Lucene search

K
oraclelinuxOracleLinuxELSA-2024-3668
HistoryJun 06, 2024 - 12:00 a.m.

ruby:3.1 security, bug fix, and enhancement update

2024-06-0600:00:00
linux.oracle.com
1
ruby 3.1.5
security update
bug fix
enhancement
rhel-33978
rhel-34129
rhel-34121
buffer overread
rce vulnerability
arbitrary memory address read
http response splitting
redos vulnerability
cgi
uri
time
rdoc
openssl.fips_mode
openssl::pkey.read
mysql2
pg
unix

6.8 Medium

AI Score

Confidence

Low

0 Low

EPSS

Percentile

0.0%

ruby
[3.1.5-144]

  • Upgrade to Ruby 3.1.5.
    Resolves: RHEL-33978
  • Fix buffer overread vulnerability in StringIO.
    Resolves: RHEL-34129
  • Fix RCE vulnerability with .rdoc_options in RDoc.
    Resolves: RHEL-34121
  • Fix arbitrary memory address read vulnerability with Regex search.
    Resolves: RHEL-33871
    [3.1.4-143]
  • Upgrade to Ruby 3.1.4.
    Resolves: RHEL-5586
  • Fix HTTP response splitting in CGI.
    Resolves: RHEL-5591
  • Fix ReDos vulnerability in URI.
    Resolves: RHEL-28919
    Resolves: RHEL-5612
  • Fix ReDos vulnerability in Time.
    Resolves: RHEL-28920
  • Make RDoc soft dependency in IRB.
    Resolves: RHEL-5613
    [3.1.2-142]
  • Bypass git submodule test failure on Git >= 2.38.1.
  • Fix tests with Europe/Amsterdam pre-1970 time on tzdata version 2022b.
  • Fix for tzdata-2022g.
  • Fix OpenSSL.fips_mode and OpenSSL::PKey.read in OpenSSL 3 FIPS.
    Resolves: RHEL-5590
  • ssl: use ffdhe2048 from RFC 7919 as the default DH group parameters
    Related: RHEL-5590
  • Disable fiddle tests that use FFI closures.
    Related: RHEL-5590
    [3.1.2-141]
  • Upgrade to Ruby 3.1.2 by merging Fedora Rawhide branch (commit: b7b5473).
    Resolves: rhbz#2063773
    rubygem-mysql2
    [0.5.4-1]
  • New upstream release 0.5.4 by merging Fedora rawhide branch (commit: e21b5b9)
    Resolves: rhbz#2063773
    [0.5.3-1]
  • New upstream release 0.5.3 by merging Fedora master branch (commit: 674d475)
    Resolves: rhbz#1817135
    rubygem-pg
  • Thu May 26 2022 Jarek Prokop - 1.3.5-1
  • Update to pg 1.3.5
    Related: rhbz#2063773
    [1.2.3-1]
  • Update to pg 1.2.3 by merging Fedora master branch (commit: 5db4d26)
    Resolves: rhbz#1817135