Every CVE Search/ Get API key

CVE-2024-27282

An issue was discovered in Ruby 3.x through 3.3.0. If attacker-supplied data is provided to the...

6.6 MediumFix available

An issue was discovered in Ruby 3.x through 3.3.0. If attacker-supplied data is provided to the Ruby regex compiler, it is possible to extract arbitrary heap data relative to the start of the text, including pointers and sensitive strings. The fixed versions are 3.0.7, 3.1.5, 3.2.4, and 3.3.1.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
None
User interaction
Required

What an attacker can affect

Confidentiality
High
Integrity
Low
Availability
Low

Exploit likelihood

0.66%Up 0.6 points since Feb 14, 2025
90%50%10%1%

What each source reports

CVE List Score used 6.6

An issue was discovered in Ruby 3.x through 3.3.0. If attacker-supplied data is provided to the Ruby regex compiler, it is possible to extract arbitrary heap data relative to the start of the text, including pointers and sensitive strings. The fixed versions are 3.0.7, 3.1.5, 3.2.4, and 3.3.1.

Record
CVE-2024-27282
CVSS 3.1
6.6 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L
Weakness
CWE-125
Updated
2026-11-02
EUVDEUVD-2024-24519 6.6

An issue was discovered in Ruby 3.x through 3.3.0. If attacker-supplied data is provided to the Ruby regex compiler, it is possible to extract arbitrary heap data relative to the start of the text, including pointers and sensitive strings. The fixed versions are 3.0.7, 3.1.5, 3.2.4, and 3.3.1.

Record
EUVD-2024-24519
CVSS 3.1
6.6 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L
Updated
2026-11-02
GitHub AdvisoriesGHSA-63cq-cj6g-qfr2 6.6

An issue was discovered in Ruby 3.x through 3.3.0. If attacker-supplied data is provided to the...

An issue was discovered in Ruby 3.x through 3.3.0. If attacker-supplied data is provided to the Ruby regex compiler, it is possible to extract arbitrary heap data relative to the start of the text, including pointers and sensitive strings. The fixed versions are 3.0.7, 3.1.5, 3.2.4, and 3.3.1.

Record
GHSA-63cq-cj6g-qfr2
CVSS 3.1
6.6 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L
Weakness
CWE-125
Updated
2026-11-02
NVD 6.6

An issue was discovered in Ruby 3.x through 3.3.0. If attacker-supplied data is provided to the Ruby regex compiler, it is possible to extract arbitrary heap data relative to the start of the text, including pointers and sensitive strings. The fixed versions are 3.0.7, 3.1.5, 3.2.4, and 3.3.1.

Record
CVE-2024-27282
CVSS 3.1
6.6 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L
Weakness
CWE-125
Updated
2026-11-02
OSVALPINE-CVE-2024-27282 6.6

An issue was discovered in Ruby 3.x through 3.3.0. If attacker-supplied data is provided to the Ruby regex compiler, it is possible to extract arbitrary heap data relative to the start of the text, including pointers and sensitive strings. The fixed versions are 3.0.7, 3.1.5, 3.2.4, and 3.3.1.

Record
ALPINE-CVE-2024-27282
CVSS 3.1
6.6 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L
Updated
2026-11-02
OSVBELL-CVE-2024-27282 6.6
Record
BELL-CVE-2024-27282
CVSS 3.1
6.6 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L
Updated
2026-11-02
Show 37 moreShow less
OSVDEBIAN-CVE-2024-27282 6.6

An issue was discovered in Ruby 3.x through 3.3.0. If attacker-supplied data is provided to the Ruby regex compiler, it is possible to extract arbitrary heap data relative to the start of the text, including pointers and sensitive strings. The fixed versions are 3.0.7, 3.1.5, 3.2.4, and 3.3.1.

Record
DEBIAN-CVE-2024-27282
CVSS 3.1
6.6 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L
Updated
2026-11-02
OSVOESA-2024-1545 3.5

ruby security update

Ruby is a fast and easy interpreted scripting language for object-oriented programming. It has many functions for processing text Files and perform system management tasks (such as Perl).

Security Fix(es):

An issue was discovered in Ruby 3.x through 3.3.0. If attacker-supplied data is provided to the Ruby regex compiler, it is possible to extract arbitrary heap data relative to the start of the text, including pointers and sensitive strings. The fixed versions are 3.0.7, 3.1.5, 3.2.4, and 3.3.1.(CVE-2024-27282)

Record
OESA-2024-1545
CVSS 3.1
3.5 LowCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Updated
2026-11-02
OSVOESA-2024-1607 3.5

ruby security update

Ruby is a fast and easy interpreted scripting language for object-oriented programming. It has many functions for processing text Files and perform system management tasks (such as Perl).

Security Fix(es):

An issue was discovered in Ruby 3.x through 3.3.0. If attacker-supplied data is provided to the Ruby regex compiler, it is possible to extract arbitrary heap data relative to the start of the text, including pointers and sensitive strings. The fixed versions are 3.0.7, 3.1.5, 3.2.4, and 3.3.1.(CVE-2024-27282)

Record
OESA-2024-1607
CVSS 3.1
3.5 LowCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Updated
2026-11-02
OSVOESA-2024-1608 3.5

ruby security update

Ruby is a fast and easy interpreted scripting language for object-oriented programming. It has many functions for processing text Files and perform system management tasks (such as Perl).

Security Fix(es):

An issue was discovered in Ruby 3.x through 3.3.0. If attacker-supplied data is provided to the Ruby regex compiler, it is possible to extract arbitrary heap data relative to the start of the text, including pointers and sensitive strings. The fixed versions are 3.0.7, 3.1.5, 3.2.4, and 3.3.1.(CVE-2024-27282)

Record
OESA-2024-1608
CVSS 3.1
3.5 LowCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Updated
2026-11-02
OSVOESA-2024-1609 3.5

ruby security update

Ruby is a fast and easy interpreted scripting language for object-oriented programming. It has many functions for processing text Files and perform system management tasks (such as Perl).

Security Fix(es):

An issue was discovered in Ruby 3.x through 3.3.0. If attacker-supplied data is provided to the Ruby regex compiler, it is possible to extract arbitrary heap data relative to the start of the text, including pointers and sensitive strings. The fixed versions are 3.0.7, 3.1.5, 3.2.4, and 3.3.1.(CVE-2024-27282)

Record
OESA-2024-1609
CVSS 3.1
3.5 LowCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Updated
2026-11-02
OSVOESA-2024-1610 3.5

ruby security update

Ruby is a fast and easy interpreted scripting language for object-oriented programming. It has many functions for processing text Files and perform system management tasks (such as Perl).

Security Fix(es):

An issue was discovered in Ruby 3.x through 3.3.0. If attacker-supplied data is provided to the Ruby regex compiler, it is possible to extract arbitrary heap data relative to the start of the text, including pointers and sensitive strings. The fixed versions are 3.0.7, 3.1.5, 3.2.4, and 3.3.1.(CVE-2024-27282)

Record
OESA-2024-1610
CVSS 3.1
3.5 LowCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Updated
2026-11-02
OSVOESA-2024-1611 3.5

ruby security update

Ruby is a fast and easy interpreted scripting language for object-oriented programming. It has many functions for processing text Files and perform system management tasks (such as Perl).

Security Fix(es):

An issue was discovered in Ruby 3.x through 3.3.0. If attacker-supplied data is provided to the Ruby regex compiler, it is possible to extract arbitrary heap data relative to the start of the text, including pointers and sensitive strings. The fixed versions are 3.0.7, 3.1.5, 3.2.4, and 3.3.1.(CVE-2024-27282)

Record
OESA-2024-1611
CVSS 3.1
3.5 LowCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Updated
2026-11-02
OSVRHSA-2024:3500 8.8

Red Hat Security Advisory: ruby:3.0 security update

Record
RHSA-2024:3500
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2024:3546 6.6

Red Hat Security Advisory: ruby:3.1 security, bug fix, and enhancement update

Record
RHSA-2024:3546
CVSS 3.1
6.6 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L
Updated
2026-11-02
OSVRHSA-2024:3668 6.6

Red Hat Security Advisory: ruby:3.1 security, bug fix, and enhancement update

Record
RHSA-2024:3668
CVSS 3.1
6.6 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L
Updated
2026-11-02
OSVRHSA-2024:3670 6.6

Red Hat Security Advisory: ruby:3.3 security, bug fix, and enhancement update

Record
RHSA-2024:3670
CVSS 3.1
6.6 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L
Updated
2026-11-02
OSVRHSA-2024:3671 6.6

Red Hat Security Advisory: ruby:3.3 security, bug fix, and enhancement update

Record
RHSA-2024:3671
CVSS 3.1
6.6 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L
Updated
2026-11-02
OSVRHSA-2024:3838 8.8

Red Hat Security Advisory: ruby security update

Record
RHSA-2024:3838
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2024:4499 6.6

Red Hat Security Advisory: ruby security update

Record
RHSA-2024:4499
CVSS 3.1
6.6 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L
Updated
2026-11-02
OSVRHSA-2026:7305 7.5

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Record
RHSA-2026:7305
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Updated
2026-11-02
OSVRHSA-2026:7307 7.5

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Record
RHSA-2026:7307
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Updated
2026-11-02
OSVRHSA-2026:8838 7.5

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Record
RHSA-2026:8838
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Updated
2026-11-02
OSVRLSA-2024:3668 6.6

Moderate: ruby:3.1 security, bug fix, and enhancement update

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.

The following packages have been upgraded to a later upstream version: ruby (3.1). (Rocky Linux-35449)

Security Fix(es):

  • ruby: Buffer overread vulnerability in StringIO (CVE-2024-27280)

  • ruby: RCE vulnerability with .rdoc_options in RDoc (CVE-2024-27281)

  • ruby: Arbitrary memory address read vulnerability with Regex search (CVE-2024-27282)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2024:3668
CVSS 3.1
6.6 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L
Updated
2026-11-02
OSVRLSA-2024:3671 6.6

Moderate: ruby:3.3 security, bug fix, and enhancement update

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.

The following packages have been upgraded to a later upstream version: ruby (3.3). (Rocky Linux-37697)

Security Fix(es):

  • ruby: Buffer overread vulnerability in StringIO (CVE-2024-27280)

  • ruby: RCE vulnerability with .rdoc_options in RDoc (CVE-2024-27281)

  • ruby: Arbitrary memory address read vulnerability with Regex search (CVE-2024-27282)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2024:3671
CVSS 3.1
6.6 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L
Updated
2026-11-02
OSVUBUNTU-CVE-2024-27282 6.6

An issue was discovered in Ruby 3.x through 3.3.0. If attacker-supplied data is provided to the Ruby regex compiler, it is possible to extract arbitrary heap data relative to the start of the text, including pointers and sensitive strings. The fixed versions are 3.0.7, 3.1.5, 3.2.4, and 3.3.1.

