Vulnerability · Published Mar 31, 2023 · Assigned by mitre
CVE-2023-28756
Medium 5.3
In plain English
A medium-severity security flaw in the ruby package (AlmaLinux). There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 2.5% (higher than 84% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS NVD)5.3Medium
Exploit odds (30 days)2.5%top 15.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A ReDoS issue was discovered in the Time component through 0.2.1 in Ruby through 3.2.1. The Time parser mishandles invalid URLs that have specific characters. It causes an increase in execution time for parsing strings to Time objects. The fixed versions are 0.1.1 and 0.2.2.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:8 | ruby | 3.1.4-142.module_el8.9.0+3746+91b8233a | ALSA-2024:1431 |
| AlmaLinux:8 | ruby | 3.0.7-143.module_el8.10.0+3852+ce828b19 | ALSA-2024:3500 |
| AlmaLinux:8 | ruby | 2.5.9-111.module_el8.9.0+3635+c6f99506 | ALSA-2023:7025 |
| AlmaLinux:8 | ruby | 2.7.8-139.module_el8.8.0+3578+2b4b06da | ALSA-2023:3821 |
| AlmaLinux:9 | ruby | 3.0.7-162.el9_4 | ALSA-2024:3838 |
| AlmaLinux:9 | ruby | 3.1.4-143.module_el9.3.0+60+5ebc989a | ALSA-2024:1576 |
| AlmaLinux:8 | ruby-bundled-gems | 3.1.4-142.module_el8.9.0+3746+91b8233a | ALSA-2024:1431 |
| AlmaLinux:9 | ruby-bundled-gems | 3.1.4-143.module_el9.3.0+60+5ebc989a | ALSA-2024:1576 |
| AlmaLinux:8 | ruby-default-gems | 2.7.8-139.module_el8.8.0+3578+2b4b06da | ALSA-2023:3821 |
| AlmaLinux:8 | ruby-default-gems | 3.0.7-143.module_el8.10.0+3852+ce828b19 | ALSA-2024:3500 |
| AlmaLinux:8 | ruby-default-gems | 3.1.4-142.module_el8.9.0+3746+91b8233a | ALSA-2024:1431 |
| AlmaLinux:9 | ruby-default-gems | 3.1.4-143.module_el9.3.0+60+5ebc989a | ALSA-2024:1576 |
| AlmaLinux:9 | ruby-default-gems | 3.0.7-162.el9_4 | ALSA-2024:3838 |
| AlmaLinux:8 | ruby-devel | 3.0.7-143.module_el8.10.0+3852+ce828b19 | ALSA-2024:3500 |
| AlmaLinux:8 | ruby-devel | 3.1.4-142.module_el8.9.0+3746+91b8233a | ALSA-2024:1431 |
| AlmaLinux:8 | ruby-devel | 2.7.8-139.module_el8.8.0+3578+2b4b06da | ALSA-2023:3821 |
| AlmaLinux:8 | ruby-devel | 2.5.9-111.module_el8.9.0+3635+c6f99506 | ALSA-2023:7025 |
| AlmaLinux:9 | ruby-devel | 3.0.7-162.el9_4 | ALSA-2024:3838 |
| AlmaLinux:9 | ruby-devel | 3.1.4-143.module_el9.3.0+60+5ebc989a | ALSA-2024:1576 |
