Red Hat Security Advisory

RHSA-2024:3546

ruby:3.1 security, bug fix, and enhancement update

Released 2024-06-03 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 8) ruby-3.1.5-143.module+el8.10.0+21792+e2f63d26.aarch64::ruby:3.1, ruby-3.1.5-143.module+el8.10.0+21792+e2f63d26.i686::ruby:3.1, ruby-3.1.5-143.module+el8.10.0+21792+e2f63d26.ppc64le::ruby:3.1 +47

TI-2024-18120 CVE-2024-27281 · GHSA-592j-995h-p23j

MEDIUM 54

An issue was discovered in RDoc 6.3.3 through 6.6.2, as distributed in Ruby 3.x through 3.3.0.

CVSS 3.1MEDIUM 4.5 Local No auth User interaction EPSS 0.01571 Published 2024-05-08 Partial fix · 6.3.4.1, 6.4.1.1 +2 CWE-502

TI-2024-18119 CVE-2024-27280 · GHSA-v5h6-c2hv-hv3r

MEDIUM 53

A buffer-overread issue was discovered in StringIO 3.0.1, as distributed in Ruby 3.0.x through 3.0.6 and 3.1.x through 3.1.4.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02364 Published 2024-05-08 Partial fix · 3.0.1.1 CWE-120

TI-2024-18121 CVE-2024-27282 · GHSA-63cq-cj6g-qfr2

LOW 30

An issue was discovered in Ruby 3.x through 3.3.0.

CVSS 3.1MEDIUM 6.6 Local No auth User interaction EPSS 0.00656 Published 2024-05-08 Partial fix CWE-125