Record
UBUNTU-CVE-2024-27282
CVSS 3.1
6.6 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L
Updated
2026-11-02
OSVALSA-2024:3500 No score

Moderate: ruby:3.0 security update

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.

Security Fix(es):

  • ruby/cgi-gem: HTTP response splitting in CGI (CVE-2021-33621)
  • ruby: ReDoS vulnerability in URI (CVE-2023-28755)
  • ruby: ReDoS vulnerability in Time (CVE-2023-28756)
  • ruby: RCE vulnerability with .rdoc_options in RDoc (CVE-2024-27281)
  • ruby: Buffer overread vulnerability in StringIO (CVE-2024-27280)
  • ruby: Arbitrary memory address read vulnerability with Regex search (CVE-2024-27282)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2024:3500
Updated
2026-11-02
OSVALSA-2024:3546 No score

Moderate: ruby:3.1 security, bug fix, and enhancement update

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.

Security Fix(es):

  • ruby: RCE vulnerability with .rdoc_options in RDoc (CVE-2024-27281)
  • ruby: Buffer overread vulnerability in StringIO (CVE-2024-27280)
  • ruby: Arbitrary memory address read vulnerability with Regex search (CVE-2024-27282)

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

Record
ALSA-2024:3546
Updated
2026-11-02
OSVALSA-2024:3668 No score

Moderate: ruby:3.1 security, bug fix, and enhancement update

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.

The following packages have been upgraded to a later upstream version: ruby (3.1). (AlmaLinux-35449)

Security Fix(es):

  • ruby: Buffer overread vulnerability in StringIO (CVE-2024-27280)
  • ruby: RCE vulnerability with .rdoc_options in RDoc (CVE-2024-27281)
  • ruby: Arbitrary memory address read vulnerability with Regex search (CVE-2024-27282)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2024:3668
Updated
2026-11-02
OSVALSA-2024:3670 No score

Moderate: ruby:3.3 security, bug fix, and enhancement update

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.

The following packages have been upgraded to a later upstream version: ruby (3.3). (AlmaLinux-37446)

Security Fix(es):

  • ruby: Buffer overread vulnerability in StringIO (CVE-2024-27280)
  • ruby: RCE vulnerability with .rdoc_options in RDoc (CVE-2024-27281)
  • ruby: Arbitrary memory address read vulnerability with Regex search (CVE-2024-27282)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2024:3670
Updated
2026-11-02
OSVALSA-2024:3671 No score

Moderate: ruby:3.3 security, bug fix, and enhancement update

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.

The following packages have been upgraded to a later upstream version: ruby (3.3). (AlmaLinux-37697)

Security Fix(es):

  • ruby: Buffer overread vulnerability in StringIO (CVE-2024-27280)
  • ruby: RCE vulnerability with .rdoc_options in RDoc (CVE-2024-27281)
  • ruby: Arbitrary memory address read vulnerability with Regex search (CVE-2024-27282)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2024:3671
Updated
2026-11-02
OSVALSA-2024:3838 No score

Moderate: ruby security update

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.

The following packages have been upgraded to a later upstream version: ruby (3.0). (AlmaLinux-35740)

Security Fix(es):

  • ruby/cgi-gem: HTTP response splitting in CGI (CVE-2021-33621)
  • ruby: ReDoS vulnerability in URI (CVE-2023-28755)
  • ruby: ReDoS vulnerability in Time (CVE-2023-28756)
  • ruby: Buffer overread vulnerability in StringIO (CVE-2024-27280)
  • ruby: RCE vulnerability with .rdoc_options in RDoc (CVE-2024-27281)
  • ruby: Arbitrary memory address read vulnerability with Regex search (CVE-2024-27282)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2024:3838
Updated
2026-11-02
OSVALSA-2024:4499 No score

Moderate: ruby security update

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.

Security Fix(es):

  • rubygem-uri: ReDoS vulnerability - upstream's incomplete fix for CVE-2023-28755 (CVE-2023-36617)
  • ruby: Buffer overread vulnerability in StringIO (CVE-2024-27280)
  • ruby: RCE vulnerability with .rdoc_options in RDoc (CVE-2024-27281)
  • ruby: Arbitrary memory address read vulnerability with Regex search (CVE-2024-27282)
  • REXML: DoS parsing an XML with many <s in an attribute value (CVE-2024-35176)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2024:4499
Updated
2026-11-02
OSVAZL-40520 No score

CVE-2024-27282 affecting package ruby for versions less than 3.3.3-1

An issue was discovered in Ruby 3.x through 3.3.0. If attacker-supplied data is provided to the Ruby regex compiler, it is possible to extract arbitrary heap data relative to the start of the text, including pointers and sensitive strings. The fixed versions are 3.0.7, 3.1.5, 3.2.4, and 3.3.1.

Record
AZL-40520
Updated
2026-11-02
OSVAZL-40733 No score

CVE-2024-27282 affecting package ruby for versions less than 3.1.4-5

An issue was discovered in Ruby 3.x through 3.3.0. If attacker-supplied data is provided to the Ruby regex compiler, it is possible to extract arbitrary heap data relative to the start of the text, including pointers and sensitive strings. The fixed versions are 3.0.7, 3.1.5, 3.2.4, and 3.3.1.

Record
AZL-40733
Updated
2026-11-02
OSVBIT-ruby-2024-27282 No score

An issue was discovered in Ruby 3.x through 3.3.0. If attacker-supplied data is provided to the Ruby regex compiler, it is possible to extract arbitrary heap data relative to the start of the text, including pointers and sensitive strings. The fixed versions are 3.0.7, 3.1.5, 3.2.4, and 3.3.1.

Record
BIT-ruby-2024-27282
Updated
2026-11-02
OSVBIT-ruby-min-2024-27282 No score

An issue was discovered in Ruby 3.x through 3.3.0. If attacker-supplied data is provided to the Ruby regex compiler, it is possible to extract arbitrary heap data relative to the start of the text, including pointers and sensitive strings. The fixed versions are 3.0.7, 3.1.5, 3.2.4, and 3.3.1.

Record
BIT-ruby-min-2024-27282
Updated
2026-11-02
OSV No score

An issue was discovered in Ruby 3.x through 3.3.0. If attacker-supplied data is provided to the Ruby regex compiler, it is possible to extract arbitrary heap data relative to the start of the text, including pointers and sensitive strings. The fixed versions are 3.0.7, 3.1.5, 3.2.4, and 3.3.1.

Record
CVE-2024-27282
Updated
2026-11-02
OSVMGASA-2024-0160 No score

Updated ruby packages fix security vulnerabilities

Buffer overread vulnerability in StringIO. (CVE-2024-27280) RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282)

Record
MGASA-2024-0160
Updated
2026-11-02
OSVRLSA-2024:3670 No score

Moderate: ruby:3.3 security, bug fix, and enhancement update

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.

The following packages have been upgraded to a later upstream version: ruby (3.3). (Rocky Linux-37446)

Security Fix(es):

  • ruby: Buffer overread vulnerability in StringIO (CVE-2024-27280)

  • ruby: RCE vulnerability with .rdoc_options in RDoc (CVE-2024-27281)

  • ruby: Arbitrary memory address read vulnerability with Regex search (CVE-2024-27282)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2024:3670
Updated
2026-11-02
OSVRLSA-2024:4499 No score

Moderate: ruby security update

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.

Security Fix(es):

  • rubygem-uri: ReDoS vulnerability - upstream's incomplete fix for CVE-2023-28755 (CVE-2023-36617)

  • ruby: Buffer overread vulnerability in StringIO (CVE-2024-27280)

  • ruby: RCE vulnerability with .rdoc_options in RDoc (CVE-2024-27281)

  • ruby: Arbitrary memory address read vulnerability with Regex search (CVE-2024-27282)

  • REXML: DoS parsing an XML with many <s in an attribute value (CVE-2024-35176)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2024:4499
Updated
2026-11-02
OSVUSN-6838-1 No score

ruby2.7, ruby3.0, ruby3.1, ruby3.2 vulnerabilities

It was discovered that Ruby RDoc incorrectly parsed certain YAML files. If a user or automated system were tricked into parsing a specially crafted .rdoc_options file, a remote attacker could possibly use this issue to execute arbitrary code. (CVE-2024-27281)

It was discovered that the Ruby regex compiler incorrectly handled certain memory operations. A remote attacker could possibly use this issue to obtain sensitive memory contents. (CVE-2024-27282)

Record
USN-6838-1
Updated
2026-11-02
OSVUSN-7734-1 No score

ruby2.5, ruby2.7, ruby3.0, ruby3.2, ruby3.3 vulnerabilities

It was discovered that Ruby incorrectly handled certain IO stream methods. A remote attacker could use this issue to cause Ruby to crash, resulting in a denial of service, or possibly obtain sensitive information. This issue only affected Ubuntu 18.04 LTS. (CVE-2024-27280)

It was discovered that the Ruby regex compiler incorrectly handled certain memory operations. A remote attacker could possibly use this issue to obtain sensitive memory contents. This issue only affected Ubuntu 18.04 LTS. (CVE-2024-27282)

It was discovered that Ruby incorrectly handled parsing of certain XML characters through the REXML gem. An attacker could use this issue to cause Ruby to crash, resulting in a denial of service. This issue only affected Ubuntu 18.04 LTS. (CVE-2024-35176)

It was discovered that Ruby incorrectly handled decompressed domain names within a DNS packet. An attacker could use this issue to cause Ruby to crash, resulting in a denial of service. (CVE-2025-24294)

