CVE-2024-27282
An issue was discovered in Ruby 3.x through 3.3.0. If attacker-supplied data is provided to the...
An issue was discovered in Ruby 3.x through 3.3.0. If attacker-supplied data is provided to the Ruby regex compiler, it is possible to extract arbitrary heap data relative to the start of the text, including pointers and sensitive strings. The fixed versions are 3.0.7, 3.1.5, 3.2.4, and 3.3.1.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- High
- Integrity
- Low
- Availability
- Low
Exploit likelihood
What each source reports
CVE List Score used
6.6
An issue was discovered in Ruby 3.x through 3.3.0. If attacker-supplied data is provided to the Ruby regex compiler, it is possible to extract arbitrary heap data relative to the start of the text, including pointers and sensitive strings. The fixed versions are 3.0.7, 3.1.5, 3.2.4, and 3.3.1.
- Record
CVE-2024-27282- CVSS 3.1
- 6.6 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L - Weakness
- CWE-125
- Updated
- 2026-11-02
EUVDEUVD-2024-24519
6.6
An issue was discovered in Ruby 3.x through 3.3.0. If attacker-supplied data is provided to the Ruby regex compiler, it is possible to extract arbitrary heap data relative to the start of the text, including pointers and sensitive strings. The fixed versions are 3.0.7, 3.1.5, 3.2.4, and 3.3.1.
- Record
EUVD-2024-24519- CVSS 3.1
- 6.6 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-63cq-cj6g-qfr2
6.6
An issue was discovered in Ruby 3.x through 3.3.0. If attacker-supplied data is provided to the...
An issue was discovered in Ruby 3.x through 3.3.0. If attacker-supplied data is provided to the Ruby regex compiler, it is possible to extract arbitrary heap data relative to the start of the text, including pointers and sensitive strings. The fixed versions are 3.0.7, 3.1.5, 3.2.4, and 3.3.1.
- Record
GHSA-63cq-cj6g-qfr2- CVSS 3.1
- 6.6 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L - Weakness
- CWE-125
- Updated
- 2026-11-02
NVD
6.6
An issue was discovered in Ruby 3.x through 3.3.0. If attacker-supplied data is provided to the Ruby regex compiler, it is possible to extract arbitrary heap data relative to the start of the text, including pointers and sensitive strings. The fixed versions are 3.0.7, 3.1.5, 3.2.4, and 3.3.1.
- Record
CVE-2024-27282- CVSS 3.1
- 6.6 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L - Weakness
- CWE-125
- Updated
- 2026-11-02
OSVALPINE-CVE-2024-27282
6.6
An issue was discovered in Ruby 3.x through 3.3.0. If attacker-supplied data is provided to the Ruby regex compiler, it is possible to extract arbitrary heap data relative to the start of the text, including pointers and sensitive strings. The fixed versions are 3.0.7, 3.1.5, 3.2.4, and 3.3.1.
- Record
ALPINE-CVE-2024-27282- CVSS 3.1
- 6.6 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L - Updated
- 2026-11-02
OSVBELL-CVE-2024-27282
6.6
- Record
BELL-CVE-2024-27282- CVSS 3.1
- 6.6 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L - Updated
- 2026-11-02
Show 37 moreShow less
OSVDEBIAN-CVE-2024-27282
6.6
An issue was discovered in Ruby 3.x through 3.3.0. If attacker-supplied data is provided to the Ruby regex compiler, it is possible to extract arbitrary heap data relative to the start of the text, including pointers and sensitive strings. The fixed versions are 3.0.7, 3.1.5, 3.2.4, and 3.3.1.
- Record
DEBIAN-CVE-2024-27282- CVSS 3.1
- 6.6 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L - Updated
- 2026-11-02
OSVOESA-2024-1545
3.5
ruby security update
Ruby is a fast and easy interpreted scripting language for object-oriented programming. It has many functions for processing text Files and perform system management tasks (such as Perl).
Security Fix(es):
An issue was discovered in Ruby 3.x through 3.3.0. If attacker-supplied data is provided to the Ruby regex compiler, it is possible to extract arbitrary heap data relative to the start of the text, including pointers and sensitive strings. The fixed versions are 3.0.7, 3.1.5, 3.2.4, and 3.3.1.(CVE-2024-27282)
- Record
OESA-2024-1545- CVSS 3.1
- 3.5 Low
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N - Updated
- 2026-11-02
OSVOESA-2024-1607
3.5
ruby security update
Ruby is a fast and easy interpreted scripting language for object-oriented programming. It has many functions for processing text Files and perform system management tasks (such as Perl).
Security Fix(es):
An issue was discovered in Ruby 3.x through 3.3.0. If attacker-supplied data is provided to the Ruby regex compiler, it is possible to extract arbitrary heap data relative to the start of the text, including pointers and sensitive strings. The fixed versions are 3.0.7, 3.1.5, 3.2.4, and 3.3.1.(CVE-2024-27282)
- Record
OESA-2024-1607- CVSS 3.1
- 3.5 Low
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N - Updated
- 2026-11-02
OSVOESA-2024-1608
3.5
ruby security update
Ruby is a fast and easy interpreted scripting language for object-oriented programming. It has many functions for processing text Files and perform system management tasks (such as Perl).
Security Fix(es):
An issue was discovered in Ruby 3.x through 3.3.0. If attacker-supplied data is provided to the Ruby regex compiler, it is possible to extract arbitrary heap data relative to the start of the text, including pointers and sensitive strings. The fixed versions are 3.0.7, 3.1.5, 3.2.4, and 3.3.1.(CVE-2024-27282)
- Record
OESA-2024-1608- CVSS 3.1
- 3.5 Low
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N - Updated
- 2026-11-02
OSVOESA-2024-1609
3.5
ruby security update
Ruby is a fast and easy interpreted scripting language for object-oriented programming. It has many functions for processing text Files and perform system management tasks (such as Perl).
Security Fix(es):
An issue was discovered in Ruby 3.x through 3.3.0. If attacker-supplied data is provided to the Ruby regex compiler, it is possible to extract arbitrary heap data relative to the start of the text, including pointers and sensitive strings. The fixed versions are 3.0.7, 3.1.5, 3.2.4, and 3.3.1.(CVE-2024-27282)
- Record
OESA-2024-1609- CVSS 3.1
- 3.5 Low
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N - Updated
- 2026-11-02
OSVOESA-2024-1610
3.5
ruby security update
Ruby is a fast and easy interpreted scripting language for object-oriented programming. It has many functions for processing text Files and perform system management tasks (such as Perl).
Security Fix(es):
An issue was discovered in Ruby 3.x through 3.3.0. If attacker-supplied data is provided to the Ruby regex compiler, it is possible to extract arbitrary heap data relative to the start of the text, including pointers and sensitive strings. The fixed versions are 3.0.7, 3.1.5, 3.2.4, and 3.3.1.(CVE-2024-27282)
- Record
OESA-2024-1610- CVSS 3.1
- 3.5 Low
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N - Updated
- 2026-11-02
OSVOESA-2024-1611
3.5
ruby security update
Ruby is a fast and easy interpreted scripting language for object-oriented programming. It has many functions for processing text Files and perform system management tasks (such as Perl).
Security Fix(es):
An issue was discovered in Ruby 3.x through 3.3.0. If attacker-supplied data is provided to the Ruby regex compiler, it is possible to extract arbitrary heap data relative to the start of the text, including pointers and sensitive strings. The fixed versions are 3.0.7, 3.1.5, 3.2.4, and 3.3.1.(CVE-2024-27282)
- Record
OESA-2024-1611- CVSS 3.1
- 3.5 Low
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N - Updated
- 2026-11-02
OSVRHSA-2024:3500
8.8
Red Hat Security Advisory: ruby:3.0 security update
- Record
RHSA-2024:3500- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2024:3546
6.6
Red Hat Security Advisory: ruby:3.1 security, bug fix, and enhancement update
- Record
RHSA-2024:3546- CVSS 3.1
- 6.6 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L - Updated
- 2026-11-02
OSVRHSA-2024:3668
6.6
Red Hat Security Advisory: ruby:3.1 security, bug fix, and enhancement update
- Record
RHSA-2024:3668- CVSS 3.1
- 6.6 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L - Updated
- 2026-11-02
OSVRHSA-2024:3670
6.6
Red Hat Security Advisory: ruby:3.3 security, bug fix, and enhancement update
- Record
RHSA-2024:3670- CVSS 3.1
- 6.6 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L - Updated
- 2026-11-02
OSVRHSA-2024:3671
6.6
Red Hat Security Advisory: ruby:3.3 security, bug fix, and enhancement update
- Record
RHSA-2024:3671- CVSS 3.1
- 6.6 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L - Updated
- 2026-11-02
OSVRHSA-2024:3838
8.8
Red Hat Security Advisory: ruby security update
- Record
RHSA-2024:3838- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2024:4499
6.6
Red Hat Security Advisory: ruby security update
- Record
RHSA-2024:4499- CVSS 3.1
- 6.6 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L - Updated
- 2026-11-02
OSVRHSA-2026:7305
7.5
Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
- Record
RHSA-2026:7305- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N - Updated
- 2026-11-02
OSVRHSA-2026:7307
7.5
Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
- Record
RHSA-2026:7307- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N - Updated
- 2026-11-02
OSVRHSA-2026:8838
7.5
Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
- Record
RHSA-2026:8838- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N - Updated
- 2026-11-02
OSVRLSA-2024:3668
6.6
Moderate: ruby:3.1 security, bug fix, and enhancement update
Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.
The following packages have been upgraded to a later upstream version: ruby (3.1). (Rocky Linux-35449)
Security Fix(es):
-
ruby: Buffer overread vulnerability in StringIO (CVE-2024-27280)
-
ruby: RCE vulnerability with .rdoc_options in RDoc (CVE-2024-27281)
-
ruby: Arbitrary memory address read vulnerability with Regex search (CVE-2024-27282)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
RLSA-2024:3668- CVSS 3.1
- 6.6 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L - Updated
- 2026-11-02
OSVRLSA-2024:3671
6.6
Moderate: ruby:3.3 security, bug fix, and enhancement update
Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.
The following packages have been upgraded to a later upstream version: ruby (3.3). (Rocky Linux-37697)
Security Fix(es):
-
ruby: Buffer overread vulnerability in StringIO (CVE-2024-27280)
-
ruby: RCE vulnerability with .rdoc_options in RDoc (CVE-2024-27281)
-
ruby: Arbitrary memory address read vulnerability with Regex search (CVE-2024-27282)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
RLSA-2024:3671- CVSS 3.1
- 6.6 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L - Updated
- 2026-11-02
OSVUBUNTU-CVE-2024-27282
6.6
An issue was discovered in Ruby 3.x through 3.3.0. If attacker-supplied data is provided to the Ruby regex compiler, it is possible to extract arbitrary heap data relative to the start of the text, including pointers and sensitive strings. The fixed versions are 3.0.7, 3.1.5, 3.2.4, and 3.3.1.
- Record
UBUNTU-CVE-2024-27282- CVSS 3.1
- 6.6 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L - Updated
- 2026-11-02
OSVALSA-2024:3500 No score
Moderate: ruby:3.0 security update
Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.
Security Fix(es):
- ruby/cgi-gem: HTTP response splitting in CGI (CVE-2021-33621)
- ruby: ReDoS vulnerability in URI (CVE-2023-28755)
- ruby: ReDoS vulnerability in Time (CVE-2023-28756)
- ruby: RCE vulnerability with .rdoc_options in RDoc (CVE-2024-27281)
- ruby: Buffer overread vulnerability in StringIO (CVE-2024-27280)
- ruby: Arbitrary memory address read vulnerability with Regex search (CVE-2024-27282)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
ALSA-2024:3500- Updated
- 2026-11-02
OSVALSA-2024:3546 No score
Moderate: ruby:3.1 security, bug fix, and enhancement update
Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.
Security Fix(es):
- ruby: RCE vulnerability with .rdoc_options in RDoc (CVE-2024-27281)
- ruby: Buffer overread vulnerability in StringIO (CVE-2024-27280)
- ruby: Arbitrary memory address read vulnerability with Regex search (CVE-2024-27282)
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
- Record
ALSA-2024:3546- Updated
- 2026-11-02
OSVALSA-2024:3668 No score
Moderate: ruby:3.1 security, bug fix, and enhancement update
Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.
The following packages have been upgraded to a later upstream version: ruby (3.1). (AlmaLinux-35449)
Security Fix(es):
- ruby: Buffer overread vulnerability in StringIO (CVE-2024-27280)
- ruby: RCE vulnerability with .rdoc_options in RDoc (CVE-2024-27281)
- ruby: Arbitrary memory address read vulnerability with Regex search (CVE-2024-27282)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
ALSA-2024:3668- Updated
- 2026-11-02
OSVALSA-2024:3670 No score
Moderate: ruby:3.3 security, bug fix, and enhancement update
Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.