| AlmaLinux:8 | ruby-doc | 3.0.7-143.module_el8.10.0+3852+ce828b19 | ALSA-2024:3500 |
| AlmaLinux:8 | ruby-doc | 2.5.9-111.module_el8.9.0+3635+c6f99506 | ALSA-2023:7025 |
| AlmaLinux:8 | ruby-doc | 2.7.8-139.module_el8.8.0+3578+2b4b06da | ALSA-2023:3821 |
| AlmaLinux:8 | ruby-doc | 3.1.4-142.module_el8.9.0+3746+91b8233a | ALSA-2024:1431 |
| AlmaLinux:9 | ruby-doc | 3.1.4-143.module_el9.3.0+60+5ebc989a | ALSA-2024:1576 |
| AlmaLinux:9 | ruby-doc | 3.0.7-162.el9_4 | ALSA-2024:3838 |
| AlmaLinux:8 | ruby-irb | 2.5.9-111.module_el8.9.0+3635+c6f99506 | ALSA-2023:7025 |
| AlmaLinux:8 | ruby-libs | 2.5.9-111.module_el8.9.0+3635+c6f99506 | ALSA-2023:7025 |
| AlmaLinux:8 | ruby-libs | 3.1.4-142.module_el8.9.0+3746+91b8233a | ALSA-2024:1431 |
| AlmaLinux:8 | ruby-libs | 2.7.8-139.module_el8.8.0+3578+2b4b06da | ALSA-2023:3821 |
| AlmaLinux:8 | ruby-libs | 3.0.7-143.module_el8.10.0+3852+ce828b19 | ALSA-2024:3500 |
| AlmaLinux:9 | ruby-libs | 3.0.7-162.el9_4 | ALSA-2024:3838 |
| AlmaLinux:9 | ruby-libs | 3.1.4-143.module_el9.3.0+60+5ebc989a | ALSA-2024:1576 |
| AlmaLinux:8 | rubygem-abrt | 0.4.0-1.module_el8.10.0+3852+ce828b19 | ALSA-2024:3500 |
| AlmaLinux:8 | rubygem-abrt | 0.4.0-1.module_el8.7.0+3304+9392e77f | ALSA-2024:1431 |
| AlmaLinux:8 | rubygem-abrt | 0.4.0-1.module_el8.3.0+6147+d0dfc1e4 | ALSA-2023:3821 |
| AlmaLinux:8 | rubygem-abrt | 0.3.0-4.module_el8.5.0+2625+ec418553 | ALSA-2023:7025 |
| AlmaLinux:8 | rubygem-abrt-doc | 0.4.0-1.module_el8.10.0+3852+ce828b19 | ALSA-2024:3500 |
| AlmaLinux:8 | rubygem-abrt-doc | 0.4.0-1.module_el8.7.0+3304+9392e77f | ALSA-2024:1431 |
| AlmaLinux:8 | rubygem-abrt-doc | 0.3.0-4.module_el8.5.0+2625+ec418553 | ALSA-2023:7025 |
| AlmaLinux:8 | rubygem-abrt-doc | 0.4.0-1.module_el8.3.0+6147+d0dfc1e4 | ALSA-2023:3821 |
| AlmaLinux:8 | rubygem-bigdecimal | 2.0.0-139.module_el8.8.0+3578+2b4b06da | ALSA-2023:3821 |
| AlmaLinux:8 | rubygem-bigdecimal | 3.0.0-143.module_el8.10.0+3852+ce828b19 | ALSA-2024:3500 |
| AlmaLinux:8 | rubygem-bigdecimal | 3.1.1-142.module_el8.9.0+3746+91b8233a | ALSA-2024:1431 |
| AlmaLinux:8 | rubygem-bigdecimal | 1.3.4-111.module_el8.9.0+3635+c6f99506 | ALSA-2023:7025 |
| AlmaLinux:9 | rubygem-bigdecimal | 3.0.0-162.el9_4 | ALSA-2024:3838 |
| AlmaLinux:9 | rubygem-bigdecimal | 3.1.1-143.module_el9.3.0+60+5ebc989a | ALSA-2024:1576 |
