Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

rocky логотип

RLSA-2023:7025

Опубликовано: 14 апр. 2026
Источник: rocky
Оценка: Moderate

Описание

Moderate: ruby:2.5 security update

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.

Security Fix(es):

  • ruby/cgi-gem: HTTP response splitting in CGI (CVE-2021-33621)

  • ruby: Buffer overrun in String-to-Float conversion (CVE-2022-28739)

  • ruby: ReDoS vulnerability in URI (CVE-2023-28755)

  • ruby: ReDoS vulnerability in Time (CVE-2023-28756)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 8.9 Release Notes linked from the References section.

Затронутые продукты

  • Rocky Linux 8

НаименованиеАрхитектураРелизRPM
rubygem-mongonoarch2.module+el8.9.0+1536+5f79634erubygem-mongo-2.5.1-2.module+el8.9.0+1536+5f79634e.noarch.rpm
rubygem-mongo-docnoarch2.module+el8.9.0+1536+5f79634erubygem-mongo-doc-2.5.1-2.module+el8.9.0+1536+5f79634e.noarch.rpm
rubygem-abrtnoarch4.module+el8.9.0+1536+5f79634erubygem-abrt-0.3.0-4.module+el8.9.0+1536+5f79634e.noarch.rpm
rubygem-abrtnoarch4.module+el8.5.0+738+032c9c02rubygem-abrt-0.3.0-4.module+el8.5.0+738+032c9c02.noarch.rpm
rubygem-abrt-docnoarch4.module+el8.9.0+1536+5f79634erubygem-abrt-doc-0.3.0-4.module+el8.9.0+1536+5f79634e.noarch.rpm
rubygem-abrt-docnoarch4.module+el8.5.0+738+032c9c02rubygem-abrt-doc-0.3.0-4.module+el8.5.0+738+032c9c02.noarch.rpm
rubygem-bsonx86_642.module+el8.9.0+1536+5f79634erubygem-bson-4.3.0-2.module+el8.9.0+1536+5f79634e.x86_64.rpm
rubygem-bson-docnoarch2.module+el8.9.0+1536+5f79634erubygem-bson-doc-4.3.0-2.module+el8.9.0+1536+5f79634e.noarch.rpm
rubygem-mysql2x86_644.module+el8.9.0+1536+5f79634erubygem-mysql2-0.4.10-4.module+el8.9.0+1536+5f79634e.x86_64.rpm
rubygem-mysql2-docnoarch4.module+el8.9.0+1536+5f79634erubygem-mysql2-doc-0.4.10-4.module+el8.9.0+1536+5f79634e.noarch.rpm

Показывать по

Связанные уязвимости

oracle-oval
больше 2 лет назад

ELSA-2023-7025: ruby:2.5 security update (MODERATE)

rocky
почти 3 года назад

Moderate: ruby:2.7 security, bug fix, and enhancement update

oracle-oval
около 3 лет назад

ELSA-2023-3821: ruby:2.7 security, bug fix, and enhancement update (MODERATE)

suse-cvrf
почти 3 года назад

Security update for ruby2.5

rocky
больше 2 лет назад

Moderate: ruby:3.1 security, bug fix, and enhancement update