The following packages have been upgraded to a later upstream version: ruby (3.3). (AlmaLinux-37446)
Security Fix(es):
- ruby: Buffer overread vulnerability in StringIO (CVE-2024-27280)
- ruby: RCE vulnerability with .rdoc_options in RDoc (CVE-2024-27281)
- ruby: Arbitrary memory address read vulnerability with Regex search (CVE-2024-27282)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
ALSA-2024:3670- Updated
- 2026-11-02
OSVALSA-2024:3671 No score
Moderate: ruby:3.3 security, bug fix, and enhancement update
Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.
The following packages have been upgraded to a later upstream version: ruby (3.3). (AlmaLinux-37697)
Security Fix(es):
- ruby: Buffer overread vulnerability in StringIO (CVE-2024-27280)
- ruby: RCE vulnerability with .rdoc_options in RDoc (CVE-2024-27281)
- ruby: Arbitrary memory address read vulnerability with Regex search (CVE-2024-27282)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
ALSA-2024:3671- Updated
- 2026-11-02
OSVALSA-2024:3838 No score
Moderate: ruby security update
Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.
The following packages have been upgraded to a later upstream version: ruby (3.0). (AlmaLinux-35740)
Security Fix(es):
- ruby/cgi-gem: HTTP response splitting in CGI (CVE-2021-33621)
- ruby: ReDoS vulnerability in URI (CVE-2023-28755)
- ruby: ReDoS vulnerability in Time (CVE-2023-28756)
- ruby: Buffer overread vulnerability in StringIO (CVE-2024-27280)
- ruby: RCE vulnerability with .rdoc_options in RDoc (CVE-2024-27281)
- ruby: Arbitrary memory address read vulnerability with Regex search (CVE-2024-27282)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
ALSA-2024:3838- Updated
- 2026-11-02
OSVALSA-2024:4499 No score
Moderate: ruby security update
Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.
Security Fix(es):
- rubygem-uri: ReDoS vulnerability - upstream's incomplete fix for CVE-2023-28755 (CVE-2023-36617)
- ruby: Buffer overread vulnerability in StringIO (CVE-2024-27280)
- ruby: RCE vulnerability with .rdoc_options in RDoc (CVE-2024-27281)
- ruby: Arbitrary memory address read vulnerability with Regex search (CVE-2024-27282)
- REXML: DoS parsing an XML with many
<s in an attribute value (CVE-2024-35176)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
ALSA-2024:4499- Updated
- 2026-11-02
OSVAZL-40520 No score
CVE-2024-27282 affecting package ruby for versions less than 3.3.3-1
An issue was discovered in Ruby 3.x through 3.3.0. If attacker-supplied data is provided to the Ruby regex compiler, it is possible to extract arbitrary heap data relative to the start of the text, including pointers and sensitive strings. The fixed versions are 3.0.7, 3.1.5, 3.2.4, and 3.3.1.
- Record
AZL-40520- Updated
- 2026-11-02
OSVAZL-40733 No score
CVE-2024-27282 affecting package ruby for versions less than 3.1.4-5
An issue was discovered in Ruby 3.x through 3.3.0. If attacker-supplied data is provided to the Ruby regex compiler, it is possible to extract arbitrary heap data relative to the start of the text, including pointers and sensitive strings. The fixed versions are 3.0.7, 3.1.5, 3.2.4, and 3.3.1.
- Record
AZL-40733- Updated
- 2026-11-02
OSVBIT-ruby-2024-27282 No score
An issue was discovered in Ruby 3.x through 3.3.0. If attacker-supplied data is provided to the Ruby regex compiler, it is possible to extract arbitrary heap data relative to the start of the text, including pointers and sensitive strings. The fixed versions are 3.0.7, 3.1.5, 3.2.4, and 3.3.1.
- Record
BIT-ruby-2024-27282- Updated
- 2026-11-02
OSVBIT-ruby-min-2024-27282 No score
An issue was discovered in Ruby 3.x through 3.3.0. If attacker-supplied data is provided to the Ruby regex compiler, it is possible to extract arbitrary heap data relative to the start of the text, including pointers and sensitive strings. The fixed versions are 3.0.7, 3.1.5, 3.2.4, and 3.3.1.
- Record
BIT-ruby-min-2024-27282- Updated
- 2026-11-02
OSV No score
An issue was discovered in Ruby 3.x through 3.3.0. If attacker-supplied data is provided to the Ruby regex compiler, it is possible to extract arbitrary heap data relative to the start of the text, including pointers and sensitive strings. The fixed versions are 3.0.7, 3.1.5, 3.2.4, and 3.3.1.
- Record
CVE-2024-27282- Updated
- 2026-11-02
OSVMGASA-2024-0160 No score
Updated ruby packages fix security vulnerabilities
Buffer overread vulnerability in StringIO. (CVE-2024-27280) RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282)
- Record
MGASA-2024-0160- Updated
- 2026-11-02
OSVRLSA-2024:3670 No score
Moderate: ruby:3.3 security, bug fix, and enhancement update
Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.
The following packages have been upgraded to a later upstream version: ruby (3.3). (Rocky Linux-37446)
Security Fix(es):
-
ruby: Buffer overread vulnerability in StringIO (CVE-2024-27280)
-
ruby: RCE vulnerability with .rdoc_options in RDoc (CVE-2024-27281)
-
ruby: Arbitrary memory address read vulnerability with Regex search (CVE-2024-27282)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
RLSA-2024:3670- Updated
- 2026-11-02
OSVRLSA-2024:4499 No score
Moderate: ruby security update
Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.
Security Fix(es):
-
rubygem-uri: ReDoS vulnerability - upstream's incomplete fix for CVE-2023-28755 (CVE-2023-36617)
-
ruby: Buffer overread vulnerability in StringIO (CVE-2024-27280)
-
ruby: RCE vulnerability with .rdoc_options in RDoc (CVE-2024-27281)
-
ruby: Arbitrary memory address read vulnerability with Regex search (CVE-2024-27282)
-
REXML: DoS parsing an XML with many
<s in an attribute value (CVE-2024-35176)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
RLSA-2024:4499- Updated
- 2026-11-02
OSVUSN-6838-1 No score
ruby2.7, ruby3.0, ruby3.1, ruby3.2 vulnerabilities
It was discovered that Ruby RDoc incorrectly parsed certain YAML files. If a user or automated system were tricked into parsing a specially crafted .rdoc_options file, a remote attacker could possibly use this issue to execute arbitrary code. (CVE-2024-27281)
It was discovered that the Ruby regex compiler incorrectly handled certain memory operations. A remote attacker could possibly use this issue to obtain sensitive memory contents. (CVE-2024-27282)
- Record
USN-6838-1- Updated
- 2026-11-02
OSVUSN-7734-1 No score
ruby2.5, ruby2.7, ruby3.0, ruby3.2, ruby3.3 vulnerabilities
It was discovered that Ruby incorrectly handled certain IO stream methods. A remote attacker could use this issue to cause Ruby to crash, resulting in a denial of service, or possibly obtain sensitive information. This issue only affected Ubuntu 18.04 LTS. (CVE-2024-27280)
It was discovered that the Ruby regex compiler incorrectly handled certain memory operations. A remote attacker could possibly use this issue to obtain sensitive memory contents. This issue only affected Ubuntu 18.04 LTS. (CVE-2024-27282)
It was discovered that Ruby incorrectly handled parsing of certain XML characters through the REXML gem. An attacker could use this issue to cause Ruby to crash, resulting in a denial of service. This issue only affected Ubuntu 18.04 LTS. (CVE-2024-35176)
It was discovered that Ruby incorrectly handled decompressed domain names within a DNS packet. An attacker could use this issue to cause Ruby to crash, resulting in a denial of service. (CVE-2025-24294)
- Record
USN-7734-1- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
rubyAlpine:v3.16 |
before 3.1.5-r0 | 3.1.5-r0 |
rubyAlpine:v3.17 |
before 3.1.5-r0 | 3.1.5-r0 |
rubyAlpine:v3.18 |
before 3.2.4-r0 | 3.2.4-r0 |
rubyAlpine:v3.19 |
before 3.2.4-r0 | 3.2.4-r0 |
rubyAlpine:v3.20 |
before 3.3.1-r0 | 3.3.1-r0 |
rubyAlpine:v3.21 |
before 3.3.1-r0 | 3.3.1-r0 |
rubyAlpine:v3.22 |
before 3.3.1-r0 | 3.3.1-r0 |
rubyAlpine:v3.23 |
before 3.3.1-r0 | 3.3.1-r0 |
rubyAlpine:v3.24 |
before 3.3.1-r0 | 3.3.1-r0 |
rubyAlmaLinux:8 From an advisory covering 6 CVEs |
before 3.0.7-143.module_el8.10.0+3852+ce828b19 | 3.0.7-143.module_el8.10.0+3852+ce828b19 |
Show 290 moreShow less
| Package | Affected | Fixed |
|---|---|---|
ruby-default-gemsAlmaLinux:8 From an advisory covering 6 CVEs |
before 3.0.7-143.module_el8.10.0+3852+ce828b19 | 3.0.7-143.module_el8.10.0+3852+ce828b19 |
ruby-develAlmaLinux:8 From an advisory covering 6 CVEs |
before 3.0.7-143.module_el8.10.0+3852+ce828b19 | 3.0.7-143.module_el8.10.0+3852+ce828b19 |
ruby-docAlmaLinux:8 From an advisory covering 6 CVEs |
before 3.0.7-143.module_el8.10.0+3852+ce828b19 | 3.0.7-143.module_el8.10.0+3852+ce828b19 |
ruby-libsAlmaLinux:8 From an advisory covering 6 CVEs |
before 3.0.7-143.module_el8.10.0+3852+ce828b19 | 3.0.7-143.module_el8.10.0+3852+ce828b19 |
rubygem-abrtAlmaLinux:8 From an advisory covering 6 CVEs |
before 0.4.0-1.module_el8.10.0+3852+ce828b19 | 0.4.0-1.module_el8.10.0+3852+ce828b19 |
rubygem-abrt-docAlmaLinux:8 From an advisory covering 6 CVEs |
before 0.4.0-1.module_el8.10.0+3852+ce828b19 | 0.4.0-1.module_el8.10.0+3852+ce828b19 |
rubygem-bigdecimalAlmaLinux:8 From an advisory covering 6 CVEs |
before 3.0.0-143.module_el8.10.0+3852+ce828b19 | 3.0.0-143.module_el8.10.0+3852+ce828b19 |
rubygem-bundlerAlmaLinux:8 From an advisory covering 6 CVEs |
before 2.2.33-143.module_el8.10.0+3852+ce828b19 | 2.2.33-143.module_el8.10.0+3852+ce828b19 |
