Stay Connected:

ELSA-2024-3668

ELSA-2024-3668 - ruby:3.1 security, bug fix, and enhancement update

Type:SECURITY
Impact:MODERATE
Release Date:2024-06-06

Description


ruby
[3.1.5-144]
- Upgrade to Ruby 3.1.5.
Resolves: RHEL-33978
- Fix buffer overread vulnerability in StringIO.
Resolves: RHEL-34129
- Fix RCE vulnerability with .rdoc_options in RDoc.
Resolves: RHEL-34121
- Fix arbitrary memory address read vulnerability with Regex search.
Resolves: RHEL-33871

[3.1.4-143]
- Upgrade to Ruby 3.1.4.
Resolves: RHEL-5586
- Fix HTTP response splitting in CGI.
Resolves: RHEL-5591
- Fix ReDos vulnerability in URI.
Resolves: RHEL-28919
Resolves: RHEL-5612
- Fix ReDos vulnerability in Time.
Resolves: RHEL-28920
- Make RDoc soft dependency in IRB.
Resolves: RHEL-5613

[3.1.2-142]
- Bypass git submodule test failure on Git >= 2.38.1.
- Fix tests with Europe/Amsterdam pre-1970 time on tzdata version 2022b.
- Fix for tzdata-2022g.
- Fix OpenSSL.fips_mode and OpenSSL::PKey.read in OpenSSL 3 FIPS.
Resolves: RHEL-5590
- ssl: use ffdhe2048 from RFC 7919 as the default DH group parameters
Related: RHEL-5590
- Disable fiddle tests that use FFI closures.
Related: RHEL-5590

[3.1.2-141]
- Upgrade to Ruby 3.1.2 by merging Fedora Rawhide branch (commit: b7b5473).
Resolves: rhbz#2063773

rubygem-mysql2
[0.5.4-1]
- New upstream release 0.5.4 by merging Fedora rawhide branch (commit: e21b5b9)
Resolves: rhbz#2063773

[0.5.3-1]
- New upstream release 0.5.3 by merging Fedora master branch (commit: 674d475)
Resolves: rhbz#1817135

rubygem-pg
* Thu May 26 2022 Jarek Prokop - 1.3.5-1
- Update to pg 1.3.5
Related: rhbz#2063773

[1.2.3-1]
- Update to pg 1.2.3 by merging Fedora master branch (commit: 5db4d26)
Resolves: rhbz#1817135


