RLSA-2024:6784

Опубликовано: 30 сент. 2024

Источник: rocky

Оценка: Moderate

Описание

Moderate: ruby:3.3 security update

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.

Security Fix(es):

rexml: DoS vulnerability in REXML (CVE-2024-39908)
rexml: rubygem-rexml: DoS when parsing an XML having many specific characters such as whitespace character, >] and ]> (CVE-2024-41123)
rexml: DoS vulnerability in REXML (CVE-2024-41946)
rexml: DoS vulnerability in REXML (CVE-2024-43398)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Затронутые продукты

Rocky Linux 8

Наименование	Архитектура	Релиз	RPM
ruby	i686	3.module+el8.10.0+1867+7989c958	ruby-3.3.5-3.module+el8.10.0+1867+7989c958.i686.rpm
ruby	x86_64	3.module+el8.10.0+1867+7989c958	ruby-3.3.5-3.module+el8.10.0+1867+7989c958.x86_64.rpm
ruby-bundled-gems	i686	3.module+el8.10.0+1867+7989c958	ruby-bundled-gems-3.3.5-3.module+el8.10.0+1867+7989c958.i686.rpm
ruby-bundled-gems	x86_64	3.module+el8.10.0+1867+7989c958	ruby-bundled-gems-3.3.5-3.module+el8.10.0+1867+7989c958.x86_64.rpm
ruby-default-gems	noarch	3.module+el8.10.0+1867+7989c958	ruby-default-gems-3.3.5-3.module+el8.10.0+1867+7989c958.noarch.rpm
ruby-default-gems	noarch	3.module+el8.10.0+1867+7989c958	ruby-default-gems-3.3.5-3.module+el8.10.0+1867+7989c958.noarch.rpm
ruby-devel	i686	3.module+el8.10.0+1867+7989c958	ruby-devel-3.3.5-3.module+el8.10.0+1867+7989c958.i686.rpm
ruby-devel	x86_64	3.module+el8.10.0+1867+7989c958	ruby-devel-3.3.5-3.module+el8.10.0+1867+7989c958.x86_64.rpm
ruby-doc	noarch	3.module+el8.10.0+1867+7989c958	ruby-doc-3.3.5-3.module+el8.10.0+1867+7989c958.noarch.rpm
ruby-doc	noarch	3.module+el8.10.0+1867+7989c958	ruby-doc-3.3.5-3.module+el8.10.0+1867+7989c958.noarch.rpm