rubygem-io-consoleAlmaLinux:8 From an advisory covering 6 CVEs |
before 0.5.7-143.module_el8.10.0+3852+ce828b19 | 0.5.7-143.module_el8.10.0+3852+ce828b19 |
rubygem-irbAlmaLinux:8 From an advisory covering 6 CVEs |
before 1.3.5-143.module_el8.10.0+3852+ce828b19 | 1.3.5-143.module_el8.10.0+3852+ce828b19 |
rubygem-jsonAlmaLinux:8 From an advisory covering 6 CVEs |
before 2.5.1-143.module_el8.10.0+3852+ce828b19 | 2.5.1-143.module_el8.10.0+3852+ce828b19 |
rubygem-minitestAlmaLinux:8 From an advisory covering 6 CVEs |
before 5.14.2-143.module_el8.10.0+3852+ce828b19 | 5.14.2-143.module_el8.10.0+3852+ce828b19 |
rubygem-mysql2AlmaLinux:8 From an advisory covering 6 CVEs |
before 0.5.3-2.module_el8.10.0+3852+ce828b19 | 0.5.3-2.module_el8.10.0+3852+ce828b19 |
rubygem-mysql2-docAlmaLinux:8 From an advisory covering 6 CVEs |
before 0.5.3-2.module_el8.10.0+3852+ce828b19 | 0.5.3-2.module_el8.10.0+3852+ce828b19 |
rubygem-pgAlmaLinux:8 From an advisory covering 6 CVEs |
before 1.2.3-1.module_el8.5.0+2595+0c654ebc | 1.2.3-1.module_el8.5.0+2595+0c654ebc |
rubygem-pgAlmaLinux:8 From an advisory covering 6 CVEs |
before 1.2.3-1.module_el8.5.0+118+1ab773e1 | 1.2.3-1.module_el8.5.0+118+1ab773e1 |
rubygem-pgAlmaLinux:8 From an advisory covering 6 CVEs |
before 1.2.3-1.module_el8.6.0+3144+d138acf1 | 1.2.3-1.module_el8.6.0+3144+d138acf1 |
rubygem-pg-docAlmaLinux:8 From an advisory covering 6 CVEs |
before 1.2.3-1.module_el8.10.0+3852+ce828b19 | 1.2.3-1.module_el8.10.0+3852+ce828b19 |
rubygem-pg-docAlmaLinux:8 From an advisory covering 6 CVEs |
before 1.2.3-1.module_el8.5.0+2595+0c654ebc | 1.2.3-1.module_el8.5.0+2595+0c654ebc |
rubygem-power_assertAlmaLinux:8 From an advisory covering 6 CVEs |
before 1.2.1-143.module_el8.10.0+3852+ce828b19 | 1.2.1-143.module_el8.10.0+3852+ce828b19 |
rubygem-psychAlmaLinux:8 From an advisory covering 6 CVEs |
before 3.3.2-143.module_el8.10.0+3852+ce828b19 | 3.3.2-143.module_el8.10.0+3852+ce828b19 |
rubygem-rakeAlmaLinux:8 From an advisory covering 6 CVEs |
before 13.0.3-143.module_el8.10.0+3852+ce828b19 | 13.0.3-143.module_el8.10.0+3852+ce828b19 |
rubygem-rbsAlmaLinux:8 From an advisory covering 6 CVEs |
before 1.4.0-143.module_el8.10.0+3852+ce828b19 | 1.4.0-143.module_el8.10.0+3852+ce828b19 |
rubygem-rdocAlmaLinux:8 From an advisory covering 6 CVEs |
before 6.3.4.1-143.module_el8.10.0+3852+ce828b19 | 6.3.4.1-143.module_el8.10.0+3852+ce828b19 |
rubygem-rexmlAlmaLinux:8 From an advisory covering 6 CVEs |
before 3.2.5-143.module_el8.10.0+3852+ce828b19 | 3.2.5-143.module_el8.10.0+3852+ce828b19 |
rubygem-rssAlmaLinux:8 From an advisory covering 6 CVEs |
before 0.2.9-143.module_el8.10.0+3852+ce828b19 | 0.2.9-143.module_el8.10.0+3852+ce828b19 |
rubygem-test-unitAlmaLinux:8 From an advisory covering 6 CVEs |
before 3.3.7-143.module_el8.10.0+3852+ce828b19 | 3.3.7-143.module_el8.10.0+3852+ce828b19 |
rubygem-typeprofAlmaLinux:8 From an advisory covering 6 CVEs |
before 0.15.2-143.module_el8.10.0+3852+ce828b19 | 0.15.2-143.module_el8.10.0+3852+ce828b19 |
rubygemsAlmaLinux:8 From an advisory covering 6 CVEs |
before 3.2.33-143.module_el8.10.0+3852+ce828b19 | 3.2.33-143.module_el8.10.0+3852+ce828b19 |
rubygems-develAlmaLinux:8 From an advisory covering 6 CVEs |
before 3.2.33-143.module_el8.10.0+3852+ce828b19 | 3.2.33-143.module_el8.10.0+3852+ce828b19 |
rubyAlmaLinux:8 From an advisory covering 3 CVEs |
before 3.1.5-143.module_el8.10.0+3854+02eaa59a | 3.1.5-143.module_el8.10.0+3854+02eaa59a |
ruby-bundled-gemsAlmaLinux:8 From an advisory covering 3 CVEs |
before 3.1.5-143.module_el8.10.0+3854+02eaa59a | 3.1.5-143.module_el8.10.0+3854+02eaa59a |
ruby-default-gemsAlmaLinux:8 From an advisory covering 3 CVEs |
before 3.1.5-143.module_el8.10.0+3854+02eaa59a | 3.1.5-143.module_el8.10.0+3854+02eaa59a |
ruby-develAlmaLinux:8 From an advisory covering 3 CVEs |
before 3.1.5-143.module_el8.10.0+3854+02eaa59a | 3.1.5-143.module_el8.10.0+3854+02eaa59a |
ruby-docAlmaLinux:8 From an advisory covering 3 CVEs |
before 3.1.5-143.module_el8.10.0+3854+02eaa59a | 3.1.5-143.module_el8.10.0+3854+02eaa59a |
ruby-libsAlmaLinux:8 From an advisory covering 3 CVEs |
before 3.1.5-143.module_el8.10.0+3854+02eaa59a | 3.1.5-143.module_el8.10.0+3854+02eaa59a |
rubygem-abrtAlmaLinux:8 From an advisory covering 3 CVEs |
before 0.4.0-1.module_el8.9.0+3746+91b8233a | 0.4.0-1.module_el8.9.0+3746+91b8233a |
rubygem-abrt-docAlmaLinux:8 From an advisory covering 3 CVEs |
before 0.4.0-1.module_el8.9.0+3746+91b8233a | 0.4.0-1.module_el8.9.0+3746+91b8233a |
rubygem-bigdecimalAlmaLinux:8 From an advisory covering 3 CVEs |
before 3.1.1-143.module_el8.10.0+3854+02eaa59a | 3.1.1-143.module_el8.10.0+3854+02eaa59a |
rubygem-bundlerAlmaLinux:8 From an advisory covering 3 CVEs |
before 2.3.27-143.module_el8.10.0+3854+02eaa59a | 2.3.27-143.module_el8.10.0+3854+02eaa59a |
rubygem-io-consoleAlmaLinux:8 From an advisory covering 3 CVEs |
before 0.5.11-143.module_el8.10.0+3854+02eaa59a | 0.5.11-143.module_el8.10.0+3854+02eaa59a |
rubygem-irbAlmaLinux:8 From an advisory covering 3 CVEs |
before 1.4.1-143.module_el8.10.0+3854+02eaa59a | 1.4.1-143.module_el8.10.0+3854+02eaa59a |
rubygem-jsonAlmaLinux:8 From an advisory covering 3 CVEs |
before 2.6.1-143.module_el8.10.0+3854+02eaa59a | 2.6.1-143.module_el8.10.0+3854+02eaa59a |
rubygem-minitestAlmaLinux:8 From an advisory covering 3 CVEs |
before 5.15.0-143.module_el8.10.0+3854+02eaa59a | 5.15.0-143.module_el8.10.0+3854+02eaa59a |
rubygem-mysql2AlmaLinux:8 From an advisory covering 3 CVEs |
before 0.5.3-3.module_el8.9.0+3746+91b8233a | 0.5.3-3.module_el8.9.0+3746+91b8233a |
rubygem-mysql2-docAlmaLinux:8 From an advisory covering 3 CVEs |
before 0.5.3-3.module_el8.9.0+3746+91b8233a | 0.5.3-3.module_el8.9.0+3746+91b8233a |
rubygem-pgAlmaLinux:8 From an advisory covering 3 CVEs |
before 1.3.2-1.module_el8.9.0+3746+91b8233a | 1.3.2-1.module_el8.9.0+3746+91b8233a |
rubygem-pg-docAlmaLinux:8 From an advisory covering 3 CVEs |
before 1.3.2-1.module_el8.9.0+3746+91b8233a | 1.3.2-1.module_el8.9.0+3746+91b8233a |
rubygem-power_assertAlmaLinux:8 From an advisory covering 3 CVEs |
before 2.0.1-143.module_el8.10.0+3854+02eaa59a | 2.0.1-143.module_el8.10.0+3854+02eaa59a |
rubygem-psychAlmaLinux:8 From an advisory covering 3 CVEs |
before 4.0.4-143.module_el8.10.0+3854+02eaa59a | 4.0.4-143.module_el8.10.0+3854+02eaa59a |
rubygem-rakeAlmaLinux:8 From an advisory covering 3 CVEs |
before 13.0.6-143.module_el8.10.0+3854+02eaa59a | 13.0.6-143.module_el8.10.0+3854+02eaa59a |
rubygem-rbsAlmaLinux:8 From an advisory covering 3 CVEs |
before 2.7.0-143.module_el8.10.0+3854+02eaa59a | 2.7.0-143.module_el8.10.0+3854+02eaa59a |
rubygem-rdocAlmaLinux:8 From an advisory covering 3 CVEs |
before 6.4.1.1-143.module_el8.10.0+3854+02eaa59a | 6.4.1.1-143.module_el8.10.0+3854+02eaa59a |
rubygem-rexmlAlmaLinux:8 From an advisory covering 3 CVEs |
before 3.2.5-143.module_el8.10.0+3854+02eaa59a | 3.2.5-143.module_el8.10.0+3854+02eaa59a |
rubygem-rssAlmaLinux:8 From an advisory covering 3 CVEs |
before 0.2.9-143.module_el8.10.0+3854+02eaa59a | 0.2.9-143.module_el8.10.0+3854+02eaa59a |
rubygem-test-unitAlmaLinux:8 From an advisory covering 3 CVEs |
before 3.5.3-143.module_el8.10.0+3854+02eaa59a | 3.5.3-143.module_el8.10.0+3854+02eaa59a |
rubygem-typeprofAlmaLinux:8 From an advisory covering 3 CVEs |
before 0.21.3-143.module_el8.10.0+3854+02eaa59a | 0.21.3-143.module_el8.10.0+3854+02eaa59a |
rubygemsAlmaLinux:8 From an advisory covering 3 CVEs |
before 3.3.27-143.module_el8.10.0+3854+02eaa59a | 3.3.27-143.module_el8.10.0+3854+02eaa59a |
rubygems-develAlmaLinux:8 From an advisory covering 3 CVEs |
before 3.3.27-143.module_el8.10.0+3854+02eaa59a | 3.3.27-143.module_el8.10.0+3854+02eaa59a |
rubyAlmaLinux:9 From an advisory covering 3 CVEs |
before 3.1.5-144.module_el9.4.0+101+d58a8d95 | 3.1.5-144.module_el9.4.0+101+d58a8d95 |
ruby-bundled-gemsAlmaLinux:9 From an advisory covering 3 CVEs |
before 3.1.5-144.module_el9.4.0+101+d58a8d95 | 3.1.5-144.module_el9.4.0+101+d58a8d95 |
ruby-default-gemsAlmaLinux:9 From an advisory covering 3 CVEs |
before 3.1.5-144.module_el9.4.0+101+d58a8d95 | 3.1.5-144.module_el9.4.0+101+d58a8d95 |
ruby-develAlmaLinux:9 From an advisory covering 3 CVEs |
before 3.1.5-144.module_el9.4.0+101+d58a8d95 | 3.1.5-144.module_el9.4.0+101+d58a8d95 |
ruby-docAlmaLinux:9 From an advisory covering 3 CVEs |
before 3.1.5-144.module_el9.4.0+101+d58a8d95 | 3.1.5-144.module_el9.4.0+101+d58a8d95 |
ruby-libsAlmaLinux:9 From an advisory covering 3 CVEs |
before 3.1.5-144.module_el9.4.0+101+d58a8d95 | 3.1.5-144.module_el9.4.0+101+d58a8d95 |
rubygem-bigdecimalAlmaLinux:9 From an advisory covering 3 CVEs |
before 3.1.1-144.module_el9.4.0+101+d58a8d95 | 3.1.1-144.module_el9.4.0+101+d58a8d95 |
rubygem-bundlerAlmaLinux:9 From an advisory covering 3 CVEs |
before 2.3.27-144.module_el9.4.0+101+d58a8d95 | 2.3.27-144.module_el9.4.0+101+d58a8d95 |
rubygem-io-consoleAlmaLinux:9 From an advisory covering 3 CVEs |
before 0.5.11-144.module_el9.4.0+101+d58a8d95 | 0.5.11-144.module_el9.4.0+101+d58a8d95 |
rubygem-irbAlmaLinux:9 From an advisory covering 3 CVEs |
before 1.4.1-144.module_el9.4.0+101+d58a8d95 | 1.4.1-144.module_el9.4.0+101+d58a8d95 |
rubygem-jsonAlmaLinux:9 From an advisory covering 3 CVEs |
