Description
A buffer-overread issue was discovered in StringIO 3.0.1, as distributed in Ruby 3.0.x through 3.0.6 and 3.1.x through 3.1.4. The ungetbyte and ungetc methods on a StringIO can read past the end of a string, and a subsequent call to StringIO.gets may return the memory value. 3.0.3 is the main fixed version; however, for Ruby 3.0 users, a fixed version is stringio 3.0.1.1, and for Ruby 3.1 users, a fixed version is stringio 3.0.1.2.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 12 | ruby3.1 | 3.1.2-7+deb12u1 | DSA-5677-1 |
| Debian 11 | ruby2.7 | 2.7.4-1+deb11u2 | DLA-3858-1 |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 24.04 LTS | ruby3.2 | 3.2.3-1ubuntu0.24.04.6 | USN-7734-1 |
| Ubuntu 22.04 LTS | ruby3.0 | 3.0.2-7ubuntu2.7 | USN-7734-1, USN-6853-1 |
| Ubuntu 20.04 LTS | ruby2.7 | 2.7.0-5ubuntu1.14 | USN-6853-1 |
Show 3 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro 20.04 LTS | ruby2.7 | 2.7.0-5ubuntu1.18+esm1 | USN-7734-1 |
| Ubuntu Pro 18.04 LTS | ruby2.5 | 2.5.1-1ubuntu1.16+esm5 | USN-7734-1 |
| Ubuntu Pro 16.04 LTS | ruby2.3 | No fix yet | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 9 | ruby +4 | 3.0.7-162.el9_4 | RHSA-2024:3838, RHSA-2024:3671, RHSA-2024:3668 |
| RHEL 9 | ruby-bundled-gems | 3.1.5-144.module+el9.4.0+21780+79b7bdb5 | RHSA-2024:3671, RHSA-2024:3668 |
| RHEL 9 | rubygem-bigdecimal | 3.0.0-162.el9_4 | RHSA-2024:3838, RHSA-2024:3671, RHSA-2024:3668 |
| RHEL 9 | rubygem-bundler | 2.2.33-162.el9_4 | RHSA-2024:3838, RHSA-2024:3671, RHSA-2024:3668 |
| RHEL 9 | rubygem-io-console | 0.5.7-162.el9_4 | RHSA-2024:3838, RHSA-2024:3671, RHSA-2024:3668 |
| RHEL 9 | rubygem-irb | 1.3.5-162.el9_4 | RHSA-2024:3838, RHSA-2024:3671, RHSA-2024:3668 |
| RHEL 9 | rubygem-json | 2.5.1-162.el9_4 | RHSA-2024:3838, RHSA-2024:3671, RHSA-2024:3668 |
| RHEL 9 | rubygem-minitest | 5.14.2-162.el9_4 | RHSA-2024:3838, RHSA-2024:3671, RHSA-2024:3668 |
| RHEL 9 | rubygem-mysql2 +1 | 0.5.4-1.module+el9.1.0+15737+76195479 | RHSA-2024:3671, RHSA-2024:3668 |
| RHEL 9 | rubygem-pg +1 | 1.3.5-1.module+el9.1.0+15737+76195479 | RHSA-2024:3671, RHSA-2024:3668 |
| RHEL 9 | rubygem-power_assert | 1.2.1-162.el9_4 | RHSA-2024:3838, RHSA-2024:3671, RHSA-2024:3668 |
| RHEL 9 | rubygem-psych | 3.3.2-162.el9_4 | RHSA-2024:3838, RHSA-2024:3671, RHSA-2024:3668 |
| RHEL 9 | rubygem-racc | 1.7.3-2.module+el9.4.0+21859+16f07581 | RHSA-2024:3671 |
| RHEL 9 | rubygem-rake | 13.0.3-162.el9_4 | RHSA-2024:3838, RHSA-2024:3671, RHSA-2024:3668 |
| RHEL 9 | rubygem-rbs | 1.4.0-162.el9_4 | RHSA-2024:3838, RHSA-2024:3671, RHSA-2024:3668 |
| RHEL 9 | rubygem-rdoc | 6.3.4.1-162.el9_4 | RHSA-2024:3838, RHSA-2024:3671, RHSA-2024:3668 |
| RHEL 9 | rubygem-rexml | 3.2.5-144.module+el9.4.0+21780+79b7bdb5 | RHSA-2024:3838, RHSA-2024:3671, RHSA-2024:3668 |
| RHEL 9 | rubygem-rss | 0.2.9-144.module+el9.4.0+21780+79b7bdb5 | RHSA-2024:3838, RHSA-2024:3671, RHSA-2024:3668 |
