What is RHBA-2019:3384?

RHBA-2019:3384 is a security advisory published by Red Hat Product Security with Medium severity. Red Hat Bug Fix Advisory: ruby:2.5 bug fix and enhancement update

Which CVE IDs does RHBA-2019:3384 cover?

RHBA-2019:3384 covers the following CVE IDs: CVE-2019-8325, CVE-2019-8320, CVE-2019-8321, CVE-2019-8322, CVE-2019-8323. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of RHBA-2019:3384?

RHBA-2019:3384 has a CVSS v3 base score of 7.4, published by Red Hat Product Security.

RHBA-2019:3384MediumCVSS 7.4

Red Hat Bug Fix Advisory: ruby:2.5 bug fix and enhancement update

Vendor

Red Hat Product Security

Published

November 5, 2019

Last Modified

June 26, 2026

🔗 CVE IDs covered (5)

CVE-2019-8325 →CVE-2019-8320 →CVE-2019-8321 →CVE-2019-8322 →CVE-2019-8323 →

📋 Description

CVE-2019-8320 — rubygems: Delete directory using symlink when decompressing tar CVE-2019-8321 — rubygems: Escape sequence injection vulnerability in verbose CVE-2019-8322 — rubygems: Escape sequence injection vulnerability in gem owner CVE-2019-8323 — rubygems: Escape sequence injection vulnerability in API response handling CVE-2019-8325 — rubygems: Escape sequence injection vulnerability in errors

🔗 References (4)

selfhttps://access.redhat.com/errata/RHBA-2019:3384
externalhttps://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.1_release_notes/
externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1719647
selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2019/rhba-2019_3384.json