before 2.6.1-144.module_el9.4.0+101+d58a8d95 | 2.6.1-144.module_el9.4.0+101+d58a8d95 |
rubygem-minitestAlmaLinux:9 From an advisory covering 3 CVEs |
before 5.15.0-144.module_el9.4.0+101+d58a8d95 | 5.15.0-144.module_el9.4.0+101+d58a8d95 |
rubygem-mysql2AlmaLinux:9 From an advisory covering 3 CVEs |
before 0.5.4-1.module_el9.1.0+8+503f6fbd | 0.5.4-1.module_el9.1.0+8+503f6fbd |
rubygem-mysql2-docAlmaLinux:9 From an advisory covering 3 CVEs |
before 0.5.4-1.module_el9.1.0+8+503f6fbd | 0.5.4-1.module_el9.1.0+8+503f6fbd |
rubygem-pgAlmaLinux:9 From an advisory covering 3 CVEs |
before 1.3.5-1.module_el9.1.0+8+503f6fbd | 1.3.5-1.module_el9.1.0+8+503f6fbd |
rubygem-pg-docAlmaLinux:9 From an advisory covering 3 CVEs |
before 1.3.5-1.module_el9.1.0+8+503f6fbd | 1.3.5-1.module_el9.1.0+8+503f6fbd |
rubygem-power_assertAlmaLinux:9 From an advisory covering 3 CVEs |
before 2.0.1-144.module_el9.4.0+101+d58a8d95 | 2.0.1-144.module_el9.4.0+101+d58a8d95 |
rubygem-psychAlmaLinux:9 From an advisory covering 3 CVEs |
before 4.0.4-144.module_el9.4.0+101+d58a8d95 | 4.0.4-144.module_el9.4.0+101+d58a8d95 |
rubygem-rakeAlmaLinux:9 From an advisory covering 3 CVEs |
before 13.0.6-144.module_el9.4.0+101+d58a8d95 | 13.0.6-144.module_el9.4.0+101+d58a8d95 |
rubygem-rbsAlmaLinux:9 From an advisory covering 3 CVEs |
before 2.7.0-144.module_el9.4.0+101+d58a8d95 | 2.7.0-144.module_el9.4.0+101+d58a8d95 |
rubygem-rdocAlmaLinux:9 From an advisory covering 3 CVEs |
before 6.4.1.1-144.module_el9.4.0+101+d58a8d95 | 6.4.1.1-144.module_el9.4.0+101+d58a8d95 |
rubygem-rexmlAlmaLinux:9 From an advisory covering 3 CVEs |
before 3.2.5-144.module_el9.4.0+101+d58a8d95 | 3.2.5-144.module_el9.4.0+101+d58a8d95 |
rubygem-rssAlmaLinux:9 From an advisory covering 3 CVEs |
before 0.2.9-144.module_el9.4.0+101+d58a8d95 | 0.2.9-144.module_el9.4.0+101+d58a8d95 |
rubygem-test-unitAlmaLinux:9 From an advisory covering 3 CVEs |
before 3.5.3-144.module_el9.4.0+101+d58a8d95 | 3.5.3-144.module_el9.4.0+101+d58a8d95 |
rubygem-typeprofAlmaLinux:9 From an advisory covering 3 CVEs |
before 0.21.3-144.module_el9.4.0+101+d58a8d95 | 0.21.3-144.module_el9.4.0+101+d58a8d95 |
rubygemsAlmaLinux:9 From an advisory covering 3 CVEs |
before 3.3.27-144.module_el9.4.0+101+d58a8d95 | 3.3.27-144.module_el9.4.0+101+d58a8d95 |
rubygems-develAlmaLinux:9 From an advisory covering 3 CVEs |
before 3.3.27-144.module_el9.4.0+101+d58a8d95 | 3.3.27-144.module_el9.4.0+101+d58a8d95 |
rubyAlmaLinux:8 From an advisory covering 3 CVEs |
before 3.3.1-2.module_el8.10.0+3855+767cb125 | 3.3.1-2.module_el8.10.0+3855+767cb125 |
ruby-bundled-gemsAlmaLinux:8 From an advisory covering 3 CVEs |
before 3.3.1-2.module_el8.10.0+3855+767cb125 | 3.3.1-2.module_el8.10.0+3855+767cb125 |
ruby-default-gemsAlmaLinux:8 From an advisory covering 3 CVEs |
before 3.3.1-2.module_el8.10.0+3855+767cb125 | 3.3.1-2.module_el8.10.0+3855+767cb125 |
ruby-develAlmaLinux:8 From an advisory covering 3 CVEs |
before 3.3.1-2.module_el8.10.0+3855+767cb125 | 3.3.1-2.module_el8.10.0+3855+767cb125 |
ruby-docAlmaLinux:8 From an advisory covering 3 CVEs |
before 3.3.1-2.module_el8.10.0+3855+767cb125 | 3.3.1-2.module_el8.10.0+3855+767cb125 |
ruby-libsAlmaLinux:8 From an advisory covering 3 CVEs |
before 3.3.1-2.module_el8.10.0+3855+767cb125 | 3.3.1-2.module_el8.10.0+3855+767cb125 |
rubygem-abrtAlmaLinux:8 From an advisory covering 3 CVEs |
before 0.4.0-1.module_el8.10.0+3799+191214cc | 0.4.0-1.module_el8.10.0+3799+191214cc |
rubygem-abrt-docAlmaLinux:8 From an advisory covering 3 CVEs |
before 0.4.0-1.module_el8.10.0+3799+191214cc | 0.4.0-1.module_el8.10.0+3799+191214cc |
rubygem-bigdecimalAlmaLinux:8 From an advisory covering 3 CVEs |
before 3.1.5-2.module_el8.10.0+3855+767cb125 | 3.1.5-2.module_el8.10.0+3855+767cb125 |
rubygem-bundlerAlmaLinux:8 From an advisory covering 3 CVEs |
before 2.5.9-2.module_el8.10.0+3855+767cb125 | 2.5.9-2.module_el8.10.0+3855+767cb125 |
rubygem-io-consoleAlmaLinux:8 From an advisory covering 3 CVEs |
before 0.7.1-2.module_el8.10.0+3855+767cb125 | 0.7.1-2.module_el8.10.0+3855+767cb125 |
rubygem-irbAlmaLinux:8 From an advisory covering 3 CVEs |
before 1.11.0-2.module_el8.10.0+3855+767cb125 | 1.11.0-2.module_el8.10.0+3855+767cb125 |
rubygem-jsonAlmaLinux:8 From an advisory covering 3 CVEs |
before 2.7.1-2.module_el8.10.0+3855+767cb125 | 2.7.1-2.module_el8.10.0+3855+767cb125 |
rubygem-minitestAlmaLinux:8 From an advisory covering 3 CVEs |
before 5.20.0-2.module_el8.10.0+3855+767cb125 | 5.20.0-2.module_el8.10.0+3855+767cb125 |
rubygem-mysql2AlmaLinux:8 From an advisory covering 3 CVEs |
before 0.5.5-1.module_el8.10.0+3799+191214cc | 0.5.5-1.module_el8.10.0+3799+191214cc |
rubygem-mysql2-docAlmaLinux:8 From an advisory covering 3 CVEs |
before 0.5.5-1.module_el8.10.0+3799+191214cc | 0.5.5-1.module_el8.10.0+3799+191214cc |
rubygem-pgAlmaLinux:8 From an advisory covering 3 CVEs |
before 1.5.4-1.module_el8.10.0+3799+191214cc | 1.5.4-1.module_el8.10.0+3799+191214cc |
rubygem-pg-docAlmaLinux:8 From an advisory covering 3 CVEs |
before 1.5.4-1.module_el8.10.0+3799+191214cc | 1.5.4-1.module_el8.10.0+3799+191214cc |
rubygem-power_assertAlmaLinux:8 From an advisory covering 3 CVEs |
before 2.0.3-2.module_el8.10.0+3855+767cb125 | 2.0.3-2.module_el8.10.0+3855+767cb125 |
rubygem-psychAlmaLinux:8 From an advisory covering 3 CVEs |
before 5.1.2-2.module_el8.10.0+3855+767cb125 | 5.1.2-2.module_el8.10.0+3855+767cb125 |
rubygem-raccAlmaLinux:8 From an advisory covering 3 CVEs |
before 1.7.3-2.module_el8.10.0+3855+767cb125 | 1.7.3-2.module_el8.10.0+3855+767cb125 |
rubygem-rakeAlmaLinux:8 From an advisory covering 3 CVEs |
before 13.1.0-2.module_el8.10.0+3855+767cb125 | 13.1.0-2.module_el8.10.0+3855+767cb125 |
rubygem-rbsAlmaLinux:8 From an advisory covering 3 CVEs |
before 3.4.0-2.module_el8.10.0+3855+767cb125 | 3.4.0-2.module_el8.10.0+3855+767cb125 |
rubygem-rdocAlmaLinux:8 From an advisory covering 3 CVEs |
before 6.6.3.1-2.module_el8.10.0+3855+767cb125 | 6.6.3.1-2.module_el8.10.0+3855+767cb125 |
rubygem-rexmlAlmaLinux:8 From an advisory covering 3 CVEs |
before 3.2.6-2.module_el8.10.0+3855+767cb125 | 3.2.6-2.module_el8.10.0+3855+767cb125 |
rubygem-rssAlmaLinux:8 From an advisory covering 3 CVEs |
before 0.3.0-2.module_el8.10.0+3855+767cb125 | 0.3.0-2.module_el8.10.0+3855+767cb125 |
rubygem-test-unitAlmaLinux:8 From an advisory covering 3 CVEs |
before 3.6.1-2.module_el8.10.0+3855+767cb125 | 3.6.1-2.module_el8.10.0+3855+767cb125 |
rubygem-typeprofAlmaLinux:8 From an advisory covering 3 CVEs |
before 0.21.9-2.module_el8.10.0+3855+767cb125 | 0.21.9-2.module_el8.10.0+3855+767cb125 |
rubygemsAlmaLinux:8 From an advisory covering 3 CVEs |
before 3.5.9-2.module_el8.10.0+3855+767cb125 | 3.5.9-2.module_el8.10.0+3855+767cb125 |
rubygems-develAlmaLinux:8 From an advisory covering 3 CVEs |
before 3.5.9-2.module_el8.10.0+3855+767cb125 | 3.5.9-2.module_el8.10.0+3855+767cb125 |
rubyAlmaLinux:9 From an advisory covering 3 CVEs |
before 3.3.1-2.module_el9.4.0+102+68a93853 | 3.3.1-2.module_el9.4.0+102+68a93853 |
ruby-bundled-gemsAlmaLinux:9 From an advisory covering 3 CVEs |
before 3.3.1-2.module_el9.4.0+102+68a93853 | 3.3.1-2.module_el9.4.0+102+68a93853 |
ruby-default-gemsAlmaLinux:9 From an advisory covering 3 CVEs |
before 3.3.1-2.module_el9.4.0+102+68a93853 | 3.3.1-2.module_el9.4.0+102+68a93853 |
rubyAzure Linux:3 |
before 3.3.3-1 | 3.3.3-1 |
rubyAzure Linux:2 |
before 3.1.4-5 | 3.1.4-5 |
rubyAlpaquita:23 |
3.1.2-r1 up to 3.1.5-r0 | 3.1.5-r0 |
rubyAlpaquita:stream |
3.1.2-r1 up to 3.3.1-r0 | 3.3.1-r0 |
rubyBitnami |
before 3.1.5, 3.2.0 up to 3.2.4, 3.3.0 up to 3.3.1 | 3.1.53.2.43.3.1 |
ruby-minBitnami |
before 3.1.6, 3.2.0 up to 3.2.6, 3.3.0 up to 3.3.7 | 3.1.63.2.63.3.7 |
ruby3.1Debian:12 |
before 3.1.2-7+deb12u1, plus listed versions 3.1.2-7 |
3.1.2-7+deb12u1 |
ruby2.7Debian:11 From an advisory covering 8 CVEs |
before 2.7.4-1+deb11u2, plus listed versions 2.7.4-12.7.4-1+deb11u1 |
2.7.4-1+deb11u2 |
ruby3.1Debian:12 From an advisory covering 3 CVEs |
before 3.1.2-7+deb12u1, plus listed versions 3.1.2-7 |
3.1.2-7+deb12u1 |
rubyMageia:9 From an advisory covering 3 CVEs |
before 3.1.5-45.mga9 | 3.1.5-45.mga9 |
rubyopenEuler:20.03-LTS-SP1 |
before 2.5.8-124.oe1 | 2.5.8-124.oe1 |
rubyopenEuler:22.03-LTS-SP3 |
before 3.0.3-133.oe2203sp3 | 3.0.3-133.oe2203sp3 |
rubyopenEuler:20.03-LTS-SP4 |
before 2.5.8-124.oe2003sp4 | 2.5.8-124.oe2003sp4 |
rubyopenEuler:22.03-LTS |
before 3.0.3-133.oe2203 | 3.0.3-133.oe2203 |
rubyopenEuler:22.03-LTS-SP1 |
before 3.0.3-133.oe2203sp1 | 3.0.3-133.oe2203sp1 |
rubyopenEuler:22.03-LTS-SP2 |
before 3.0.3-133.oe2203sp2 | 3.0.3-133.oe2203sp2 |
rubyRed Hat:enterprise_linux:8::appstream From an advisory covering 6 CVEs |
before 0:3.0.7-143.module+el8.10.0+21858+d19f3934 | 0:3.0.7-143.module+el8.10.0+21858+d19f3934 |
ruby-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 6 CVEs |
before 0:3.0.7-143.module+el8.10.0+21858+d19f3934 | 0:3.0.7-143.module+el8.10.0+21858+d19f3934 |
ruby-debugsourceRed Hat:enterprise_linux:8::appstream From an advisory covering 6 CVEs |
before 0:3.0.7-143.module+el8.10.0+21858+d19f3934 | 0:3.0.7-143.module+el8.10.0+21858+d19f3934 |
ruby-default-gemsRed Hat:enterprise_linux:8::appstream From an advisory covering 6 CVEs |
before 0:3.0.7-143.module+el8.10.0+21858+d19f3934 | 0:3.0.7-143.module+el8.10.0+21858+d19f3934 |