| RHEL 9 | rubygem-test-unit | 3.3.7-162.el9_4 | RHSA-2024:3838, RHSA-2024:3671, RHSA-2024:3668 |
| RHEL 9 | rubygem-typeprof | 0.15.2-162.el9_4 | RHSA-2024:3838, RHSA-2024:3671, RHSA-2024:3668 |
| RHEL 9 | rubygems +1 | 3.2.33-162.el9_4 | RHSA-2024:3838, RHSA-2024:3671, RHSA-2024:3668 |
| RHEL 8 | ruby +4 | 2.5.9-112.module+el8.10.0+22021+135c76a8 | RHSA-2024:4499, RHSA-2024:3670, RHSA-2024:3546 |
| RHEL 8 | ruby-bundled-gems | 3.1.5-143.module+el8.10.0+21792+e2f63d26 | RHSA-2024:3670, RHSA-2024:3546 |
| RHEL 8 | ruby-default-gems | 3.0.7-143.module+el8.10.0+21858+d19f3934 | RHSA-2024:3670, RHSA-2024:3546, RHSA-2024:3500 |
| RHEL 8 | rubygem-abrt +1 | 0.3.0-4.module+el8.10.0+22021+135c76a8 | RHSA-2024:4499, RHSA-2024:3670, RHSA-2024:3546 |
| RHEL 8 | rubygem-bigdecimal | 1.3.4-112.module+el8.10.0+22021+135c76a8 | RHSA-2024:4499, RHSA-2024:3670, RHSA-2024:3546 |
| RHEL 8 | rubygem-bson +1 | 4.3.0-2.module+el8.9.0+19193+435404ae | RHSA-2024:4499 |
| RHEL 8 | rubygem-bundler +1 | 1.16.1-4.module+el8.10.0+22021+135c76a8 | RHSA-2024:4499, RHSA-2024:3670, RHSA-2024:3546 |
| RHEL 8 | rubygem-did_you_mean | 1.2.0-112.module+el8.10.0+22021+135c76a8 | RHSA-2024:4499 |
| RHEL 8 | rubygem-io-console | 0.4.6-112.module+el8.10.0+22021+135c76a8 | RHSA-2024:4499, RHSA-2024:3670, RHSA-2024:3546 |
| RHEL 8 | rubygem-irb | 1.3.5-143.module+el8.10.0+21858+d19f3934 | RHSA-2024:3670, RHSA-2024:3546, RHSA-2024:3500 |
| RHEL 8 | rubygem-json | 2.1.0-112.module+el8.10.0+22021+135c76a8 | RHSA-2024:4499, RHSA-2024:3670, RHSA-2024:3546 |
| RHEL 8 | rubygem-minitest | 5.10.3-112.module+el8.10.0+22021+135c76a8 | RHSA-2024:4499, RHSA-2024:3670, RHSA-2024:3546 |
| RHEL 8 | rubygem-mongo +1 | 2.5.1-2.module+el8.9.0+19193+435404ae | RHSA-2024:4499 |
| RHEL 8 | rubygem-mysql2 +1 | 0.4.10-4.module+el8.9.0+19193+435404ae | RHSA-2024:4499, RHSA-2024:3670, RHSA-2024:3546 |
| RHEL 8 | rubygem-net-telnet | 0.1.1-112.module+el8.10.0+22021+135c76a8 | RHSA-2024:4499 |
| RHEL 8 | rubygem-openssl | 2.1.2-112.module+el8.10.0+22021+135c76a8 | RHSA-2024:4499 |
| RHEL 8 | rubygem-pg +1 | 1.0.0-3.module+el8.9.0+19193+435404ae | RHSA-2024:4499, RHSA-2024:3670, RHSA-2024:3546 |
| RHEL 8 | rubygem-power_assert | 1.1.1-112.module+el8.10.0+22021+135c76a8 | RHSA-2024:4499, RHSA-2024:3670, RHSA-2024:3546 |
| RHEL 8 | rubygem-psych | 3.0.2-112.module+el8.10.0+22021+135c76a8 | RHSA-2024:4499, RHSA-2024:3670, RHSA-2024:3546 |
| RHEL 8 | rubygem-racc | 1.7.3-2.module+el8.10.0+21860+47fbda2a | RHSA-2024:3670 |
| RHEL 8 | rubygem-rake | 12.3.3-112.module+el8.10.0+22021+135c76a8 | RHSA-2024:4499, RHSA-2024:3670, RHSA-2024:3546 |
| RHEL 8 | rubygem-rbs | 1.4.0-143.module+el8.10.0+21858+d19f3934 | RHSA-2024:3670, RHSA-2024:3546, RHSA-2024:3500 |
| RHEL 8 | rubygem-rdoc | 6.0.1.1-112.module+el8.10.0+22021+135c76a8 | RHSA-2024:4499, RHSA-2024:3670, RHSA-2024:3546 |
| RHEL 8 | rubygem-rexml | 3.2.5-143.module+el8.10.0+21792+e2f63d26 | RHSA-2024:3670, RHSA-2024:3546, RHSA-2024:3500 |