Related CVEs


CVE-2024-27280
CVE-2024-27281
CVE-2024-27282

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 9 (aarch64) ruby-3.1.5-144.module+el9.4.0+90348+c2ef46bf.src.rpme59fbae53c33f113e8828fd3320e5041f9695daa975eccd09d00687af6eb027d-ol9_aarch64_appstream
rubygem-mysql2-0.5.4-1.module+el9.1.0+20815+286161bd.src.rpm3d02677cc63f862a3a44b55b0b5e791c69bd6f4e107fab9acea9b6753c28f78e-ol9_aarch64_appstream
rubygem-mysql2-0.5.4-1.module+el9.1.0+20815+286161bd.src.rpm3d02677cc63f862a3a44b55b0b5e791c69bd6f4e107fab9acea9b6753c28f78e-ol9_aarch64_appstream_developer
rubygem-pg-1.3.5-1.module+el9.1.0+20815+286161bd.src.rpm7f2ab71449603b78507ada3b15b017b057c54d8d7d53794faa63e5db7dbb205f-ol9_aarch64_appstream
rubygem-pg-1.3.5-1.module+el9.1.0+20815+286161bd.src.rpm7f2ab71449603b78507ada3b15b017b057c54d8d7d53794faa63e5db7dbb205f-ol9_aarch64_appstream_developer
ruby-3.1.5-144.module+el9.4.0+90348+c2ef46bf.aarch64.rpm20fe86377a5899b27a2abe25763095aff814fbbe06dbc8d5b1af3a4f02cffb9d-ol9_aarch64_appstream
ruby-bundled-gems-3.1.5-144.module+el9.4.0+90348+c2ef46bf.aarch64.rpmb48cb1b4c2f6e29e37ccd79163008eff96a7f2b3d5054f1169182532811296c4-ol9_aarch64_appstream
ruby-default-gems-3.1.5-144.module+el9.4.0+90348+c2ef46bf.noarch.rpm564a5307af5e5f57fc13edd7e669d88dd1867ef032dfb1159b48c3ec69e5957a-ol9_aarch64_appstream
ruby-devel-3.1.5-144.module+el9.4.0+90348+c2ef46bf.aarch64.rpm21cb360a64e97f65cf3923bb2c5ee24ff2aed33297bc1b48d314ef4b6ec50286-ol9_aarch64_appstream
ruby-doc-3.1.5-144.module+el9.4.0+90348+c2ef46bf.noarch.rpmae84d1461fac2cfb14e6c94c03ef59bdf88d7b253f11dfded8ea0974e9db107f-ol9_aarch64_appstream
ruby-libs-3.1.5-144.module+el9.4.0+90348+c2ef46bf.aarch64.rpm7fd60350a0c890742f23ff317ce94aa2ed575db15df8c777b4c7e10319e14a65-ol9_aarch64_appstream
rubygem-bigdecimal-3.1.1-144.module+el9.4.0+90348+c2ef46bf.aarch64.rpmd3419549308f681053fd477f3fe44e94a3f9af0e7f47d979e05d6ecdf3073950-ol9_aarch64_appstream
rubygem-bundler-2.3.27-144.module+el9.4.0+90348+c2ef46bf.noarch.rpm9b9985adfcc0c1b7b7f98b029839bff57c32c30f1cbfa9cb23023c5c020a6a74-ol9_aarch64_appstream
rubygem-io-console-0.5.11-144.module+el9.4.0+90348+c2ef46bf.aarch64.rpma7fc98747d840dcd9cc08093e1d539f979e23a2b2930c35e386fa467a7d71938-ol9_aarch64_appstream
rubygem-irb-1.4.1-144.module+el9.4.0+90348+c2ef46bf.noarch.rpm1dd0e5a63f48a87e1bff8fa9555da0d50174f5fab6d36eca9c066b23db5ea90c-ol9_aarch64_appstream
rubygem-json-2.6.1-144.module+el9.4.0+90348+c2ef46bf.aarch64.rpma31e45583db95e0e68429d2e0f29be790d9c6106de68ec345c47f4df6da5e89a-ol9_aarch64_appstream
rubygem-minitest-5.15.0-144.module+el9.4.0+90348+c2ef46bf.noarch.rpmc49243856e3c804489c8a0c09638363eb6648b0f3e58834aa287c00e54459632-ol9_aarch64_appstream
rubygem-mysql2-0.5.4-1.module+el9.1.0+20815+286161bd.aarch64.rpm8cb4bc0c36b6e2430ffa255a92936f8164e7d4635e358b7c7741514840eab0af-ol9_aarch64_appstream
rubygem-mysql2-0.5.4-1.module+el9.1.0+20815+286161bd.aarch64.rpm8cb4bc0c36b6e2430ffa255a92936f8164e7d4635e358b7c7741514840eab0af-ol9_aarch64_appstream_developer
rubygem-mysql2-doc-0.5.4-1.module+el9.1.0+20815+286161bd.noarch.rpme183db98ebed72059c318935cacb63bdc5bf01909bd2428d431c7a4c50d56f05-ol9_aarch64_appstream
