RLSA-2025:4487

Опубликовано: 29 июл. 2025

Источник: rocky

Оценка: Moderate

Описание

Moderate: ruby security update

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.

Security Fix(es):

CGI: ReDoS in CGI::Util#escapeElement (CVE-2025-27220)
CGI: Denial of Service in CGI::Cookie.parse (CVE-2025-27219)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Затронутые продукты

Rocky Linux 9

Наименование	Архитектура	Релиз	RPM
ruby	i686	165.el9_5	ruby-3.0.7-165.el9_5.i686.rpm
ruby	x86_64	165.el9_5	ruby-3.0.7-165.el9_5.x86_64.rpm
ruby-default-gems	noarch	165.el9_5	ruby-default-gems-3.0.7-165.el9_5.noarch.rpm
ruby-default-gems	noarch	165.el9_5	ruby-default-gems-3.0.7-165.el9_5.noarch.rpm
ruby-default-gems	noarch	165.el9_5	ruby-default-gems-3.0.7-165.el9_5.noarch.rpm
ruby-default-gems	noarch	165.el9_5	ruby-default-gems-3.0.7-165.el9_5.noarch.rpm
ruby-devel	i686	165.el9_5	ruby-devel-3.0.7-165.el9_5.i686.rpm
ruby-devel	x86_64	165.el9_5	ruby-devel-3.0.7-165.el9_5.x86_64.rpm
rubygem-bigdecimal	x86_64	165.el9_5	rubygem-bigdecimal-3.0.0-165.el9_5.x86_64.rpm
rubygem-bundler	noarch	165.el9_5	rubygem-bundler-2.2.33-165.el9_5.noarch.rpm