ruby:3.3 security update

2024-09-1900:00:00

linux.oracle.com

ruby

security update

upgrade

vulnerability

dos

rexml

cve-2024-39908

cve-2024-41946

cve-2024-43398

cve-2024-41123

abrt

mysql2

unix

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.4

Confidence

Low

JSON

ruby
[3.3.5-3]

Upgrade to Ruby 3.3.5
Resolves: RHEL-55409
Fix DoS vulnerability in rexml.
(CVE-2024-39908)
(CVE-2024-41946)
(CVE-2024-43398)
Resolves: RHEL-57049
Resolves: RHEL-57054
Resolves: RHEL-57069
Fix REXML DoS when parsing an XML having many specific characters such as
whitespace character, >] and ]>.
(CVE-2024-41123)
Resolves: RHEL-52783
rubygem-abrt
[0.4.0-1]
Update to abrt 0.4.0.
Resolves: rhbz#1842476
rubygem-mysql2
[0.5.5-1]
Upgrade to mysql2 0.5.5.
Related: RHEL-17090
rubygem-pg
[1.5.4-1]
Upgrade to pg 1.5.4.
Related: RHEL-17090

OSVersionArchitecturePackageVersionFilename
oracle linux8srcruby< 3.3.5-3.moduleruby-3.3.5-3.module+el8.10.0+90405+574abbbb.src.rpm
oracle linux8srcrubygem-abrt< 0.4.0-1.modulerubygem-abrt-0.4.0-1.module+el8.10.0+90287+d51aa4ed.src.rpm
oracle linux8srcrubygem-mysql2< 0.5.5-1.modulerubygem-mysql2-0.5.5-1.module+el8.10.0+90287+d51aa4ed.src.rpm
oracle linux8srcrubygem-pg< 1.5.4-1.modulerubygem-pg-1.5.4-1.module+el8.10.0+90287+d51aa4ed.src.rpm
oracle linux8aarch64ruby< 3.3.5-3.moduleruby-3.3.5-3.module+el8.10.0+90405+574abbbb.aarch64.rpm
oracle linux8aarch64ruby-bundled-gems< 3.3.5-3.moduleruby-bundled-gems-3.3.5-3.module+el8.10.0+90405+574abbbb.aarch64.rpm
oracle linux8noarchruby-default-gems< 3.3.5-3.moduleruby-default-gems-3.3.5-3.module+el8.10.0+90405+574abbbb.noarch.rpm
oracle linux8aarch64ruby-devel< 3.3.5-3.moduleruby-devel-3.3.5-3.module+el8.10.0+90405+574abbbb.aarch64.rpm
oracle linux8noarchruby-doc< 3.3.5-3.moduleruby-doc-3.3.5-3.module+el8.10.0+90405+574abbbb.noarch.rpm
oracle linux8aarch64ruby-libs< 3.3.5-3.moduleruby-libs-3.3.5-3.module+el8.10.0+90405+574abbbb.aarch64.rpm

OS	Version	Architecture	Package	Version	Filename
oracle linux	8	src	ruby	< 3.3.5-3.module	ruby-3.3.5-3.module+el8.10.0+90405+574abbbb.src.rpm
oracle linux	8	src	rubygem-abrt	< 0.4.0-1.module	rubygem-abrt-0.4.0-1.module+el8.10.0+90287+d51aa4ed.src.rpm
oracle linux	8	src	rubygem-mysql2	< 0.5.5-1.module	rubygem-mysql2-0.5.5-1.module+el8.10.0+90287+d51aa4ed.src.rpm
oracle linux	8	src	rubygem-pg	< 1.5.4-1.module	rubygem-pg-1.5.4-1.module+el8.10.0+90287+d51aa4ed.src.rpm
oracle linux	8	aarch64	ruby	< 3.3.5-3.module	ruby-3.3.5-3.module+el8.10.0+90405+574abbbb.aarch64.rpm
oracle linux	8	aarch64	ruby-bundled-gems	< 3.3.5-3.module	ruby-bundled-gems-3.3.5-3.module+el8.10.0+90405+574abbbb.aarch64.rpm
oracle linux	8	noarch	ruby-default-gems	< 3.3.5-3.module	ruby-default-gems-3.3.5-3.module+el8.10.0+90405+574abbbb.noarch.rpm
oracle linux	8	aarch64	ruby-devel	< 3.3.5-3.module	ruby-devel-3.3.5-3.module+el8.10.0+90405+574abbbb.aarch64.rpm
oracle linux	8	noarch	ruby-doc	< 3.3.5-3.module	ruby-doc-3.3.5-3.module+el8.10.0+90405+574abbbb.noarch.rpm
oracle linux	8	aarch64	ruby-libs	< 3.3.5-3.module	ruby-libs-3.3.5-3.module+el8.10.0+90405+574abbbb.aarch64.rpm