Lucene search

K
oraclelinuxOracleLinuxELSA-2024-6785
HistorySep 19, 2024 - 12:00 a.m.

ruby:3.3 security update

2024-09-1900:00:00
linux.oracle.com

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.4

Confidence

Low

ruby
[3.3.5-3]

  • Upgrade to Ruby 3.3.5
    Resolves: RHEL-57576
  • Fix DoS vulnerability in rexml.
    (CVE-2024-39908)
    (CVE-2024-41946)
    (CVE-2024-43398)
    Resolves: RHEL-57573
    Resolves: RHEL-57570
    Resolves: RHEL-57578
  • Fix REXML DoS when parsing an XML having many specific characters such as
    whitespace character, >] and ]>.
    (CVE-2024-41123)
    Resolves: RHEL-57567
  • Fix incorrect symlink for rubygem-irb’s library.
    Resolves: RHEL-57597
    [3.3.1-2]
  • Upgrade to Ruby 3.3.1.
    Resolves: RHEL-37697
  • Fix buffer overread vulnerability in StringIO.
    (CVE-2024-27280)
    Resolves: RHEL-37699
  • Fix RCE vulnerability with .rdoc_options in RDoc.
    (CVE-2024-27281)
    Resolves: RHEL-37696
  • Fix Arbitrary memory address read vulnerability with Regex search.
    (CVE-2024-27282)
    Resolves: RHEL-37698
    [3.3.0-1]
  • Upgrade to Ruby 3.3.0.
    Resolves: RHEL-17089
    [3.1.2-142]
  • Bypass git submodule test failure on Git >= 2.38.1.
  • Fix tests with Europe/Amsterdam pre-1970 time on tzdata version 2022b.
  • Fix for tzdata-2022g.
  • Fix OpenSSL.fips_mode and OpenSSL::PKey.read in OpenSSL 3 FIPS.
    Resolves: RHEL-5590
  • ssl: use ffdhe2048 from RFC 7919 as the default DH group parameters
    Related: RHEL-5590
  • Disable fiddle tests that use FFI closures.
    Related: RHEL-5590
    rubygem-mysql2
    [0.5.5-1]
  • Upgrade to mysql2 0.5.5.
    Related: RHEL-17089
    rubygem-pg
    [1.5.4-1]
  • Upgrade to pg 1.5.4.
    Related: RHEL-17089

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.4

Confidence

Low