| RHEL 8 | rubygem-rss | 0.2.9-143.module+el8.10.0+21792+e2f63d26 | RHSA-2024:3670, RHSA-2024:3546, RHSA-2024:3500 |
| RHEL 8 | rubygem-test-unit | 3.2.7-112.module+el8.10.0+22021+135c76a8 | RHSA-2024:4499, RHSA-2024:3670, RHSA-2024:3546 |
| RHEL 8 | rubygem-typeprof | 0.15.2-143.module+el8.10.0+21858+d19f3934 | RHSA-2024:3670, RHSA-2024:3546, RHSA-2024:3500 |
| RHEL 8 | rubygem-xmlrpc | 0.3.0-112.module+el8.10.0+22021+135c76a8 | RHSA-2024:4499 |
| RHEL 8 | rubygems +1 | 2.7.6.3-112.module+el8.10.0+22021+135c76a8 | RHSA-2024:4499, RHSA-2024:3670, RHSA-2024:3546 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 9 | ruby +4 | 3.0.7-162.el9_4 | ALSA-2024:3838, ALSA-2024:3671, ALSA-2024:3668 |
| AlmaLinux 9 | ruby-bundled-gems | 3.1.5-144.module_el9.4.0+101+d58a8d95 | ALSA-2024:3671, ALSA-2024:3668 |
| AlmaLinux 9 | rubygem-bigdecimal | 3.0.0-162.el9_4 | ALSA-2024:3838, ALSA-2024:3671, ALSA-2024:3668 |
| AlmaLinux 9 | rubygem-bundler | 2.2.33-162.el9_4 | ALSA-2024:3838, ALSA-2024:3671, ALSA-2024:3668 |
| AlmaLinux 9 | rubygem-io-console | 0.5.7-162.el9_4 | ALSA-2024:3838, ALSA-2024:3671, ALSA-2024:3668 |
| AlmaLinux 9 | rubygem-irb | 1.3.5-162.el9_4 | ALSA-2024:3838, ALSA-2024:3671, ALSA-2024:3668 |
| AlmaLinux 9 | rubygem-json | 2.5.1-162.el9_4 | ALSA-2024:3838, ALSA-2024:3671, ALSA-2024:3668 |
| AlmaLinux 9 | rubygem-minitest | 5.14.2-162.el9_4 | ALSA-2024:3838, ALSA-2024:3671, ALSA-2024:3668 |
| AlmaLinux 9 | rubygem-mysql2 +1 | 0.5.4-1.module_el9.1.0+8+503f6fbd | ALSA-2024:3671, ALSA-2024:3668 |
| AlmaLinux 9 | rubygem-pg +1 | 1.3.5-1.module_el9.1.0+8+503f6fbd | ALSA-2024:3671, ALSA-2024:3668 |
| AlmaLinux 9 | rubygem-power_assert | 1.2.1-162.el9_4 | ALSA-2024:3838, ALSA-2024:3671, ALSA-2024:3668 |
| AlmaLinux 9 | rubygem-psych | 3.3.2-162.el9_4 | ALSA-2024:3838, ALSA-2024:3671, ALSA-2024:3668 |
| AlmaLinux 9 | rubygem-racc | 1.7.3-2.module_el9.4.0+102+68a93853 | ALSA-2024:3671 |
| AlmaLinux 9 | rubygem-rake | 13.0.3-162.el9_4 | ALSA-2024:3838, ALSA-2024:3671, ALSA-2024:3668 |
| AlmaLinux 9 | rubygem-rbs | 1.4.0-162.el9_4 | ALSA-2024:3838, ALSA-2024:3671, ALSA-2024:3668 |
| AlmaLinux 9 | rubygem-rdoc | 6.3.4.1-162.el9_4 | ALSA-2024:3838, ALSA-2024:3671, ALSA-2024:3668 |
| AlmaLinux 9 | rubygem-rexml | 3.2.5-144.module_el9.4.0+101+d58a8d95 | ALSA-2024:3838, ALSA-2024:3671, ALSA-2024:3668 |
| AlmaLinux 9 | rubygem-rss | 0.2.9-144.module_el9.4.0+101+d58a8d95 | ALSA-2024:3838, ALSA-2024:3671, ALSA-2024:3668 |
| AlmaLinux 9 | rubygem-test-unit | 3.3.7-162.el9_4 | ALSA-2024:3838, ALSA-2024:3671, ALSA-2024:3668 |
| AlmaLinux 9 | rubygem-typeprof | 0.15.2-162.el9_4 | ALSA-2024:3838, ALSA-2024:3671, ALSA-2024:3668 |
| AlmaLinux 9 | rubygems +1 | 3.2.33-162.el9_4 | ALSA-2024:3838, ALSA-2024:3671, ALSA-2024:3668 |
| AlmaLinux 8 | ruby +4 | 2.5.9-112.module_el8.10.0+3871+342e2c2f | ALSA-2024:4499, ALSA-2024:3670, ALSA-2024:3546 |
| AlmaLinux 8 | ruby-bundled-gems | 3.1.5-143.module_el8.10.0+3854+02eaa59a | ALSA-2024:3670, ALSA-2024:3546 |
