RHSA-2024:1576: Moderate: ruby:3.1 security, bug fix, and enhancement update
Published Apr 1, 2024
·Updated
Moderate: ruby:3.1 security, bug fix, and enhancement update
Other sources
Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.The following packages have been upgraded to a later upstream version: ruby (3.1). (RHEL-29052)Security Fix(es): ruby/cgi-gem: HTTP response splitting in CGI (CVE-2021-33621) ruby: ReDoS vulnerability in URI (CVE-2023-28755) ruby: ReDoS vulnerability - upstream's incomplete fix for CVE-2023-28755 (CVE-2023-36617) ruby: ReDoS vulnerability in Time (CVE-2023-28756) Bug Fix(es): ruby/rubygem-irb: IRB has hard dependency on rubygem-rdoc (RHEL-29048) ruby: Ruby cannot read private key in FIPS mode on RHEL 9 (RHEL-12437) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
— Red Hat
Affected Software
115 affected componentsFixes available
redhat/ruby<3.1.4-143.module+el9.3.0+21558+96b51efd
3.1.4-143.module+el9.3.0+21558+96b51efd
redhat/rubygem-mysql2<0.5.4-1.module+el9.1.0+15737+76195479
0.5.4-1.module+el9.1.0+15737+76195479
redhat/rubygem-pg<1.3.5-1.module+el9.1.0+15737+76195479
1.3.5-1.module+el9.1.0+15737+76195479
redhat/ruby-default-gems<3.1.4-143.module+el9.3.0+21558+96b51efd
3.1.4-143.module+el9.3.0+21558+96b51efd
redhat/ruby-doc<3.1.4-143.module+el9.3.0+21558+96b51efd
3.1.4-143.module+el9.3.0+21558+96b51efd
redhat/rubygem-bundler<2.3.26-143.module+el9.3.0+21558+96b51efd
2.3.26-143.module+el9.3.0+21558+96b51efd
redhat/rubygem-irb<1.4.1-143.module+el9.3.0+21558+96b51efd
1.4.1-143.module+el9.3.0+21558+96b51efd
redhat/rubygem-minitest<5.15.0-143.module+el9.3.0+21558+96b51efd
5.15.0-143.module+el9.3.0+21558+96b51efd
redhat/rubygem-mysql2-doc<0.5.4-1.module+el9.1.0+15737+76195479
0.5.4-1.module+el9.1.0+15737+76195479
redhat/rubygem-pg-doc<1.3.5-1.module+el9.1.0+15737+76195479
1.3.5-1.module+el9.1.0+15737+76195479
redhat/rubygem-rake<13.0.6-143.module+el9.3.0+21558+96b51efd
13.0.6-143.module+el9.3.0+21558+96b51efd
redhat/rubygem-rdoc<6.4.0-143.module+el9.3.0+21558+96b51efd
6.4.0-143.module+el9.3.0+21558+96b51efd
redhat/rubygem-rexml<3.2.5-143.module+el9.3.0+21558+96b51efd
3.2.5-143.module+el9.3.0+21558+96b51efd
redhat/rubygem-rss<0.2.9-143.module+el9.3.0+21558+96b51efd
0.2.9-143.module+el9.3.0+21558+96b51efd
redhat/rubygem-test-unit<3.5.3-143.module+el9.3.0+21558+96b51efd
3.5.3-143.module+el9.3.0+21558+96b51efd
redhat/rubygem-typeprof<0.21.3-143.module+el9.3.0+21558+96b51efd
0.21.3-143.module+el9.3.0+21558+96b51efd
redhat/rubygems<3.3.26-143.module+el9.3.0+21558+96b51efd
3.3.26-143.module+el9.3.0+21558+96b51efd
redhat/rubygems-devel<3.3.26-143.module+el9.3.0+21558+96b51efd
3.3.26-143.module+el9.3.0+21558+96b51efd
redhat/ruby<3.1.4-143.module+el9.3.0+21558+96b51efd