| AlmaLinux:8 | rubygem-bson | 4.8.1-1.module_el8.3.0+6147+d0dfc1e4 | ALSA-2023:3821 |
| AlmaLinux:8 | rubygem-bson | 4.3.0-2.module_el8.5.0+2625+ec418553 | ALSA-2023:7025 |
| AlmaLinux:8 | rubygem-bson | 4.8.1-1.module_el8.4.0+2399+4e3a532a | ALSA-2023:3821 |
| AlmaLinux:8 | rubygem-bson | 4.3.0-2.module_el8.5.0+259+8cec6917 | ALSA-2023:7025 |
| AlmaLinux:8 | rubygem-bson | 4.3.0-2.module_el8.6.0+3170+4b08f9d4 | ALSA-2023:7025 |
| AlmaLinux:8 | rubygem-bson | 4.8.1-1.module_el8.5.0+117+35d1289b | ALSA-2023:3821 |
| AlmaLinux:8 | rubygem-bson | 4.8.1-1.module_el8.6.0+3167+957ef55e | ALSA-2023:3821 |
| AlmaLinux:8 | rubygem-bson-doc | 4.8.1-1.module_el8.3.0+6147+d0dfc1e4 | ALSA-2023:3821 |
| AlmaLinux:8 | rubygem-bson-doc | 4.3.0-2.module_el8.5.0+2625+ec418553 | ALSA-2023:7025 |
| AlmaLinux:8 | rubygem-bundler | 2.3.26-142.module_el8.9.0+3746+91b8233a | ALSA-2024:1431 |
| AlmaLinux:8 | rubygem-bundler | 2.2.33-143.module_el8.10.0+3852+ce828b19 | ALSA-2024:3500 |
| AlmaLinux:8 | rubygem-bundler | 1.16.1-4.module_el8.5.0+2625+ec418553 | ALSA-2023:7025 |
| AlmaLinux:8 | rubygem-bundler | 2.2.24-139.module_el8.8.0+3578+2b4b06da | ALSA-2023:3821 |
| AlmaLinux:9 | rubygem-bundler | 2.2.33-162.el9_4 | ALSA-2024:3838 |
| AlmaLinux:9 | rubygem-bundler | 2.3.26-143.module_el9.3.0+60+5ebc989a | ALSA-2024:1576 |
| AlmaLinux:8 | rubygem-bundler-doc | 1.16.1-4.module_el8.5.0+2625+ec418553 | ALSA-2023:7025 |
| AlmaLinux:8 | rubygem-did_you_mean | 1.2.0-111.module_el8.9.0+3635+c6f99506 | ALSA-2023:7025 |
| AlmaLinux:8 | rubygem-io-console | 0.5.11-142.module_el8.9.0+3746+91b8233a | ALSA-2024:1431 |
| AlmaLinux:8 | rubygem-io-console | 0.4.6-111.module_el8.9.0+3635+c6f99506 | ALSA-2023:7025 |
| AlmaLinux:8 | rubygem-io-console | 0.5.7-143.module_el8.10.0+3852+ce828b19 | ALSA-2024:3500 |
| AlmaLinux:8 | rubygem-io-console | 0.5.6-139.module_el8.8.0+3578+2b4b06da | ALSA-2023:3821 |
| AlmaLinux:9 | rubygem-io-console | 0.5.7-162.el9_4 | ALSA-2024:3838 |
| AlmaLinux:9 | rubygem-io-console | 0.5.11-143.module_el9.3.0+60+5ebc989a | ALSA-2024:1576 |
| AlmaLinux:8 | rubygem-irb | 1.2.6-139.module_el8.8.0+3578+2b4b06da | ALSA-2023:3821 |
| AlmaLinux:8 | rubygem-irb | 1.3.5-143.module_el8.10.0+3852+ce828b19 | ALSA-2024:3500 |
| AlmaLinux:8 | rubygem-irb | 1.4.1-142.module_el8.9.0+3746+91b8233a | ALSA-2024:1431 |