| AlmaLinux 8 | ruby-default-gems | 3.0.7-143.module_el8.10.0+3852+ce828b19 | ALSA-2024:3670, ALSA-2024:3546, ALSA-2024:3500 |
| AlmaLinux 8 | rubygem-abrt +1 | 0.3.0-4.module_el8.10.0+3871+342e2c2f | ALSA-2024:4499, ALSA-2024:3670, ALSA-2024:3546 |
| AlmaLinux 8 | rubygem-bigdecimal | 1.3.4-112.module_el8.10.0+3871+342e2c2f | ALSA-2024:4499, ALSA-2024:3670, ALSA-2024:3546 |
| AlmaLinux 8 | rubygem-bson | 4.3.0-2.module_el8.5.0+259+8cec6917 | ALSA-2024:4499 |
| AlmaLinux 8 | rubygem-bson-doc | 4.3.0-2.module_el8.5.0+2625+ec418553 | ALSA-2024:4499 |
| AlmaLinux 8 | rubygem-bundler +1 | 1.16.1-4.module_el8.10.0+3871+342e2c2f | ALSA-2024:4499, ALSA-2024:3670, ALSA-2024:3546 |
| AlmaLinux 8 | rubygem-did_you_mean | 1.2.0-112.module_el8.10.0+3871+342e2c2f | ALSA-2024:4499 |
| AlmaLinux 8 | rubygem-io-console | 0.4.6-112.module_el8.10.0+3871+342e2c2f | ALSA-2024:4499, ALSA-2024:3670, ALSA-2024:3546 |
| AlmaLinux 8 | rubygem-irb | 1.3.5-143.module_el8.10.0+3852+ce828b19 | ALSA-2024:3670, ALSA-2024:3546, ALSA-2024:3500 |
| AlmaLinux 8 | rubygem-json | 2.1.0-112.module_el8.10.0+3871+342e2c2f | ALSA-2024:4499, ALSA-2024:3670, ALSA-2024:3546 |
| AlmaLinux 8 | rubygem-minitest | 5.10.3-112.module_el8.10.0+3871+342e2c2f | ALSA-2024:4499, ALSA-2024:3670, ALSA-2024:3546 |
| AlmaLinux 8 | rubygem-mongo +1 | 2.5.1-2.module_el8.5.0+2625+ec418553 | ALSA-2024:4499 |
| AlmaLinux 8 | rubygem-mysql2 | 0.4.10-4.module_el8.5.0+259+8cec6917 | ALSA-2024:4499, ALSA-2024:3670, ALSA-2024:3546 |
| AlmaLinux 8 | rubygem-mysql2-doc | 0.4.10-4.module_el8.5.0+2625+ec418553 | ALSA-2024:4499, ALSA-2024:3670, ALSA-2024:3546 |
| AlmaLinux 8 | rubygem-net-telnet | 0.1.1-112.module_el8.10.0+3871+342e2c2f | ALSA-2024:4499 |
| AlmaLinux 8 | rubygem-openssl | 2.1.2-112.module_el8.10.0+3871+342e2c2f | ALSA-2024:4499 |
| AlmaLinux 8 | rubygem-pg +1 | 1.0.0-3.module_el8.9.0+3635+c6f99506 | ALSA-2024:4499, ALSA-2024:3670, ALSA-2024:3546 |
| AlmaLinux 8 | rubygem-power_assert | 1.1.1-112.module_el8.10.0+3871+342e2c2f | ALSA-2024:4499, ALSA-2024:3670, ALSA-2024:3546 |
| AlmaLinux 8 | rubygem-psych | 3.0.2-112.module_el8.10.0+3871+342e2c2f | ALSA-2024:4499, ALSA-2024:3670, ALSA-2024:3546 |
| AlmaLinux 8 | rubygem-racc | 1.7.3-2.module_el8.10.0+3855+767cb125 | ALSA-2024:3670 |
| AlmaLinux 8 | rubygem-rake | 12.3.3-112.module_el8.10.0+3871+342e2c2f | ALSA-2024:4499, ALSA-2024:3670, ALSA-2024:3546 |
| AlmaLinux 8 | rubygem-rbs | 1.4.0-143.module_el8.10.0+3852+ce828b19 | ALSA-2024:3670, ALSA-2024:3546, ALSA-2024:3500 |
| AlmaLinux 8 | rubygem-rdoc | 6.0.1.1-112.module_el8.10.0+3871+342e2c2f | ALSA-2024:4499, ALSA-2024:3670, ALSA-2024:3546 |
| AlmaLinux 8 | rubygem-rexml | 3.2.5-143.module_el8.10.0+3852+ce828b19 | ALSA-2024:3670, ALSA-2024:3546, ALSA-2024:3500 |
| AlmaLinux 8 | rubygem-rss | 0.2.9-143.module_el8.10.0+3852+ce828b19 | ALSA-2024:3670, ALSA-2024:3546, ALSA-2024:3500 |
| AlmaLinux 8 | rubygem-test-unit | 3.2.7-112.module_el8.10.0+3871+342e2c2f | ALSA-2024:4499, ALSA-2024:3670, ALSA-2024:3546 |