ruby-develRed Hat:enterprise_linux:8::appstream From an advisory covering 6 CVEs |
before 0:3.0.7-143.module+el8.10.0+21858+d19f3934 | 0:3.0.7-143.module+el8.10.0+21858+d19f3934 |
ruby-docRed Hat:enterprise_linux:8::appstream From an advisory covering 6 CVEs |
before 0:3.0.7-143.module+el8.10.0+21858+d19f3934 | 0:3.0.7-143.module+el8.10.0+21858+d19f3934 |
ruby-libsRed Hat:enterprise_linux:8::appstream From an advisory covering 6 CVEs |
before 0:3.0.7-143.module+el8.10.0+21858+d19f3934 | 0:3.0.7-143.module+el8.10.0+21858+d19f3934 |
ruby-libs-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 6 CVEs |
before 0:3.0.7-143.module+el8.10.0+21858+d19f3934 | 0:3.0.7-143.module+el8.10.0+21858+d19f3934 |
rubygem-abrtRed Hat:enterprise_linux:8::appstream From an advisory covering 6 CVEs |
before 0:0.4.0-1.module+el8.10.0+21858+d19f3934 | 0:0.4.0-1.module+el8.10.0+21858+d19f3934 |
rubygem-abrt-docRed Hat:enterprise_linux:8::appstream From an advisory covering 6 CVEs |
before 0:0.4.0-1.module+el8.10.0+21858+d19f3934 | 0:0.4.0-1.module+el8.10.0+21858+d19f3934 |
rubygem-bigdecimalRed Hat:enterprise_linux:8::appstream From an advisory covering 6 CVEs |
before 0:3.0.0-143.module+el8.10.0+21858+d19f3934 | 0:3.0.0-143.module+el8.10.0+21858+d19f3934 |
rubygem-bigdecimal-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 6 CVEs |
before 0:3.0.0-143.module+el8.10.0+21858+d19f3934 | 0:3.0.0-143.module+el8.10.0+21858+d19f3934 |
rubygem-bundlerRed Hat:enterprise_linux:8::appstream From an advisory covering 6 CVEs |
before 0:2.2.33-143.module+el8.10.0+21858+d19f3934 | 0:2.2.33-143.module+el8.10.0+21858+d19f3934 |
rubygem-io-consoleRed Hat:enterprise_linux:8::appstream From an advisory covering 6 CVEs |
before 0:0.5.7-143.module+el8.10.0+21858+d19f3934 | 0:0.5.7-143.module+el8.10.0+21858+d19f3934 |
rubygem-io-console-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 6 CVEs |
before 0:0.5.7-143.module+el8.10.0+21858+d19f3934 | 0:0.5.7-143.module+el8.10.0+21858+d19f3934 |
rubygem-irbRed Hat:enterprise_linux:8::appstream From an advisory covering 6 CVEs |
before 0:1.3.5-143.module+el8.10.0+21858+d19f3934 | 0:1.3.5-143.module+el8.10.0+21858+d19f3934 |
rubygem-jsonRed Hat:enterprise_linux:8::appstream From an advisory covering 6 CVEs |
before 0:2.5.1-143.module+el8.10.0+21858+d19f3934 | 0:2.5.1-143.module+el8.10.0+21858+d19f3934 |
rubygem-json-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 6 CVEs |
before 0:2.5.1-143.module+el8.10.0+21858+d19f3934 | 0:2.5.1-143.module+el8.10.0+21858+d19f3934 |
rubygem-minitestRed Hat:enterprise_linux:8::appstream From an advisory covering 6 CVEs |
before 0:5.14.2-143.module+el8.10.0+21858+d19f3934 | 0:5.14.2-143.module+el8.10.0+21858+d19f3934 |
rubygem-mysql2Red Hat:enterprise_linux:8::appstream From an advisory covering 6 CVEs |
before 0:0.5.3-2.module+el8.10.0+21858+d19f3934 | 0:0.5.3-2.module+el8.10.0+21858+d19f3934 |
rubygem-mysql2-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 6 CVEs |
before 0:0.5.3-2.module+el8.10.0+21858+d19f3934 | 0:0.5.3-2.module+el8.10.0+21858+d19f3934 |
rubygem-mysql2-debugsourceRed Hat:enterprise_linux:8::appstream From an advisory covering 6 CVEs |
before 0:0.5.3-2.module+el8.10.0+21858+d19f3934 | 0:0.5.3-2.module+el8.10.0+21858+d19f3934 |
rubygem-mysql2-docRed Hat:enterprise_linux:8::appstream From an advisory covering 6 CVEs |
before 0:0.5.3-2.module+el8.10.0+21858+d19f3934 | 0:0.5.3-2.module+el8.10.0+21858+d19f3934 |
rubygem-pgRed Hat:enterprise_linux:8::appstream From an advisory covering 6 CVEs |
before 0:1.2.3-1.module+el8.10.0+21858+d19f3934 | 0:1.2.3-1.module+el8.10.0+21858+d19f3934 |
rubygem-pg-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 6 CVEs |
before 0:1.2.3-1.module+el8.10.0+21858+d19f3934 | 0:1.2.3-1.module+el8.10.0+21858+d19f3934 |
rubygem-pg-debugsourceRed Hat:enterprise_linux:8::appstream From an advisory covering 6 CVEs |
before 0:1.2.3-1.module+el8.10.0+21858+d19f3934 | 0:1.2.3-1.module+el8.10.0+21858+d19f3934 |
rubygem-pg-docRed Hat:enterprise_linux:8::appstream From an advisory covering 6 CVEs |
before 0:1.2.3-1.module+el8.10.0+21858+d19f3934 | 0:1.2.3-1.module+el8.10.0+21858+d19f3934 |
rubygem-power_assertRed Hat:enterprise_linux:8::appstream From an advisory covering 6 CVEs |
before 0:1.2.1-143.module+el8.10.0+21858+d19f3934 | 0:1.2.1-143.module+el8.10.0+21858+d19f3934 |
rubygem-psychRed Hat:enterprise_linux:8::appstream From an advisory covering 6 CVEs |
before 0:3.3.2-143.module+el8.10.0+21858+d19f3934 | 0:3.3.2-143.module+el8.10.0+21858+d19f3934 |
rubygem-psych-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 6 CVEs |
before 0:3.3.2-143.module+el8.10.0+21858+d19f3934 | 0:3.3.2-143.module+el8.10.0+21858+d19f3934 |
rubygem-rakeRed Hat:enterprise_linux:8::appstream From an advisory covering 6 CVEs |
before 0:13.0.3-143.module+el8.10.0+21858+d19f3934 | 0:13.0.3-143.module+el8.10.0+21858+d19f3934 |
rubygem-rbsRed Hat:enterprise_linux:8::appstream From an advisory covering 6 CVEs |
before 0:1.4.0-143.module+el8.10.0+21858+d19f3934 | 0:1.4.0-143.module+el8.10.0+21858+d19f3934 |
rubygem-rdocRed Hat:enterprise_linux:8::appstream From an advisory covering 6 CVEs |
before 0:6.3.4.1-143.module+el8.10.0+21858+d19f3934 | 0:6.3.4.1-143.module+el8.10.0+21858+d19f3934 |
rubygem-rexmlRed Hat:enterprise_linux:8::appstream From an advisory covering 6 CVEs |
before 0:3.2.5-143.module+el8.10.0+21858+d19f3934 | 0:3.2.5-143.module+el8.10.0+21858+d19f3934 |
rubygem-rssRed Hat:enterprise_linux:8::appstream From an advisory covering 6 CVEs |
before 0:0.2.9-143.module+el8.10.0+21858+d19f3934 | 0:0.2.9-143.module+el8.10.0+21858+d19f3934 |
rubygem-test-unitRed Hat:enterprise_linux:8::appstream From an advisory covering 6 CVEs |
before 0:3.3.7-143.module+el8.10.0+21858+d19f3934 | 0:3.3.7-143.module+el8.10.0+21858+d19f3934 |
rubygem-typeprofRed Hat:enterprise_linux:8::appstream From an advisory covering 6 CVEs |
before 0:0.15.2-143.module+el8.10.0+21858+d19f3934 | 0:0.15.2-143.module+el8.10.0+21858+d19f3934 |
rubygemsRed Hat:enterprise_linux:8::appstream From an advisory covering 6 CVEs |
before 0:3.2.33-143.module+el8.10.0+21858+d19f3934 | 0:3.2.33-143.module+el8.10.0+21858+d19f3934 |
rubygems-develRed Hat:enterprise_linux:8::appstream From an advisory covering 6 CVEs |
before 0:3.2.33-143.module+el8.10.0+21858+d19f3934 | 0:3.2.33-143.module+el8.10.0+21858+d19f3934 |
rubyRed Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:3.1.5-143.module+el8.10.0+21792+e2f63d26 | 0:3.1.5-143.module+el8.10.0+21792+e2f63d26 |
ruby-bundled-gemsRed Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:3.1.5-143.module+el8.10.0+21792+e2f63d26 | 0:3.1.5-143.module+el8.10.0+21792+e2f63d26 |
ruby-bundled-gems-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:3.1.5-143.module+el8.10.0+21792+e2f63d26 | 0:3.1.5-143.module+el8.10.0+21792+e2f63d26 |
ruby-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:3.1.5-143.module+el8.10.0+21792+e2f63d26 | 0:3.1.5-143.module+el8.10.0+21792+e2f63d26 |
ruby-debugsourceRed Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:3.1.5-143.module+el8.10.0+21792+e2f63d26 | 0:3.1.5-143.module+el8.10.0+21792+e2f63d26 |
ruby-default-gemsRed Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:3.1.5-143.module+el8.10.0+21792+e2f63d26 | 0:3.1.5-143.module+el8.10.0+21792+e2f63d26 |
ruby-develRed Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:3.1.5-143.module+el8.10.0+21792+e2f63d26 | 0:3.1.5-143.module+el8.10.0+21792+e2f63d26 |
ruby-docRed Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:3.1.5-143.module+el8.10.0+21792+e2f63d26 | 0:3.1.5-143.module+el8.10.0+21792+e2f63d26 |
ruby-libsRed Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:3.1.5-143.module+el8.10.0+21792+e2f63d26 | 0:3.1.5-143.module+el8.10.0+21792+e2f63d26 |
ruby-libs-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:3.1.5-143.module+el8.10.0+21792+e2f63d26 | 0:3.1.5-143.module+el8.10.0+21792+e2f63d26 |
rubygem-abrtRed Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:0.4.0-1.module+el8.10.0+21470+43ec8058 | 0:0.4.0-1.module+el8.10.0+21470+43ec8058 |
rubygem-abrt-docRed Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:0.4.0-1.module+el8.10.0+21470+43ec8058 | 0:0.4.0-1.module+el8.10.0+21470+43ec8058 |
rubygem-bigdecimalRed Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:3.1.1-143.module+el8.10.0+21792+e2f63d26 | 0:3.1.1-143.module+el8.10.0+21792+e2f63d26 |
rubygem-bigdecimal-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:3.1.1-143.module+el8.10.0+21792+e2f63d26 | 0:3.1.1-143.module+el8.10.0+21792+e2f63d26 |
rubygem-bundlerRed Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:2.3.27-143.module+el8.10.0+21792+e2f63d26 | 0:2.3.27-143.module+el8.10.0+21792+e2f63d26 |
rubygem-io-consoleRed Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:0.5.11-143.module+el8.10.0+21792+e2f63d26 | 0:0.5.11-143.module+el8.10.0+21792+e2f63d26 |
rubygem-io-console-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:0.5.11-143.module+el8.10.0+21792+e2f63d26 | 0:0.5.11-143.module+el8.10.0+21792+e2f63d26 |
rubygem-irbRed Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:1.4.1-143.module+el8.10.0+21792+e2f63d26 | 0:1.4.1-143.module+el8.10.0+21792+e2f63d26 |
rubygem-jsonRed Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:2.6.1-143.module+el8.10.0+21792+e2f63d26 | 0:2.6.1-143.module+el8.10.0+21792+e2f63d26 |