| AlmaLinux:9 | rubygem-irb | 1.4.1-143.module_el9.3.0+60+5ebc989a | ALSA-2024:1576 |
| AlmaLinux:9 | rubygem-irb | 1.3.5-162.el9_4 | ALSA-2024:3838 |
| AlmaLinux:8 | rubygem-json | 2.3.0-139.module_el8.8.0+3578+2b4b06da | ALSA-2023:3821 |
| AlmaLinux:8 | rubygem-json | 2.6.1-142.module_el8.9.0+3746+91b8233a | ALSA-2024:1431 |
| AlmaLinux:8 | rubygem-json | 2.5.1-143.module_el8.10.0+3852+ce828b19 | ALSA-2024:3500 |
| AlmaLinux:8 | rubygem-json | 2.1.0-111.module_el8.9.0+3635+c6f99506 | ALSA-2023:7025 |
| AlmaLinux:9 | rubygem-json | 2.5.1-162.el9_4 | ALSA-2024:3838 |
| AlmaLinux:9 | rubygem-json | 2.6.1-143.module_el9.3.0+60+5ebc989a | ALSA-2024:1576 |
| AlmaLinux:8 | rubygem-minitest | 5.15.0-142.module_el8.9.0+3746+91b8233a | ALSA-2024:1431 |
| AlmaLinux:8 | rubygem-minitest | 5.13.0-139.module_el8.8.0+3578+2b4b06da | ALSA-2023:3821 |
| AlmaLinux:8 | rubygem-minitest | 5.10.3-111.module_el8.9.0+3635+c6f99506 | ALSA-2023:7025 |
| AlmaLinux:8 | rubygem-minitest | 5.14.2-143.module_el8.10.0+3852+ce828b19 | ALSA-2024:3500 |
| AlmaLinux:9 | rubygem-minitest | 5.14.2-162.el9_4 | ALSA-2024:3838 |
| AlmaLinux:9 | rubygem-minitest | 5.15.0-143.module_el9.3.0+60+5ebc989a | ALSA-2024:1576 |
| AlmaLinux:8 | rubygem-mongo | 2.11.3-1.module_el8.3.0+6147+d0dfc1e4 | ALSA-2023:3821 |
| AlmaLinux:8 | rubygem-mongo | 2.5.1-2.module_el8.5.0+2625+ec418553 | ALSA-2023:7025 |
| AlmaLinux:8 | rubygem-mongo-doc | 2.5.1-2.module_el8.5.0+2625+ec418553 | ALSA-2023:7025 |
| AlmaLinux:8 | rubygem-mongo-doc | 2.11.3-1.module_el8.3.0+6147+d0dfc1e4 | ALSA-2023:3821 |
| AlmaLinux:8 | rubygem-mysql2 | 0.5.3-1.module_el8.3.0+6147+d0dfc1e4 | ALSA-2023:3821 |
| AlmaLinux:8 | rubygem-mysql2 | 0.4.10-4.module_el8.6.0+3170+4b08f9d4 | ALSA-2023:7025 |
| AlmaLinux:8 | rubygem-mysql2 | 0.4.10-4.module_el8.5.0+2625+ec418553 | ALSA-2023:7025 |
| AlmaLinux:8 | rubygem-mysql2 | 0.4.10-4.module_el8.5.0+259+8cec6917 | ALSA-2023:7025 |
| AlmaLinux:8 | rubygem-mysql2 | 0.5.3-3.module_el8.9.0+3746+91b8233a | ALSA-2024:1431 |
| AlmaLinux:8 | rubygem-mysql2 | 0.5.3-1.module_el8.4.0+2399+4e3a532a | ALSA-2023:3821 |
| AlmaLinux:8 | rubygem-mysql2 | 0.5.3-2.module_el8.10.0+3852+ce828b19 | ALSA-2024:3500 |
| AlmaLinux:8 | rubygem-mysql2 | 0.5.3-1.module_el8.5.0+117+35d1289b | ALSA-2023:3821 |