Record
USN-7734-1
Updated
2026-11-02

Affected packages

Affected packages
PackageAffectedFixed
ruby
Alpine:v3.16
before 3.1.5-r0
3.1.5-r0
ruby
Alpine:v3.17
before 3.1.5-r0
3.1.5-r0
ruby
Alpine:v3.18
before 3.2.4-r0
3.2.4-r0
ruby
Alpine:v3.19
before 3.2.4-r0
3.2.4-r0
ruby
Alpine:v3.20
before 3.3.1-r0
3.3.1-r0
ruby
Alpine:v3.21
before 3.3.1-r0
3.3.1-r0
ruby
Alpine:v3.22
before 3.3.1-r0
3.3.1-r0
ruby
Alpine:v3.23
before 3.3.1-r0
3.3.1-r0
ruby
Alpine:v3.24
before 3.3.1-r0
3.3.1-r0
ruby
AlmaLinux:8
From an advisory covering 6 CVEs
before 3.0.7-143.module_el8.10.0+3852+ce828b19
3.0.7-143.module_el8.10.0+3852+ce828b19
Show 290 moreShow less
Affected packages
PackageAffectedFixed
ruby-default-gems
AlmaLinux:8
From an advisory covering 6 CVEs
before 3.0.7-143.module_el8.10.0+3852+ce828b19
3.0.7-143.module_el8.10.0+3852+ce828b19
ruby-devel
AlmaLinux:8
From an advisory covering 6 CVEs
before 3.0.7-143.module_el8.10.0+3852+ce828b19
3.0.7-143.module_el8.10.0+3852+ce828b19
ruby-doc
AlmaLinux:8
From an advisory covering 6 CVEs
before 3.0.7-143.module_el8.10.0+3852+ce828b19
3.0.7-143.module_el8.10.0+3852+ce828b19
ruby-libs
AlmaLinux:8
From an advisory covering 6 CVEs
before 3.0.7-143.module_el8.10.0+3852+ce828b19
3.0.7-143.module_el8.10.0+3852+ce828b19
rubygem-abrt
AlmaLinux:8
From an advisory covering 6 CVEs
before 0.4.0-1.module_el8.10.0+3852+ce828b19
0.4.0-1.module_el8.10.0+3852+ce828b19
rubygem-abrt-doc
AlmaLinux:8
From an advisory covering 6 CVEs
before 0.4.0-1.module_el8.10.0+3852+ce828b19
0.4.0-1.module_el8.10.0+3852+ce828b19
rubygem-bigdecimal
AlmaLinux:8
From an advisory covering 6 CVEs
before 3.0.0-143.module_el8.10.0+3852+ce828b19
3.0.0-143.module_el8.10.0+3852+ce828b19
rubygem-bundler
AlmaLinux:8
From an advisory covering 6 CVEs
before 2.2.33-143.module_el8.10.0+3852+ce828b19
2.2.33-143.module_el8.10.0+3852+ce828b19
rubygem-io-console
AlmaLinux:8
From an advisory covering 6 CVEs
before 0.5.7-143.module_el8.10.0+3852+ce828b19
0.5.7-143.module_el8.10.0+3852+ce828b19
rubygem-irb
AlmaLinux:8
From an advisory covering 6 CVEs
before 1.3.5-143.module_el8.10.0+3852+ce828b19
1.3.5-143.module_el8.10.0+3852+ce828b19
rubygem-json
AlmaLinux:8
From an advisory covering 6 CVEs
before 2.5.1-143.module_el8.10.0+3852+ce828b19
2.5.1-143.module_el8.10.0+3852+ce828b19
rubygem-minitest
AlmaLinux:8
From an advisory covering 6 CVEs
before 5.14.2-143.module_el8.10.0+3852+ce828b19
5.14.2-143.module_el8.10.0+3852+ce828b19
rubygem-mysql2
AlmaLinux:8
From an advisory covering 6 CVEs
before 0.5.3-2.module_el8.10.0+3852+ce828b19
0.5.3-2.module_el8.10.0+3852+ce828b19
rubygem-mysql2-doc
AlmaLinux:8
From an advisory covering 6 CVEs
before 0.5.3-2.module_el8.10.0+3852+ce828b19
0.5.3-2.module_el8.10.0+3852+ce828b19
rubygem-pg
AlmaLinux:8
From an advisory covering 6 CVEs
before 1.2.3-1.module_el8.5.0+2595+0c654ebc
1.2.3-1.module_el8.5.0+2595+0c654ebc
rubygem-pg
AlmaLinux:8
From an advisory covering 6 CVEs
before 1.2.3-1.module_el8.5.0+118+1ab773e1
1.2.3-1.module_el8.5.0+118+1ab773e1
rubygem-pg
AlmaLinux:8
From an advisory covering 6 CVEs
before 1.2.3-1.module_el8.6.0+3144+d138acf1
1.2.3-1.module_el8.6.0+3144+d138acf1
rubygem-pg-doc
AlmaLinux:8
From an advisory covering 6 CVEs
before 1.2.3-1.module_el8.10.0+3852+ce828b19
1.2.3-1.module_el8.10.0+3852+ce828b19
rubygem-pg-doc
AlmaLinux:8
From an advisory covering 6 CVEs
before 1.2.3-1.module_el8.5.0+2595+0c654ebc
1.2.3-1.module_el8.5.0+2595+0c654ebc
rubygem-power_assert
AlmaLinux:8
From an advisory covering 6 CVEs
before 1.2.1-143.module_el8.10.0+3852+ce828b19
1.2.1-143.module_el8.10.0+3852+ce828b19
rubygem-psych
AlmaLinux:8
From an advisory covering 6 CVEs
before 3.3.2-143.module_el8.10.0+3852+ce828b19
3.3.2-143.module_el8.10.0+3852+ce828b19
rubygem-rake
AlmaLinux:8
From an advisory covering 6 CVEs
before 13.0.3-143.module_el8.10.0+3852+ce828b19
13.0.3-143.module_el8.10.0+3852+ce828b19
rubygem-rbs
AlmaLinux:8
From an advisory covering 6 CVEs
before 1.4.0-143.module_el8.10.0+3852+ce828b19
1.4.0-143.module_el8.10.0+3852+ce828b19
rubygem-rdoc
AlmaLinux:8
From an advisory covering 6 CVEs
before 6.3.4.1-143.module_el8.10.0+3852+ce828b19
6.3.4.1-143.module_el8.10.0+3852+ce828b19
rubygem-rexml
AlmaLinux:8
From an advisory covering 6 CVEs
before 3.2.5-143.module_el8.10.0+3852+ce828b19
3.2.5-143.module_el8.10.0+3852+ce828b19
rubygem-rss
AlmaLinux:8
From an advisory covering 6 CVEs
before 0.2.9-143.module_el8.10.0+3852+ce828b19
0.2.9-143.module_el8.10.0+3852+ce828b19
rubygem-test-unit
AlmaLinux:8
From an advisory covering 6 CVEs
before 3.3.7-143.module_el8.10.0+3852+ce828b19
3.3.7-143.module_el8.10.0+3852+ce828b19
rubygem-typeprof
AlmaLinux:8
From an advisory covering 6 CVEs
before 0.15.2-143.module_el8.10.0+3852+ce828b19
0.15.2-143.module_el8.10.0+3852+ce828b19
rubygems
AlmaLinux:8
From an advisory covering 6 CVEs
before 3.2.33-143.module_el8.10.0+3852+ce828b19
3.2.33-143.module_el8.10.0+3852+ce828b19
rubygems-devel
AlmaLinux:8
From an advisory covering 6 CVEs
before 3.2.33-143.module_el8.10.0+3852+ce828b19
3.2.33-143.module_el8.10.0+3852+ce828b19
ruby
AlmaLinux:8
From an advisory covering 3 CVEs
before 3.1.5-143.module_el8.10.0+3854+02eaa59a
3.1.5-143.module_el8.10.0+3854+02eaa59a
ruby-bundled-gems
AlmaLinux:8
From an advisory covering 3 CVEs
before 3.1.5-143.module_el8.10.0+3854+02eaa59a
3.1.5-143.module_el8.10.0+3854+02eaa59a
ruby-default-gems
AlmaLinux:8
From an advisory covering 3 CVEs
before 3.1.5-143.module_el8.10.0+3854+02eaa59a
3.1.5-143.module_el8.10.0+3854+02eaa59a
ruby-devel
AlmaLinux:8
From an advisory covering 3 CVEs
before 3.1.5-143.module_el8.10.0+3854+02eaa59a
3.1.5-143.module_el8.10.0+3854+02eaa59a
ruby-doc
AlmaLinux:8
From an advisory covering 3 CVEs
before 3.1.5-143.module_el8.10.0+3854+02eaa59a
3.1.5-143.module_el8.10.0+3854+02eaa59a
ruby-libs
AlmaLinux:8
From an advisory covering 3 CVEs
before 3.1.5-143.module_el8.10.0+3854+02eaa59a
3.1.5-143.module_el8.10.0+3854+02eaa59a
rubygem-abrt
AlmaLinux:8
From an advisory covering 3 CVEs
before 0.4.0-1.module_el8.9.0+3746+91b8233a
0.4.0-1.module_el8.9.0+3746+91b8233a
rubygem-abrt-doc
AlmaLinux:8
From an advisory covering 3 CVEs
before 0.4.0-1.module_el8.9.0+3746+91b8233a
0.4.0-1.module_el8.9.0+3746+91b8233a
rubygem-bigdecimal
AlmaLinux:8
From an advisory covering 3 CVEs
before 3.1.1-143.module_el8.10.0+3854+02eaa59a
3.1.1-143.module_el8.10.0+3854+02eaa59a
rubygem-bundler
AlmaLinux:8
From an advisory covering 3 CVEs
before 2.3.27-143.module_el8.10.0+3854+02eaa59a
2.3.27-143.module_el8.10.0+3854+02eaa59a
rubygem-io-console
AlmaLinux:8
From an advisory covering 3 CVEs
before 0.5.11-143.module_el8.10.0+3854+02eaa59a
0.5.11-143.module_el8.10.0+3854+02eaa59a
rubygem-irb
AlmaLinux:8
From an advisory covering 3 CVEs
before 1.4.1-143.module_el8.10.0+3854+02eaa59a
1.4.1-143.module_el8.10.0+3854+02eaa59a
rubygem-json
AlmaLinux:8
From an advisory covering 3 CVEs
before 2.6.1-143.module_el8.10.0+3854+02eaa59a
2.6.1-143.module_el8.10.0+3854+02eaa59a
rubygem-minitest
AlmaLinux:8
From an advisory covering 3 CVEs
before 5.15.0-143.module_el8.10.0+3854+02eaa59a
5.15.0-143.module_el8.10.0+3854+02eaa59a
rubygem-mysql2
AlmaLinux:8
From an advisory covering 3 CVEs
before 0.5.3-3.module_el8.9.0+3746+91b8233a
0.5.3-3.module_el8.9.0+3746+91b8233a
rubygem-mysql2-doc
AlmaLinux:8
From an advisory covering 3 CVEs
before 0.5.3-3.module_el8.9.0+3746+91b8233a
0.5.3-3.module_el8.9.0+3746+91b8233a
rubygem-pg
AlmaLinux:8
From an advisory covering 3 CVEs
before 1.3.2-1.module_el8.9.0+3746+91b8233a
1.3.2-1.module_el8.9.0+3746+91b8233a
rubygem-pg-doc
AlmaLinux:8
From an advisory covering 3 CVEs
before 1.3.2-1.module_el8.9.0+3746+91b8233a
1.3.2-1.module_el8.9.0+3746+91b8233a
rubygem-power_assert
AlmaLinux:8
From an advisory covering 3 CVEs
before 2.0.1-143.module_el8.10.0+3854+02eaa59a
2.0.1-143.module_el8.10.0+3854+02eaa59a