| AlmaLinux 8 | rubygem-typeprof | 0.15.2-143.module_el8.10.0+3852+ce828b19 | ALSA-2024:3670, ALSA-2024:3546, ALSA-2024:3500 |
| AlmaLinux 8 | rubygem-xmlrpc | 0.3.0-112.module_el8.10.0+3871+342e2c2f | ALSA-2024:4499 |
| AlmaLinux 8 | rubygems +1 | 2.7.6.3-112.module_el8.10.0+3871+342e2c2f | ALSA-2024:4499, ALSA-2024:3670, ALSA-2024:3546 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 9 | rubygem-mysql2 | 0.5.4-1.module+el9.6.0+31865+0893c253 | RLSA-2024:3671, RLSA-2024:3668 |
| Rocky Linux 9 | rubygem-pg | 1.3.5-1.module+el9.6.0+31865+0893c253 | RLSA-2024:3671, RLSA-2024:3668 |
| Rocky Linux 8 | ruby | 2.5.9-112.module+el8.10.0+1839+f1f156ae | RLSA-2024:4499, RLSA-2024:3670 |
| Rocky Linux 8 | rubygem-abrt | 0.3.0-4.module+el8.5.0+738+032c9c02 | RLSA-2024:4499, RLSA-2024:3670 |
| Rocky Linux 8 | rubygem-bson | 4.3.0-2.module+el8.9.0+1536+5f79634e | RLSA-2024:4499 |
| Rocky Linux 8 | rubygem-bundler | 1.16.1-4.module+el8.9.0+1536+5f79634e | RLSA-2024:4499 |
| Rocky Linux 8 | rubygem-mongo | 2.5.1-2.module+el8.9.0+1536+5f79634e | RLSA-2024:4499 |
| Rocky Linux 8 | rubygem-mysql2 | 0.4.10-4.module+el8.9.0+1536+5f79634e | RLSA-2024:4499, RLSA-2024:3670 |
| Rocky Linux 8 | rubygem-pg | 1.0.0-3.module+el8.9.0+1536+5f79634e | RLSA-2024:4499, RLSA-2024:3670 |
Alpine
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.24 | ruby | 3.3.1-r0 | — |
| Alpine v3.23 | ruby | 3.3.1-r0 | — |
| Alpine v3.22 | ruby | 3.3.1-r0 | — |
| Alpine v3.21 | ruby | 3.3.1-r0 | — |
| Alpine v3.20 | ruby | 3.3.1-r0 | — |
Show 4 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.19 | ruby | 3.2.4-r0 | — |
| Alpine v3.18 | ruby | 3.2.4-r0 | — |
| Alpine v3.17 | ruby | 3.1.5-r0 | — |
| Alpine v3.16 | ruby | 3.1.5-r0 | — |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 9 | ruby +4 | 3.0.7-162.el9_4 | ELSA-2024-3838, ELSA-2024-3671, ELSA-2024-3668 |
| Oracle Linux 9 | ruby-bundled-gems | 3.1.5-144.module+el9.4.0+90348+c2ef46bf | ELSA-2024-3671, ELSA-2024-3668 |
| Oracle Linux 9 | rubygem-bigdecimal | 3.0.0-162.el9_4 | ELSA-2024-3838, ELSA-2024-3671, ELSA-2024-3668 |
| Oracle Linux 9 | rubygem-bundler | 2.2.33-162.el9_4 | ELSA-2024-3838, ELSA-2024-3671, ELSA-2024-3668 |
| Oracle Linux 9 | rubygem-io-console | 0.5.7-162.el9_4 | ELSA-2024-3838, ELSA-2024-3671, ELSA-2024-3668 |
| Oracle Linux 9 | rubygem-irb | 1.3.5-162.el9_4 | ELSA-2024-3838, ELSA-2024-3671, ELSA-2024-3668 |
| Oracle Linux 9 | rubygem-json | 2.5.1-162.el9_4 | ELSA-2024-3838, ELSA-2024-3671, ELSA-2024-3668 |
| Oracle Linux 9 | rubygem-minitest | 5.14.2-162.el9_4 | ELSA-2024-3838, ELSA-2024-3671, ELSA-2024-3668 |
| Oracle Linux 9 | rubygem-mysql2 +1 | 0.5.4-1.module+el9.1.0+20815+286161bd | ELSA-2024-3671, ELSA-2024-3668 |
| Oracle Linux 9 | rubygem-pg +1 | 1.3.5-1.module+el9.1.0+20815+286161bd | ELSA-2024-3671, ELSA-2024-3668 |
| Oracle Linux 9 | rubygem-power_assert | 1.2.1-162.el9_4 | ELSA-2024-3838, ELSA-2024-3671, ELSA-2024-3668 |