| AlmaLinux:8 | rubygem-mysql2 | 0.5.3-1.module_el8.6.0+3167+957ef55e | ALSA-2023:3821 |
| AlmaLinux:9 | rubygem-mysql2 | 0.5.4-1.module_el9.1.0+8+503f6fbd | ALSA-2024:1576 |
| AlmaLinux:8 | rubygem-mysql2-doc | 0.5.3-2.module_el8.10.0+3852+ce828b19 | ALSA-2024:3500 |
| AlmaLinux:8 | rubygem-mysql2-doc | 0.5.3-1.module_el8.3.0+6147+d0dfc1e4 | ALSA-2023:3821 |
| AlmaLinux:8 | rubygem-mysql2-doc | 0.5.3-3.module_el8.9.0+3746+91b8233a | ALSA-2024:1431 |
| AlmaLinux:8 | rubygem-mysql2-doc | 0.4.10-4.module_el8.5.0+2625+ec418553 | ALSA-2023:7025 |
| AlmaLinux:9 | rubygem-mysql2-doc | 0.5.4-1.module_el9.1.0+8+503f6fbd | ALSA-2024:1576 |
| AlmaLinux:8 | rubygem-net-telnet | 0.1.1-111.module_el8.9.0+3635+c6f99506 | ALSA-2023:7025 |
| AlmaLinux:8 | rubygem-net-telnet | 0.2.0-139.module_el8.8.0+3578+2b4b06da | ALSA-2023:3821 |
| AlmaLinux:8 | rubygem-openssl | 2.1.2-111.module_el8.9.0+3635+c6f99506 | ALSA-2023:7025 |
| AlmaLinux:8 | rubygem-openssl | 2.1.4-139.module_el8.8.0+3578+2b4b06da | ALSA-2023:3821 |
| AlmaLinux:8 | rubygem-pg | 1.2.3-1.module_el8.6.0+3144+d138acf1 | ALSA-2024:3500 |
| AlmaLinux:8 | rubygem-pg | 1.2.3-1.module_el8.3.0+6147+d0dfc1e4 | ALSA-2023:3821 |
| AlmaLinux:8 | rubygem-pg | 1.2.3-1.module_el8.5.0+117+35d1289b | ALSA-2023:3821 |
| AlmaLinux:8 | rubygem-pg | 1.2.3-1.module_el8.4.0+2399+4e3a532a | ALSA-2023:3821 |
| AlmaLinux:8 | rubygem-pg | 1.2.3-1.module_el8.6.0+3167+957ef55e | ALSA-2023:3821 |
| AlmaLinux:8 | rubygem-pg | 1.0.0-3.module_el8.9.0+3635+c6f99506 | ALSA-2023:7025 |
| AlmaLinux:8 | rubygem-pg | 1.3.2-1.module_el8.7.0+3304+9392e77f | ALSA-2024:1431 |
| AlmaLinux:8 | rubygem-pg | 1.2.3-1.module_el8.5.0+2595+0c654ebc | ALSA-2024:3500 |
| AlmaLinux:8 | rubygem-pg | 1.2.3-1.module_el8.5.0+118+1ab773e1 | ALSA-2024:3500 |
| AlmaLinux:9 | rubygem-pg | 1.3.5-1.module_el9.1.0+8+503f6fbd | ALSA-2024:1576 |
| AlmaLinux:8 | rubygem-pg-doc | 1.2.3-1.module_el8.5.0+2595+0c654ebc | ALSA-2024:3500 |
| AlmaLinux:8 | rubygem-pg-doc | 1.3.2-1.module_el8.7.0+3304+9392e77f | ALSA-2024:1431 |
| AlmaLinux:8 | rubygem-pg-doc | 1.0.0-3.module_el8.9.0+3635+c6f99506 | ALSA-2023:7025 |
| AlmaLinux:8 | rubygem-pg-doc | 1.2.3-1.module_el8.3.0+6147+d0dfc1e4 | ALSA-2023:3821 |
| AlmaLinux:8 | rubygem-pg-doc | 1.2.3-1.module_el8.10.0+3852+ce828b19 | ALSA-2024:3500 |
| AlmaLinux:9 | rubygem-pg-doc | 1.3.5-1.module_el9.1.0+8+503f6fbd | ALSA-2024:1576 |
