Vulnerability · Published Mar 31, 2023 · Assigned by mitre
CVE-2023-28755
Medium 5.3
In plain English
A medium-severity regular-expression denial of service in the ruby package (AlmaLinux). There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 2.6% (higher than 86% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS 3.1)5.3Medium
Exploit odds (30 days)2.6%top 14.4% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A ReDoS issue was discovered in the URI component through 0.12.0 in Ruby through 3.2.1. The URI parser mishandles invalid URLs that have specific characters. It causes an increase in execution time for parsing strings to URI objects. The fixed versions are 0.12.1, 0.11.1, 0.10.2 and 0.10.0.1.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:8 | ruby | 3.0.7-143.module_el8.10.0+3852+ce828b19 | ALSA-2024:3500 |
| AlmaLinux:8 | ruby | 2.5.9-111.module_el8.9.0+3635+c6f99506 | ALSA-2023:7025 |
| AlmaLinux:8 | ruby | 3.1.4-142.module_el8.9.0+3746+91b8233a | ALSA-2024:1431 |
| AlmaLinux:8 | ruby | 2.7.8-139.module_el8.8.0+3578+2b4b06da | ALSA-2023:3821 |
| AlmaLinux:8 | ruby | 2.5.9-112.module_el8.10.0+3871+342e2c2f | ALSA-2024:4499 |
| AlmaLinux:9 | ruby | 3.1.4-143.module_el9.3.0+60+5ebc989a | ALSA-2024:1576 |
| AlmaLinux:9 | ruby | 3.0.7-162.el9_4 | ALSA-2024:3838 |
| AlmaLinux:8 | ruby-bundled-gems | 3.1.4-142.module_el8.9.0+3746+91b8233a | ALSA-2024:1431 |
| AlmaLinux:9 | ruby-bundled-gems | 3.1.4-143.module_el9.3.0+60+5ebc989a | ALSA-2024:1576 |
| AlmaLinux:8 | ruby-default-gems | 3.0.7-143.module_el8.10.0+3852+ce828b19 | ALSA-2024:3500 |
| AlmaLinux:8 | ruby-default-gems | 3.1.4-142.module_el8.9.0+3746+91b8233a | ALSA-2024:1431 |
| AlmaLinux:8 | ruby-default-gems | 2.7.8-139.module_el8.8.0+3578+2b4b06da | ALSA-2023:3821 |
| AlmaLinux:9 | ruby-default-gems | 3.0.7-162.el9_4 | ALSA-2024:3838 |
| AlmaLinux:9 | ruby-default-gems | 3.1.4-143.module_el9.3.0+60+5ebc989a | ALSA-2024:1576 |
| AlmaLinux:8 | ruby-devel | 2.5.9-112.module_el8.10.0+3871+342e2c2f | ALSA-2024:4499 |
| AlmaLinux:8 | ruby-devel | 3.0.7-143.module_el8.10.0+3852+ce828b19 | ALSA-2024:3500 |
| AlmaLinux:8 | ruby-devel | 3.1.4-142.module_el8.9.0+3746+91b8233a | ALSA-2024:1431 |
| AlmaLinux:8 | ruby-devel | 2.5.9-111.module_el8.9.0+3635+c6f99506 | ALSA-2023:7025 |
| AlmaLinux:8 | ruby-devel | 2.7.8-139.module_el8.8.0+3578+2b4b06da | ALSA-2023:3821 |
| AlmaLinux:9 | ruby-devel | 3.1.4-143.module_el9.3.0+60+5ebc989a | ALSA-2024:1576 |
| AlmaLinux:9 | ruby-devel | 3.0.7-162.el9_4 | ALSA-2024:3838 |