3.1.4-143.module+el9.3.0+21558+96b51efd
redhat/ruby-bundled-gems<3.1.4-143.module+el9.3.0+21558+96b51efd
3.1.4-143.module+el9.3.0+21558+96b51efd
redhat/ruby-bundled-gems<3.1.4-143.module+el9.3.0+21558+96b51efd
3.1.4-143.module+el9.3.0+21558+96b51efd
redhat/ruby-bundled-gems-debuginfo<3.1.4-143.module+el9.3.0+21558+96b51efd
3.1.4-143.module+el9.3.0+21558+96b51efd
redhat/ruby-bundled-gems-debuginfo<3.1.4-143.module+el9.3.0+21558+96b51efd
3.1.4-143.module+el9.3.0+21558+96b51efd
redhat/ruby-debuginfo<3.1.4-143.module+el9.3.0+21558+96b51efd
3.1.4-143.module+el9.3.0+21558+96b51efd
redhat/ruby-debuginfo<3.1.4-143.module+el9.3.0+21558+96b51efd
3.1.4-143.module+el9.3.0+21558+96b51efd
redhat/ruby-debugsource<3.1.4-143.module+el9.3.0+21558+96b51efd
3.1.4-143.module+el9.3.0+21558+96b51efd
redhat/ruby-debugsource<3.1.4-143.module+el9.3.0+21558+96b51efd
3.1.4-143.module+el9.3.0+21558+96b51efd
redhat/ruby-devel<3.1.4-143.module+el9.3.0+21558+96b51efd
3.1.4-143.module+el9.3.0+21558+96b51efd
redhat/ruby-devel<3.1.4-143.module+el9.3.0+21558+96b51efd
3.1.4-143.module+el9.3.0+21558+96b51efd
redhat/ruby-libs<3.1.4-143.module+el9.3.0+21558+96b51efd
3.1.4-143.module+el9.3.0+21558+96b51efd
redhat/ruby-libs<3.1.4-143.module+el9.3.0+21558+96b51efd
3.1.4-143.module+el9.3.0+21558+96b51efd
redhat/ruby-libs-debuginfo<3.1.4-143.module+el9.3.0+21558+96b51efd
3.1.4-143.module+el9.3.0+21558+96b51efd
redhat/ruby-libs-debuginfo<3.1.4-143.module+el9.3.0+21558+96b51efd
3.1.4-143.module+el9.3.0+21558+96b51efd
redhat/rubygem-bigdecimal<3.1.1-143.module+el9.3.0+21558+96b51efd
3.1.1-143.module+el9.3.0+21558+96b51efd
redhat/rubygem-bigdecimal<3.1.1-143.module+el9.3.0+21558+96b51efd
3.1.1-143.module+el9.3.0+21558+96b51efd
redhat/rubygem-bigdecimal-debuginfo<3.1.1-143.module+el9.3.0+21558+96b51efd
3.1.1-143.module+el9.3.0+21558+96b51efd
redhat/rubygem-bigdecimal-debuginfo<3.1.1-143.module+el9.3.0+21558+96b51efd
3.1.1-143.module+el9.3.0+21558+96b51efd
redhat/rubygem-io-console<0.5.11-143.module+el9.3.0+21558+96b51efd
0.5.11-143.module+el9.3.0+21558+96b51efd
redhat/rubygem-io-console<0.5.11-143.module+el9.3.0+21558+96b51efd
0.5.11-143.module+el9.3.0+21558+96b51efd
redhat/rubygem-io-console-debuginfo<0.5.11-143.module+el9.3.0+21558+96b51efd
0.5.11-143.module+el9.3.0+21558+96b51efd
redhat/rubygem-io-console-debuginfo<0.5.11-143.module+el9.3.0+21558+96b51efd
0.5.11-143.module+el9.3.0+21558+96b51efd
redhat/rubygem-json<2.6.1-143.module+el9.3.0+21558+96b51efd
2.6.1-143.module+el9.3.0+21558+96b51efd
redhat/rubygem-json<2.6.1-143.module+el9.3.0+21558+96b51efd
2.6.1-143.module+el9.3.0+21558+96b51efd
redhat/rubygem-json-debuginfo<2.6.1-143.module+el9.3.0+21558+96b51efd
2.6.1-143.module+el9.3.0+21558+96b51efd
redhat/rubygem-json-debuginfo<2.6.1-143.module+el9.3.0+21558+96b51efd