rubygem-json-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:2.6.1-143.module+el8.10.0+21792+e2f63d26 | 0:2.6.1-143.module+el8.10.0+21792+e2f63d26 |
rubygem-minitestRed Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:5.15.0-143.module+el8.10.0+21792+e2f63d26 | 0:5.15.0-143.module+el8.10.0+21792+e2f63d26 |
rubygem-mysql2Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:0.5.3-3.module+el8.10.0+21470+43ec8058 | 0:0.5.3-3.module+el8.10.0+21470+43ec8058 |
rubygem-mysql2-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:0.5.3-3.module+el8.10.0+21470+43ec8058 | 0:0.5.3-3.module+el8.10.0+21470+43ec8058 |
rubygem-mysql2-debugsourceRed Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:0.5.3-3.module+el8.10.0+21470+43ec8058 | 0:0.5.3-3.module+el8.10.0+21470+43ec8058 |
rubygem-mysql2-docRed Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:0.5.3-3.module+el8.10.0+21470+43ec8058 | 0:0.5.3-3.module+el8.10.0+21470+43ec8058 |
rubygem-pgRed Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:1.3.2-1.module+el8.10.0+21470+43ec8058 | 0:1.3.2-1.module+el8.10.0+21470+43ec8058 |
rubygem-pg-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:1.3.2-1.module+el8.10.0+21470+43ec8058 | 0:1.3.2-1.module+el8.10.0+21470+43ec8058 |
rubygem-pg-debugsourceRed Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:1.3.2-1.module+el8.10.0+21470+43ec8058 | 0:1.3.2-1.module+el8.10.0+21470+43ec8058 |
rubygem-pg-docRed Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:1.3.2-1.module+el8.10.0+21470+43ec8058 | 0:1.3.2-1.module+el8.10.0+21470+43ec8058 |
rubygem-power_assertRed Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:2.0.1-143.module+el8.10.0+21792+e2f63d26 | 0:2.0.1-143.module+el8.10.0+21792+e2f63d26 |
rubygem-psychRed Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:4.0.4-143.module+el8.10.0+21792+e2f63d26 | 0:4.0.4-143.module+el8.10.0+21792+e2f63d26 |
rubygem-psych-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:4.0.4-143.module+el8.10.0+21792+e2f63d26 | 0:4.0.4-143.module+el8.10.0+21792+e2f63d26 |
rubygem-rakeRed Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:13.0.6-143.module+el8.10.0+21792+e2f63d26 | 0:13.0.6-143.module+el8.10.0+21792+e2f63d26 |
rubygem-rbsRed Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:2.7.0-143.module+el8.10.0+21792+e2f63d26 | 0:2.7.0-143.module+el8.10.0+21792+e2f63d26 |
rubygem-rbs-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:2.7.0-143.module+el8.10.0+21792+e2f63d26 | 0:2.7.0-143.module+el8.10.0+21792+e2f63d26 |
rubygem-rdocRed Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:6.4.1.1-143.module+el8.10.0+21792+e2f63d26 | 0:6.4.1.1-143.module+el8.10.0+21792+e2f63d26 |
rubygem-rexmlRed Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:3.2.5-143.module+el8.10.0+21792+e2f63d26 | 0:3.2.5-143.module+el8.10.0+21792+e2f63d26 |
rubygem-rssRed Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:0.2.9-143.module+el8.10.0+21792+e2f63d26 | 0:0.2.9-143.module+el8.10.0+21792+e2f63d26 |
rubygem-test-unitRed Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:3.5.3-143.module+el8.10.0+21792+e2f63d26 | 0:3.5.3-143.module+el8.10.0+21792+e2f63d26 |
rubygem-typeprofRed Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:0.21.3-143.module+el8.10.0+21792+e2f63d26 | 0:0.21.3-143.module+el8.10.0+21792+e2f63d26 |
rubygemsRed Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:3.3.27-143.module+el8.10.0+21792+e2f63d26 | 0:3.3.27-143.module+el8.10.0+21792+e2f63d26 |
rubygems-develRed Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:3.3.27-143.module+el8.10.0+21792+e2f63d26 | 0:3.3.27-143.module+el8.10.0+21792+e2f63d26 |
rubyRed Hat:enterprise_linux:9::appstream From an advisory covering 3 CVEs |
before 0:3.1.5-144.module+el9.4.0+21780+79b7bdb5 | 0:3.1.5-144.module+el9.4.0+21780+79b7bdb5 |
ruby-bundled-gemsRed Hat:enterprise_linux:9::appstream From an advisory covering 3 CVEs |
before 0:3.1.5-144.module+el9.4.0+21780+79b7bdb5 | 0:3.1.5-144.module+el9.4.0+21780+79b7bdb5 |
ruby-bundled-gems-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 3 CVEs |
before 0:3.1.5-144.module+el9.4.0+21780+79b7bdb5 | 0:3.1.5-144.module+el9.4.0+21780+79b7bdb5 |
ruby-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 3 CVEs |
before 0:3.1.5-144.module+el9.4.0+21780+79b7bdb5 | 0:3.1.5-144.module+el9.4.0+21780+79b7bdb5 |
ruby-debugsourceRed Hat:enterprise_linux:9::appstream From an advisory covering 3 CVEs |
before 0:3.1.5-144.module+el9.4.0+21780+79b7bdb5 | 0:3.1.5-144.module+el9.4.0+21780+79b7bdb5 |
ruby-default-gemsRed Hat:enterprise_linux:9::appstream From an advisory covering 3 CVEs |
before 0:3.1.5-144.module+el9.4.0+21780+79b7bdb5 | 0:3.1.5-144.module+el9.4.0+21780+79b7bdb5 |
ruby-develRed Hat:enterprise_linux:9::appstream From an advisory covering 3 CVEs |
before 0:3.1.5-144.module+el9.4.0+21780+79b7bdb5 | 0:3.1.5-144.module+el9.4.0+21780+79b7bdb5 |
ruby-docRed Hat:enterprise_linux:9::appstream From an advisory covering 3 CVEs |
before 0:3.1.5-144.module+el9.4.0+21780+79b7bdb5 | 0:3.1.5-144.module+el9.4.0+21780+79b7bdb5 |
ruby-libsRed Hat:enterprise_linux:9::appstream From an advisory covering 3 CVEs |
before 0:3.1.5-144.module+el9.4.0+21780+79b7bdb5 | 0:3.1.5-144.module+el9.4.0+21780+79b7bdb5 |
ruby-libs-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 3 CVEs |
before 0:3.1.5-144.module+el9.4.0+21780+79b7bdb5 | 0:3.1.5-144.module+el9.4.0+21780+79b7bdb5 |
rubygem-bigdecimalRed Hat:enterprise_linux:9::appstream From an advisory covering 3 CVEs |
before 0:3.1.1-144.module+el9.4.0+21780+79b7bdb5 | 0:3.1.1-144.module+el9.4.0+21780+79b7bdb5 |
rubygem-bigdecimal-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 3 CVEs |
before 0:3.1.1-144.module+el9.4.0+21780+79b7bdb5 | 0:3.1.1-144.module+el9.4.0+21780+79b7bdb5 |
rubygem-bundlerRed Hat:enterprise_linux:9::appstream From an advisory covering 3 CVEs |
before 0:2.3.27-144.module+el9.4.0+21780+79b7bdb5 | 0:2.3.27-144.module+el9.4.0+21780+79b7bdb5 |
rubygem-io-consoleRed Hat:enterprise_linux:9::appstream From an advisory covering 3 CVEs |
before 0:0.5.11-144.module+el9.4.0+21780+79b7bdb5 | 0:0.5.11-144.module+el9.4.0+21780+79b7bdb5 |
rubygem-io-console-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 3 CVEs |
before 0:0.5.11-144.module+el9.4.0+21780+79b7bdb5 | 0:0.5.11-144.module+el9.4.0+21780+79b7bdb5 |
rubygem-irbRed Hat:enterprise_linux:9::appstream From an advisory covering 3 CVEs |
before 0:1.4.1-144.module+el9.4.0+21780+79b7bdb5 | 0:1.4.1-144.module+el9.4.0+21780+79b7bdb5 |
rubygem-jsonRed Hat:enterprise_linux:9::appstream From an advisory covering 3 CVEs |
before 0:2.6.1-144.module+el9.4.0+21780+79b7bdb5 | 0:2.6.1-144.module+el9.4.0+21780+79b7bdb5 |
rubygem-json-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 3 CVEs |
before 0:2.6.1-144.module+el9.4.0+21780+79b7bdb5 | 0:2.6.1-144.module+el9.4.0+21780+79b7bdb5 |
rubygem-minitestRed Hat:enterprise_linux:9::appstream From an advisory covering 3 CVEs |
before 0:5.15.0-144.module+el9.4.0+21780+79b7bdb5 | 0:5.15.0-144.module+el9.4.0+21780+79b7bdb5 |
rubygem-mysql2Red Hat:enterprise_linux:9::appstream From an advisory covering 3 CVEs |
before 0:0.5.4-1.module+el9.1.0+15737+76195479 | 0:0.5.4-1.module+el9.1.0+15737+76195479 |
rubygem-mysql2-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 3 CVEs |
before 0:0.5.4-1.module+el9.1.0+15737+76195479 | 0:0.5.4-1.module+el9.1.0+15737+76195479 |
rubygem-mysql2-debugsourceRed Hat:enterprise_linux:9::appstream From an advisory covering 3 CVEs |
before 0:0.5.4-1.module+el9.1.0+15737+76195479 | 0:0.5.4-1.module+el9.1.0+15737+76195479 |
rubygem-mysql2-docRed Hat:enterprise_linux:9::appstream From an advisory covering 3 CVEs |
before 0:0.5.4-1.module+el9.1.0+15737+76195479 | 0:0.5.4-1.module+el9.1.0+15737+76195479 |
rubygem-pgRed Hat:enterprise_linux:9::appstream From an advisory covering 3 CVEs |
before 0:1.3.5-1.module+el9.1.0+15737+76195479 | 0:1.3.5-1.module+el9.1.0+15737+76195479 |
rubygem-pg-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 3 CVEs |
before 0:1.3.5-1.module+el9.1.0+15737+76195479 | 0:1.3.5-1.module+el9.1.0+15737+76195479 |
rubygem-pg-debugsourceRed Hat:enterprise_linux:9::appstream From an advisory covering 3 CVEs |
before 0:1.3.5-1.module+el9.1.0+15737+76195479 | 0:1.3.5-1.module+el9.1.0+15737+76195479 |
rubygem-pg-docRed Hat:enterprise_linux:9::appstream From an advisory covering 3 CVEs |
before 0:1.3.5-1.module+el9.1.0+15737+76195479 | 0:1.3.5-1.module+el9.1.0+15737+76195479 |
rubygem-power_assertRed Hat:enterprise_linux:9::appstream From an advisory covering 3 CVEs |
before 0:2.0.1-144.module+el9.4.0+21780+79b7bdb5 | 0:2.0.1-144.module+el9.4.0+21780+79b7bdb5 |
rubygem-psychRed Hat:enterprise_linux:9::appstream From an advisory covering 3 CVEs |
before 0:4.0.4-144.module+el9.4.0+21780+79b7bdb5 | 0:4.0.4-144.module+el9.4.0+21780+79b7bdb5 |
rubygem-psych-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 3 CVEs |
before 0:4.0.4-144.module+el9.4.0+21780+79b7bdb5 | 0:4.0.4-144.module+el9.4.0+21780+79b7bdb5 |
rubygem-rakeRed Hat:enterprise_linux:9::appstream From an advisory covering 3 CVEs |
before 0:13.0.6-144.module+el9.4.0+21780+79b7bdb5 | 0:13.0.6-144.module+el9.4.0+21780+79b7bdb5 |
rubygem-rbsRed Hat:enterprise_linux:9::appstream From an advisory covering 3 CVEs |