| AlmaLinux:8 | ruby-doc | 3.0.7-143.module_el8.10.0+3852+ce828b19 | ALSA-2024:3500 |
| AlmaLinux:8 | ruby-doc | 2.5.9-112.module_el8.10.0+3871+342e2c2f | ALSA-2024:4499 |
| AlmaLinux:8 | ruby-doc | 3.1.4-142.module_el8.9.0+3746+91b8233a | ALSA-2024:1431 |
| AlmaLinux:8 | ruby-doc | 2.7.8-139.module_el8.8.0+3578+2b4b06da | ALSA-2023:3821 |
| AlmaLinux:8 | ruby-doc | 2.5.9-111.module_el8.9.0+3635+c6f99506 | ALSA-2023:7025 |
| AlmaLinux:9 | ruby-doc | 3.0.7-162.el9_4 | ALSA-2024:3838 |
| AlmaLinux:9 | ruby-doc | 3.1.4-143.module_el9.3.0+60+5ebc989a | ALSA-2024:1576 |
| AlmaLinux:8 | ruby-irb | 2.5.9-111.module_el8.9.0+3635+c6f99506 | ALSA-2023:7025 |
| AlmaLinux:8 | ruby-irb | 2.5.9-112.module_el8.10.0+3871+342e2c2f | ALSA-2024:4499 |
| AlmaLinux:8 | ruby-libs | 3.0.7-143.module_el8.10.0+3852+ce828b19 | ALSA-2024:3500 |
| AlmaLinux:8 | ruby-libs | 2.5.9-111.module_el8.9.0+3635+c6f99506 | ALSA-2023:7025 |
| AlmaLinux:8 | ruby-libs | 2.5.9-112.module_el8.10.0+3871+342e2c2f | ALSA-2024:4499 |
| AlmaLinux:8 | ruby-libs | 3.1.4-142.module_el8.9.0+3746+91b8233a | ALSA-2024:1431 |
| AlmaLinux:8 | ruby-libs | 2.7.8-139.module_el8.8.0+3578+2b4b06da | ALSA-2023:3821 |
| AlmaLinux:9 | ruby-libs | 3.1.4-143.module_el9.3.0+60+5ebc989a | ALSA-2024:1576 |
| AlmaLinux:9 | ruby-libs | 3.0.7-162.el9_4 | ALSA-2024:3838 |
| AlmaLinux:8 | rubygem-abrt | 0.3.0-4.module_el8.5.0+2625+ec418553 | ALSA-2023:7025 |
| AlmaLinux:8 | rubygem-abrt | 0.4.0-1.module_el8.3.0+6147+d0dfc1e4 | ALSA-2023:3821 |
| AlmaLinux:8 | rubygem-abrt | 0.3.0-4.module_el8.10.0+3871+342e2c2f | ALSA-2024:4499 |
| AlmaLinux:8 | rubygem-abrt | 0.4.0-1.module_el8.10.0+3852+ce828b19 | ALSA-2024:3500 |
| AlmaLinux:8 | rubygem-abrt | 0.4.0-1.module_el8.7.0+3304+9392e77f | ALSA-2024:1431 |
| AlmaLinux:8 | rubygem-abrt-doc | 0.4.0-1.module_el8.7.0+3304+9392e77f | ALSA-2024:1431 |
| AlmaLinux:8 | rubygem-abrt-doc | 0.3.0-4.module_el8.10.0+3871+342e2c2f | ALSA-2024:4499 |
| AlmaLinux:8 | rubygem-abrt-doc | 0.3.0-4.module_el8.5.0+2625+ec418553 | ALSA-2023:7025 |
| AlmaLinux:8 | rubygem-abrt-doc | 0.4.0-1.module_el8.3.0+6147+d0dfc1e4 | ALSA-2023:3821 |
| AlmaLinux:8 | rubygem-abrt-doc | 0.4.0-1.module_el8.10.0+3852+ce828b19 | ALSA-2024:3500 |
| AlmaLinux:8 | rubygem-bigdecimal | 1.3.4-111.module_el8.9.0+3635+c6f99506 | ALSA-2023:7025 |
| AlmaLinux:8 | rubygem-bigdecimal | 1.3.4-112.module_el8.10.0+3871+342e2c2f | ALSA-2024:4499 |
| AlmaLinux:8 | rubygem-bigdecimal | 2.0.0-139.module_el8.8.0+3578+2b4b06da | ALSA-2023:3821 |
| AlmaLinux:8 | rubygem-bigdecimal | 3.1.1-142.module_el8.9.0+3746+91b8233a | ALSA-2024:1431 |