| AlmaLinux:8 | rubygem-power_assert | 1.2.1-143.module_el8.10.0+3852+ce828b19 | ALSA-2024:3500 |
| AlmaLinux:8 | rubygem-power_assert | 1.1.7-139.module_el8.8.0+3578+2b4b06da | ALSA-2023:3821 |
| AlmaLinux:8 | rubygem-power_assert | 1.1.1-111.module_el8.9.0+3635+c6f99506 | ALSA-2023:7025 |
| AlmaLinux:8 | rubygem-power_assert | 2.0.1-142.module_el8.9.0+3746+91b8233a | ALSA-2024:1431 |
| AlmaLinux:9 | rubygem-power_assert | 2.0.1-143.module_el9.3.0+60+5ebc989a | ALSA-2024:1576 |
| AlmaLinux:9 | rubygem-power_assert | 1.2.1-162.el9_4 | ALSA-2024:3838 |
| AlmaLinux:8 | rubygem-psych | 3.3.2-143.module_el8.10.0+3852+ce828b19 | ALSA-2024:3500 |
| AlmaLinux:8 | rubygem-psych | 3.1.0-139.module_el8.8.0+3578+2b4b06da | ALSA-2023:3821 |
| AlmaLinux:8 | rubygem-psych | 3.0.2-111.module_el8.9.0+3635+c6f99506 | ALSA-2023:7025 |
| AlmaLinux:8 | rubygem-psych | 4.0.4-142.module_el8.9.0+3746+91b8233a | ALSA-2024:1431 |
| AlmaLinux:9 | rubygem-psych | 4.0.4-143.module_el9.3.0+60+5ebc989a | ALSA-2024:1576 |
| AlmaLinux:9 | rubygem-psych | 3.3.2-162.el9_4 | ALSA-2024:3838 |
| AlmaLinux:8 | rubygem-rake | 13.0.3-143.module_el8.10.0+3852+ce828b19 | ALSA-2024:3500 |
| AlmaLinux:8 | rubygem-rake | 13.0.6-142.module_el8.9.0+3746+91b8233a | ALSA-2024:1431 |
| AlmaLinux:8 | rubygem-rake | 13.0.1-139.module_el8.8.0+3578+2b4b06da | ALSA-2023:3821 |
| AlmaLinux:8 | rubygem-rake | 12.3.3-111.module_el8.9.0+3635+c6f99506 | ALSA-2023:7025 |
| AlmaLinux:9 | rubygem-rake | 13.0.6-143.module_el9.3.0+60+5ebc989a | ALSA-2024:1576 |
| AlmaLinux:9 | rubygem-rake | 13.0.3-162.el9_4 | ALSA-2024:3838 |
| AlmaLinux:8 | rubygem-rbs | 2.7.0-142.module_el8.9.0+3746+91b8233a | ALSA-2024:1431 |
| AlmaLinux:8 | rubygem-rbs | 1.4.0-143.module_el8.10.0+3852+ce828b19 | ALSA-2024:3500 |
| AlmaLinux:9 | rubygem-rbs | 2.7.0-143.module_el9.3.0+60+5ebc989a | ALSA-2024:1576 |
| AlmaLinux:9 | rubygem-rbs | 1.4.0-162.el9_4 | ALSA-2024:3838 |
| AlmaLinux:8 | rubygem-rdoc | 6.3.4.1-143.module_el8.10.0+3852+ce828b19 | ALSA-2024:3500 |
| AlmaLinux:8 | rubygem-rdoc | 6.0.1.1-111.module_el8.9.0+3635+c6f99506 | ALSA-2023:7025 |
| AlmaLinux:8 | rubygem-rdoc | 6.2.1.1-139.module_el8.8.0+3578+2b4b06da | ALSA-2023:3821 |
| AlmaLinux:8 | rubygem-rdoc | 6.4.0-142.module_el8.9.0+3746+91b8233a | ALSA-2024:1431 |