| Oracle Linux 9 | rubygem-psych | 3.3.2-162.el9_4 | ELSA-2024-3838, ELSA-2024-3671, ELSA-2024-3668 |
| Oracle Linux 9 | rubygem-racc | 1.7.3-2.module+el9.4.0+90346+4cb4c4f5 | ELSA-2024-3671 |
| Oracle Linux 9 | rubygem-rake | 13.0.3-162.el9_4 | ELSA-2024-3838, ELSA-2024-3671, ELSA-2024-3668 |
| Oracle Linux 9 | rubygem-rbs | 1.4.0-162.el9_4 | ELSA-2024-3838, ELSA-2024-3671, ELSA-2024-3668 |
| Oracle Linux 9 | rubygem-rdoc | 6.3.4.1-162.el9_4 | ELSA-2024-3838, ELSA-2024-3671, ELSA-2024-3668 |
| Oracle Linux 9 | rubygem-rexml | 3.2.5-144.module+el9.4.0+90348+c2ef46bf | ELSA-2024-3838, ELSA-2024-3671, ELSA-2024-3668 |
| Oracle Linux 9 | rubygem-rss | 0.2.9-144.module+el9.4.0+90348+c2ef46bf | ELSA-2024-3838, ELSA-2024-3671, ELSA-2024-3668 |
| Oracle Linux 9 | rubygem-test-unit | 3.3.7-162.el9_4 | ELSA-2024-3838, ELSA-2024-3671, ELSA-2024-3668 |
| Oracle Linux 9 | rubygem-typeprof | 0.15.2-162.el9_4 | ELSA-2024-3838, ELSA-2024-3671, ELSA-2024-3668 |
| Oracle Linux 9 | rubygems +1 | 3.2.33-162.el9_4 | ELSA-2024-3838, ELSA-2024-3671, ELSA-2024-3668 |
| Oracle Linux 8 | ruby +4 | 2.5.9-112.module+el8.10.0+90367+ae9e8511 | ELSA-2024-4499, ELSA-2024-3670, ELSA-2024-3546 |
| Oracle Linux 8 | ruby-bundled-gems | 3.1.5-143.module+el8.10.0+90344+fc5884b3 | ELSA-2024-3670, ELSA-2024-3546 |
| Oracle Linux 8 | ruby-default-gems | 3.0.7-143.module+el8.10.0+90343+d5e92a1d | ELSA-2024-3670, ELSA-2024-3546, ELSA-2024-3500 |
| Oracle Linux 8 | rubygem-abrt +1 | 0.3.0-4.module+el8.10.0+90367+ae9e8511 | ELSA-2024-4499, ELSA-2024-3670, ELSA-2024-3546 |
| Oracle Linux 8 | rubygem-bigdecimal | 1.3.4-112.module+el8.10.0+90367+ae9e8511 | ELSA-2024-4499, ELSA-2024-3670, ELSA-2024-3546 |
| Oracle Linux 8 | rubygem-bson +1 | 4.3.0-2.module+el8.9.0+90042+a65659a6 | ELSA-2024-4499 |
| Oracle Linux 8 | rubygem-bundler +1 | 1.16.1-4.module+el8.10.0+90367+ae9e8511 | ELSA-2024-4499, ELSA-2024-3670, ELSA-2024-3546 |
| Oracle Linux 8 | rubygem-did_you_mean | 1.2.0-112.module+el8.10.0+90367+ae9e8511 | ELSA-2024-4499 |
| Oracle Linux 8 | rubygem-io-console | 0.4.6-112.module+el8.10.0+90367+ae9e8511 | ELSA-2024-4499, ELSA-2024-3670, ELSA-2024-3546 |
| Oracle Linux 8 | rubygem-irb | 1.3.5-143.module+el8.10.0+90343+d5e92a1d | ELSA-2024-3670, ELSA-2024-3546, ELSA-2024-3500 |
| Oracle Linux 8 | rubygem-json | 2.1.0-112.module+el8.10.0+90367+ae9e8511 | ELSA-2024-4499, ELSA-2024-3670, ELSA-2024-3546 |
| Oracle Linux 8 | rubygem-minitest | 5.10.3-112.module+el8.10.0+90367+ae9e8511 | ELSA-2024-4499, ELSA-2024-3670, ELSA-2024-3546 |
| Oracle Linux 8 | rubygem-mongo +1 | 2.5.1-2.module+el8.9.0+90042+a65659a6 | ELSA-2024-4499 |
| Oracle Linux 8 | rubygem-mysql2 +1 | 0.4.10-4.module+el8.9.0+90042+a65659a6 | ELSA-2024-4499, ELSA-2024-3670, ELSA-2024-3546 |
| Oracle Linux 8 | rubygem-net-telnet | 0.1.1-112.module+el8.10.0+90367+ae9e8511 | ELSA-2024-4499 |
| Oracle Linux 8 | rubygem-openssl | 2.1.2-112.module+el8.10.0+90367+ae9e8511 | ELSA-2024-4499 |
