Security Vulnerabilities fixed in rubygems RHSA-2019:1235

Description

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. Security Fix(es): * rubygems: Installing a malicious gem may lead to arbitrary code execution (CVE-2019-8324) * rubygems: Escape sequence injection vulnerability in gem owner (CVE-2019-8322) * rubygems: Escape sequence injection vulnerability in API response handling (CVE-2019-8323) * rubygems: Escape sequence injection vulnerability in errors (CVE-2019-8325) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected Applications

rubygems

CVE References

CVE-2019-8322 CVE-2019-8323 CVE-2019-8324 CVE-2019-8325

Other References

https://access.redhat.com/errata/RHSA-2019:1235