| AlmaLinux:9 | rubygem-rdoc | 6.4.0-143.module_el9.3.0+60+5ebc989a | ALSA-2024:1576 |
| AlmaLinux:9 | rubygem-rdoc | 6.3.4.1-162.el9_4 | ALSA-2024:3838 |
| AlmaLinux:8 | rubygem-rexml | 3.2.5-143.module_el8.10.0+3852+ce828b19 | ALSA-2024:3500 |
| AlmaLinux:8 | rubygem-rexml | 3.2.5-142.module_el8.9.0+3746+91b8233a | ALSA-2024:1431 |
| AlmaLinux:9 | rubygem-rexml | 3.2.5-162.el9_4 | ALSA-2024:3838 |
| AlmaLinux:9 | rubygem-rexml | 3.2.5-143.module_el9.3.0+60+5ebc989a | ALSA-2024:1576 |
| AlmaLinux:8 | rubygem-rss | 0.2.9-143.module_el8.10.0+3852+ce828b19 | ALSA-2024:3500 |
| AlmaLinux:8 | rubygem-rss | 0.2.9-142.module_el8.9.0+3746+91b8233a | ALSA-2024:1431 |
| AlmaLinux:9 | rubygem-rss | 0.2.9-143.module_el9.3.0+60+5ebc989a | ALSA-2024:1576 |
| AlmaLinux:9 | rubygem-rss | 0.2.9-162.el9_4 | ALSA-2024:3838 |
| AlmaLinux:8 | rubygem-test-unit | 3.3.4-139.module_el8.8.0+3578+2b4b06da | ALSA-2023:3821 |
| AlmaLinux:8 | rubygem-test-unit | 3.5.3-142.module_el8.9.0+3746+91b8233a | ALSA-2024:1431 |
| AlmaLinux:8 | rubygem-test-unit | 3.3.7-143.module_el8.10.0+3852+ce828b19 | ALSA-2024:3500 |
| AlmaLinux:8 | rubygem-test-unit | 3.2.7-111.module_el8.9.0+3635+c6f99506 | ALSA-2023:7025 |
| AlmaLinux:9 | rubygem-test-unit | 3.5.3-143.module_el9.3.0+60+5ebc989a | ALSA-2024:1576 |
| AlmaLinux:9 | rubygem-test-unit | 3.3.7-162.el9_4 | ALSA-2024:3838 |
| AlmaLinux:8 | rubygem-typeprof | 0.15.2-143.module_el8.10.0+3852+ce828b19 | ALSA-2024:3500 |
| AlmaLinux:8 | rubygem-typeprof | 0.21.3-142.module_el8.9.0+3746+91b8233a | ALSA-2024:1431 |
| AlmaLinux:9 | rubygem-typeprof | 0.15.2-162.el9_4 | ALSA-2024:3838 |
| AlmaLinux:9 | rubygem-typeprof | 0.21.3-143.module_el9.3.0+60+5ebc989a | ALSA-2024:1576 |
| AlmaLinux:8 | rubygem-xmlrpc | 0.3.0-139.module_el8.8.0+3578+2b4b06da | ALSA-2023:3821 |
| AlmaLinux:8 | rubygem-xmlrpc | 0.3.0-111.module_el8.9.0+3635+c6f99506 | ALSA-2023:7025 |
| AlmaLinux:8 | rubygems | 3.2.33-143.module_el8.10.0+3852+ce828b19 | ALSA-2024:3500 |
| AlmaLinux:8 | rubygems | 3.3.26-142.module_el8.9.0+3746+91b8233a | ALSA-2024:1431 |
| AlmaLinux:8 | rubygems | 3.1.6-139.module_el8.8.0+3578+2b4b06da | ALSA-2023:3821 |
| AlmaLinux:8 | rubygems | 2.7.6.3-111.module_el8.9.0+3635+c6f99506 | ALSA-2023:7025 |
| AlmaLinux:9 | rubygems | 3.3.26-143.module_el9.3.0+60+5ebc989a | ALSA-2024:1576 |