| Oracle Linux 8 | rubygem-pg +1 | 1.0.0-3.module+el8.9.0+90042+a65659a6 | ELSA-2024-4499, ELSA-2024-3670, ELSA-2024-3546 |
| Oracle Linux 8 | rubygem-power_assert | 1.1.1-112.module+el8.10.0+90367+ae9e8511 | ELSA-2024-4499, ELSA-2024-3670, ELSA-2024-3546 |
| Oracle Linux 8 | rubygem-psych | 3.0.2-112.module+el8.10.0+90367+ae9e8511 | ELSA-2024-4499, ELSA-2024-3670, ELSA-2024-3546 |
| Oracle Linux 8 | rubygem-racc | 1.7.3-2.module+el8.10.0+90349+dd8a48dc | ELSA-2024-3670 |
| Oracle Linux 8 | rubygem-rake | 12.3.3-112.module+el8.10.0+90367+ae9e8511 | ELSA-2024-4499, ELSA-2024-3670, ELSA-2024-3546 |
| Oracle Linux 8 | rubygem-rbs | 1.4.0-143.module+el8.10.0+90343+d5e92a1d | ELSA-2024-3670, ELSA-2024-3546, ELSA-2024-3500 |
| Oracle Linux 8 | rubygem-rdoc | 6.0.1.1-112.module+el8.10.0+90367+ae9e8511 | ELSA-2024-4499, ELSA-2024-3670, ELSA-2024-3546 |
| Oracle Linux 8 | rubygem-rexml | 3.2.5-143.module+el8.10.0+90343+d5e92a1d | ELSA-2024-3670, ELSA-2024-3546, ELSA-2024-3500 |
| Oracle Linux 8 | rubygem-rss | 0.2.9-143.module+el8.10.0+90343+d5e92a1d | ELSA-2024-3670, ELSA-2024-3546, ELSA-2024-3500 |
| Oracle Linux 8 | rubygem-test-unit | 3.2.7-112.module+el8.10.0+90367+ae9e8511 | ELSA-2024-4499, ELSA-2024-3670, ELSA-2024-3546 |
| Oracle Linux 8 | rubygem-typeprof | 0.15.2-143.module+el8.10.0+90343+d5e92a1d | ELSA-2024-3670, ELSA-2024-3546, ELSA-2024-3500 |
| Oracle Linux 8 | rubygem-xmlrpc | 0.3.0-112.module+el8.10.0+90367+ae9e8511 | ELSA-2024-4499 |
| Oracle Linux 8 | rubygems +1 | 2.7.6.3-112.module+el8.10.0+90367+ae9e8511 | ELSA-2024-4499, ELSA-2024-3670, ELSA-2024-3546 |
Wolfi
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Wolfi rolling | ruby-3.1 | 3.1.4-r6 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| RubyGems | stringio | < 3.0.1.1 | 3.0.1.1 | GHSA-v5h6-c2hv-hv3r |
Advisories 36
- ALSA-2024:3838 Moderate: ruby security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2024:3668 Moderate: ruby:3.1 security, bug fix, and enhancement update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2024:3671 Moderate: ruby:3.3 security, bug fix, and enhancement update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2024:4499 Moderate: ruby security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2024:3500 Moderate: ruby:3.0 security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2024:3546 Moderate: ruby:3.1 security, bug fix, and enhancement update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2024:3670 Moderate: ruby:3.3 security, bug fix, and enhancement update AlmaLinux Security Advisories · Oct 29, 2026
- WID-SEC-2025-2063 Apple macOS Sequoia, Sonoma und Tahoe: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 11, 2026
- WID-SEC-2025-0166 Oracle PeopleSoft: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 11, 2026
- WID-SEC-2025-0168 Oracle JD Edwards: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 11, 2026