rubygem-mysql2-doc-0.5.4-1.module+el9.1.0+20815+286161bd.noarch.rpme183db98ebed72059c318935cacb63bdc5bf01909bd2428d431c7a4c50d56f05-ol9_aarch64_appstream_developer
rubygem-pg-1.3.5-1.module+el9.1.0+20815+286161bd.aarch64.rpm0a5779977c56f4f2041a21dcc8fce44695fbff0ac8141c7c27b780ea1fa59ec1-ol9_aarch64_appstream
rubygem-pg-1.3.5-1.module+el9.1.0+20815+286161bd.aarch64.rpm0a5779977c56f4f2041a21dcc8fce44695fbff0ac8141c7c27b780ea1fa59ec1-ol9_aarch64_appstream_developer
rubygem-pg-doc-1.3.5-1.module+el9.1.0+20815+286161bd.noarch.rpm326ee0c31c6ea89daaa1aadda7ffa6087fed305cb8c9ad3ca4b0c989faaec016-ol9_aarch64_appstream
rubygem-pg-doc-1.3.5-1.module+el9.1.0+20815+286161bd.noarch.rpm326ee0c31c6ea89daaa1aadda7ffa6087fed305cb8c9ad3ca4b0c989faaec016-ol9_aarch64_appstream_developer
rubygem-power_assert-2.0.1-144.module+el9.4.0+90348+c2ef46bf.noarch.rpm7f86dcddc5ddb5d7bf8619d50c525a007bdaf541178a25594115fac20ba7717e-ol9_aarch64_appstream
rubygem-psych-4.0.4-144.module+el9.4.0+90348+c2ef46bf.aarch64.rpm19ebd25e8f16186d714a5be50ab1568f843b541f8e1622023b5af605acd789ff-ol9_aarch64_appstream
rubygem-rake-13.0.6-144.module+el9.4.0+90348+c2ef46bf.noarch.rpm393bfb503088e38f242a938a1bd0c02dd9c3f9f82c82b4b592db6f7cdf402ddb-ol9_aarch64_appstream
rubygem-rbs-2.7.0-144.module+el9.4.0+90348+c2ef46bf.aarch64.rpm4d56da32f48ffd451b0489149450d76d13498bad62a0972e6c1cd160119a228e-ol9_aarch64_appstream
rubygem-rdoc-6.4.1.1-144.module+el9.4.0+90348+c2ef46bf.noarch.rpmaee9b0632250f569a94063696afeccab1235e68b7e6ff2098ebf3b61eb3c54f7-ol9_aarch64_appstream
rubygem-rexml-3.2.5-144.module+el9.4.0+90348+c2ef46bf.noarch.rpm84db927041cfc7a907c24aebe0b30a3a2c15260ffe4e55233cbc99694ae76da2-ol9_aarch64_appstream
rubygem-rss-0.2.9-144.module+el9.4.0+90348+c2ef46bf.noarch.rpm9d60ddc9195344cfe9d6a0f46558454a40572e23fb01716fc5db1e3b557b53ca-ol9_aarch64_appstream
rubygem-test-unit-3.5.3-144.module+el9.4.0+90348+c2ef46bf.noarch.rpm0a14327beffe8d048ecb072bf868cf60d07733dfad760fe097db58fef37ade86-ol9_aarch64_appstream
rubygem-typeprof-0.21.3-144.module+el9.4.0+90348+c2ef46bf.noarch.rpm50b92b84fba46d52b3fe473119ee37c3c44212c64a389da471d0f222c4e9961c-ol9_aarch64_appstream
rubygems-3.3.27-144.module+el9.4.0+90348+c2ef46bf.noarch.rpm665be4a59bd47aaa955a2431fae87fa78ae0d2112944b3fce636df5bddbe1e52-ol9_aarch64_appstream
rubygems-devel-3.3.27-144.module+el9.4.0+90348+c2ef46bf.noarch.rpm965be3f1850e0cf6ad36ba2bd80b2656fa1dfd57d287e120ca47c29fec800cea-ol9_aarch64_appstream
Oracle Linux 9 (x86_64) ruby-3.1.5-144.module+el9.4.0+90348+c2ef46bf.src.rpme59fbae53c33f113e8828fd3320e5041f9695daa975eccd09d00687af6eb027d-ol9_x86_64_appstream
rubygem-mysql2-0.5.4-1.module+el9.1.0+20815+286161bd.src.rpm3d02677cc63f862a3a44b55b0b5e791c69bd6f4e107fab9acea9b6753c28f78e-ol9_x86_64_appstream
rubygem-mysql2-0.5.4-1.module+el9.1.0+20815+286161bd.src.rpm3d02677cc63f862a3a44b55b0b5e791c69bd6f4e107fab9acea9b6753c28f78e-ol9_x86_64_appstream_developer
rubygem-pg-1.3.5-1.module+el9.1.0+20815+286161bd.src.rpm7f2ab71449603b78507ada3b15b017b057c54d8d7d53794faa63e5db7dbb205f-ol9_x86_64_appstream