| AlmaLinux:9 | rubygems | 3.2.33-162.el9_4 | ALSA-2024:3838 |
| AlmaLinux:8 | rubygems-devel | 3.2.33-143.module_el8.10.0+3852+ce828b19 | ALSA-2024:3500 |
| AlmaLinux:8 | rubygems-devel | 3.3.26-142.module_el8.9.0+3746+91b8233a | ALSA-2024:1431 |
| AlmaLinux:8 | rubygems-devel | 2.7.6.3-111.module_el8.9.0+3635+c6f99506 | ALSA-2023:7025 |
| AlmaLinux:8 | rubygems-devel | 3.1.6-139.module_el8.8.0+3578+2b4b06da | ALSA-2023:3821 |
| AlmaLinux:9 | rubygems-devel | 3.2.33-162.el9_4 | ALSA-2024:3838 |
| AlmaLinux:9 | rubygems-devel | 3.3.26-143.module_el9.3.0+60+5ebc989a | ALSA-2024:1576 |
| Alpine:v3.20 | ruby | 3.1.4-r0 | ALPINE-CVE-2023-28756 |
| Alpine:v3.21 | ruby | 3.1.4-r0 | ALPINE-CVE-2023-28756 |
| Alpine:v3.22 | ruby | 3.1.4-r0 | ALPINE-CVE-2023-28756 |
| Alpine:v3.23 | ruby | 3.1.4-r0 | ALPINE-CVE-2023-28756 |
| Alpine:v3.24 | ruby | 3.1.4-r0 | ALPINE-CVE-2023-28756 |
| Debian:12 | jruby | no fix listed | DEBIAN-CVE-2023-28756 |
| Debian:13 | jruby | 9.4.5.0+ds-1 | DEBIAN-CVE-2023-28756 |
| Debian:14 | jruby | 9.4.5.0+ds-1 | DEBIAN-CVE-2023-28756 |
| Debian:12 | ruby3.1 | no fix listed | DEBIAN-CVE-2023-28756 |
| Rocky Linux:8 | ruby | 0:2.5.9-111.module+el8.9.0+1536+5f79634e | RLSA-2023:7025 |
| Rocky Linux:8 | ruby | 0:2.7.8-139.module+el8.8.0+1320+d2449f6f | RLSA-2023:3821 |
| Rocky Linux:8 | ruby | 0:3.1.4-142.module+el8.9.0+1759+ff68ae72 | RLSA-2024:1431 |
| Rocky Linux:8 | rubygem-abrt | 0:0.3.0-4.module+el8.9.0+1536+5f79634e | RLSA-2023:7025 |
| Rocky Linux:8 | rubygem-abrt | 0:0.4.0-1.module+el8.5.0+668+665814fa | RLSA-2023:3821 |
| Rocky Linux:8 | rubygem-abrt | 0:0.3.0-4.module+el8.5.0+738+032c9c02 | RLSA-2023:7025 |
Affected products (as reported)
References
- https://www.ruby-lang.org/en/news/2022/12/25/ruby-3-2-0-released/
- https://www.ruby-lang.org/en/downloads/releases/
- https://github.com/ruby/time/releases/
- https://www.ruby-lang.org/en/news/2023/03/30/redos-in-time-cve-2023-28756/
- FEDORA-2023-6b924d3b75 vendor-advisory
- FEDORA-2023-a7be7ea1aa vendor-advisory
- FEDORA-2023-f58d72c700 vendor-advisory
- [debian-lts-announce] 20230430 [SECURITY] [DLA 3408-1] jruby security update mailing-list
- https://security.netapp.com/advisory/ntap-20230526-0004/
- GLSA-202401-27 vendor-advisory
- https://lists.debian.org/debian-lts-announce/2024/09/msg00000.html