2.6.1-143.module+el9.3.0+21558+96b51efd
redhat/rubygem-mysql2<0.5.4-1.module+el9.1.0+15737+76195479
0.5.4-1.module+el9.1.0+15737+76195479
redhat/rubygem-mysql2-debuginfo<0.5.4-1.module+el9.1.0+15737+76195479
0.5.4-1.module+el9.1.0+15737+76195479
redhat/rubygem-mysql2-debugsource<0.5.4-1.module+el9.1.0+15737+76195479
0.5.4-1.module+el9.1.0+15737+76195479
redhat/rubygem-pg<1.3.5-1.module+el9.1.0+15737+76195479
1.3.5-1.module+el9.1.0+15737+76195479
redhat/rubygem-pg-debuginfo<1.3.5-1.module+el9.1.0+15737+76195479
1.3.5-1.module+el9.1.0+15737+76195479
redhat/rubygem-pg-debugsource<1.3.5-1.module+el9.1.0+15737+76195479
1.3.5-1.module+el9.1.0+15737+76195479
redhat/rubygem-psych<4.0.4-143.module+el9.3.0+21558+96b51efd
4.0.4-143.module+el9.3.0+21558+96b51efd
redhat/rubygem-psych<4.0.4-143.module+el9.3.0+21558+96b51efd
4.0.4-143.module+el9.3.0+21558+96b51efd
redhat/rubygem-psych-debuginfo<4.0.4-143.module+el9.3.0+21558+96b51efd
4.0.4-143.module+el9.3.0+21558+96b51efd
redhat/rubygem-psych-debuginfo<4.0.4-143.module+el9.3.0+21558+96b51efd
4.0.4-143.module+el9.3.0+21558+96b51efd
redhat/rubygem-rbs<2.7.0-143.module+el9.3.0+21558+96b51efd
2.7.0-143.module+el9.3.0+21558+96b51efd
redhat/rubygem-rbs<2.7.0-143.module+el9.3.0+21558+96b51efd
2.7.0-143.module+el9.3.0+21558+96b51efd
redhat/rubygem-rbs-debuginfo<2.7.0-143.module+el9.3.0+21558+96b51efd
2.7.0-143.module+el9.3.0+21558+96b51efd
redhat/rubygem-rbs-debuginfo<2.7.0-143.module+el9.3.0+21558+96b51efd
2.7.0-143.module+el9.3.0+21558+96b51efd
redhat/rubygem-mysql2-debuginfo<0.5.4-1.module+el9.1.0+15737+76195479
0.5.4-1.module+el9.1.0+15737+76195479
redhat/rubygem-mysql2-debugsource<0.5.4-1.module+el9.1.0+15737+76195479
0.5.4-1.module+el9.1.0+15737+76195479
redhat/rubygem-pg-debuginfo<1.3.5-1.module+el9.1.0+15737+76195479
1.3.5-1.module+el9.1.0+15737+76195479
redhat/rubygem-pg-debugsource<1.3.5-1.module+el9.1.0+15737+76195479
1.3.5-1.module+el9.1.0+15737+76195479
redhat/ruby<3.1.4-143.module+el9.3.0+21558+96b51efd
3.1.4-143.module+el9.3.0+21558+96b51efd
redhat/ruby-bundled-gems<3.1.4-143.module+el9.3.0+21558+96b51efd
3.1.4-143.module+el9.3.0+21558+96b51efd
redhat/ruby-bundled-gems-debuginfo<3.1.4-143.module+el9.3.0+21558+96b51efd
3.1.4-143.module+el9.3.0+21558+96b51efd
redhat/ruby-debuginfo<3.1.4-143.module+el9.3.0+21558+96b51efd
3.1.4-143.module+el9.3.0+21558+96b51efd
redhat/ruby-debugsource<3.1.4-143.module+el9.3.0+21558+96b51efd
3.1.4-143.module+el9.3.0+21558+96b51efd
redhat/ruby-devel<3.1.4-143.module+el9.3.0+21558+96b51efd
3.1.4-143.module+el9.3.0+21558+96b51efd
redhat/ruby-libs<3.1.4-143.module+el9.3.0+21558+96b51efd
3.1.4-143.module+el9.3.0+21558+96b51efd
redhat/ruby-libs-debuginfo<3.1.4-143.module+el9.3.0+21558+96b51efd