rubygem-psych
AlmaLinux:8
From an advisory covering 3 CVEs
before 4.0.4-143.module_el8.10.0+3854+02eaa59a
4.0.4-143.module_el8.10.0+3854+02eaa59a
rubygem-rake
AlmaLinux:8
From an advisory covering 3 CVEs
before 13.0.6-143.module_el8.10.0+3854+02eaa59a
13.0.6-143.module_el8.10.0+3854+02eaa59a
rubygem-rbs
AlmaLinux:8
From an advisory covering 3 CVEs
before 2.7.0-143.module_el8.10.0+3854+02eaa59a
2.7.0-143.module_el8.10.0+3854+02eaa59a
rubygem-rdoc
AlmaLinux:8
From an advisory covering 3 CVEs
before 6.4.1.1-143.module_el8.10.0+3854+02eaa59a
6.4.1.1-143.module_el8.10.0+3854+02eaa59a
rubygem-rexml
AlmaLinux:8
From an advisory covering 3 CVEs
before 3.2.5-143.module_el8.10.0+3854+02eaa59a
3.2.5-143.module_el8.10.0+3854+02eaa59a
rubygem-rss
AlmaLinux:8
From an advisory covering 3 CVEs
before 0.2.9-143.module_el8.10.0+3854+02eaa59a
0.2.9-143.module_el8.10.0+3854+02eaa59a
rubygem-test-unit
AlmaLinux:8
From an advisory covering 3 CVEs
before 3.5.3-143.module_el8.10.0+3854+02eaa59a
3.5.3-143.module_el8.10.0+3854+02eaa59a
rubygem-typeprof
AlmaLinux:8
From an advisory covering 3 CVEs
before 0.21.3-143.module_el8.10.0+3854+02eaa59a
0.21.3-143.module_el8.10.0+3854+02eaa59a
rubygems
AlmaLinux:8
From an advisory covering 3 CVEs
before 3.3.27-143.module_el8.10.0+3854+02eaa59a
3.3.27-143.module_el8.10.0+3854+02eaa59a
rubygems-devel
AlmaLinux:8
From an advisory covering 3 CVEs
before 3.3.27-143.module_el8.10.0+3854+02eaa59a
3.3.27-143.module_el8.10.0+3854+02eaa59a
ruby
AlmaLinux:9
From an advisory covering 3 CVEs
before 3.1.5-144.module_el9.4.0+101+d58a8d95
3.1.5-144.module_el9.4.0+101+d58a8d95
ruby-bundled-gems
AlmaLinux:9
From an advisory covering 3 CVEs
before 3.1.5-144.module_el9.4.0+101+d58a8d95
3.1.5-144.module_el9.4.0+101+d58a8d95
ruby-default-gems
AlmaLinux:9
From an advisory covering 3 CVEs
before 3.1.5-144.module_el9.4.0+101+d58a8d95
3.1.5-144.module_el9.4.0+101+d58a8d95
ruby-devel
AlmaLinux:9
From an advisory covering 3 CVEs
before 3.1.5-144.module_el9.4.0+101+d58a8d95
3.1.5-144.module_el9.4.0+101+d58a8d95
ruby-doc
AlmaLinux:9
From an advisory covering 3 CVEs
before 3.1.5-144.module_el9.4.0+101+d58a8d95
3.1.5-144.module_el9.4.0+101+d58a8d95
ruby-libs
AlmaLinux:9
From an advisory covering 3 CVEs
before 3.1.5-144.module_el9.4.0+101+d58a8d95
3.1.5-144.module_el9.4.0+101+d58a8d95
rubygem-bigdecimal
AlmaLinux:9
From an advisory covering 3 CVEs
before 3.1.1-144.module_el9.4.0+101+d58a8d95
3.1.1-144.module_el9.4.0+101+d58a8d95
rubygem-bundler
AlmaLinux:9
From an advisory covering 3 CVEs
before 2.3.27-144.module_el9.4.0+101+d58a8d95
2.3.27-144.module_el9.4.0+101+d58a8d95
rubygem-io-console
AlmaLinux:9
From an advisory covering 3 CVEs
before 0.5.11-144.module_el9.4.0+101+d58a8d95
0.5.11-144.module_el9.4.0+101+d58a8d95
rubygem-irb
AlmaLinux:9
From an advisory covering 3 CVEs
before 1.4.1-144.module_el9.4.0+101+d58a8d95
1.4.1-144.module_el9.4.0+101+d58a8d95
rubygem-json
AlmaLinux:9
From an advisory covering 3 CVEs
before 2.6.1-144.module_el9.4.0+101+d58a8d95
2.6.1-144.module_el9.4.0+101+d58a8d95
rubygem-minitest
AlmaLinux:9
From an advisory covering 3 CVEs
before 5.15.0-144.module_el9.4.0+101+d58a8d95
5.15.0-144.module_el9.4.0+101+d58a8d95
rubygem-mysql2
AlmaLinux:9
From an advisory covering 3 CVEs
before 0.5.4-1.module_el9.1.0+8+503f6fbd
0.5.4-1.module_el9.1.0+8+503f6fbd
rubygem-mysql2-doc
AlmaLinux:9
From an advisory covering 3 CVEs
before 0.5.4-1.module_el9.1.0+8+503f6fbd
0.5.4-1.module_el9.1.0+8+503f6fbd
rubygem-pg
AlmaLinux:9
From an advisory covering 3 CVEs
before 1.3.5-1.module_el9.1.0+8+503f6fbd
1.3.5-1.module_el9.1.0+8+503f6fbd
rubygem-pg-doc
AlmaLinux:9
From an advisory covering 3 CVEs
before 1.3.5-1.module_el9.1.0+8+503f6fbd
1.3.5-1.module_el9.1.0+8+503f6fbd
rubygem-power_assert
AlmaLinux:9
From an advisory covering 3 CVEs
before 2.0.1-144.module_el9.4.0+101+d58a8d95
2.0.1-144.module_el9.4.0+101+d58a8d95
rubygem-psych
AlmaLinux:9
From an advisory covering 3 CVEs
before 4.0.4-144.module_el9.4.0+101+d58a8d95
4.0.4-144.module_el9.4.0+101+d58a8d95
rubygem-rake
AlmaLinux:9
From an advisory covering 3 CVEs
before 13.0.6-144.module_el9.4.0+101+d58a8d95
13.0.6-144.module_el9.4.0+101+d58a8d95
rubygem-rbs
AlmaLinux:9
From an advisory covering 3 CVEs
before 2.7.0-144.module_el9.4.0+101+d58a8d95
2.7.0-144.module_el9.4.0+101+d58a8d95
rubygem-rdoc
AlmaLinux:9
From an advisory covering 3 CVEs
before 6.4.1.1-144.module_el9.4.0+101+d58a8d95
6.4.1.1-144.module_el9.4.0+101+d58a8d95
rubygem-rexml
AlmaLinux:9
From an advisory covering 3 CVEs
before 3.2.5-144.module_el9.4.0+101+d58a8d95
3.2.5-144.module_el9.4.0+101+d58a8d95
rubygem-rss
AlmaLinux:9
From an advisory covering 3 CVEs
before 0.2.9-144.module_el9.4.0+101+d58a8d95
0.2.9-144.module_el9.4.0+101+d58a8d95
rubygem-test-unit
AlmaLinux:9
From an advisory covering 3 CVEs
before 3.5.3-144.module_el9.4.0+101+d58a8d95
3.5.3-144.module_el9.4.0+101+d58a8d95
rubygem-typeprof
AlmaLinux:9
From an advisory covering 3 CVEs
before 0.21.3-144.module_el9.4.0+101+d58a8d95
0.21.3-144.module_el9.4.0+101+d58a8d95
rubygems
AlmaLinux:9
From an advisory covering 3 CVEs
before 3.3.27-144.module_el9.4.0+101+d58a8d95
3.3.27-144.module_el9.4.0+101+d58a8d95
rubygems-devel
AlmaLinux:9
From an advisory covering 3 CVEs
before 3.3.27-144.module_el9.4.0+101+d58a8d95
3.3.27-144.module_el9.4.0+101+d58a8d95
ruby
AlmaLinux:8
From an advisory covering 3 CVEs
before 3.3.1-2.module_el8.10.0+3855+767cb125
3.3.1-2.module_el8.10.0+3855+767cb125
ruby-bundled-gems
AlmaLinux:8
From an advisory covering 3 CVEs
before 3.3.1-2.module_el8.10.0+3855+767cb125
3.3.1-2.module_el8.10.0+3855+767cb125
ruby-default-gems
AlmaLinux:8
From an advisory covering 3 CVEs
before 3.3.1-2.module_el8.10.0+3855+767cb125
3.3.1-2.module_el8.10.0+3855+767cb125
ruby-devel
AlmaLinux:8
From an advisory covering 3 CVEs
before 3.3.1-2.module_el8.10.0+3855+767cb125
3.3.1-2.module_el8.10.0+3855+767cb125
ruby-doc
AlmaLinux:8
From an advisory covering 3 CVEs
before 3.3.1-2.module_el8.10.0+3855+767cb125
3.3.1-2.module_el8.10.0+3855+767cb125
ruby-libs
AlmaLinux:8
From an advisory covering 3 CVEs
before 3.3.1-2.module_el8.10.0+3855+767cb125
3.3.1-2.module_el8.10.0+3855+767cb125
rubygem-abrt
AlmaLinux:8
From an advisory covering 3 CVEs
before 0.4.0-1.module_el8.10.0+3799+191214cc
0.4.0-1.module_el8.10.0+3799+191214cc
rubygem-abrt-doc
AlmaLinux:8
From an advisory covering 3 CVEs
before 0.4.0-1.module_el8.10.0+3799+191214cc
0.4.0-1.module_el8.10.0+3799+191214cc
rubygem-bigdecimal
AlmaLinux:8
From an advisory covering 3 CVEs
before 3.1.5-2.module_el8.10.0+3855+767cb125
3.1.5-2.module_el8.10.0+3855+767cb125
rubygem-bundler
AlmaLinux:8
From an advisory covering 3 CVEs
before 2.5.9-2.module_el8.10.0+3855+767cb125
2.5.9-2.module_el8.10.0+3855+767cb125
rubygem-io-console
AlmaLinux:8
From an advisory covering 3 CVEs
before 0.7.1-2.module_el8.10.0+3855+767cb125
0.7.1-2.module_el8.10.0+3855+767cb125
rubygem-irb
AlmaLinux:8
From an advisory covering 3 CVEs
before 1.11.0-2.module_el8.10.0+3855+767cb125
1.11.0-2.module_el8.10.0+3855+767cb125
rubygem-json
AlmaLinux:8
From an advisory covering 3 CVEs
before 2.7.1-2.module_el8.10.0+3855+767cb125
2.7.1-2.module_el8.10.0+3855+767cb125
rubygem-minitest
AlmaLinux:8
From an advisory covering 3 CVEs
before 5.20.0-2.module_el8.10.0+3855+767cb125
5.20.0-2.module_el8.10.0+3855+767cb125
rubygem-mysql2
AlmaLinux:8
From an advisory covering 3 CVEs
before 0.5.5-1.module_el8.10.0+3799+191214cc
0.5.5-1.module_el8.10.0+3799+191214cc
rubygem-mysql2-doc
AlmaLinux:8
From an advisory covering 3 CVEs
before 0.5.5-1.module_el8.10.0+3799+191214cc
0.5.5-1.module_el8.10.0+3799+191214cc
rubygem-pg
AlmaLinux:8
From an advisory covering 3 CVEs
before 1.5.4-1.module_el8.10.0+3799+191214cc
1.5.4-1.module_el8.10.0+3799+191214cc
rubygem-pg-doc
AlmaLinux:8