| AlmaLinux:8 | rubygem-bigdecimal | 3.0.0-143.module_el8.10.0+3852+ce828b19 | ALSA-2024:3500 |
| AlmaLinux:9 | rubygem-bigdecimal | 3.0.0-162.el9_4 | ALSA-2024:3838 |
| AlmaLinux:9 | rubygem-bigdecimal | 3.1.1-143.module_el9.3.0+60+5ebc989a | ALSA-2024:1576 |
| AlmaLinux:8 | rubygem-bson | 4.3.0-2.module_el8.5.0+259+8cec6917 | ALSA-2023:7025 |
| AlmaLinux:8 | rubygem-bson | 4.3.0-2.module_el8.6.0+3170+4b08f9d4 | ALSA-2023:7025 |
| AlmaLinux:8 | rubygem-bson | 4.3.0-2.module_el8.5.0+2625+ec418553 | ALSA-2023:7025 |
| AlmaLinux:8 | rubygem-bson | 4.8.1-1.module_el8.6.0+3167+957ef55e | ALSA-2023:3821 |
| AlmaLinux:8 | rubygem-bson | 4.8.1-1.module_el8.5.0+117+35d1289b | ALSA-2023:3821 |
| AlmaLinux:8 | rubygem-bson | 4.3.0-2.module_el8.5.0+2625+ec418553 | ALSA-2024:4499 |
| AlmaLinux:8 | rubygem-bson | 4.3.0-2.module_el8.6.0+3170+4b08f9d4 | ALSA-2024:4499 |
| AlmaLinux:8 | rubygem-bson | 4.3.0-2.module_el8.5.0+259+8cec6917 | ALSA-2024:4499 |
| AlmaLinux:8 | rubygem-bson | 4.8.1-1.module_el8.4.0+2399+4e3a532a | ALSA-2023:3821 |
| AlmaLinux:8 | rubygem-bson | 4.8.1-1.module_el8.3.0+6147+d0dfc1e4 | ALSA-2023:3821 |
| AlmaLinux:8 | rubygem-bson-doc | 4.3.0-2.module_el8.5.0+2625+ec418553 | ALSA-2024:4499 |
| AlmaLinux:8 | rubygem-bson-doc | 4.3.0-2.module_el8.5.0+2625+ec418553 | ALSA-2023:7025 |
| AlmaLinux:8 | rubygem-bson-doc | 4.8.1-1.module_el8.3.0+6147+d0dfc1e4 | ALSA-2023:3821 |
| AlmaLinux:8 | rubygem-bundler | 2.3.26-142.module_el8.9.0+3746+91b8233a | ALSA-2024:1431 |
| AlmaLinux:8 | rubygem-bundler | 1.16.1-4.module_el8.10.0+3871+342e2c2f | ALSA-2024:4499 |
| AlmaLinux:8 | rubygem-bundler | 2.2.24-139.module_el8.8.0+3578+2b4b06da | ALSA-2023:3821 |
| AlmaLinux:8 | rubygem-bundler | 1.16.1-4.module_el8.5.0+2625+ec418553 | ALSA-2023:7025 |
| AlmaLinux:8 | rubygem-bundler | 2.2.33-143.module_el8.10.0+3852+ce828b19 | ALSA-2024:3500 |
| AlmaLinux:9 | rubygem-bundler | 2.2.33-162.el9_4 | ALSA-2024:3838 |
| AlmaLinux:9 | rubygem-bundler | 2.3.26-143.module_el9.3.0+60+5ebc989a | ALSA-2024:1576 |
| AlmaLinux:8 | rubygem-bundler-doc | 1.16.1-4.module_el8.5.0+2625+ec418553 | ALSA-2023:7025 |
| AlmaLinux:8 | rubygem-bundler-doc | 1.16.1-4.module_el8.10.0+3871+342e2c2f | ALSA-2024:4499 |
| AlmaLinux:8 | rubygem-did_you_mean | 1.2.0-111.module_el8.9.0+3635+c6f99506 | ALSA-2023:7025 |
| AlmaLinux:8 | rubygem-did_you_mean | 1.2.0-112.module_el8.10.0+3871+342e2c2f | ALSA-2024:4499 |
| AlmaLinux:8 | rubygem-io-console | 0.5.11-142.module_el8.9.0+3746+91b8233a | ALSA-2024:1431 |
