RHSA-2020:2769HighCVSS 7.2

Red Hat Security Advisory: ruby security update

Published
June 30, 2020
Last Modified
June 26, 2026

🔗 CVE IDs covered (6)

CVE-2018-16396 →CVE-2019-8321 →CVE-2019-8322 →CVE-2019-8323 →CVE-2019-8324 →CVE-2019-8325 →

📋 Description

CVE-2018-16396 — ruby: Tainted flags are not propagated in Array#pack and String#unpack with some directives CVE-2019-8321 — rubygems: Escape sequence injection vulnerability in verbose CVE-2019-8322 — rubygems: Escape sequence injection vulnerability in gem owner CVE-2019-8323 — rubygems: Escape sequence injection vulnerability in API response handling CVE-2019-8324 — rubygems: Installing a malicious gem may lead to arbitrary code execution CVE-2019-8325 — rubygems: Escape sequence injection vulnerability in errors

🔗 References (9)