ruby:3.0 security update

2024-05-3100:00:00

linux.oracle.com

ruby 3.0.7

security update

zlib test failures

http response splitting

redos vulnerabilities

buffer overread

rce vulnerability

arbitrary memory address read vulnerability

rubygem-abrt

rubygem-mysql2

rubygem-pg

unix

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

7.1

Confidence

Low

EPSS

0.005

Percentile

77.3%

JSON

ruby
[3.0.7-143]

Fix Zlib test failures on s390x due to HW acceleration
Related: RHEL-36189
[3.0.7-142]
Upgrade to Ruby 3.0.7.
Resolves: RHEL-36189
Fix HTTP response splitting in CGI.
Resolves: RHEL-36193
Fix ReDoS vulnerability in URI.
Resolves: RHEL-36196
Fix ReDoS vulnerability in Time.
Resolves: RHEL-36205
Fix buffer overread vulnerability in StringIO.
Resolves: RHEL-36198
Fix RCE vulnerability with .rdoc_options in RDoc.
Resolves: RHEL-36200
Fix arbitrary memory address read vulnerability with Regex search.
Resolves: RHEL-36203
rubygem-abrt
rubygem-mysql2
rubygem-pg

OSVersionArchitecturePackageVersionFilename
oracle linux8srcruby< 3.0.7-143.moduleruby-3.0.7-143.module+el8.10.0+90343+d5e92a1d.src.rpm
oracle linux8srcrubygem-abrt< 0.4.0-1.modulerubygem-abrt-0.4.0-1.module+el8.10.0+90343+d5e92a1d.src.rpm
oracle linux8srcrubygem-mysql2< 0.5.3-2.modulerubygem-mysql2-0.5.3-2.module+el8.10.0+90343+d5e92a1d.src.rpm
oracle linux8srcrubygem-pg< 1.2.3-1.modulerubygem-pg-1.2.3-1.module+el8.10.0+90343+d5e92a1d.src.rpm
oracle linux8aarch64ruby< 3.0.7-143.moduleruby-3.0.7-143.module+el8.10.0+90343+d5e92a1d.aarch64.rpm
oracle linux8noarchruby-default-gems< 3.0.7-143.moduleruby-default-gems-3.0.7-143.module+el8.10.0+90343+d5e92a1d.noarch.rpm
oracle linux8aarch64ruby-devel< 3.0.7-143.moduleruby-devel-3.0.7-143.module+el8.10.0+90343+d5e92a1d.aarch64.rpm
oracle linux8noarchruby-doc< 3.0.7-143.moduleruby-doc-3.0.7-143.module+el8.10.0+90343+d5e92a1d.noarch.rpm
oracle linux8aarch64ruby-libs< 3.0.7-143.moduleruby-libs-3.0.7-143.module+el8.10.0+90343+d5e92a1d.aarch64.rpm
oracle linux8noarchrubygem-abrt< 0.4.0-1.modulerubygem-abrt-0.4.0-1.module+el8.10.0+90343+d5e92a1d.noarch.rpm

OS	Version	Architecture	Package	Version	Filename
oracle linux	8	src	ruby	< 3.0.7-143.module	ruby-3.0.7-143.module+el8.10.0+90343+d5e92a1d.src.rpm
oracle linux	8	src	rubygem-abrt	< 0.4.0-1.module	rubygem-abrt-0.4.0-1.module+el8.10.0+90343+d5e92a1d.src.rpm
oracle linux	8	src	rubygem-mysql2	< 0.5.3-2.module	rubygem-mysql2-0.5.3-2.module+el8.10.0+90343+d5e92a1d.src.rpm
oracle linux	8	src	rubygem-pg	< 1.2.3-1.module	rubygem-pg-1.2.3-1.module+el8.10.0+90343+d5e92a1d.src.rpm
oracle linux	8	aarch64	ruby	< 3.0.7-143.module	ruby-3.0.7-143.module+el8.10.0+90343+d5e92a1d.aarch64.rpm
oracle linux	8	noarch	ruby-default-gems	< 3.0.7-143.module	ruby-default-gems-3.0.7-143.module+el8.10.0+90343+d5e92a1d.noarch.rpm
oracle linux	8	aarch64	ruby-devel	< 3.0.7-143.module	ruby-devel-3.0.7-143.module+el8.10.0+90343+d5e92a1d.aarch64.rpm
oracle linux	8	noarch	ruby-doc	< 3.0.7-143.module	ruby-doc-3.0.7-143.module+el8.10.0+90343+d5e92a1d.noarch.rpm
oracle linux	8	aarch64	ruby-libs	< 3.0.7-143.module	ruby-libs-3.0.7-143.module+el8.10.0+90343+d5e92a1d.aarch64.rpm
oracle linux	8	noarch	rubygem-abrt	< 0.4.0-1.module	rubygem-abrt-0.4.0-1.module+el8.10.0+90343+d5e92a1d.noarch.rpm