3.1.4-143.module+el9.3.0+21558+96b51efd
redhat/rubygem-bigdecimal<3.1.1-143.module+el9.3.0+21558+96b51efd
3.1.1-143.module+el9.3.0+21558+96b51efd
redhat/rubygem-bigdecimal-debuginfo<3.1.1-143.module+el9.3.0+21558+96b51efd
3.1.1-143.module+el9.3.0+21558+96b51efd
redhat/rubygem-io-console<0.5.11-143.module+el9.3.0+21558+96b51efd
0.5.11-143.module+el9.3.0+21558+96b51efd
redhat/rubygem-io-console-debuginfo<0.5.11-143.module+el9.3.0+21558+96b51efd
0.5.11-143.module+el9.3.0+21558+96b51efd
redhat/rubygem-json<2.6.1-143.module+el9.3.0+21558+96b51efd
2.6.1-143.module+el9.3.0+21558+96b51efd
redhat/rubygem-json-debuginfo<2.6.1-143.module+el9.3.0+21558+96b51efd
2.6.1-143.module+el9.3.0+21558+96b51efd
redhat/rubygem-mysql2<0.5.4-1.module+el9.1.0+15737+76195479
0.5.4-1.module+el9.1.0+15737+76195479
redhat/rubygem-mysql2-debuginfo<0.5.4-1.module+el9.1.0+15737+76195479
0.5.4-1.module+el9.1.0+15737+76195479
redhat/rubygem-mysql2-debugsource<0.5.4-1.module+el9.1.0+15737+76195479
0.5.4-1.module+el9.1.0+15737+76195479
redhat/rubygem-pg<1.3.5-1.module+el9.1.0+15737+76195479
1.3.5-1.module+el9.1.0+15737+76195479
redhat/rubygem-pg-debuginfo<1.3.5-1.module+el9.1.0+15737+76195479
1.3.5-1.module+el9.1.0+15737+76195479
redhat/rubygem-pg-debugsource<1.3.5-1.module+el9.1.0+15737+76195479
1.3.5-1.module+el9.1.0+15737+76195479
redhat/rubygem-psych<4.0.4-143.module+el9.3.0+21558+96b51efd
4.0.4-143.module+el9.3.0+21558+96b51efd
redhat/rubygem-psych-debuginfo<4.0.4-143.module+el9.3.0+21558+96b51efd
4.0.4-143.module+el9.3.0+21558+96b51efd
redhat/rubygem-rbs<2.7.0-143.module+el9.3.0+21558+96b51efd
2.7.0-143.module+el9.3.0+21558+96b51efd
redhat/rubygem-rbs-debuginfo<2.7.0-143.module+el9.3.0+21558+96b51efd
2.7.0-143.module+el9.3.0+21558+96b51efd
redhat/ruby<3.1.4-143.module+el9.3.0+21558+96b51efd.aa
3.1.4-143.module+el9.3.0+21558+96b51efd.aa
redhat/ruby-bundled-gems<3.1.4-143.module+el9.3.0+21558+96b51efd.aa
3.1.4-143.module+el9.3.0+21558+96b51efd.aa
redhat/ruby-bundled-gems-debuginfo<3.1.4-143.module+el9.3.0+21558+96b51efd.aa
3.1.4-143.module+el9.3.0+21558+96b51efd.aa
redhat/ruby-debuginfo<3.1.4-143.module+el9.3.0+21558+96b51efd.aa
3.1.4-143.module+el9.3.0+21558+96b51efd.aa
redhat/ruby-debugsource<3.1.4-143.module+el9.3.0+21558+96b51efd.aa
3.1.4-143.module+el9.3.0+21558+96b51efd.aa
redhat/ruby-devel<3.1.4-143.module+el9.3.0+21558+96b51efd.aa
3.1.4-143.module+el9.3.0+21558+96b51efd.aa
redhat/ruby-libs<3.1.4-143.module+el9.3.0+21558+96b51efd.aa
3.1.4-143.module+el9.3.0+21558+96b51efd.aa
redhat/ruby-libs-debuginfo<3.1.4-143.module+el9.3.0+21558+96b51efd.aa
3.1.4-143.module+el9.3.0+21558+96b51efd.aa
redhat/rubygem-bigdecimal<3.1.1-143.module+el9.3.0+21558+96b51efd.aa
3.1.1-143.module+el9.3.0+21558+96b51efd.aa