From an advisory covering 3 CVEs
before 1.5.4-1.module_el8.10.0+3799+191214cc
1.5.4-1.module_el8.10.0+3799+191214cc
rubygem-power_assert
AlmaLinux:8
From an advisory covering 3 CVEs
before 2.0.3-2.module_el8.10.0+3855+767cb125
2.0.3-2.module_el8.10.0+3855+767cb125
rubygem-psych
AlmaLinux:8
From an advisory covering 3 CVEs
before 5.1.2-2.module_el8.10.0+3855+767cb125
5.1.2-2.module_el8.10.0+3855+767cb125
rubygem-racc
AlmaLinux:8
From an advisory covering 3 CVEs
before 1.7.3-2.module_el8.10.0+3855+767cb125
1.7.3-2.module_el8.10.0+3855+767cb125
rubygem-rake
AlmaLinux:8
From an advisory covering 3 CVEs
before 13.1.0-2.module_el8.10.0+3855+767cb125
13.1.0-2.module_el8.10.0+3855+767cb125
rubygem-rbs
AlmaLinux:8
From an advisory covering 3 CVEs
before 3.4.0-2.module_el8.10.0+3855+767cb125
3.4.0-2.module_el8.10.0+3855+767cb125
rubygem-rdoc
AlmaLinux:8
From an advisory covering 3 CVEs
before 6.6.3.1-2.module_el8.10.0+3855+767cb125
6.6.3.1-2.module_el8.10.0+3855+767cb125
rubygem-rexml
AlmaLinux:8
From an advisory covering 3 CVEs
before 3.2.6-2.module_el8.10.0+3855+767cb125
3.2.6-2.module_el8.10.0+3855+767cb125
rubygem-rss
AlmaLinux:8
From an advisory covering 3 CVEs
before 0.3.0-2.module_el8.10.0+3855+767cb125
0.3.0-2.module_el8.10.0+3855+767cb125
rubygem-test-unit
AlmaLinux:8
From an advisory covering 3 CVEs
before 3.6.1-2.module_el8.10.0+3855+767cb125
3.6.1-2.module_el8.10.0+3855+767cb125
rubygem-typeprof
AlmaLinux:8
From an advisory covering 3 CVEs
before 0.21.9-2.module_el8.10.0+3855+767cb125
0.21.9-2.module_el8.10.0+3855+767cb125
rubygems
AlmaLinux:8
From an advisory covering 3 CVEs
before 3.5.9-2.module_el8.10.0+3855+767cb125
3.5.9-2.module_el8.10.0+3855+767cb125
rubygems-devel
AlmaLinux:8
From an advisory covering 3 CVEs
before 3.5.9-2.module_el8.10.0+3855+767cb125
3.5.9-2.module_el8.10.0+3855+767cb125
ruby
AlmaLinux:9
From an advisory covering 3 CVEs
before 3.3.1-2.module_el9.4.0+102+68a93853
3.3.1-2.module_el9.4.0+102+68a93853
ruby-bundled-gems
AlmaLinux:9
From an advisory covering 3 CVEs
before 3.3.1-2.module_el9.4.0+102+68a93853
3.3.1-2.module_el9.4.0+102+68a93853
ruby-default-gems
AlmaLinux:9
From an advisory covering 3 CVEs
before 3.3.1-2.module_el9.4.0+102+68a93853
3.3.1-2.module_el9.4.0+102+68a93853
ruby
Azure Linux:3
before 3.3.3-1
3.3.3-1
ruby
Azure Linux:2
before 3.1.4-5
3.1.4-5
ruby
Alpaquita:23
3.1.2-r1 up to 3.1.5-r0
3.1.5-r0
ruby
Alpaquita:stream
3.1.2-r1 up to 3.3.1-r0
3.3.1-r0
ruby
Bitnami
before 3.1.5, 3.2.0 up to 3.2.4, 3.3.0 up to 3.3.1
3.1.53.2.43.3.1
ruby-min
Bitnami
before 3.1.6, 3.2.0 up to 3.2.6, 3.3.0 up to 3.3.7
3.1.63.2.63.3.7
ruby3.1
Debian:12
before 3.1.2-7+deb12u1, plus listed versions
3.1.2-7
3.1.2-7+deb12u1
ruby2.7
Debian:11
From an advisory covering 8 CVEs
before 2.7.4-1+deb11u2, plus listed versions
2.7.4-12.7.4-1+deb11u1
2.7.4-1+deb11u2
ruby3.1
Debian:12
From an advisory covering 3 CVEs
before 3.1.2-7+deb12u1, plus listed versions
3.1.2-7
3.1.2-7+deb12u1
ruby
Mageia:9
From an advisory covering 3 CVEs
before 3.1.5-45.mga9
3.1.5-45.mga9
ruby
openEuler:20.03-LTS-SP1
before 2.5.8-124.oe1
2.5.8-124.oe1
ruby
openEuler:22.03-LTS-SP3
before 3.0.3-133.oe2203sp3
3.0.3-133.oe2203sp3
ruby
openEuler:20.03-LTS-SP4
before 2.5.8-124.oe2003sp4
2.5.8-124.oe2003sp4
ruby
openEuler:22.03-LTS
before 3.0.3-133.oe2203
3.0.3-133.oe2203
ruby
openEuler:22.03-LTS-SP1
before 3.0.3-133.oe2203sp1
3.0.3-133.oe2203sp1
ruby
openEuler:22.03-LTS-SP2
before 3.0.3-133.oe2203sp2
3.0.3-133.oe2203sp2
ruby
Red Hat:enterprise_linux:8::appstream
From an advisory covering 6 CVEs
before 0:3.0.7-143.module+el8.10.0+21858+d19f3934
0:3.0.7-143.module+el8.10.0+21858+d19f3934
ruby-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 6 CVEs
before 0:3.0.7-143.module+el8.10.0+21858+d19f3934
0:3.0.7-143.module+el8.10.0+21858+d19f3934
ruby-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 6 CVEs
before 0:3.0.7-143.module+el8.10.0+21858+d19f3934
0:3.0.7-143.module+el8.10.0+21858+d19f3934
ruby-default-gems
Red Hat:enterprise_linux:8::appstream
From an advisory covering 6 CVEs
before 0:3.0.7-143.module+el8.10.0+21858+d19f3934
0:3.0.7-143.module+el8.10.0+21858+d19f3934
ruby-devel
Red Hat:enterprise_linux:8::appstream
From an advisory covering 6 CVEs
before 0:3.0.7-143.module+el8.10.0+21858+d19f3934
0:3.0.7-143.module+el8.10.0+21858+d19f3934
ruby-doc
Red Hat:enterprise_linux:8::appstream
From an advisory covering 6 CVEs
before 0:3.0.7-143.module+el8.10.0+21858+d19f3934
0:3.0.7-143.module+el8.10.0+21858+d19f3934
ruby-libs
Red Hat:enterprise_linux:8::appstream
From an advisory covering 6 CVEs
before 0:3.0.7-143.module+el8.10.0+21858+d19f3934
0:3.0.7-143.module+el8.10.0+21858+d19f3934
ruby-libs-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 6 CVEs
before 0:3.0.7-143.module+el8.10.0+21858+d19f3934
0:3.0.7-143.module+el8.10.0+21858+d19f3934
rubygem-abrt
Red Hat:enterprise_linux:8::appstream
From an advisory covering 6 CVEs
before 0:0.4.0-1.module+el8.10.0+21858+d19f3934
0:0.4.0-1.module+el8.10.0+21858+d19f3934
rubygem-abrt-doc
Red Hat:enterprise_linux:8::appstream
From an advisory covering 6 CVEs
before 0:0.4.0-1.module+el8.10.0+21858+d19f3934
0:0.4.0-1.module+el8.10.0+21858+d19f3934
rubygem-bigdecimal
Red Hat:enterprise_linux:8::appstream
From an advisory covering 6 CVEs
before 0:3.0.0-143.module+el8.10.0+21858+d19f3934
0:3.0.0-143.module+el8.10.0+21858+d19f3934
rubygem-bigdecimal-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 6 CVEs
before 0:3.0.0-143.module+el8.10.0+21858+d19f3934
0:3.0.0-143.module+el8.10.0+21858+d19f3934
rubygem-bundler
Red Hat:enterprise_linux:8::appstream
From an advisory covering 6 CVEs
before 0:2.2.33-143.module+el8.10.0+21858+d19f3934
0:2.2.33-143.module+el8.10.0+21858+d19f3934
rubygem-io-console
Red Hat:enterprise_linux:8::appstream
From an advisory covering 6 CVEs
before 0:0.5.7-143.module+el8.10.0+21858+d19f3934
0:0.5.7-143.module+el8.10.0+21858+d19f3934
rubygem-io-console-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 6 CVEs
before 0:0.5.7-143.module+el8.10.0+21858+d19f3934
0:0.5.7-143.module+el8.10.0+21858+d19f3934
rubygem-irb
Red Hat:enterprise_linux:8::appstream
From an advisory covering 6 CVEs
before 0:1.3.5-143.module+el8.10.0+21858+d19f3934
0:1.3.5-143.module+el8.10.0+21858+d19f3934
rubygem-json
Red Hat:enterprise_linux:8::appstream
From an advisory covering 6 CVEs
before 0:2.5.1-143.module+el8.10.0+21858+d19f3934
0:2.5.1-143.module+el8.10.0+21858+d19f3934
rubygem-json-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 6 CVEs
before 0:2.5.1-143.module+el8.10.0+21858+d19f3934
0:2.5.1-143.module+el8.10.0+21858+d19f3934
rubygem-minitest
Red Hat:enterprise_linux:8::appstream
From an advisory covering 6 CVEs
before 0:5.14.2-143.module+el8.10.0+21858+d19f3934
0:5.14.2-143.module+el8.10.0+21858+d19f3934
rubygem-mysql2
Red Hat:enterprise_linux:8::appstream
From an advisory covering 6 CVEs
before 0:0.5.3-2.module+el8.10.0+21858+d19f3934
0:0.5.3-2.module+el8.10.0+21858+d19f3934
rubygem-mysql2-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 6 CVEs
before 0:0.5.3-2.module+el8.10.0+21858+d19f3934
0:0.5.3-2.module+el8.10.0+21858+d19f3934
rubygem-mysql2-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 6 CVEs
before 0:0.5.3-2.module+el8.10.0+21858+d19f3934
0:0.5.3-2.module+el8.10.0+21858+d19f3934
rubygem-mysql2-doc
Red Hat:enterprise_linux:8::appstream
From an advisory covering 6 CVEs
before 0:0.5.3-2.module+el8.10.0+21858+d19f3934
0:0.5.3-2.module+el8.10.0+21858+d19f3934
rubygem-pg
Red Hat:enterprise_linux:8::appstream
From an advisory covering 6 CVEs
before 0:1.2.3-1.module+el8.10.0+21858+d19f3934
0:1.2.3-1.module+el8.10.0+21858+d19f3934
rubygem-pg-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 6 CVEs
before 0:1.2.3-1.module+el8.10.0+21858+d19f3934
0:1.2.3-1.module+el8.10.0+21858+d19f3934