rubygem-pg-1.3.5-1.module+el9.1.0+20815+286161bd.src.rpm7f2ab71449603b78507ada3b15b017b057c54d8d7d53794faa63e5db7dbb205f-ol9_x86_64_appstream_developer
ruby-3.1.5-144.module+el9.4.0+90348+c2ef46bf.i686.rpmd8422114f6212b54ac54258f4ce6cd44fa751e093f933e3ae0ab6cc7f51bb45a-ol9_x86_64_appstream
ruby-3.1.5-144.module+el9.4.0+90348+c2ef46bf.x86_64.rpm6607391773e8fbd42e670d053d3086a812d52fde55933132c0cb61b4a88684b0-ol9_x86_64_appstream
ruby-bundled-gems-3.1.5-144.module+el9.4.0+90348+c2ef46bf.i686.rpm4eed60ab883125c981a2788df2eee189588e95caf261951023adde2160812c23-ol9_x86_64_appstream
ruby-bundled-gems-3.1.5-144.module+el9.4.0+90348+c2ef46bf.x86_64.rpmc127c5b682474b764342be67ccd846906910bcee7b02ccbd902b1da0f44676d8-ol9_x86_64_appstream
ruby-default-gems-3.1.5-144.module+el9.4.0+90348+c2ef46bf.noarch.rpm564a5307af5e5f57fc13edd7e669d88dd1867ef032dfb1159b48c3ec69e5957a-ol9_x86_64_appstream
ruby-devel-3.1.5-144.module+el9.4.0+90348+c2ef46bf.i686.rpmb220ba83fe605f5afeda8926bd9a1323c78c9d8ba950389bc87325581f7c0bdc-ol9_x86_64_appstream
ruby-devel-3.1.5-144.module+el9.4.0+90348+c2ef46bf.x86_64.rpmb169639d5f87fb17fac2b68fa0a2816f729a4901df06cdc43eb5f52fc56e2223-ol9_x86_64_appstream
ruby-doc-3.1.5-144.module+el9.4.0+90348+c2ef46bf.noarch.rpmae84d1461fac2cfb14e6c94c03ef59bdf88d7b253f11dfded8ea0974e9db107f-ol9_x86_64_appstream
ruby-libs-3.1.5-144.module+el9.4.0+90348+c2ef46bf.i686.rpm1a42312e781b28853379a219f7382e8f0959adb74de4dd7f1ec703de31bac0fd-ol9_x86_64_appstream
ruby-libs-3.1.5-144.module+el9.4.0+90348+c2ef46bf.x86_64.rpm29b3dc385123c3a37f580f580aa5afff9dbeacc45f447f948df4f9b5c72b2f6f-ol9_x86_64_appstream
rubygem-bigdecimal-3.1.1-144.module+el9.4.0+90348+c2ef46bf.i686.rpm3cb936069de021386ccb2c24ad910c0252cb6221e021d62ab5538d7eb1e4f066-ol9_x86_64_appstream
rubygem-bigdecimal-3.1.1-144.module+el9.4.0+90348+c2ef46bf.x86_64.rpm734adc05c1be64ae4730ff551bc654786ac32ca26ff012f08dbcf092b7030c8d-ol9_x86_64_appstream
rubygem-bundler-2.3.27-144.module+el9.4.0+90348+c2ef46bf.noarch.rpm9b9985adfcc0c1b7b7f98b029839bff57c32c30f1cbfa9cb23023c5c020a6a74-ol9_x86_64_appstream
rubygem-io-console-0.5.11-144.module+el9.4.0+90348+c2ef46bf.i686.rpm0b00e35448be90a632583013c4384c8474358b3f6c9993eaf9621bf1e444299a-ol9_x86_64_appstream
rubygem-io-console-0.5.11-144.module+el9.4.0+90348+c2ef46bf.x86_64.rpmf6e62302b01a2546fee16fec43f2be99d87eff8a7e48657e9f81eef95e1d91be-ol9_x86_64_appstream
rubygem-irb-1.4.1-144.module+el9.4.0+90348+c2ef46bf.noarch.rpm1dd0e5a63f48a87e1bff8fa9555da0d50174f5fab6d36eca9c066b23db5ea90c-ol9_x86_64_appstream
rubygem-json-2.6.1-144.module+el9.4.0+90348+c2ef46bf.i686.rpm85874680594e347b57d5b3707653571ebc9f6bdb24e7c7475a371e51bd5135d5-ol9_x86_64_appstream
rubygem-json-2.6.1-144.module+el9.4.0+90348+c2ef46bf.x86_64.rpmc7bbb3622b3daa3a2e80d620fdd82f70ed31dd5572766c5b6255c20d87a0a6bf-ol9_x86_64_appstream
rubygem-minitest-5.15.0-144.module+el9.4.0+90348+c2ef46bf.noarch.rpmc49243856e3c804489c8a0c09638363eb6648b0f3e58834aa287c00e54459632-ol9_x86_64_appstream
rubygem-mysql2-0.5.4-1.module+el9.1.0+20815+286161bd.x86_64.rpmf52f2e4f4788b6aa3d57e414e698fb573f382303d6b5d6f9b1706918fcf97b0c-ol9_x86_64_appstream
