ruby:3.1 security, bug fix, and enhancement update

2024-06-0300:00:00

linux.oracle.com

security update

bug fix

enhancement

ruby 3.1.5

buffer overread vulnerability

rce vulnerability

arbitrary memory address read vulnerability

rhel-35748

rhel-35749

rhel-35750

rhel-35751

rubygem-abrt

rubygem-mysql2

rubygem-pg

unix

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

6.5

Confidence

Low

JSON

ruby
[3.1.5-143]

Upgrade to Ruby 3.1.5.
Resolves: RHEL-35748
Fix buffer overread vulnerability in StringIO.
Resolves: RHEL-35749
Fix RCE vulnerability with .rdoc_options in RDoc.
Resolves: RHEL-35750
Fix arbitrary memory address read vulnerability with Regex search.
Resolves: RHEL-35751
rubygem-abrt
rubygem-mysql2
rubygem-pg

OSVersionArchitecturePackageVersionFilename
oracle linux8srcruby< 3.1.5-143.moduleruby-3.1.5-143.module+el8.10.0+90344+fc5884b3.src.rpm
oracle linux8srcrubygem-abrt< 0.4.0-1.modulerubygem-abrt-0.4.0-1.module+el8.9.0+90182+7bdfc9e5.src.rpm
oracle linux8srcrubygem-mysql2< 0.5.3-3.modulerubygem-mysql2-0.5.3-3.module+el8.9.0+90182+7bdfc9e5.src.rpm
oracle linux8srcrubygem-pg< 1.3.2-1.modulerubygem-pg-1.3.2-1.module+el8.9.0+90182+7bdfc9e5.src.rpm
oracle linux8aarch64ruby< 3.1.5-143.moduleruby-3.1.5-143.module+el8.10.0+90344+fc5884b3.aarch64.rpm
oracle linux8aarch64ruby-bundled-gems< 3.1.5-143.moduleruby-bundled-gems-3.1.5-143.module+el8.10.0+90344+fc5884b3.aarch64.rpm
oracle linux8noarchruby-default-gems< 3.1.5-143.moduleruby-default-gems-3.1.5-143.module+el8.10.0+90344+fc5884b3.noarch.rpm
oracle linux8aarch64ruby-devel< 3.1.5-143.moduleruby-devel-3.1.5-143.module+el8.10.0+90344+fc5884b3.aarch64.rpm
oracle linux8noarchruby-doc< 3.1.5-143.moduleruby-doc-3.1.5-143.module+el8.10.0+90344+fc5884b3.noarch.rpm
oracle linux8aarch64ruby-libs< 3.1.5-143.moduleruby-libs-3.1.5-143.module+el8.10.0+90344+fc5884b3.aarch64.rpm

OS	Version	Architecture	Package	Version	Filename
oracle linux	8	src	ruby	< 3.1.5-143.module	ruby-3.1.5-143.module+el8.10.0+90344+fc5884b3.src.rpm
oracle linux	8	src	rubygem-abrt	< 0.4.0-1.module	rubygem-abrt-0.4.0-1.module+el8.9.0+90182+7bdfc9e5.src.rpm
oracle linux	8	src	rubygem-mysql2	< 0.5.3-3.module	rubygem-mysql2-0.5.3-3.module+el8.9.0+90182+7bdfc9e5.src.rpm
oracle linux	8	src	rubygem-pg	< 1.3.2-1.module	rubygem-pg-1.3.2-1.module+el8.9.0+90182+7bdfc9e5.src.rpm
oracle linux	8	aarch64	ruby	< 3.1.5-143.module	ruby-3.1.5-143.module+el8.10.0+90344+fc5884b3.aarch64.rpm
oracle linux	8	aarch64	ruby-bundled-gems	< 3.1.5-143.module	ruby-bundled-gems-3.1.5-143.module+el8.10.0+90344+fc5884b3.aarch64.rpm
oracle linux	8	noarch	ruby-default-gems	< 3.1.5-143.module	ruby-default-gems-3.1.5-143.module+el8.10.0+90344+fc5884b3.noarch.rpm
oracle linux	8	aarch64	ruby-devel	< 3.1.5-143.module	ruby-devel-3.1.5-143.module+el8.10.0+90344+fc5884b3.aarch64.rpm
oracle linux	8	noarch	ruby-doc	< 3.1.5-143.module	ruby-doc-3.1.5-143.module+el8.10.0+90344+fc5884b3.noarch.rpm
oracle linux	8	aarch64	ruby-libs	< 3.1.5-143.module	ruby-libs-3.1.5-143.module+el8.10.0+90344+fc5884b3.aarch64.rpm