RHSA-2019:1148HighCVSS 7.4

Red Hat Security Advisory: rh-ruby25-ruby security, bug fix, and enhancement update

Published
May 13, 2019
Last Modified
June 26, 2026

🔗 CVE IDs covered (6)

CVE-2019-8325 →CVE-2019-8320 →CVE-2019-8321 →CVE-2019-8322 →CVE-2019-8323 →CVE-2019-8324 →

📋 Description

CVE-2019-8320 — rubygems: Delete directory using symlink when decompressing tar CVE-2019-8321 — rubygems: Escape sequence injection vulnerability in verbose CVE-2019-8322 — rubygems: Escape sequence injection vulnerability in gem owner CVE-2019-8323 — rubygems: Escape sequence injection vulnerability in API response handling CVE-2019-8324 — rubygems: Installing a malicious gem may lead to arbitrary code execution CVE-2019-8325 — rubygems: Escape sequence injection vulnerability in errors

🔗 References (10)