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

107.module+el8.4.0+10822+fe4fffb1.x86_64.rpm-ruby:2

rubygem-openssl-debuginfo-2.1.2

Package

Name: rubygem-openssl-debuginfo-2.1.2
Purl: pkg:rpm/redhat/rubygem-openssl-debuginfo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

107.module+el8.4.0+10822+fe4fffb1.x86_64.rpm-ruby:2

rubygem-pg-1.0.0

Package

Name: rubygem-pg-1.0.0
Purl: pkg:rpm/redhat/rubygem-pg

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.module+el8.1.0+3656+f80bfa1d.x86_64.rpm-ruby:2

rubygem-pg-debuginfo-1.0.0

Package

Name: rubygem-pg-debuginfo-1.0.0
Purl: pkg:rpm/redhat/rubygem-pg-debuginfo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.module+el8.1.0+3656+f80bfa1d.x86_64.rpm-ruby:2

rubygem-pg-debugsource-1.0.0

Package

Name: rubygem-pg-debugsource-1.0.0
Purl: pkg:rpm/redhat/rubygem-pg-debugsource

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.module+el8.1.0+3656+f80bfa1d.x86_64.rpm-ruby:2

rubygem-pg-doc-1.0.0

Package

Name: rubygem-pg-doc-1.0.0
Purl: pkg:rpm/redhat/rubygem-pg-doc

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.module+el8.1.0+3656+f80bfa1d.noarch.rpm-ruby:2

rubygem-power_assert-1.1.1

Package

Name: rubygem-power_assert-1.1.1
Purl: pkg:rpm/redhat/rubygem-power_assert

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

107.module+el8.4.0+10822+fe4fffb1.noarch.rpm-ruby:2

rubygem-psych-3.0.2

Package

Name: rubygem-psych-3.0.2
Purl: pkg:rpm/redhat/rubygem-psych

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

107.module+el8.4.0+10822+fe4fffb1.x86_64.rpm-ruby:2

rubygem-psych-debuginfo-3.0.2

Package

Name: rubygem-psych-debuginfo-3.0.2
Purl: pkg:rpm/redhat/rubygem-psych-debuginfo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

107.module+el8.4.0+10822+fe4fffb1.x86_64.rpm-ruby:2

rubygem-rake-12.3.3

Package

Name: rubygem-rake-12.3.3
Purl: pkg:rpm/redhat/rubygem-rake

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

107.module+el8.4.0+10822+fe4fffb1.noarch.rpm-ruby:2

rubygem-rdoc-6.0.1.1

Package

Name: rubygem-rdoc-6.0.1.1
Purl: pkg:rpm/redhat/rubygem-rdoc

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

107.module+el8.4.0+10822+fe4fffb1.noarch.rpm-ruby:2

rubygem-test-unit-3.2.7

Package

Name: rubygem-test-unit-3.2.7
Purl: pkg:rpm/redhat/rubygem-test-unit

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

107.module+el8.4.0+10822+fe4fffb1.noarch.rpm-ruby:2

rubygem-xmlrpc-0.3.0

Package

Name: rubygem-xmlrpc-0.3.0
Purl: pkg:rpm/redhat/rubygem-xmlrpc

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

107.module+el8.4.0+10822+fe4fffb1.noarch.rpm-ruby:2

rubygems-2.7.6.3

Package

Name: rubygems-2.7.6.3
Purl: pkg:rpm/redhat/rubygems

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

107.module+el8.4.0+10822+fe4fffb1.noarch.rpm-ruby:2

rubygems-devel-2.7.6.3

Package

Name: rubygems-devel-2.7.6.3
Purl: pkg:rpm/redhat/rubygems-devel

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

107.module+el8.4.0+10822+fe4fffb1.noarch.rpm-ruby:2