redhat/rubygem-bigdecimal-debuginfo<3.1.1-143.module+el9.3.0+21558+96b51efd.aa
3.1.1-143.module+el9.3.0+21558+96b51efd.aa
redhat/rubygem-io-console<0.5.11-143.module+el9.3.0+21558+96b51efd.aa
0.5.11-143.module+el9.3.0+21558+96b51efd.aa
redhat/rubygem-io-console-debuginfo<0.5.11-143.module+el9.3.0+21558+96b51efd.aa
0.5.11-143.module+el9.3.0+21558+96b51efd.aa
redhat/rubygem-json<2.6.1-143.module+el9.3.0+21558+96b51efd.aa
2.6.1-143.module+el9.3.0+21558+96b51efd.aa
redhat/rubygem-json-debuginfo<2.6.1-143.module+el9.3.0+21558+96b51efd.aa
2.6.1-143.module+el9.3.0+21558+96b51efd.aa
redhat/rubygem-mysql2<0.5.4-1.module+el9.1.0+15737+76195479.aa
0.5.4-1.module+el9.1.0+15737+76195479.aa
redhat/rubygem-mysql2-debuginfo<0.5.4-1.module+el9.1.0+15737+76195479.aa
0.5.4-1.module+el9.1.0+15737+76195479.aa
redhat/rubygem-mysql2-debugsource<0.5.4-1.module+el9.1.0+15737+76195479.aa
0.5.4-1.module+el9.1.0+15737+76195479.aa
redhat/rubygem-pg<1.3.5-1.module+el9.1.0+15737+76195479.aa
1.3.5-1.module+el9.1.0+15737+76195479.aa
redhat/rubygem-pg-debuginfo<1.3.5-1.module+el9.1.0+15737+76195479.aa
1.3.5-1.module+el9.1.0+15737+76195479.aa
redhat/rubygem-pg-debugsource<1.3.5-1.module+el9.1.0+15737+76195479.aa
1.3.5-1.module+el9.1.0+15737+76195479.aa
redhat/rubygem-psych<4.0.4-143.module+el9.3.0+21558+96b51efd.aa
4.0.4-143.module+el9.3.0+21558+96b51efd.aa
redhat/rubygem-psych-debuginfo<4.0.4-143.module+el9.3.0+21558+96b51efd.aa
4.0.4-143.module+el9.3.0+21558+96b51efd.aa
redhat/rubygem-rbs<2.7.0-143.module+el9.3.0+21558+96b51efd.aa
2.7.0-143.module+el9.3.0+21558+96b51efd.aa
redhat/rubygem-rbs-debuginfo<2.7.0-143.module+el9.3.0+21558+96b51efd.aa
2.7.0-143.module+el9.3.0+21558+96b51efd.aa
Red Hat Red Hat Enterprise Linux for x86_64
Red Hat Red Hat Enterprise Linux for IBM z Systems
Red Hat Red Hat Enterprise Linux for ARM 64
Red Hat Red Hat Enterprise Linux for Power, little endian
Remediation
Event History
Apr 1, 2024
Advisory Published
via Red Hat·12:00 AM
Data Sourced
via Red Hat·12:00 AM
RemedyDescriptionAffected Software
Advisory Published
via Red Hat·12:57 AM
Frequently Asked Questions
1
What is the severity of RHSA-2024:1576?
The severity of RHSA-2024:1576 is classified as moderate.
2
How do I fix RHSA-2024:1576?
To fix RHSA-2024:1576, upgrade the affected Ruby packages to the specified versions provided in the advisory.
3
What software does RHSA-2024:1576 affect?
RHSA-2024:1576 affects various versions of Red Hat Enterprise Linux and multiple Ruby packages.
4
What updates are included in RHSA-2024:1576?
RHSA-2024:1576 includes security, bug fixes, and enhancements for Ruby and associated Ruby gems.
5
Is there a known exploit for RHSA-2024:1576?
As of now, there are no publicly available exploits reported for the vulnerabilities addressed in RHSA-2024:1576.