| AlmaLinux:8 | rubygem-io-console | 0.5.6-139.module_el8.8.0+3578+2b4b06da | ALSA-2023:3821 |
| AlmaLinux:8 | rubygem-io-console | 0.4.6-111.module_el8.9.0+3635+c6f99506 | ALSA-2023:7025 |
| AlmaLinux:8 | rubygem-io-console | 0.4.6-112.module_el8.10.0+3871+342e2c2f | ALSA-2024:4499 |
| AlmaLinux:8 | rubygem-io-console | 0.5.7-143.module_el8.10.0+3852+ce828b19 | ALSA-2024:3500 |
| AlmaLinux:9 | rubygem-io-console | 0.5.11-143.module_el9.3.0+60+5ebc989a | ALSA-2024:1576 |
| AlmaLinux:9 | rubygem-io-console | 0.5.7-162.el9_4 | ALSA-2024:3838 |
| AlmaLinux:8 | rubygem-irb | 1.4.1-142.module_el8.9.0+3746+91b8233a | ALSA-2024:1431 |
| AlmaLinux:8 | rubygem-irb | 1.3.5-143.module_el8.10.0+3852+ce828b19 | ALSA-2024:3500 |
| AlmaLinux:8 | rubygem-irb | 1.2.6-139.module_el8.8.0+3578+2b4b06da | ALSA-2023:3821 |
| AlmaLinux:9 | rubygem-irb | 1.3.5-162.el9_4 | ALSA-2024:3838 |
| AlmaLinux:9 | rubygem-irb | 1.4.1-143.module_el9.3.0+60+5ebc989a | ALSA-2024:1576 |
| AlmaLinux:8 | rubygem-json | 2.3.0-139.module_el8.8.0+3578+2b4b06da | ALSA-2023:3821 |
| AlmaLinux:8 | rubygem-json | 2.1.0-111.module_el8.9.0+3635+c6f99506 | ALSA-2023:7025 |
| AlmaLinux:8 | rubygem-json | 2.1.0-112.module_el8.10.0+3871+342e2c2f | ALSA-2024:4499 |
| AlmaLinux:8 | rubygem-json | 2.6.1-142.module_el8.9.0+3746+91b8233a | ALSA-2024:1431 |
| AlmaLinux:8 | rubygem-json | 2.5.1-143.module_el8.10.0+3852+ce828b19 | ALSA-2024:3500 |
| AlmaLinux:9 | rubygem-json | 2.5.1-162.el9_4 | ALSA-2024:3838 |
| AlmaLinux:9 | rubygem-json | 2.6.1-143.module_el9.3.0+60+5ebc989a | ALSA-2024:1576 |
| AlmaLinux:8 | rubygem-minitest | 5.15.0-142.module_el8.9.0+3746+91b8233a | ALSA-2024:1431 |
| AlmaLinux:8 | rubygem-minitest | 5.14.2-143.module_el8.10.0+3852+ce828b19 | ALSA-2024:3500 |
| AlmaLinux:8 | rubygem-minitest | 5.13.0-139.module_el8.8.0+3578+2b4b06da | ALSA-2023:3821 |
| AlmaLinux:8 | rubygem-minitest | 5.10.3-111.module_el8.9.0+3635+c6f99506 | ALSA-2023:7025 |
| AlmaLinux:8 | rubygem-minitest | 5.10.3-112.module_el8.10.0+3871+342e2c2f | ALSA-2024:4499 |
| AlmaLinux:9 | rubygem-minitest | 5.14.2-162.el9_4 | ALSA-2024:3838 |
| AlmaLinux:9 | rubygem-minitest | 5.15.0-143.module_el9.3.0+60+5ebc989a | ALSA-2024:1576 |
| AlmaLinux:8 | rubygem-mongo | 2.5.1-2.module_el8.5.0+2625+ec418553 | ALSA-2024:4499 |
| AlmaLinux:8 | rubygem-mongo | 2.11.3-1.module_el8.3.0+6147+d0dfc1e4 | ALSA-2023:3821 |
| AlmaLinux:8 | rubygem-mongo | 2.5.1-2.module_el8.5.0+2625+ec418553 | ALSA-2023:7025 |
| AlmaLinux:8 | rubygem-mongo-doc | 2.5.1-2.module_el8.5.0+2625+ec418553 | ALSA-2023:7025 |
