Moderate: ruby:2.5 security update

ELSA-2023-7025: ruby:2.5 security update (MODERATE)

Moderate: ruby:2.7 security, bug fix, and enhancement update

ELSA-2023-3821: ruby:2.7 security, bug fix, and enhancement update (MODERATE)

Security update for ruby2.5

Moderate: ruby:3.1 security, bug fix, and enhancement update

Moderate: ruby:3.1 security, bug fix, and enhancement update

ELSA-2024-1576: ruby:3.1 security, bug fix, and enhancement update (MODERATE)

ELSA-2024-1431: ruby:3.1 security, bug fix, and enhancement update (MODERATE)

Moderate: ruby:3.0 security update

ELSA-2024-3838: ruby security update (MODERATE)

ELSA-2024-3500: ruby:3.0 security update (MODERATE)

Множественные уязвимости ruby

A ReDoS issue was discovered in the Time component through 0.2.1 in Ruby through 3.2.1. The Time parser mishandles invalid URLs that have specific characters. It causes an increase in execution time for parsing strings to Time objects. The fixed versions are 0.1.1 and 0.2.2.

A ReDoS issue was discovered in the Time component through 0.2.1 in Ruby through 3.2.1. The Time parser mishandles invalid URLs that have specific characters. It causes an increase in execution time for parsing strings to Time objects. The fixed versions are 0.1.1 and 0.2.2.

A ReDoS issue was discovered in the Time component through 0.2.1 in Ruby through 3.2.1. The Time parser mishandles invalid URLs that have specific characters. It causes an increase in execution time for parsing strings to Time objects. The fixed versions are 0.1.1 and 0.2.2.

A ReDoS issue was discovered in the Time component through 0.2.1 in Ru ...

Ruby Time component ReDoS issue

Уязвимость библиотеки Time интерпретатора Ruby, позволяющая нарушителю вызвать отказ в обслуживании

There is a buffer over-read in Ruby before 2.6.10, 2.7.x before 2.7.6, 3.x before 3.0.4, and 3.1.x before 3.1.2. It occurs in String-to-Float conversion, including Kernel#Float and String#to_f.