rubygem-mysql2-0.5.4-1.module+el9.1.0+20815+286161bd.x86_64.rpmf52f2e4f4788b6aa3d57e414e698fb573f382303d6b5d6f9b1706918fcf97b0c-ol9_x86_64_appstream_developer
rubygem-mysql2-doc-0.5.4-1.module+el9.1.0+20815+286161bd.noarch.rpme183db98ebed72059c318935cacb63bdc5bf01909bd2428d431c7a4c50d56f05-ol9_x86_64_appstream
rubygem-mysql2-doc-0.5.4-1.module+el9.1.0+20815+286161bd.noarch.rpme183db98ebed72059c318935cacb63bdc5bf01909bd2428d431c7a4c50d56f05-ol9_x86_64_appstream_developer
rubygem-pg-1.3.5-1.module+el9.1.0+20815+286161bd.x86_64.rpmb274d948955b2c4b8e668dd46d5206722a72c0995ce6b94807531dc8020fbcde-ol9_x86_64_appstream
rubygem-pg-1.3.5-1.module+el9.1.0+20815+286161bd.x86_64.rpmb274d948955b2c4b8e668dd46d5206722a72c0995ce6b94807531dc8020fbcde-ol9_x86_64_appstream_developer
rubygem-pg-doc-1.3.5-1.module+el9.1.0+20815+286161bd.noarch.rpm326ee0c31c6ea89daaa1aadda7ffa6087fed305cb8c9ad3ca4b0c989faaec016-ol9_x86_64_appstream
rubygem-pg-doc-1.3.5-1.module+el9.1.0+20815+286161bd.noarch.rpm326ee0c31c6ea89daaa1aadda7ffa6087fed305cb8c9ad3ca4b0c989faaec016-ol9_x86_64_appstream_developer
rubygem-power_assert-2.0.1-144.module+el9.4.0+90348+c2ef46bf.noarch.rpm7f86dcddc5ddb5d7bf8619d50c525a007bdaf541178a25594115fac20ba7717e-ol9_x86_64_appstream
rubygem-psych-4.0.4-144.module+el9.4.0+90348+c2ef46bf.i686.rpm7f03f94345e2190e3c6bc26cbd18ebe4c0d22346e198e7ed4195e78a1407c49a-ol9_x86_64_appstream
rubygem-psych-4.0.4-144.module+el9.4.0+90348+c2ef46bf.x86_64.rpm199babc2d49d135a0e731c54bc590f98a580a132084caec33efba9d9b2614310-ol9_x86_64_appstream
rubygem-rake-13.0.6-144.module+el9.4.0+90348+c2ef46bf.noarch.rpm393bfb503088e38f242a938a1bd0c02dd9c3f9f82c82b4b592db6f7cdf402ddb-ol9_x86_64_appstream
rubygem-rbs-2.7.0-144.module+el9.4.0+90348+c2ef46bf.i686.rpmfd3d98bce2377e69bfdbcc21d820417d23fa693421367318a2f72a704749a436-ol9_x86_64_appstream
rubygem-rbs-2.7.0-144.module+el9.4.0+90348+c2ef46bf.x86_64.rpm3bf056a0316e8131c8ed31a66c30ec6f1a8c3a646dda3aded7079c371fe874d1-ol9_x86_64_appstream
rubygem-rdoc-6.4.1.1-144.module+el9.4.0+90348+c2ef46bf.noarch.rpmaee9b0632250f569a94063696afeccab1235e68b7e6ff2098ebf3b61eb3c54f7-ol9_x86_64_appstream
rubygem-rexml-3.2.5-144.module+el9.4.0+90348+c2ef46bf.noarch.rpm84db927041cfc7a907c24aebe0b30a3a2c15260ffe4e55233cbc99694ae76da2-ol9_x86_64_appstream
rubygem-rss-0.2.9-144.module+el9.4.0+90348+c2ef46bf.noarch.rpm9d60ddc9195344cfe9d6a0f46558454a40572e23fb01716fc5db1e3b557b53ca-ol9_x86_64_appstream
rubygem-test-unit-3.5.3-144.module+el9.4.0+90348+c2ef46bf.noarch.rpm0a14327beffe8d048ecb072bf868cf60d07733dfad760fe097db58fef37ade86-ol9_x86_64_appstream
rubygem-typeprof-0.21.3-144.module+el9.4.0+90348+c2ef46bf.noarch.rpm50b92b84fba46d52b3fe473119ee37c3c44212c64a389da471d0f222c4e9961c-ol9_x86_64_appstream
rubygems-3.3.27-144.module+el9.4.0+90348+c2ef46bf.noarch.rpm665be4a59bd47aaa955a2431fae87fa78ae0d2112944b3fce636df5bddbe1e52-ol9_x86_64_appstream
rubygems-devel-3.3.27-144.module+el9.4.0+90348+c2ef46bf.noarch.rpm965be3f1850e0cf6ad36ba2bd80b2656fa1dfd57d287e120ca47c29fec800cea-ol9_x86_64_appstream



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete
Subscribe | Careers | Contact Us | Legal Notices | Terms of Use | Your Privacy Rights