rubygem-pg-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 6 CVEs
before 0:1.2.3-1.module+el8.10.0+21858+d19f3934
0:1.2.3-1.module+el8.10.0+21858+d19f3934
rubygem-pg-doc
Red Hat:enterprise_linux:8::appstream
From an advisory covering 6 CVEs
before 0:1.2.3-1.module+el8.10.0+21858+d19f3934
0:1.2.3-1.module+el8.10.0+21858+d19f3934
rubygem-power_assert
Red Hat:enterprise_linux:8::appstream
From an advisory covering 6 CVEs
before 0:1.2.1-143.module+el8.10.0+21858+d19f3934
0:1.2.1-143.module+el8.10.0+21858+d19f3934
rubygem-psych
Red Hat:enterprise_linux:8::appstream
From an advisory covering 6 CVEs
before 0:3.3.2-143.module+el8.10.0+21858+d19f3934
0:3.3.2-143.module+el8.10.0+21858+d19f3934
rubygem-psych-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 6 CVEs
before 0:3.3.2-143.module+el8.10.0+21858+d19f3934
0:3.3.2-143.module+el8.10.0+21858+d19f3934
rubygem-rake
Red Hat:enterprise_linux:8::appstream
From an advisory covering 6 CVEs
before 0:13.0.3-143.module+el8.10.0+21858+d19f3934
0:13.0.3-143.module+el8.10.0+21858+d19f3934
rubygem-rbs
Red Hat:enterprise_linux:8::appstream
From an advisory covering 6 CVEs
before 0:1.4.0-143.module+el8.10.0+21858+d19f3934
0:1.4.0-143.module+el8.10.0+21858+d19f3934
rubygem-rdoc
Red Hat:enterprise_linux:8::appstream
From an advisory covering 6 CVEs
before 0:6.3.4.1-143.module+el8.10.0+21858+d19f3934
0:6.3.4.1-143.module+el8.10.0+21858+d19f3934
rubygem-rexml
Red Hat:enterprise_linux:8::appstream
From an advisory covering 6 CVEs
before 0:3.2.5-143.module+el8.10.0+21858+d19f3934
0:3.2.5-143.module+el8.10.0+21858+d19f3934
rubygem-rss
Red Hat:enterprise_linux:8::appstream
From an advisory covering 6 CVEs
before 0:0.2.9-143.module+el8.10.0+21858+d19f3934
0:0.2.9-143.module+el8.10.0+21858+d19f3934
rubygem-test-unit
Red Hat:enterprise_linux:8::appstream
From an advisory covering 6 CVEs
before 0:3.3.7-143.module+el8.10.0+21858+d19f3934
0:3.3.7-143.module+el8.10.0+21858+d19f3934
rubygem-typeprof
Red Hat:enterprise_linux:8::appstream
From an advisory covering 6 CVEs
before 0:0.15.2-143.module+el8.10.0+21858+d19f3934
0:0.15.2-143.module+el8.10.0+21858+d19f3934
rubygems
Red Hat:enterprise_linux:8::appstream
From an advisory covering 6 CVEs
before 0:3.2.33-143.module+el8.10.0+21858+d19f3934
0:3.2.33-143.module+el8.10.0+21858+d19f3934
rubygems-devel
Red Hat:enterprise_linux:8::appstream
From an advisory covering 6 CVEs
before 0:3.2.33-143.module+el8.10.0+21858+d19f3934
0:3.2.33-143.module+el8.10.0+21858+d19f3934
ruby
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
before 0:3.1.5-143.module+el8.10.0+21792+e2f63d26
0:3.1.5-143.module+el8.10.0+21792+e2f63d26
ruby-bundled-gems
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
before 0:3.1.5-143.module+el8.10.0+21792+e2f63d26
0:3.1.5-143.module+el8.10.0+21792+e2f63d26
ruby-bundled-gems-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
before 0:3.1.5-143.module+el8.10.0+21792+e2f63d26
0:3.1.5-143.module+el8.10.0+21792+e2f63d26
ruby-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
before 0:3.1.5-143.module+el8.10.0+21792+e2f63d26
0:3.1.5-143.module+el8.10.0+21792+e2f63d26
ruby-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
before 0:3.1.5-143.module+el8.10.0+21792+e2f63d26
0:3.1.5-143.module+el8.10.0+21792+e2f63d26
ruby-default-gems
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
before 0:3.1.5-143.module+el8.10.0+21792+e2f63d26
0:3.1.5-143.module+el8.10.0+21792+e2f63d26
ruby-devel
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
before 0:3.1.5-143.module+el8.10.0+21792+e2f63d26
0:3.1.5-143.module+el8.10.0+21792+e2f63d26
ruby-doc
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
before 0:3.1.5-143.module+el8.10.0+21792+e2f63d26
0:3.1.5-143.module+el8.10.0+21792+e2f63d26
ruby-libs
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
before 0:3.1.5-143.module+el8.10.0+21792+e2f63d26
0:3.1.5-143.module+el8.10.0+21792+e2f63d26
ruby-libs-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
before 0:3.1.5-143.module+el8.10.0+21792+e2f63d26
0:3.1.5-143.module+el8.10.0+21792+e2f63d26
rubygem-abrt
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
before 0:0.4.0-1.module+el8.10.0+21470+43ec8058
0:0.4.0-1.module+el8.10.0+21470+43ec8058
rubygem-abrt-doc
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
before 0:0.4.0-1.module+el8.10.0+21470+43ec8058
0:0.4.0-1.module+el8.10.0+21470+43ec8058
rubygem-bigdecimal
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
before 0:3.1.1-143.module+el8.10.0+21792+e2f63d26
0:3.1.1-143.module+el8.10.0+21792+e2f63d26
rubygem-bigdecimal-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
before 0:3.1.1-143.module+el8.10.0+21792+e2f63d26
0:3.1.1-143.module+el8.10.0+21792+e2f63d26
rubygem-bundler
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
before 0:2.3.27-143.module+el8.10.0+21792+e2f63d26
0:2.3.27-143.module+el8.10.0+21792+e2f63d26
rubygem-io-console
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
before 0:0.5.11-143.module+el8.10.0+21792+e2f63d26
0:0.5.11-143.module+el8.10.0+21792+e2f63d26
rubygem-io-console-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
before 0:0.5.11-143.module+el8.10.0+21792+e2f63d26
0:0.5.11-143.module+el8.10.0+21792+e2f63d26
rubygem-irb
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
before 0:1.4.1-143.module+el8.10.0+21792+e2f63d26
0:1.4.1-143.module+el8.10.0+21792+e2f63d26
rubygem-json
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
before 0:2.6.1-143.module+el8.10.0+21792+e2f63d26
0:2.6.1-143.module+el8.10.0+21792+e2f63d26
rubygem-json-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
before 0:2.6.1-143.module+el8.10.0+21792+e2f63d26
0:2.6.1-143.module+el8.10.0+21792+e2f63d26
rubygem-minitest
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
before 0:5.15.0-143.module+el8.10.0+21792+e2f63d26
0:5.15.0-143.module+el8.10.0+21792+e2f63d26
rubygem-mysql2
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
before 0:0.5.3-3.module+el8.10.0+21470+43ec8058
0:0.5.3-3.module+el8.10.0+21470+43ec8058
rubygem-mysql2-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
before 0:0.5.3-3.module+el8.10.0+21470+43ec8058
0:0.5.3-3.module+el8.10.0+21470+43ec8058
rubygem-mysql2-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
before 0:0.5.3-3.module+el8.10.0+21470+43ec8058
0:0.5.3-3.module+el8.10.0+21470+43ec8058
rubygem-mysql2-doc
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
before 0:0.5.3-3.module+el8.10.0+21470+43ec8058
0:0.5.3-3.module+el8.10.0+21470+43ec8058
rubygem-pg
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
before 0:1.3.2-1.module+el8.10.0+21470+43ec8058
0:1.3.2-1.module+el8.10.0+21470+43ec8058
rubygem-pg-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
before 0:1.3.2-1.module+el8.10.0+21470+43ec8058
0:1.3.2-1.module+el8.10.0+21470+43ec8058
rubygem-pg-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
before 0:1.3.2-1.module+el8.10.0+21470+43ec8058
0:1.3.2-1.module+el8.10.0+21470+43ec8058
rubygem-pg-doc
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
before 0:1.3.2-1.module+el8.10.0+21470+43ec8058
0:1.3.2-1.module+el8.10.0+21470+43ec8058
rubygem-power_assert
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
before 0:2.0.1-143.module+el8.10.0+21792+e2f63d26
0:2.0.1-143.module+el8.10.0+21792+e2f63d26
rubygem-psych
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
before 0:4.0.4-143.module+el8.10.0+21792+e2f63d26
0:4.0.4-143.module+el8.10.0+21792+e2f63d26
rubygem-psych-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
before 0:4.0.4-143.module+el8.10.0+21792+e2f63d26
0:4.0.4-143.module+el8.10.0+21792+e2f63d26
rubygem-rake
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
before 0:13.0.6-143.module+el8.10.0+21792+e2f63d26
0:13.0.6-143.module+el8.10.0+21792+e2f63d26
rubygem-rbs
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
