RHSA-2024:10964: Important: ruby security update
Published Dec 11, 2024
·Updated
Important: ruby security update
Other sources
Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.<br>Security Fix(es):<br><li> rexml: REXML ReDoS vulnerability (CVE-2024-49761)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
— Red Hat
Affected Software
83 affected componentsFixes available
redhat/ruby<3.0.4-161.el9_2.2
3.0.4-161.el9_2.2
redhat/ruby<3.0.4-161.el9_2.2
3.0.4-161.el9_2.2
redhat/ruby-debuginfo<3.0.4-161.el9_2.2
3.0.4-161.el9_2.2
redhat/ruby-debuginfo<3.0.4-161.el9_2.2
3.0.4-161.el9_2.2
redhat/ruby-debugsource<3.0.4-161.el9_2.2
3.0.4-161.el9_2.2
redhat/ruby-debugsource<3.0.4-161.el9_2.2
3.0.4-161.el9_2.2
redhat/ruby-default-gems<3.0.4-161.el9_2.2
3.0.4-161.el9_2.2
redhat/ruby-devel<3.0.4-161.el9_2.2
3.0.4-161.el9_2.2
redhat/ruby-devel<3.0.4-161.el9_2.2
3.0.4-161.el9_2.2
redhat/ruby-libs<3.0.4-161.el9_2.2
3.0.4-161.el9_2.2
redhat/ruby-libs<3.0.4-161.el9_2.2
3.0.4-161.el9_2.2
redhat/ruby-libs-debuginfo<3.0.4-161.el9_2.2
3.0.4-161.el9_2.2
redhat/ruby-libs-debuginfo<3.0.4-161.el9_2.2
3.0.4-161.el9_2.2
redhat/rubygem-bigdecimal<3.0.0-161.el9_2.2
3.0.0-161.el9_2.2
redhat/rubygem-bigdecimal-debuginfo<3.0.0-161.el9_2.2
3.0.0-161.el9_2.2
redhat/rubygem-bigdecimal-debuginfo<3.0.0-161.el9_2.2
3.0.0-161.el9_2.2
redhat/rubygem-bundler<2.2.33-161.el9_2.2
2.2.33-161.el9_2.2
redhat/rubygem-io-console<0.5.7-161.el9_2.2
0.5.7-161.el9_2.2
redhat/rubygem-io-console-debuginfo<0.5.7-161.el9_2.2
0.5.7-161.el9_2.2
redhat/rubygem-io-console-debuginfo<0.5.7-161.el9_2.2
0.5.7-161.el9_2.2
redhat/rubygem-irb<1.3.5-161.el9_2.2
1.3.5-161.el9_2.2
redhat/rubygem-json<2.5.1-161.el9_2.2
2.5.1-161.el9_2.2
redhat/rubygem-json-debuginfo<2.5.1-161.el9_2.2
2.5.1-161.el9_2.2
redhat/rubygem-json-debuginfo<2.5.1-161.el9_2.2
2.5.1-161.el9_2.2
redhat/rubygem-minitest<5.14.2-161.el9_2.2
5.14.2-161.el9_2.2
redhat/rubygem-psych<3.3.2-161.el9_2.2
3.3.2-161.el9_2.2
redhat/rubygem-psych-debuginfo<3.3.2-161.el9_2.2
3.3.2-161.el9_2.2
redhat/rubygem-psych-debuginfo<3.3.2-161.el9_2.2
3.3.2-161.el9_2.2
redhat/rubygem-rake<13.0.3-161.el9_2.2
13.0.3-161.el9_2.2
redhat/rubygem-rbs<1.4.0-161.el9_2.2
1.4.0-161.el9_2.2
redhat/rubygem-rdoc<6.3.3-161.el9_2.2
6.3.3-161.el9_2.2
redhat/rubygem-rexml<3.2.5-161.el9_2.2
3.2.5-161.el9_2.2
redhat/rubygem-rss<0.2.9-161.el9_2.2
0.2.9-161.el9_2.2
redhat/rubygem-test-unit<3.3.7-161.el9_2.2
3.3.7-161.el9_2.2
redhat/rubygem-typeprof<0.15.2-161.el9_2.2
0.15.2-161.el9_2.2
redhat/rubygems<3.2.33-161.el9_2.2
3.2.33-161.el9_2.2
redhat/rubygems-devel<3.2.33-161.el9_2.2
3.2.33-161.el9_2.2
redhat/rubygem-bigdecimal<3.0.0-161.el9_2.2
3.0.0-161.el9_2.2
redhat/rubygem-io-console<0.5.7-161.el9_2.2
0.5.7-161.el9_2.2
redhat/rubygem-json<2.5.1-161.el9_2.2
2.5.1-161.el9_2.2
redhat/rubygem-psych<3.3.2-161.el9_2.2
3.3.2-161.el9_2.2
redhat/ruby<3.0.4-161.el9_2.2
3.0.4-161.el9_2.2
redhat/ruby-debuginfo<3.0.4-161.el9_2.2
3.0.4-161.el9_2.2
redhat/ruby-debugsource<3.0.4-161.el9_2.2
3.0.4-161.el9_2.2
redhat/ruby-devel<3.0.4-161.el9_2.2
3.0.4-161.el9_2.2
redhat/ruby-libs<3.0.4-161.el9_2.2
3.0.4-161.el9_2.2
redhat/ruby-libs-debuginfo<3.0.4-161.el9_2.2
