Moderate: ruby:3.3 security, bug fix, and enhancement update

2024-06-0600:00:00

errata.almalinux.org

ruby

interpreted

object-oriented

scripting

text files

system management

upgrade

security

bug fix

enhancement

vulnerability

cvss

cve

unix

7 High

AI Score

Confidence

High

0 Low

EPSS

Percentile

0.0%

JSON

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.

The following packages have been upgraded to a later upstream version: ruby (3.3). (AlmaLinux-37446)

Security Fix(es):

ruby: Buffer overread vulnerability in StringIO (CVE-2024-27280)
ruby: RCE vulnerability with .rdoc_options in RDoc (CVE-2024-27281)
ruby: Arbitrary memory address read vulnerability with Regex search
(CVE-2024-27282)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
almalinux8i686rubygem-bigdecimal< 3.1.5-2.module_el8.10.0+3855+767cb125rubygem-bigdecimal-3.1.5-2.module_el8.10.0+3855+767cb125.i686.rpm
almalinux8i686rubygem-json< 2.7.1-2.module_el8.10.0+3855+767cb125rubygem-json-2.7.1-2.module_el8.10.0+3855+767cb125.i686.rpm
almalinux8i686rubygem-rbs< 3.4.0-2.module_el8.10.0+3855+767cb125rubygem-rbs-3.4.0-2.module_el8.10.0+3855+767cb125.i686.rpm
almalinux8i686ruby-libs< 3.3.1-2.module_el8.10.0+3855+767cb125ruby-libs-3.3.1-2.module_el8.10.0+3855+767cb125.i686.rpm
almalinux8i686rubygem-psych< 5.1.2-2.module_el8.10.0+3855+767cb125rubygem-psych-5.1.2-2.module_el8.10.0+3855+767cb125.i686.rpm
almalinux8noarchrubygem-rake< 13.1.0-2.module_el8.10.0+3855+767cb125rubygem-rake-13.1.0-2.module_el8.10.0+3855+767cb125.noarch.rpm
almalinux8noarchrubygem-rss< 0.3.0-2.module_el8.10.0+3855+767cb125rubygem-rss-0.3.0-2.module_el8.10.0+3855+767cb125.noarch.rpm
almalinux8noarchrubygems< 3.5.9-2.module_el8.10.0+3855+767cb125rubygems-3.5.9-2.module_el8.10.0+3855+767cb125.noarch.rpm
almalinux8noarchrubygem-test-unit< 3.6.1-2.module_el8.10.0+3855+767cb125rubygem-test-unit-3.6.1-2.module_el8.10.0+3855+767cb125.noarch.rpm
almalinux8noarchrubygem-irb< 1.11.0-2.module_el8.10.0+3855+767cb125rubygem-irb-1.11.0-2.module_el8.10.0+3855+767cb125.noarch.rpm

OS	Version	Architecture	Package	Version	Filename
almalinux	8	i686	rubygem-bigdecimal	< 3.1.5-2.module_el8.10.0+3855+767cb125	rubygem-bigdecimal-3.1.5-2.module_el8.10.0+3855+767cb125.i686.rpm
almalinux	8	i686	rubygem-json	< 2.7.1-2.module_el8.10.0+3855+767cb125	rubygem-json-2.7.1-2.module_el8.10.0+3855+767cb125.i686.rpm
almalinux	8	i686	rubygem-rbs	< 3.4.0-2.module_el8.10.0+3855+767cb125	rubygem-rbs-3.4.0-2.module_el8.10.0+3855+767cb125.i686.rpm
almalinux	8	i686	ruby-libs	< 3.3.1-2.module_el8.10.0+3855+767cb125	ruby-libs-3.3.1-2.module_el8.10.0+3855+767cb125.i686.rpm
almalinux	8	i686	rubygem-psych	< 5.1.2-2.module_el8.10.0+3855+767cb125	rubygem-psych-5.1.2-2.module_el8.10.0+3855+767cb125.i686.rpm
almalinux	8	noarch	rubygem-rake	< 13.1.0-2.module_el8.10.0+3855+767cb125	rubygem-rake-13.1.0-2.module_el8.10.0+3855+767cb125.noarch.rpm
almalinux	8	noarch	rubygem-rss	< 0.3.0-2.module_el8.10.0+3855+767cb125	rubygem-rss-0.3.0-2.module_el8.10.0+3855+767cb125.noarch.rpm
almalinux	8	noarch	rubygems	< 3.5.9-2.module_el8.10.0+3855+767cb125	rubygems-3.5.9-2.module_el8.10.0+3855+767cb125.noarch.rpm
almalinux	8	noarch	rubygem-test-unit	< 3.6.1-2.module_el8.10.0+3855+767cb125	rubygem-test-unit-3.6.1-2.module_el8.10.0+3855+767cb125.noarch.rpm
almalinux	8	noarch	rubygem-irb	< 1.11.0-2.module_el8.10.0+3855+767cb125	rubygem-irb-1.11.0-2.module_el8.10.0+3855+767cb125.noarch.rpm