A vulnerability has been discovered in Ruby, possibly allowing remote code execution.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-lang/ruby | * | < 3.3.12:3.3, < 3.4.10:3.4, < 4.0.6:4.0 | >= 3.3.12:3.3, >= 3.4.10:3.4, >= 4.0.6:4.0 |
| dev-ruby/erb | * | < 6.0.6:6 | >= 6.0.6:6 |
Ruby is an interpreted scripting language for quick and easy object-oriented programming.
A vulnerability has been discovered in Ruby. Please review the CVE identifier referenced below for details.
Remote code execution is possible.
There is no known workaround at this time.
All Ruby 3.3 users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-lang/ruby-3.3.12:3.3"
All Ruby 3.4 users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-lang/ruby-3.4.10:3.4"
All Ruby 4.0 users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-lang/ruby-4.0.6:4.0"
All ERB users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-ruby/erb-6.0.6:6"