VDB

RHSA-2024%3A10984

RHSA-2024%3A10984 PUBLISHED CVSS 7.5 HIGH

Record from OSV · Published December 13, 2024

Red Hat Security Advisory: ruby:3.1 security update

Fixed versions

Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.

PackageEcosystemFixed in
rubygem-pgRed Hat:rhel_eus:9.4::appstream1.3.5-1.module, 0:1.3.5-1.module+el9.1.0+15737+76195479
rubygem-rbsRed Hat:rhel_eus:9.4::appstream2.7.0-145.module, 0:2.7.0-145.module+el9.4.0+22626+a031549d
rubygem-irbRed Hat:rhel_eus:9.4::appstream1.4.1-145.module, 0:1.4.1-145.module+el9.4.0+22626+a031549d
rubygem-rdocRed Hat:rhel_eus:9.4::appstream6.4.1.1-145.module, 0:6.4.1.1-145.module+el9.4.0+22626+a031549d
ruby-develRed Hat:rhel_eus:9.4::appstream3.1.5-145.module, 0:3.1.5-145.module+el9.4.0+22626+a031549d
rubygem-mysql2-debugsourceRed Hat:rhel_eus:9.4::appstream0.5.4-1.module, 0:0.5.4-1.module+el9.1.0+15737+76195479
rubygem-pg-debugsourceRed Hat:rhel_eus:9.4::appstream1.3.5-1.module, 0:1.3.5-1.module+el9.1.0+15737+76195479
ruby-debugsourceRed Hat:rhel_eus:9.4::appstream3.1.5-145.module, 0:3.1.5-145.module+el9.4.0+22626+a031549d
rubygem-io-consoleRed Hat:rhel_eus:9.4::appstream0.5.11-145.module, 0:0.5.11-145.module+el9.4.0+22626+a031549d
rubygem-mysql2-docRed Hat:rhel_eus:9.4::appstream0.5.4-1.module, 0:0.5.4-1.module+el9.1.0+15737+76195479
rubygem-bundlerRed Hat:rhel_eus:9.4::appstream2.3.27-145.module, 0:2.3.27-145.module+el9.4.0+22626+a031549d
rubygem-psych-debuginfoRed Hat:rhel_eus:9.4::appstream4.0.4-145.module, 0:4.0.4-145.module+el9.4.0+22626+a031549d

28 more packages have a fixed version. See every fix in Lookup.

Risk scores

CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

VendorProductVersions
Red Hat:rhel_eus:9.4::appstreamrubygem-pg0, 0
Red Hat:rhel_eus:9.4::appstreamrubygem-rbs0, 0
Red Hat:rhel_eus:9.4::appstreamrubygem-irb0, 0
Red Hat:rhel_eus:9.4::appstreamrubygem-rdoc0, 0
Red Hat:rhel_eus:9.4::appstreamruby-devel0, 0
Red Hat:rhel_eus:9.4::appstreamrubygem-mysql2-debugsource0, 0
Red Hat:rhel_eus:9.4::appstreamrubygem-pg-debugsource0, 0
Red Hat:rhel_eus:9.4::appstreamruby-debugsource0, 0
Red Hat:rhel_eus:9.4::appstreamrubygem-io-console0, 0
Red Hat:rhel_eus:9.4::appstreamrubygem-mysql2-doc0, 0
Red Hat:rhel_eus:9.4::appstreamrubygem-bundler0, 0
Red Hat:rhel_eus:9.4::appstreamrubygem-psych-debuginfo0, 0
Red Hat:rhel_eus:9.4::appstreamrubygem-pg-doc0, 0
Red Hat:rhel_eus:9.4::appstreamrubygem-rake0, 0
Red Hat:rhel_eus:9.4::appstreamrubygem-mysql20, 0
Red Hat:rhel_eus:9.4::appstreamrubygem-test-unit0, 0
Red Hat:rhel_eus:9.4::appstreamrubygem-pg-debuginfo0, 0
Red Hat:rhel_eus:9.4::appstreamruby0, 0
Red Hat:rhel_eus:9.4::appstreamrubygem-json-debuginfo0, 0
Red Hat:rhel_eus:9.4::appstreamruby-bundled-gems0, 0

…and 20 more

Timeline

  • Dec 13, 2024 CVE Published
  • Mar 21, 2026 CVE Updated
  • May 1, 2026 Security Advisory (2 in total, the first dated here)
  • May 18, 2026 Distribution Patch (2 in total, the first dated here)

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln RHSA-2024%3A10984
vulnetix vdb fixes RHSA-2024%3A10984

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/RHSA-2024%253A10984/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

Look up in the Resolve Platform →
$ Lookup Community · 50/day Open Lookup ›