before 0:2.7.0-144.module+el9.4.0+21780+79b7bdb5 | 0:2.7.0-144.module+el9.4.0+21780+79b7bdb5 |
rubygem-rbs-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 3 CVEs |
before 0:2.7.0-144.module+el9.4.0+21780+79b7bdb5 | 0:2.7.0-144.module+el9.4.0+21780+79b7bdb5 |
rubygem-rdocRed Hat:enterprise_linux:9::appstream From an advisory covering 3 CVEs |
before 0:6.4.1.1-144.module+el9.4.0+21780+79b7bdb5 | 0:6.4.1.1-144.module+el9.4.0+21780+79b7bdb5 |
rubygem-rexmlRed Hat:enterprise_linux:9::appstream From an advisory covering 3 CVEs |
before 0:3.2.5-144.module+el9.4.0+21780+79b7bdb5 | 0:3.2.5-144.module+el9.4.0+21780+79b7bdb5 |
rubygem-rssRed Hat:enterprise_linux:9::appstream From an advisory covering 3 CVEs |
before 0:0.2.9-144.module+el9.4.0+21780+79b7bdb5 | 0:0.2.9-144.module+el9.4.0+21780+79b7bdb5 |
rubygem-test-unitRed Hat:enterprise_linux:9::appstream From an advisory covering 3 CVEs |
before 0:3.5.3-144.module+el9.4.0+21780+79b7bdb5 | 0:3.5.3-144.module+el9.4.0+21780+79b7bdb5 |
rubygem-typeprofRed Hat:enterprise_linux:9::appstream From an advisory covering 3 CVEs |
before 0:0.21.3-144.module+el9.4.0+21780+79b7bdb5 | 0:0.21.3-144.module+el9.4.0+21780+79b7bdb5 |
rubygemsRed Hat:enterprise_linux:9::appstream From an advisory covering 3 CVEs |
before 0:3.3.27-144.module+el9.4.0+21780+79b7bdb5 | 0:3.3.27-144.module+el9.4.0+21780+79b7bdb5 |
rubygem-mysql2Rocky Linux:9 From an advisory covering 3 CVEs |
before 0:0.5.4-1.module+el9.6.0+31865+0893c253 | 0:0.5.4-1.module+el9.6.0+31865+0893c253 |
rubygem-pgRocky Linux:9 From an advisory covering 3 CVEs |
before 0:1.3.5-1.module+el9.6.0+31865+0893c253 | 0:1.3.5-1.module+el9.6.0+31865+0893c253 |
rubyRocky Linux:8 From an advisory covering 3 CVEs |
before 0:3.3.1-2.module+el8.10.0+1827+16ecb9d2 | 0:3.3.1-2.module+el8.10.0+1827+16ecb9d2 |
rubygem-abrtRocky Linux:8 From an advisory covering 3 CVEs |
before 0:0.4.0-1.module+el8.10.0+1679+61871737 | 0:0.4.0-1.module+el8.10.0+1679+61871737 |
rubygem-mysql2Rocky Linux:8 From an advisory covering 3 CVEs |
before 0:0.5.5-1.module+el8.10.0+1679+61871737 | 0:0.5.5-1.module+el8.10.0+1679+61871737 |
rubygem-pgRocky Linux:8 From an advisory covering 3 CVEs |
before 0:1.5.4-1.module+el8.10.0+1679+61871737 | 0:1.5.4-1.module+el8.10.0+1679+61871737 |
rubygem-mysql2Rocky Linux:9 From an advisory covering 3 CVEs |
before 0:0.5.5-1.module+el9.6.0+31867+3a5bf654 | 0:0.5.5-1.module+el9.6.0+31867+3a5bf654 |
rubygem-pgRocky Linux:9 From an advisory covering 3 CVEs |
before 0:1.5.4-1.module+el9.6.0+31867+3a5bf654 | 0:1.5.4-1.module+el9.6.0+31867+3a5bf654 |
rubyRocky Linux:8 From an advisory covering 5 CVEs |
before 0:2.5.9-112.module+el8.10.0+1839+f1f156ae | 0:2.5.9-112.module+el8.10.0+1839+f1f156ae |
rubygem-abrtRocky Linux:8 From an advisory covering 5 CVEs |
before 0:0.3.0-4.module+el8.5.0+738+032c9c02 | 0:0.3.0-4.module+el8.5.0+738+032c9c02 |
rubygem-bsonRocky Linux:8 From an advisory covering 5 CVEs |
before 0:4.3.0-2.module+el8.9.0+1536+5f79634e | 0:4.3.0-2.module+el8.9.0+1536+5f79634e |
rubygem-bundlerRocky Linux:8 From an advisory covering 5 CVEs |
before 0:1.16.1-4.module+el8.9.0+1536+5f79634e | 0:1.16.1-4.module+el8.9.0+1536+5f79634e |
rubygem-mongoRocky Linux:8 From an advisory covering 5 CVEs |
before 0:2.5.1-2.module+el8.9.0+1536+5f79634e | 0:2.5.1-2.module+el8.9.0+1536+5f79634e |
rubygem-mysql2Rocky Linux:8 From an advisory covering 5 CVEs |
before 0:0.4.10-4.module+el8.9.0+1536+5f79634e | 0:0.4.10-4.module+el8.9.0+1536+5f79634e |
rubygem-pgRocky Linux:8 From an advisory covering 5 CVEs |
before 0:1.0.0-3.module+el8.9.0+1536+5f79634e | 0:1.0.0-3.module+el8.9.0+1536+5f79634e |
jrubyUbuntu:Pro:14.04:LTS |
All versions, plus listed versions 1.5.6-5ubuntu11.5.6-61.5.6-71.5.6-9+deb8u2build0.14.04.1~esm2 |
None known |
ruby2.3Ubuntu:Pro:16.04:LTS |
All versions, plus listed versions 2.3.0-12.3.0-22.3.0-4ubuntu22.3.0-4ubuntu32.3.0-5ubuntu1 Show 28 moreShow less2.3.1-2~16.042.3.1-2~16.04.22.3.1-2~16.04.42.3.1-2~16.04.52.3.1-2~16.04.62.3.1-2~16.04.72.3.1-2~16.04.92.3.1-2~16.04.102.3.1-2~16.04.112.3.1-2~16.04.122.3.1-2~ubuntu16.04.132.3.1-2~ubuntu16.04.142.3.1-2~ubuntu16.04.152.3.1-2~ubuntu16.04.162.3.1-2~ubuntu16.04.16+esm12.3.1-2~ubuntu16.04.16+esm22.3.1-2~ubuntu16.04.16+esm32.3.1-2~ubuntu16.04.16+esm42.3.1-2~ubuntu16.04.16+esm52.3.1-2~ubuntu16.04.16+esm62.3.1-2~ubuntu16.04.16+esm72.3.1-2~ubuntu16.04.16+esm82.3.1-2~ubuntu16.04.16+esm92.3.1-2~ubuntu16.04.16+esm102.3.1-2~ubuntu16.04.16+esm112.3.1-2~ubuntu16.04.16+esm122.3.1-2~ubuntu16.04.16+esm142.3.1-2~ubuntu16.04.16+esm15 |
None known |
jrubyUbuntu:16.04:LTS |
All versions, plus listed versions 1.7.21-2ubuntu41.7.22-1ubuntu1 |
None known |
ruby2.5Ubuntu:Pro:18.04:LTS |
before 2.5.1-1ubuntu1.16+esm5, plus listed versions 2.5.0~preview1-1ubuntu22.5.0-4ubuntu12.5.0-4ubuntu42.5.0-5ubuntu12.5.0-6ubuntu1 Show 19 moreShow less2.5.1-1ubuntu12.5.1-1ubuntu1.12.5.1-1ubuntu1.22.5.1-1ubuntu1.42.5.1-1ubuntu1.52.5.1-1ubuntu1.62.5.1-1ubuntu1.72.5.1-1ubuntu1.82.5.1-1ubuntu1.92.5.1-1ubuntu1.102.5.1-1ubuntu1.112.5.1-1ubuntu1.122.5.1-1ubuntu1.132.5.1-1ubuntu1.142.5.1-1ubuntu1.152.5.1-1ubuntu1.162.5.1-1ubuntu1.16+esm12.5.1-1ubuntu1.16+esm32.5.1-1ubuntu1.16+esm4 |
2.5.1-1ubuntu1.16+esm5 |
jrubyUbuntu:18.04:LTS |
All versions, plus listed versions 9.1.13.0-19.1.17.0-1~18.04 |
None known |
ruby2.7Ubuntu:20.04:LTS |
before 2.7.0-5ubuntu1.13, plus listed versions 2.7.0-12.7.0-22.7.0-32.7.0-42.7.0-4ubuntu1 Show 13 moreShow less2.7.0-5ubuntu12.7.0-5ubuntu1.12.7.0-5ubuntu1.22.7.0-5ubuntu1.32.7.0-5ubuntu1.42.7.0-5ubuntu1.52.7.0-5ubuntu1.62.7.0-5ubuntu1.72.7.0-5ubuntu1.82.7.0-5ubuntu1.92.7.0-5ubuntu1.102.7.0-5ubuntu1.112.7.0-5ubuntu1.12 |
2.7.0-5ubuntu1.13 |
jrubyUbuntu:20.04:LTS |
All versions, plus listed versions 9.1.17.0-39.1.17.0-3build59.1.17.0-3build6 |
None known |
ruby3.0Ubuntu:22.04:LTS |
before 3.0.2-7ubuntu2.6, plus listed versions 3.0.2-5ubuntu13.0.2-73.0.2-7ubuntu23.0.2-7ubuntu2.13.0.2-7ubuntu2.23.0.2-7ubuntu2.33.0.2-7ubuntu2.43.0.2-7ubuntu2.5 |
3.0.2-7ubuntu2.6 |
jrubyUbuntu:24.04:LTS |
All versions, plus listed versions 9.3.9.0+ds-19.4.5.0+ds-19.4.5.0+ds-1ubuntu19.4.6.0+ds-1ubuntu3 |
None known |
ruby3.2Ubuntu:24.04:LTS |
before 3.2.3-1ubuntu0.24.04.1, plus listed versions 3.2.3-13.2.3-1build23.2.3-1build3 |
3.2.3-1ubuntu0.24.04.1 |
jrubyUbuntu:25.10 |
All versions, plus listed versions 9.4.8.0+ds-2ubuntu19.4.8.0+ds-3ubuntu1 |
None known |
jrubyUbuntu:26.10 |
All versions, plus listed versions 9.4.8.0+ds-3ubuntu19.4.14.0+ds-1 |
None known |
jrubyUbuntu:26.04:LTS |
All versions, plus listed versions 9.4.8.0+ds-3ubuntu1 |
None known |
ruby2.7Ubuntu:20.04:LTS From an advisory covering 2 CVEs |
before 2.7.0-5ubuntu1.13, plus listed versions 2.7.0-12.7.0-22.7.0-32.7.0-42.7.0-4ubuntu1 Show 13 moreShow less2.7.0-5ubuntu12.7.0-5ubuntu1.12.7.0-5ubuntu1.22.7.0-5ubuntu1.32.7.0-5ubuntu1.42.7.0-5ubuntu1.52.7.0-5ubuntu1.62.7.0-5ubuntu1.72.7.0-5ubuntu1.82.7.0-5ubuntu1.92.7.0-5ubuntu1.102.7.0-5ubuntu1.112.7.0-5ubuntu1.12 |
2.7.0-5ubuntu1.13 |
ruby3.0Ubuntu:22.04:LTS From an advisory covering 2 CVEs |
before 3.0.2-7ubuntu2.6, plus listed versions 3.0.2-5ubuntu13.0.2-73.0.2-7ubuntu23.0.2-7ubuntu2.13.0.2-7ubuntu2.23.0.2-7ubuntu2.33.0.2-7ubuntu2.43.0.2-7ubuntu2.5 |
3.0.2-7ubuntu2.6 |
ruby3.2Ubuntu:24.04:LTS From an advisory covering 2 CVEs |
before 3.2.3-1ubuntu0.24.04.1, plus listed versions 3.2.3-13.2.3-1build23.2.3-1build3 |
3.2.3-1ubuntu0.24.04.1 |
ruby2.5Ubuntu:Pro:18.04:LTS From an advisory covering 4 CVEs |
before 2.5.1-1ubuntu1.16+esm5, plus listed versions 2.5.0~preview1-1ubuntu22.5.0-4ubuntu12.5.0-4ubuntu42.5.0-5ubuntu12.5.0-6ubuntu1 Show 19 moreShow less2.5.1-1ubuntu12.5.1-1ubuntu1.12.5.1-1ubuntu1.22.5.1-1ubuntu1.42.5.1-1ubuntu1.52.5.1-1ubuntu1.62.5.1-1ubuntu1.72.5.1-1ubuntu1.82.5.1-1ubuntu1.92.5.1-1ubuntu1.102.5.1-1ubuntu1.112.5.1-1ubuntu1.122.5.1-1ubuntu1.132.5.1-1ubuntu1.142.5.1-1ubuntu1.152.5.1-1ubuntu1.162.5.1-1ubuntu1.16+esm12.5.1-1ubuntu1.16+esm32.5.1-1ubuntu1.16+esm4 |
2.5.1-1ubuntu1.16+esm5 |
ruby2.7Ubuntu:Pro:20.04:LTS From an advisory covering 4 CVEs |
before 2.7.0-5ubuntu1.18+esm1, plus listed versions 2.7.0-12.7.0-22.7.0-32.7.0-42.7.0-4ubuntu1 Show 19 moreShow less2.7.0-5ubuntu12.7.0-5ubuntu1.12.7.0-5ubuntu1.22.7.0-5ubuntu1.32.7.0-5ubuntu1.42.7.0-5ubuntu1.52.7.0-5ubuntu1.62.7.0-5ubuntu1.72.7.0-5ubuntu1.82.7.0-5ubuntu1.92.7.0-5ubuntu1.102.7.0-5ubuntu1.112.7.0-5ubuntu1.122.7.0-5ubuntu1.132.7.0-5ubuntu1.142.7.0-5ubuntu1.152.7.0-5ubuntu1.162.7.0-5ubuntu1.172.7.0-5ubuntu1.18 |
2.7.0-5ubuntu1.18+esm1 |
ruby3.0Ubuntu:22.04:LTS From an advisory covering 4 CVEs |
before 3.0.2-7ubuntu2.11, plus listed versions 3.0.2-5ubuntu13.0.2-73.0.2-7ubuntu23.0.2-7ubuntu2.13.0.2-7ubuntu2.2 Show 7 moreShow less3.0.2-7ubuntu2.33.0.2-7ubuntu2.43.0.2-7ubuntu2.53.0.2-7ubuntu2.63.0.2-7ubuntu2.73.0.2-7ubuntu2.83.0.2-7ubuntu2.10 |
3.0.2-7ubuntu2.11 |
ruby3.2Ubuntu:24.04:LTS From an advisory covering 4 CVEs |
before 3.2.3-1ubuntu0.24.04.6, plus listed versions 3.2.3-13.2.3-1build23.2.3-1build33.2.3-1ubuntu0.24.04.13.2.3-1ubuntu0.24.04.33.2.3-1ubuntu0.24.04.5 |
3.2.3-1ubuntu0.24.04.6 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2024-27282 is a medium vulnerability (CVSS 6.6) in ruby, published April 27, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.66%, the 51st percentile. Fixed in ruby 3.1.5-r0.