before 0:2.7.0-143.module+el8.10.0+21792+e2f63d26
0:2.7.0-143.module+el8.10.0+21792+e2f63d26
rubygem-rbs-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
before 0:2.7.0-143.module+el8.10.0+21792+e2f63d26
0:2.7.0-143.module+el8.10.0+21792+e2f63d26
rubygem-rdoc
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
before 0:6.4.1.1-143.module+el8.10.0+21792+e2f63d26
0:6.4.1.1-143.module+el8.10.0+21792+e2f63d26
rubygem-rexml
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
before 0:3.2.5-143.module+el8.10.0+21792+e2f63d26
0:3.2.5-143.module+el8.10.0+21792+e2f63d26
rubygem-rss
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
before 0:0.2.9-143.module+el8.10.0+21792+e2f63d26
0:0.2.9-143.module+el8.10.0+21792+e2f63d26
rubygem-test-unit
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
before 0:3.5.3-143.module+el8.10.0+21792+e2f63d26
0:3.5.3-143.module+el8.10.0+21792+e2f63d26
rubygem-typeprof
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
before 0:0.21.3-143.module+el8.10.0+21792+e2f63d26
0:0.21.3-143.module+el8.10.0+21792+e2f63d26
rubygems
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
before 0:3.3.27-143.module+el8.10.0+21792+e2f63d26
0:3.3.27-143.module+el8.10.0+21792+e2f63d26
rubygems-devel
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
before 0:3.3.27-143.module+el8.10.0+21792+e2f63d26
0:3.3.27-143.module+el8.10.0+21792+e2f63d26
ruby
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
before 0:3.1.5-144.module+el9.4.0+21780+79b7bdb5
0:3.1.5-144.module+el9.4.0+21780+79b7bdb5
ruby-bundled-gems
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
before 0:3.1.5-144.module+el9.4.0+21780+79b7bdb5
0:3.1.5-144.module+el9.4.0+21780+79b7bdb5
ruby-bundled-gems-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
before 0:3.1.5-144.module+el9.4.0+21780+79b7bdb5
0:3.1.5-144.module+el9.4.0+21780+79b7bdb5
ruby-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
before 0:3.1.5-144.module+el9.4.0+21780+79b7bdb5
0:3.1.5-144.module+el9.4.0+21780+79b7bdb5
ruby-debugsource
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
before 0:3.1.5-144.module+el9.4.0+21780+79b7bdb5
0:3.1.5-144.module+el9.4.0+21780+79b7bdb5
ruby-default-gems
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
before 0:3.1.5-144.module+el9.4.0+21780+79b7bdb5
0:3.1.5-144.module+el9.4.0+21780+79b7bdb5
ruby-devel
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
before 0:3.1.5-144.module+el9.4.0+21780+79b7bdb5
0:3.1.5-144.module+el9.4.0+21780+79b7bdb5
ruby-doc
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
before 0:3.1.5-144.module+el9.4.0+21780+79b7bdb5
0:3.1.5-144.module+el9.4.0+21780+79b7bdb5
ruby-libs
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
before 0:3.1.5-144.module+el9.4.0+21780+79b7bdb5
0:3.1.5-144.module+el9.4.0+21780+79b7bdb5
ruby-libs-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
before 0:3.1.5-144.module+el9.4.0+21780+79b7bdb5
0:3.1.5-144.module+el9.4.0+21780+79b7bdb5
rubygem-bigdecimal
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
before 0:3.1.1-144.module+el9.4.0+21780+79b7bdb5
0:3.1.1-144.module+el9.4.0+21780+79b7bdb5
rubygem-bigdecimal-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
before 0:3.1.1-144.module+el9.4.0+21780+79b7bdb5
0:3.1.1-144.module+el9.4.0+21780+79b7bdb5
rubygem-bundler
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
before 0:2.3.27-144.module+el9.4.0+21780+79b7bdb5
0:2.3.27-144.module+el9.4.0+21780+79b7bdb5
rubygem-io-console
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
before 0:0.5.11-144.module+el9.4.0+21780+79b7bdb5
0:0.5.11-144.module+el9.4.0+21780+79b7bdb5
rubygem-io-console-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
before 0:0.5.11-144.module+el9.4.0+21780+79b7bdb5
0:0.5.11-144.module+el9.4.0+21780+79b7bdb5
rubygem-irb
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
before 0:1.4.1-144.module+el9.4.0+21780+79b7bdb5
0:1.4.1-144.module+el9.4.0+21780+79b7bdb5
rubygem-json
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
before 0:2.6.1-144.module+el9.4.0+21780+79b7bdb5
0:2.6.1-144.module+el9.4.0+21780+79b7bdb5
rubygem-json-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
before 0:2.6.1-144.module+el9.4.0+21780+79b7bdb5
0:2.6.1-144.module+el9.4.0+21780+79b7bdb5
rubygem-minitest
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
before 0:5.15.0-144.module+el9.4.0+21780+79b7bdb5
0:5.15.0-144.module+el9.4.0+21780+79b7bdb5
rubygem-mysql2
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
before 0:0.5.4-1.module+el9.1.0+15737+76195479
0:0.5.4-1.module+el9.1.0+15737+76195479
rubygem-mysql2-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
before 0:0.5.4-1.module+el9.1.0+15737+76195479
0:0.5.4-1.module+el9.1.0+15737+76195479
rubygem-mysql2-debugsource
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
before 0:0.5.4-1.module+el9.1.0+15737+76195479
0:0.5.4-1.module+el9.1.0+15737+76195479
rubygem-mysql2-doc
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
before 0:0.5.4-1.module+el9.1.0+15737+76195479
0:0.5.4-1.module+el9.1.0+15737+76195479
rubygem-pg
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
before 0:1.3.5-1.module+el9.1.0+15737+76195479
0:1.3.5-1.module+el9.1.0+15737+76195479
rubygem-pg-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
before 0:1.3.5-1.module+el9.1.0+15737+76195479
0:1.3.5-1.module+el9.1.0+15737+76195479
rubygem-pg-debugsource
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
before 0:1.3.5-1.module+el9.1.0+15737+76195479
0:1.3.5-1.module+el9.1.0+15737+76195479
rubygem-pg-doc
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
before 0:1.3.5-1.module+el9.1.0+15737+76195479
0:1.3.5-1.module+el9.1.0+15737+76195479
rubygem-power_assert
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
before 0:2.0.1-144.module+el9.4.0+21780+79b7bdb5
0:2.0.1-144.module+el9.4.0+21780+79b7bdb5
rubygem-psych
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
before 0:4.0.4-144.module+el9.4.0+21780+79b7bdb5
0:4.0.4-144.module+el9.4.0+21780+79b7bdb5
rubygem-psych-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
before 0:4.0.4-144.module+el9.4.0+21780+79b7bdb5
0:4.0.4-144.module+el9.4.0+21780+79b7bdb5
rubygem-rake
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
before 0:13.0.6-144.module+el9.4.0+21780+79b7bdb5
0:13.0.6-144.module+el9.4.0+21780+79b7bdb5
rubygem-rbs
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
before 0:2.7.0-144.module+el9.4.0+21780+79b7bdb5
0:2.7.0-144.module+el9.4.0+21780+79b7bdb5
rubygem-rbs-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
before 0:2.7.0-144.module+el9.4.0+21780+79b7bdb5
0:2.7.0-144.module+el9.4.0+21780+79b7bdb5
rubygem-rdoc
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
before 0:6.4.1.1-144.module+el9.4.0+21780+79b7bdb5
0:6.4.1.1-144.module+el9.4.0+21780+79b7bdb5
rubygem-rexml
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
before 0:3.2.5-144.module+el9.4.0+21780+79b7bdb5
0:3.2.5-144.module+el9.4.0+21780+79b7bdb5
rubygem-rss
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
before 0:0.2.9-144.module+el9.4.0+21780+79b7bdb5
0:0.2.9-144.module+el9.4.0+21780+79b7bdb5
rubygem-test-unit
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
before 0:3.5.3-144.module+el9.4.0+21780+79b7bdb5
0:3.5.3-144.module+el9.4.0+21780+79b7bdb5
rubygem-typeprof
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
before 0:0.21.3-144.module+el9.4.0+21780+79b7bdb5
0:0.21.3-144.module+el9.4.0+21780+79b7bdb5
rubygems
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
before 0:3.3.27-144.module+el9.4.0+21780+79b7bdb5
0:3.3.27-144.module+el9.4.0+21780+79b7bdb5
rubygem-mysql2
Rocky Linux:9
From an advisory covering 3 CVEs
before 0:0.5.4-1.module+el9.6.0+31865+0893c253
0:0.5.4-1.module+el9.6.0+31865+0893c253