- WID-SEC-2024-0682 Ruby: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 11, 2026
- RHSA-2024:4499 Red Hat Security Advisory: ruby security update Red Hat Security Advisories (RHSA) · Aug 20, 2026
- RHSA-2024:3838 Red Hat Security Advisory: ruby security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2024:3500 Red Hat Security Advisory: ruby:3.0 security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2024:3671 Red Hat Security Advisory: ruby:3.3 security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · May 7, 2026
- RHSA-2024:3670 Red Hat Security Advisory: ruby:3.3 security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · May 7, 2026
- RHSA-2024:3668 Red Hat Security Advisory: ruby:3.1 security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · May 7, 2026
- RHSA-2024:3546 Red Hat Security Advisory: ruby:3.1 security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · May 7, 2026
- USN-7734-1 ruby2.5, ruby2.7, ruby3.0, ruby3.2, ruby3.3 vulnerabilities Ubuntu Security Notices (USN) · Apr 27, 2026
- USN-6853-1 ruby2.7, ruby3.0, ruby3.1 vulnerability Ubuntu Security Notices (USN) · Apr 27, 2026
- DSA-5677-1 ruby3.1 - security update Debian Security (DSA / DLA) · Mar 9, 2026
- DLA-3858-1 ruby2.7 - security update Debian Security (DSA / DLA) · Mar 9, 2026
- RLSA-2024:4499 Moderate: ruby security update Rocky Linux Security Advisories · Feb 5, 2026
- RLSA-2024:3670 Moderate: ruby:3.3 security, bug fix, and enhancement update Rocky Linux Security Advisories · Feb 4, 2026
- RLSA-2024:3668 Moderate: ruby:3.1 security, bug fix, and enhancement update Rocky Linux Security Advisories · Oct 9, 2025
- RLSA-2024:3671 Moderate: ruby:3.3 security, bug fix, and enhancement update Rocky Linux Security Advisories · Oct 9, 2025
- NCSC-2025-0290 Kwetsbaarheden verholpen in Apple macOS NCSC-NL (Netherlands) · Sep 16, 2025
- NCSC-2025-0026 Kwetsbaarheden verholpen in Oracle JD Edwards NCSC-NL (Netherlands) · Jan 22, 2025
- NCSC-2025-0023 Kwetsbaarheden verholpen in Oracle PeopleSoft NCSC-NL (Netherlands) · Jan 22, 2025
- ELSA-2024-4499 Moderate: ruby security update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · Jul 15, 2024
- ELSA-2024-3838 Moderate: ruby security update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · Jun 13, 2024
- ELSA-2024-3670 Moderate: ruby:3.3 security, bug fix, and enhancement update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · Jun 7, 2024
- ELSA-2024-3671 Moderate: ruby:3.3 security, bug fix, and enhancement update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · Jun 6, 2024
- ELSA-2024-3668 Moderate: ruby:3.1 security, bug fix, and enhancement update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · Jun 6, 2024
- ELSA-2024-3546 Moderate: ruby:3.1 security, bug fix, and enhancement update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · Jun 3, 2024
- ELSA-2024-3500 Moderate: ruby:3.0 security update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · May 31, 2024