ruby:3.1 security, bug fix, and enhancement update

2024-03-2000:00:00

linux.oracle.com

ruby 3.1.4

security update

bug fixes

enhancements

http response splitting

redos vulnerability

rdoc soft dependency

ssl related test failure

fedora commit

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.3

Confidence

Low

EPSS

0.005

Percentile

77.3%

JSON

ruby
[3.1.4-142]

Upgrade to Ruby 3.1.4.
Resolves: RHEL-28565
Fix HTTP response splitting in CGI.
Resolves: RHEL-28564
Fix ReDos vulnerability in URI.
Resolves: RHEL-28567
Resolves: RHEL-28576
Fix ReDos vulnerability in Time.
Resolves: RHEL-28566
Make RDoc soft dependency in IRB.
Resolves: RHEL-28569
rubygem-abrt
[0.4.0-1]
Update to abrt 0.4.0.
Resolves: rhbz#1842476
rubygem-mysql2
[0.5.3-3]
Fix SSL related test failure by backporting Fedora commit
.
Related: RHEL-28565
rubygem-pg
[1.3.2-1]
Update to pg 1.3.2 by merging Fedora rawhide branch (commit: 39bbd1b)
Resolves: rhbz#2063772

OSVersionArchitecturePackageVersionFilename
oracle linux8srcruby< 3.1.4-142.moduleruby-3.1.4-142.module+el8.9.0+90182+7bdfc9e5.src.rpm
oracle linux8srcrubygem-abrt< 0.4.0-1.modulerubygem-abrt-0.4.0-1.module+el8.9.0+90182+7bdfc9e5.src.rpm
oracle linux8srcrubygem-mysql2< 0.5.3-3.modulerubygem-mysql2-0.5.3-3.module+el8.9.0+90182+7bdfc9e5.src.rpm
oracle linux8srcrubygem-pg< 1.3.2-1.modulerubygem-pg-1.3.2-1.module+el8.9.0+90182+7bdfc9e5.src.rpm
oracle linux8aarch64ruby< 3.1.4-142.moduleruby-3.1.4-142.module+el8.9.0+90182+7bdfc9e5.aarch64.rpm
oracle linux8aarch64ruby-bundled-gems< 3.1.4-142.moduleruby-bundled-gems-3.1.4-142.module+el8.9.0+90182+7bdfc9e5.aarch64.rpm
oracle linux8noarchruby-default-gems< 3.1.4-142.moduleruby-default-gems-3.1.4-142.module+el8.9.0+90182+7bdfc9e5.noarch.rpm
oracle linux8aarch64ruby-devel< 3.1.4-142.moduleruby-devel-3.1.4-142.module+el8.9.0+90182+7bdfc9e5.aarch64.rpm
oracle linux8noarchruby-doc< 3.1.4-142.moduleruby-doc-3.1.4-142.module+el8.9.0+90182+7bdfc9e5.noarch.rpm
oracle linux8aarch64ruby-libs< 3.1.4-142.moduleruby-libs-3.1.4-142.module+el8.9.0+90182+7bdfc9e5.aarch64.rpm

OS	Version	Architecture	Package	Version	Filename
oracle linux	8	src	ruby	< 3.1.4-142.module	ruby-3.1.4-142.module+el8.9.0+90182+7bdfc9e5.src.rpm
oracle linux	8	src	rubygem-abrt	< 0.4.0-1.module	rubygem-abrt-0.4.0-1.module+el8.9.0+90182+7bdfc9e5.src.rpm
oracle linux	8	src	rubygem-mysql2	< 0.5.3-3.module	rubygem-mysql2-0.5.3-3.module+el8.9.0+90182+7bdfc9e5.src.rpm
oracle linux	8	src	rubygem-pg	< 1.3.2-1.module	rubygem-pg-1.3.2-1.module+el8.9.0+90182+7bdfc9e5.src.rpm
oracle linux	8	aarch64	ruby	< 3.1.4-142.module	ruby-3.1.4-142.module+el8.9.0+90182+7bdfc9e5.aarch64.rpm
oracle linux	8	aarch64	ruby-bundled-gems	< 3.1.4-142.module	ruby-bundled-gems-3.1.4-142.module+el8.9.0+90182+7bdfc9e5.aarch64.rpm
oracle linux	8	noarch	ruby-default-gems	< 3.1.4-142.module	ruby-default-gems-3.1.4-142.module+el8.9.0+90182+7bdfc9e5.noarch.rpm
oracle linux	8	aarch64	ruby-devel	< 3.1.4-142.module	ruby-devel-3.1.4-142.module+el8.9.0+90182+7bdfc9e5.aarch64.rpm
oracle linux	8	noarch	ruby-doc	< 3.1.4-142.module	ruby-doc-3.1.4-142.module+el8.9.0+90182+7bdfc9e5.noarch.rpm
oracle linux	8	aarch64	ruby-libs	< 3.1.4-142.module	ruby-libs-3.1.4-142.module+el8.9.0+90182+7bdfc9e5.aarch64.rpm