Red Hat Security AdvisoryRHSA-2024:4499
ruby security update
Released 2024-07-11 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 8) ruby-2.5.9-112.module+el8.10.0+22021+135c76a8.aarch64::ruby:2.5, ruby-2.5.9-112.module+el8.10.0+22021+135c76a8.i686::ruby:2.5, ruby-2.5.9-112.module+el8.10.0+22021+135c76a8.ppc64le::ruby:2.5 +47
Fixes 5 records
Priority MEDIUM 54
An issue was discovered in RDoc 6.3.3 through 6.6.2, as distributed in Ruby 3.x through 3.3.0.
CVSS 3.1MEDIUM 4.5· Local · No auth · User interaction · EPSS 0.01571 · Published 2024-05-08 · Partial fix · 6.3.4.1, 6.4.1.1 +2 CWE-502
Priority MEDIUM 53
A buffer-overread issue was discovered in StringIO 3.0.1, as distributed in Ruby 3.0.x through 3.0.6 and 3.1.x through 3.1.4.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02364 · Published 2024-05-08 · Partial fix · 3.0.1.1 CWE-120
Priority LOW 34
REXML is an XML toolkit for Ruby.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.02064 · Published 2024-05-16 · Partial fix · 3.2.7 CWE-400
Priority LOW 30
An issue was discovered in Ruby 3.x through 3.3.0.
CVSS 3.1MEDIUM 6.6· Local · No auth · User interaction · EPSS 0.00656 · Published 2024-05-08 · Partial fix CWE-125
Priority LOW 27
A ReDoS issue was discovered in the URI component before 0.12.2 for Ruby.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.01698 · Published 2023-06-29 · Partial fix · 0.10.3, 0.12.2 +2 CWE-1333
