Linux · Security advisory · June 11, 2024
ALSA-2024:3838: Security update for 22 packages
ALSA-2024:3838, released June 11, 2024, fixes 6 CVEs across 22 products. None of them is reported as exploited. Patch Radar priority: Urgent.
Urgent
CVEs closed
6
1 rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0264
85th percentile
Priority of the 6 CVEs
Patch now 0
Urgent 1
High 3
Routine 2
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| ruby | almalinux 9 | 3.0.7-162.el9_4 |
| ruby-default-gems | almalinux 9 | 3.0.7-162.el9_4 |
| ruby-devel | almalinux 9 | 3.0.7-162.el9_4 |
| ruby-doc | almalinux 9 | 3.0.7-162.el9_4 |
| ruby-libs | almalinux 9 | 3.0.7-162.el9_4 |
| rubygem-bigdecimal | almalinux 9 | 3.0.0-162.el9_4 |
| rubygem-bundler | almalinux 9 | 2.2.33-162.el9_4 |
| rubygem-io-console | almalinux 9 | 0.5.7-162.el9_4 |
| rubygem-irb | almalinux 9 | 1.3.5-162.el9_4 |
| rubygem-json | almalinux 9 | 2.5.1-162.el9_4 |
| rubygem-minitest | almalinux 9 | 5.14.2-162.el9_4 |
| rubygem-power_assert | almalinux 9 | 1.2.1-162.el9_4 |
| rubygem-psych | almalinux 9 | 3.3.2-162.el9_4 |
| rubygem-rake | almalinux 9 | 13.0.3-162.el9_4 |
| rubygem-rbs | almalinux 9 | 1.4.0-162.el9_4 |
| rubygem-rdoc | almalinux 9 | 6.3.4.1-162.el9_4 |
| rubygem-rexml | almalinux 9 | 3.2.5-162.el9_4 |
| rubygem-rss | almalinux 9 | 0.2.9-162.el9_4 |
| rubygem-test-unit | almalinux 9 | 3.3.7-162.el9_4 |
| rubygem-typeprof | almalinux 9 | 0.15.2-162.el9_4 |
| rubygems | almalinux 9 | 3.2.33-162.el9_4 |
| rubygems-devel | almalinux 9 | 3.2.33-162.el9_4 |
CVEs this fix closes
| Priority | CVE | Title | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Urgent | CVE-2024-27280 | Ruby: Processing a file may lead to a denial-of-service or potentially disclose memory contents | 9.8 | 0.0236 | None reported | |
| High | CVE-2023-28755 | ruby: Ruby is an extensible, interpreted, object-oriented, scripting language | 8.8 | 0.0264 | None reported | |
| High | CVE-2021-33621 | ruby: Ruby is an extensible, interpreted, object-oriented, scripting language | 8.8 | 0.0245 | None reported | |
| High | CVE-2023-28756 | ruby: Ruby is an extensible, interpreted, object-oriented, scripting language | 8.8 | 0.0245 | None reported | |
| Routine | CVE-2024-27281 | ruby: Ruby is an extensible, interpreted, object-oriented, scripting language | 6.6 | 0.0157 | None reported | |
| Routine | CVE-2024-27282 | ruby: Ruby is an extensible, interpreted, object-oriented, scripting language | 6.6 | 0.0066 | None reported |
Showing 1 to 6 of 6
1