| AlmaLinux:8 | rubygem-mongo-doc | 2.11.3-1.module_el8.3.0+6147+d0dfc1e4 | ALSA-2023:3821 |
| AlmaLinux:8 | rubygem-mongo-doc | 2.5.1-2.module_el8.5.0+2625+ec418553 | ALSA-2024:4499 |
| AlmaLinux:8 | rubygem-mysql2 | 0.5.3-3.module_el8.9.0+3746+91b8233a | ALSA-2024:1431 |
| AlmaLinux:8 | rubygem-mysql2 | 0.4.10-4.module_el8.6.0+3170+4b08f9d4 | ALSA-2023:7025 |
| AlmaLinux:8 | rubygem-mysql2 | 0.4.10-4.module_el8.5.0+2625+ec418553 | ALSA-2023:7025 |
| AlmaLinux:8 | rubygem-mysql2 | 0.4.10-4.module_el8.5.0+259+8cec6917 | ALSA-2023:7025 |
| AlmaLinux:8 | rubygem-mysql2 | 0.4.10-4.module_el8.5.0+259+8cec6917 | ALSA-2024:4499 |
| AlmaLinux:8 | rubygem-mysql2 | 0.4.10-4.module_el8.5.0+2625+ec418553 | ALSA-2024:4499 |
| AlmaLinux:8 | rubygem-mysql2 | 0.4.10-4.module_el8.6.0+3170+4b08f9d4 | ALSA-2024:4499 |
| AlmaLinux:8 | rubygem-mysql2 | 0.5.3-1.module_el8.5.0+117+35d1289b | ALSA-2023:3821 |
| AlmaLinux:8 | rubygem-mysql2 | 0.5.3-1.module_el8.6.0+3167+957ef55e | ALSA-2023:3821 |
| AlmaLinux:8 | rubygem-mysql2 | 0.5.3-2.module_el8.10.0+3852+ce828b19 | ALSA-2024:3500 |
| AlmaLinux:8 | rubygem-mysql2 | 0.5.3-1.module_el8.3.0+6147+d0dfc1e4 | ALSA-2023:3821 |
| AlmaLinux:8 | rubygem-mysql2 | 0.5.3-1.module_el8.4.0+2399+4e3a532a | ALSA-2023:3821 |
| AlmaLinux:9 | rubygem-mysql2 | 0.5.4-1.module_el9.1.0+8+503f6fbd | ALSA-2024:1576 |
| AlmaLinux:8 | rubygem-mysql2-doc | 0.5.3-3.module_el8.9.0+3746+91b8233a | ALSA-2024:1431 |
| AlmaLinux:8 | rubygem-mysql2-doc | 0.4.10-4.module_el8.5.0+2625+ec418553 | ALSA-2024:4499 |
| AlmaLinux:8 | rubygem-mysql2-doc | 0.4.10-4.module_el8.5.0+2625+ec418553 | ALSA-2023:7025 |
| AlmaLinux:8 | rubygem-mysql2-doc | 0.5.3-2.module_el8.10.0+3852+ce828b19 | ALSA-2024:3500 |
| AlmaLinux:8 | rubygem-mysql2-doc | 0.5.3-1.module_el8.3.0+6147+d0dfc1e4 | ALSA-2023:3821 |
| AlmaLinux:9 | rubygem-mysql2-doc | 0.5.4-1.module_el9.1.0+8+503f6fbd | ALSA-2024:1576 |
| AlmaLinux:8 | rubygem-net-telnet | 0.2.0-139.module_el8.8.0+3578+2b4b06da | ALSA-2023:3821 |
| AlmaLinux:8 | rubygem-net-telnet | 0.1.1-111.module_el8.9.0+3635+c6f99506 | ALSA-2023:7025 |
| AlmaLinux:8 | rubygem-net-telnet | 0.1.1-112.module_el8.10.0+3871+342e2c2f | ALSA-2024:4499 |
| AlmaLinux:8 | rubygem-openssl | 2.1.4-139.module_el8.8.0+3578+2b4b06da | ALSA-2023:3821 |
| AlmaLinux:8 | rubygem-openssl | 2.1.2-112.module_el8.10.0+3871+342e2c2f | ALSA-2024:4499 |
| AlmaLinux:8 | rubygem-openssl | 2.1.2-111.module_el8.9.0+3635+c6f99506 | ALSA-2023:7025 |
| AlmaLinux:8 | rubygem-pg | 1.0.0-3.module_el8.9.0+3635+c6f99506 | ALSA-2023:7025 |
