RLSA-2024:3546
Moderate: ruby:3.1 security, bug fix, and enhancement update
Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.
Security Fix(es):
- ruby: RCE vulnerability with .rdoc_options in RDoc (CVE-2024-27281)
- ruby: Buffer overread vulnerability in StringIO (CVE-2024-27280)
- ruby: Arbitrary memory address read vulnerability with Regex search (CVE-2024-27282)
For detailed information on changes in this release, see the Rocky Linux 8.10 Release Notes linked from the References section.
What each source reports
OSV No score
Moderate: ruby:3.1 security, bug fix, and enhancement update
Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.
Security Fix(es):
- ruby: RCE vulnerability with .rdoc_options in RDoc (CVE-2024-27281)
- ruby: Buffer overread vulnerability in StringIO (CVE-2024-27280)
- ruby: Arbitrary memory address read vulnerability with Regex search (CVE-2024-27282)
For detailed information on changes in this release, see the Rocky Linux 8.10 Release Notes linked from the References section.
- Record
RLSA-2024:3546- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
rubyRocky Linux:8 |
before 0:3.1.5-143.module+el8.10.0+1826+b62220b4 | 0:3.1.5-143.module+el8.10.0+1826+b62220b4 |
rubygem-abrtRocky Linux:8 |
before 0:0.4.0-1.module+el8.10.0+1679+61871737 | 0:0.4.0-1.module+el8.10.0+1679+61871737 |
rubygem-mysql2Rocky Linux:8 |
before 0:0.5.3-3.module+el8.10.0+1744+6c504228 | 0:0.5.3-3.module+el8.10.0+1744+6c504228 |
rubygem-pgRocky Linux:8 |
before 0:1.3.2-1.module+el8.10.0+1741+bdb5b6ca | 0:1.3.2-1.module+el8.10.0+1741+bdb5b6ca |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
RLSA-2024:3546 is a vulnerability with no CVSS score yet in ruby, published June 14, 2024. No source lists public exploit code. Fixed in ruby 0:3.1.5-143.module+el8.10.0+1826+b62220b4.