References
hackerone.com/reports/2122624
ruby-lang.org/en/news/2024/04/23/arbitrary-memory-address-read-regexp-cve-2024-27282
security.netapp.com/advisory/ntap-20241011-0007
lists.debian.org/debian-lts-announce/2024/09/msg00000.html
lists.fedoraproject.org/archives/list/[email protected]/message/27LUWREIFTP3MQAW7QE4PJM4DPAQJWXF
lists.fedoraproject.org/archives/list/[email protected]/message/XYDHPHEZI7OQXTQKTDZHGZNPIJH7ZV5N
Show 194 moreShow less
nvd.nist.gov/vuln/detail/CVE-2024-27282
github.com/advisories/GHSA-63cq-cj6g-qfr2
security.alpinelinux.org/vuln/CVE-2024-27282
access.redhat.com/errata/RHSA-2024:3500
access.redhat.com/security/cve/CVE-2021-33621
access.redhat.com/security/cve/CVE-2023-28755
access.redhat.com/security/cve/CVE-2023-28756
access.redhat.com/security/cve/CVE-2024-27280
access.redhat.com/security/cve/CVE-2024-27281
access.redhat.com/security/cve/CVE-2024-27282
bugzilla.redhat.com/2149706
bugzilla.redhat.com/2184059
bugzilla.redhat.com/2184061
bugzilla.redhat.com/2270749
bugzilla.redhat.com/2270750
bugzilla.redhat.com/2276810
errata.almalinux.org/8/ALSA-2024-3500.html
access.redhat.com/errata/RHSA-2024:3546
errata.almalinux.org/8/ALSA-2024-3546.html
access.redhat.com/errata/RHSA-2024:3668
errata.almalinux.org/9/ALSA-2024-3668.html
access.redhat.com/errata/RHSA-2024:3670
errata.almalinux.org/8/ALSA-2024-3670.html
access.redhat.com/errata/RHSA-2024:3671
errata.almalinux.org/9/ALSA-2024-3671.html
access.redhat.com/errata/RHSA-2024:3838
errata.almalinux.org/9/ALSA-2024-3838.html
access.redhat.com/errata/RHSA-2024:4499
access.redhat.com/security/cve/CVE-2023-36617
access.redhat.com/security/cve/CVE-2024-35176
bugzilla.redhat.com/2218614
bugzilla.redhat.com/2280894
errata.almalinux.org/8/ALSA-2024-4499.html
docs.bell-sw.com/security/cves/CVE-2024-27282
security-tracker.debian.org/tracker/CVE-2024-27282
advisories.mageia.org/MGASA-2024-0160.html
bugs.mageia.org/show_bug.cgi?id=33138
ruby-lang.org/en/news/2024/04/23/ruby-3-1-5-released
openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2024-1545
openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2024-1607
openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2024-1608
openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2024-1609
openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2024-1610
openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2024-1611
access.redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=2149706
bugzilla.redhat.com/show_bug.cgi?id=2184059
bugzilla.redhat.com/show_bug.cgi?id=2184061
bugzilla.redhat.com/show_bug.cgi?id=2270749
bugzilla.redhat.com/show_bug.cgi?id=2270750
bugzilla.redhat.com/show_bug.cgi?id=2276810
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_3500.json
cve.org/CVERecord?id=CVE-2021-33621
nvd.nist.gov/vuln/detail/CVE-2021-33621
cve.org/CVERecord?id=CVE-2023-28755
nvd.nist.gov/vuln/detail/CVE-2023-28755
ruby-lang.org/en/news/2023/03/28/redos-in-uri-cve-2023-28755
cve.org/CVERecord?id=CVE-2023-28756
nvd.nist.gov/vuln/detail/CVE-2023-28756
ruby-lang.org/en/news/2023/03/30/redos-in-time-cve-2023-28756
cve.org/CVERecord?id=CVE-2024-27280
nvd.nist.gov/vuln/detail/CVE-2024-27280
ruby-lang.org/en/news/2024/03/21/buffer-overread-cve-2024-27280
cve.org/CVERecord?id=CVE-2024-27281
nvd.nist.gov/vuln/detail/CVE-2024-27281
ruby-lang.org/en/news/2024/03/21/rce-rdoc-cve-2024-27281
cve.org/CVERecord?id=CVE-2024-27282
access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.10_release_notes/index
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_3546.json
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_3668.json
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_3670.json
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_3671.json
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_3838.json
bugzilla.redhat.com/show_bug.cgi?id=2218614
bugzilla.redhat.com/show_bug.cgi?id=2280894
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_4499.json
cve.org/CVERecord?id=CVE-2023-36617
nvd.nist.gov/vuln/detail/CVE-2023-36617
ruby-lang.org/en/news/2023/06/29/redos-in-uri-CVE-2023-36617
cve.org/CVERecord?id=CVE-2024-35176
nvd.nist.gov/vuln/detail/CVE-2024-35176
github.com/ruby/rexml/security/advisories/GHSA-vg3r-rm7w-2xgh
ruby-lang.org/en/news/2024/05/16/dos-rexml-cve-2024-35176
access.redhat.com/errata/RHSA-2026:7305
images.redhat.com
access.redhat.com/security/cve/CVE-2026-27820
access.redhat.com/security/cve/CVE-2008-3905
access.redhat.com/security/cve/CVE-2008-3657
access.redhat.com/security/cve/CVE-2008-3656
access.redhat.com/security/cve/CVE-2008-3655
access.redhat.com/security/cve/CVE-2021-31810
access.redhat.com/security/cve/CVE-2019-16254
access.redhat.com/security/cve/CVE-2018-8780
access.redhat.com/security/cve/CVE-2017-14064
access.redhat.com/security/cve/CVE-2017-10784
access.redhat.com/security/cve/CVE-2015-9096
access.redhat.com/security/cve/CVE-2014-8090
access.redhat.com/security/cve/CVE-2014-8080
access.redhat.com/security/cve/CVE-2014-6438
access.redhat.com/security/cve/CVE-2014-4975
security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_7305.json
bugzilla.redhat.com/show_bug.cgi?id=443829
cve.org/CVERecord?id=CVE-2008-1891
nvd.nist.gov/vuln/detail/CVE-2008-1891
bugzilla.redhat.com/show_bug.cgi?id=450821
cve.org/CVERecord?id=CVE-2008-2662
nvd.nist.gov/vuln/detail/CVE-2008-2662
bugzilla.redhat.com/show_bug.cgi?id=450825
cve.org/CVERecord?id=CVE-2008-2663
nvd.nist.gov/vuln/detail/CVE-2008-2663
bugzilla.redhat.com/show_bug.cgi?id=450834
cve.org/CVERecord?id=CVE-2008-2664
nvd.nist.gov/vuln/detail/CVE-2008-2664
bugzilla.redhat.com/show_bug.cgi?id=451821
cve.org/CVERecord?id=CVE-2008-2725
nvd.nist.gov/vuln/detail/CVE-2008-2725
bugzilla.redhat.com/show_bug.cgi?id=451828
cve.org/CVERecord?id=CVE-2008-2726
nvd.nist.gov/vuln/detail/CVE-2008-2726
bugzilla.redhat.com/show_bug.cgi?id=458948
cve.org/CVERecord?id=CVE-2008-3655
nvd.nist.gov/vuln/detail/CVE-2008-3655
bugzilla.redhat.com/show_bug.cgi?id=458953
cve.org/CVERecord?id=CVE-2008-3656
nvd.nist.gov/vuln/detail/CVE-2008-3656
bugzilla.redhat.com/show_bug.cgi?id=458966
cve.org/CVERecord?id=CVE-2008-3657
nvd.nist.gov/vuln/detail/CVE-2008-3657
bugzilla.redhat.com/show_bug.cgi?id=461495
cve.org/CVERecord?id=CVE-2008-3905
nvd.nist.gov/vuln/detail/CVE-2008-3905
bugzilla.redhat.com/show_bug.cgi?id=1248935
cve.org/CVERecord?id=CVE-2009-5147
nvd.nist.gov/vuln/detail/CVE-2009-5147
bugzilla.redhat.com/show_bug.cgi?id=682332
cve.org/CVERecord?id=CVE-2011-0188
nvd.nist.gov/vuln/detail/CVE-2011-0188
bugzilla.redhat.com/show_bug.cgi?id=722415
cve.org/CVERecord?id=CVE-2011-2686
nvd.nist.gov/vuln/detail/CVE-2011-2686
cve.org/CVERecord?id=CVE-2011-2705
nvd.nist.gov/vuln/detail/CVE-2011-2705
cve.org/CVERecord?id=CVE-2011-3009
nvd.nist.gov/vuln/detail/CVE-2011-3009
bugzilla.redhat.com/show_bug.cgi?id=750564
cve.org/CVERecord?id=CVE-2011-4815
nvd.nist.gov/vuln/detail/CVE-2011-4815
bugzilla.redhat.com/show_bug.cgi?id=875236
cve.org/CVERecord?id=CVE-2012-5371
nvd.nist.gov/vuln/detail/CVE-2012-5371
bugzilla.redhat.com/show_bug.cgi?id=914716
cve.org/CVERecord?id=CVE-2013-1821
nvd.nist.gov/vuln/detail/CVE-2013-1821
ruby-lang.org/en/news/2013/02/22/rexml-dos-2013-02-22
bugzilla.redhat.com/show_bug.cgi?id=1118158
cve.org/CVERecord?id=CVE-2014-4975
nvd.nist.gov/vuln/detail/CVE-2014-4975
cve.org/CVERecord?id=CVE-2014-6438
nvd.nist.gov/vuln/detail/CVE-2014-6438
ruby-lang.org/en/news/2014/08/19/ruby-1-9-2-p330-released
cve.org/CVERecord?id=CVE-2014-8080
nvd.nist.gov/vuln/detail/CVE-2014-8080
ruby-lang.org/en/news/2014/10/27/rexml-dos-cve-2014-8080
cve.org/CVERecord?id=CVE-2014-8090
nvd.nist.gov/vuln/detail/CVE-2014-8090
ruby-lang.org/en/news/2014/11/13/rexml-dos-cve-2014-8090
cve.org/CVERecord?id=CVE-2015-7551
nvd.nist.gov/vuln/detail/CVE-2015-7551
cve.org/CVERecord?id=CVE-2015-9096
nvd.nist.gov/vuln/detail/CVE-2015-9096
cve.org/CVERecord?id=CVE-2017-10784
nvd.nist.gov/vuln/detail/CVE-2017-10784
ruby-lang.org/en/news/2017/09/14/webrick-basic-auth-escape-sequence-injection-cve-2017-10784
ruby-lang.org/en/news/2017/09/14/json-heap-exposure-cve-2017-14064
ruby-lang.org/en/news/2018/03/28/poisoned-nul-byte-dir-cve-2018-8780
ruby-lang.org/en/news/2020/09/29/http-request-smuggling-cve-2020-25613
ruby-lang.org/en/news/2021/07/07/trusting-pasv-responses-in-net-ftp
ruby-lang.org/en/news/2022/04/12/buffer-overrun-in-string-to-float-cve-2022-28739
github.com/ruby/zlib/security/advisories/GHSA-g857-hhfv-j68w
hackerone.com/reports/3467067
security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_7307.json
security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_8838.json
errata.rockylinux.org/RLSA-2024:3668
errata.rockylinux.org/RLSA-2024:3670
errata.rockylinux.org/RLSA-2024:3671
errata.rockylinux.org/RLSA-2024:4499
ubuntu.com/security/CVE-2024-27282
github.com/ruby/ruby/commit/989a2355808a63fc45367785c82ffd46d18c900a
ubuntu.com/security/notices/USN-6838-1
ubuntu.com/security/notices/USN-7734-1
ubuntu.com/security/CVE-2024-27281
ubuntu.com/security/CVE-2024-27280
ubuntu.com/security/CVE-2024-35176
ubuntu.com/security/CVE-2025-24294
Left out here: 263 package rows and 53 references. The JSON record has them.