rubygem-pg
Rocky Linux:9
From an advisory covering 3 CVEs
before 0:1.3.5-1.module+el9.6.0+31865+0893c253
0:1.3.5-1.module+el9.6.0+31865+0893c253
ruby
Rocky Linux:8
From an advisory covering 3 CVEs
before 0:3.3.1-2.module+el8.10.0+1827+16ecb9d2
0:3.3.1-2.module+el8.10.0+1827+16ecb9d2
rubygem-abrt
Rocky Linux:8
From an advisory covering 3 CVEs
before 0:0.4.0-1.module+el8.10.0+1679+61871737
0:0.4.0-1.module+el8.10.0+1679+61871737
rubygem-mysql2
Rocky Linux:8
From an advisory covering 3 CVEs
before 0:0.5.5-1.module+el8.10.0+1679+61871737
0:0.5.5-1.module+el8.10.0+1679+61871737
rubygem-pg
Rocky Linux:8
From an advisory covering 3 CVEs
before 0:1.5.4-1.module+el8.10.0+1679+61871737
0:1.5.4-1.module+el8.10.0+1679+61871737
rubygem-mysql2
Rocky Linux:9
From an advisory covering 3 CVEs
before 0:0.5.5-1.module+el9.6.0+31867+3a5bf654
0:0.5.5-1.module+el9.6.0+31867+3a5bf654
rubygem-pg
Rocky Linux:9
From an advisory covering 3 CVEs
before 0:1.5.4-1.module+el9.6.0+31867+3a5bf654
0:1.5.4-1.module+el9.6.0+31867+3a5bf654
ruby
Rocky Linux:8
From an advisory covering 5 CVEs
before 0:2.5.9-112.module+el8.10.0+1839+f1f156ae
0:2.5.9-112.module+el8.10.0+1839+f1f156ae
rubygem-abrt
Rocky Linux:8
From an advisory covering 5 CVEs
before 0:0.3.0-4.module+el8.5.0+738+032c9c02
0:0.3.0-4.module+el8.5.0+738+032c9c02
rubygem-bson
Rocky Linux:8
From an advisory covering 5 CVEs
before 0:4.3.0-2.module+el8.9.0+1536+5f79634e
0:4.3.0-2.module+el8.9.0+1536+5f79634e
rubygem-bundler
Rocky Linux:8
From an advisory covering 5 CVEs
before 0:1.16.1-4.module+el8.9.0+1536+5f79634e
0:1.16.1-4.module+el8.9.0+1536+5f79634e
rubygem-mongo
Rocky Linux:8
From an advisory covering 5 CVEs
before 0:2.5.1-2.module+el8.9.0+1536+5f79634e
0:2.5.1-2.module+el8.9.0+1536+5f79634e
rubygem-mysql2
Rocky Linux:8
From an advisory covering 5 CVEs
before 0:0.4.10-4.module+el8.9.0+1536+5f79634e
0:0.4.10-4.module+el8.9.0+1536+5f79634e
rubygem-pg
Rocky Linux:8
From an advisory covering 5 CVEs
before 0:1.0.0-3.module+el8.9.0+1536+5f79634e
0:1.0.0-3.module+el8.9.0+1536+5f79634e
jruby
Ubuntu:Pro:14.04:LTS
All versions, plus listed versions
1.5.6-5ubuntu11.5.6-61.5.6-71.5.6-9+deb8u2build0.14.04.1~esm2
None known
ruby2.3
Ubuntu:Pro:16.04:LTS
All versions, plus listed versions
2.3.0-12.3.0-22.3.0-4ubuntu22.3.0-4ubuntu32.3.0-5ubuntu1
Show 28 moreShow less
2.3.1-2~16.042.3.1-2~16.04.22.3.1-2~16.04.42.3.1-2~16.04.52.3.1-2~16.04.62.3.1-2~16.04.72.3.1-2~16.04.92.3.1-2~16.04.102.3.1-2~16.04.112.3.1-2~16.04.122.3.1-2~ubuntu16.04.132.3.1-2~ubuntu16.04.142.3.1-2~ubuntu16.04.152.3.1-2~ubuntu16.04.162.3.1-2~ubuntu16.04.16+esm12.3.1-2~ubuntu16.04.16+esm22.3.1-2~ubuntu16.04.16+esm32.3.1-2~ubuntu16.04.16+esm42.3.1-2~ubuntu16.04.16+esm52.3.1-2~ubuntu16.04.16+esm62.3.1-2~ubuntu16.04.16+esm72.3.1-2~ubuntu16.04.16+esm82.3.1-2~ubuntu16.04.16+esm92.3.1-2~ubuntu16.04.16+esm102.3.1-2~ubuntu16.04.16+esm112.3.1-2~ubuntu16.04.16+esm122.3.1-2~ubuntu16.04.16+esm142.3.1-2~ubuntu16.04.16+esm15
None known
jruby
Ubuntu:16.04:LTS
All versions, plus listed versions
1.7.21-2ubuntu41.7.22-1ubuntu1
None known
ruby2.5
Ubuntu:Pro:18.04:LTS
before 2.5.1-1ubuntu1.16+esm5, plus listed versions
2.5.0~preview1-1ubuntu22.5.0-4ubuntu12.5.0-4ubuntu42.5.0-5ubuntu12.5.0-6ubuntu1
Show 19 moreShow less
2.5.1-1ubuntu12.5.1-1ubuntu1.12.5.1-1ubuntu1.22.5.1-1ubuntu1.42.5.1-1ubuntu1.52.5.1-1ubuntu1.62.5.1-1ubuntu1.72.5.1-1ubuntu1.82.5.1-1ubuntu1.92.5.1-1ubuntu1.102.5.1-1ubuntu1.112.5.1-1ubuntu1.122.5.1-1ubuntu1.132.5.1-1ubuntu1.142.5.1-1ubuntu1.152.5.1-1ubuntu1.162.5.1-1ubuntu1.16+esm12.5.1-1ubuntu1.16+esm32.5.1-1ubuntu1.16+esm4
2.5.1-1ubuntu1.16+esm5
jruby
Ubuntu:18.04:LTS
All versions, plus listed versions
9.1.13.0-19.1.17.0-1~18.04
None known
ruby2.7
Ubuntu:20.04:LTS
before 2.7.0-5ubuntu1.13, plus listed versions
2.7.0-12.7.0-22.7.0-32.7.0-42.7.0-4ubuntu1
Show 13 moreShow less
2.7.0-5ubuntu12.7.0-5ubuntu1.12.7.0-5ubuntu1.22.7.0-5ubuntu1.32.7.0-5ubuntu1.42.7.0-5ubuntu1.52.7.0-5ubuntu1.62.7.0-5ubuntu1.72.7.0-5ubuntu1.82.7.0-5ubuntu1.92.7.0-5ubuntu1.102.7.0-5ubuntu1.112.7.0-5ubuntu1.12
2.7.0-5ubuntu1.13
jruby
Ubuntu:20.04:LTS
All versions, plus listed versions
9.1.17.0-39.1.17.0-3build59.1.17.0-3build6
None known
ruby3.0
Ubuntu:22.04:LTS
before 3.0.2-7ubuntu2.6, plus listed versions
3.0.2-5ubuntu13.0.2-73.0.2-7ubuntu23.0.2-7ubuntu2.13.0.2-7ubuntu2.23.0.2-7ubuntu2.33.0.2-7ubuntu2.43.0.2-7ubuntu2.5
3.0.2-7ubuntu2.6
jruby
Ubuntu:24.04:LTS
All versions, plus listed versions
9.3.9.0+ds-19.4.5.0+ds-19.4.5.0+ds-1ubuntu19.4.6.0+ds-1ubuntu3
None known
ruby3.2
Ubuntu:24.04:LTS
before 3.2.3-1ubuntu0.24.04.1, plus listed versions
3.2.3-13.2.3-1build23.2.3-1build3
3.2.3-1ubuntu0.24.04.1
jruby
Ubuntu:25.10
All versions, plus listed versions
9.4.8.0+ds-2ubuntu19.4.8.0+ds-3ubuntu1
None known
jruby
Ubuntu:26.10
All versions, plus listed versions
9.4.8.0+ds-3ubuntu19.4.14.0+ds-1
None known
jruby
Ubuntu:26.04:LTS
All versions, plus listed versions
9.4.8.0+ds-3ubuntu1
None known
ruby2.7
Ubuntu:20.04:LTS
From an advisory covering 2 CVEs
before 2.7.0-5ubuntu1.13, plus listed versions
2.7.0-12.7.0-22.7.0-32.7.0-42.7.0-4ubuntu1
Show 13 moreShow less
2.7.0-5ubuntu12.7.0-5ubuntu1.12.7.0-5ubuntu1.22.7.0-5ubuntu1.32.7.0-5ubuntu1.42.7.0-5ubuntu1.52.7.0-5ubuntu1.62.7.0-5ubuntu1.72.7.0-5ubuntu1.82.7.0-5ubuntu1.92.7.0-5ubuntu1.102.7.0-5ubuntu1.112.7.0-5ubuntu1.12
2.7.0-5ubuntu1.13
ruby3.0
Ubuntu:22.04:LTS
From an advisory covering 2 CVEs
before 3.0.2-7ubuntu2.6, plus listed versions
3.0.2-5ubuntu13.0.2-73.0.2-7ubuntu23.0.2-7ubuntu2.13.0.2-7ubuntu2.23.0.2-7ubuntu2.33.0.2-7ubuntu2.43.0.2-7ubuntu2.5
3.0.2-7ubuntu2.6
ruby3.2
Ubuntu:24.04:LTS
From an advisory covering 2 CVEs
before 3.2.3-1ubuntu0.24.04.1, plus listed versions
3.2.3-13.2.3-1build23.2.3-1build3
3.2.3-1ubuntu0.24.04.1
ruby2.5
Ubuntu:Pro:18.04:LTS
From an advisory covering 4 CVEs
before 2.5.1-1ubuntu1.16+esm5, plus listed versions
2.5.0~preview1-1ubuntu22.5.0-4ubuntu12.5.0-4ubuntu42.5.0-5ubuntu12.5.0-6ubuntu1
Show 19 moreShow less
2.5.1-1ubuntu12.5.1-1ubuntu1.12.5.1-1ubuntu1.22.5.1-1ubuntu1.42.5.1-1ubuntu1.52.5.1-1ubuntu1.62.5.1-1ubuntu1.72.5.1-1ubuntu1.82.5.1-1ubuntu1.92.5.1-1ubuntu1.102.5.1-1ubuntu1.112.5.1-1ubuntu1.122.5.1-1ubuntu1.132.5.1-1ubuntu1.142.5.1-1ubuntu1.152.5.1-1ubuntu1.162.5.1-1ubuntu1.16+esm12.5.1-1ubuntu1.16+esm32.5.1-1ubuntu1.16+esm4
2.5.1-1ubuntu1.16+esm5
ruby2.7
Ubuntu:Pro:20.04:LTS
From an advisory covering 4 CVEs
before 2.7.0-5ubuntu1.18+esm1, plus listed versions
2.7.0-12.7.0-22.7.0-32.7.0-42.7.0-4ubuntu1
Show 19 moreShow less
2.7.0-5ubuntu12.7.0-5ubuntu1.12.7.0-5ubuntu1.22.7.0-5ubuntu1.32.7.0-5ubuntu1.42.7.0-5ubuntu1.52.7.0-5ubuntu1.62.7.0-5ubuntu1.72.7.0-5ubuntu1.82.7.0-5ubuntu1.92.7.0-5ubuntu1.102.7.0-5ubuntu1.112.7.0-5ubuntu1.122.7.0-5ubuntu1.132.7.0-5ubuntu1.142.7.0-5ubuntu1.152.7.0-5ubuntu1.162.7.0-5ubuntu1.172.7.0-5ubuntu1.18
2.7.0-5ubuntu1.18+esm1
ruby3.0
Ubuntu:22.04:LTS
From an advisory covering 4 CVEs
before 3.0.2-7ubuntu2.11, plus listed versions
3.0.2-5ubuntu13.0.2-73.0.2-7ubuntu23.0.2-7ubuntu2.13.0.2-7ubuntu2.2
Show 7 moreShow less
3.0.2-7ubuntu2.33.0.2-7ubuntu2.43.0.2-7ubuntu2.53.0.2-7ubuntu2.63.0.2-7ubuntu2.73.0.2-7ubuntu2.83.0.2-7ubuntu2.10
3.0.2-7ubuntu2.11
ruby3.2
Ubuntu:24.04:LTS
From an advisory covering 4 CVEs
before 3.2.3-1ubuntu0.24.04.6, plus listed versions
3.2.3-13.2.3-1build23.2.3-1build33.2.3-1ubuntu0.24.04.13.2.3-1ubuntu0.24.04.33.2.3-1ubuntu0.24.04.5
3.2.3-1ubuntu0.24.04.6

History

History
RecordedChangedSources
affected, facts
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2024-27282 is a medium vulnerability (CVSS 6.6) in ruby, published April 27, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.66%, the 51st percentile. Fixed in ruby 3.1.5-r0.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 263 package rows and 53 references. The JSON record has them.

MoveEnter Open