3.0.4-161.el9_2.2
redhat/rubygem-bigdecimal<3.0.0-161.el9_2.2
3.0.0-161.el9_2.2
redhat/rubygem-bigdecimal-debuginfo<3.0.0-161.el9_2.2
3.0.0-161.el9_2.2
redhat/rubygem-io-console<0.5.7-161.el9_2.2
0.5.7-161.el9_2.2
redhat/rubygem-io-console-debuginfo<0.5.7-161.el9_2.2
0.5.7-161.el9_2.2
redhat/rubygem-json<2.5.1-161.el9_2.2
2.5.1-161.el9_2.2
redhat/rubygem-json-debuginfo<2.5.1-161.el9_2.2
2.5.1-161.el9_2.2
redhat/rubygem-psych<3.3.2-161.el9_2.2
3.3.2-161.el9_2.2
redhat/rubygem-psych-debuginfo<3.3.2-161.el9_2.2
3.3.2-161.el9_2.2
redhat/ruby<3.0.4-161.el9_2.2.aa
3.0.4-161.el9_2.2.aa
redhat/ruby-debuginfo<3.0.4-161.el9_2.2.aa
3.0.4-161.el9_2.2.aa
redhat/ruby-debugsource<3.0.4-161.el9_2.2.aa
3.0.4-161.el9_2.2.aa
redhat/ruby-devel<3.0.4-161.el9_2.2.aa
3.0.4-161.el9_2.2.aa
redhat/ruby-libs<3.0.4-161.el9_2.2.aa
3.0.4-161.el9_2.2.aa
redhat/ruby-libs-debuginfo<3.0.4-161.el9_2.2.aa
3.0.4-161.el9_2.2.aa
redhat/rubygem-bigdecimal<3.0.0-161.el9_2.2.aa
3.0.0-161.el9_2.2.aa
redhat/rubygem-bigdecimal-debuginfo<3.0.0-161.el9_2.2.aa
3.0.0-161.el9_2.2.aa
redhat/rubygem-io-console<0.5.7-161.el9_2.2.aa
0.5.7-161.el9_2.2.aa
redhat/rubygem-io-console-debuginfo<0.5.7-161.el9_2.2.aa
0.5.7-161.el9_2.2.aa
redhat/rubygem-json<2.5.1-161.el9_2.2.aa
2.5.1-161.el9_2.2.aa
redhat/rubygem-json-debuginfo<2.5.1-161.el9_2.2.aa
2.5.1-161.el9_2.2.aa
redhat/rubygem-psych<3.3.2-161.el9_2.2.aa
3.3.2-161.el9_2.2.aa
redhat/rubygem-psych-debuginfo<3.3.2-161.el9_2.2.aa
3.3.2-161.el9_2.2.aa
redhat/ruby-doc<3.0.4-161.el9_2.2
3.0.4-161.el9_2.2
Red Hat Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
Red Hat Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support
Red Hat Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Red Hat Enterprise Linux for ARM 64 - 4 years of updates
Red Hat Red Hat Enterprise Linux Server - AUS
Red Hat Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions
Red Hat Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Red Hat Enterprise Linux for IBM z Systems - 4 years of updates
Red Hat Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support
Red Hat Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support
Red Hat Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Red Hat Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support
Remediation
Event History
Dec 11, 2024
Advisory Published
via Red Hat·05:00 PM
Dec 23, 2024
Advisory Published
via Red Hat·06:57 PM
Frequently Asked Questions
1
What is the severity of RHSA-2024:10964?
The severity of RHSA-2024:10964 is classified as important.
2
How do I fix RHSA-2024:10964?
You can fix RHSA-2024:10964 by updating the ruby package to version 3.0.4-161.el9_2.2 or later.
3
What vulnerability is addressed in RHSA-2024:10964?
RHSA-2024:10964 addresses a ReDoS vulnerability in the REXML module (CVE-2024-49761).
4
Which versions of Ruby are affected by RHSA-2024:10964?
Affected versions include various releases of Ruby prior to version 3.0.4-161.el9_2.2.
5
Is RHSA-2024:10964 applicable to all Red Hat systems?
No, RHSA-2024:10964 is specific to certain Red Hat Enterprise Linux systems, including Power, x86_64, and ARM architectures.