Lucene search

K
oraclelinuxOracleLinuxELSA-2024-3670
HistoryJun 07, 2024 - 12:00 a.m.

ruby:3.3 security, bug fix, and enhancement update

2024-06-0700:00:00
linux.oracle.com
2
ruby
upgrade
buffer overread
rce vulnerability
memory address read
rdoc
stringio
regex search
cve-2024-27280
cve-2024-27281
cve-2024-27282
rhel-37446
rhel-37448
rhel-37449
rhel-37447
rubygem-abrt
rubygem-mysql2
rubygem-pg
mysql2 0.5.5
pg 1.5.4
pg 1.3.2
rhel-17090
rhbz#2063772
unix

7.5 High

AI Score

Confidence

Low

0 Low

EPSS

Percentile

0.0%

ruby
[3.3.1-2]

  • Upgrade to Ruby 3.3.1.
    Resolves: RHEL-37446
  • Fix buffer overread vulnerability in StringIO.
    (CVE-2024-27280)
    Resolves: RHEL-37448
  • Fix RCE vulnerability with .rdoc_options in RDoc.
    (CVE-2024-27281)
    Resolves: RHEL-37449
  • Fix Arbitrary memory address read vulnerability with Regex search.
    (CVE-2024-27282)
    Resolves: RHEL-37447
    rubygem-abrt
    rubygem-mysql2
    [0.5.5-1]
  • Upgrade to mysql2 0.5.5.
    Related: RHEL-17090
    rubygem-pg
    [1.5.4-1]
  • Upgrade to pg 1.5.4.
    Related: RHEL-17090
    [1.3.2-1]
  • Update to pg 1.3.2 by merging Fedora rawhide branch (commit: 39bbd1b)
    Resolves: rhbz#2063772