| AlmaLinux:8 | rubygem-pg | 1.2.3-1.module_el8.3.0+6147+d0dfc1e4 | ALSA-2023:3821 |
| AlmaLinux:8 | rubygem-pg | 1.2.3-1.module_el8.5.0+117+35d1289b | ALSA-2023:3821 |
| AlmaLinux:8 | rubygem-pg | 1.2.3-1.module_el8.4.0+2399+4e3a532a | ALSA-2023:3821 |
| AlmaLinux:8 | rubygem-pg | 1.2.3-1.module_el8.6.0+3167+957ef55e | ALSA-2023:3821 |
| AlmaLinux:8 | rubygem-pg | 1.3.2-1.module_el8.7.0+3304+9392e77f | ALSA-2024:1431 |
| AlmaLinux:8 | rubygem-pg | 1.2.3-1.module_el8.5.0+2595+0c654ebc | ALSA-2024:3500 |
| AlmaLinux:8 | rubygem-pg | 1.2.3-1.module_el8.5.0+118+1ab773e1 | ALSA-2024:3500 |
| AlmaLinux:8 | rubygem-pg | 1.2.3-1.module_el8.6.0+3144+d138acf1 | ALSA-2024:3500 |
| AlmaLinux:8 | rubygem-pg | 1.0.0-3.module_el8.9.0+3635+c6f99506 | ALSA-2024:4499 |
| AlmaLinux:9 | rubygem-pg | 1.3.5-1.module_el9.1.0+8+503f6fbd | ALSA-2024:1576 |
| AlmaLinux:8 | rubygem-pg-doc | 1.3.2-1.module_el8.7.0+3304+9392e77f | ALSA-2024:1431 |
| AlmaLinux:8 | rubygem-pg-doc | 1.0.0-3.module_el8.9.0+3635+c6f99506 | ALSA-2023:7025 |
| AlmaLinux:8 | rubygem-pg-doc | 1.0.0-3.module_el8.9.0+3635+c6f99506 | ALSA-2024:4499 |
| AlmaLinux:8 | rubygem-pg-doc | 1.2.3-1.module_el8.10.0+3852+ce828b19 | ALSA-2024:3500 |
| AlmaLinux:8 | rubygem-pg-doc | 1.2.3-1.module_el8.5.0+2595+0c654ebc | ALSA-2024:3500 |
| AlmaLinux:8 | rubygem-pg-doc | 1.2.3-1.module_el8.3.0+6147+d0dfc1e4 | ALSA-2023:3821 |
| AlmaLinux:9 | rubygem-pg-doc | 1.3.5-1.module_el9.1.0+8+503f6fbd | ALSA-2024:1576 |
| AlmaLinux:8 | rubygem-power_assert | 1.1.1-112.module_el8.10.0+3871+342e2c2f | ALSA-2024:4499 |
| AlmaLinux:8 | rubygem-power_assert | 1.1.7-139.module_el8.8.0+3578+2b4b06da | ALSA-2023:3821 |
| AlmaLinux:8 | rubygem-power_assert | 1.2.1-143.module_el8.10.0+3852+ce828b19 | ALSA-2024:3500 |
| AlmaLinux:8 | rubygem-power_assert | 2.0.1-142.module_el8.9.0+3746+91b8233a | ALSA-2024:1431 |
| AlmaLinux:8 | rubygem-power_assert | 1.1.1-111.module_el8.9.0+3635+c6f99506 | ALSA-2023:7025 |
| AlmaLinux:9 | rubygem-power_assert | 2.0.1-143.module_el9.3.0+60+5ebc989a | ALSA-2024:1576 |
| AlmaLinux:9 | rubygem-power_assert | 1.2.1-162.el9_4 | ALSA-2024:3838 |
| AlmaLinux:8 | rubygem-psych | 3.1.0-139.module_el8.8.0+3578+2b4b06da | ALSA-2023:3821 |
| AlmaLinux:8 | rubygem-psych | 3.0.2-112.module_el8.10.0+3871+342e2c2f | ALSA-2024:4499 |
| AlmaLinux:8 | rubygem-psych | 4.0.4-142.module_el8.9.0+3746+91b8233a | ALSA-2024:1431 |
| AlmaLinux:8 | rubygem-psych | 3.0.2-111.module_el8.9.0+3635+c6f99506 | ALSA-2023:7025 |
| AlmaLinux:8 | rubygem-psych | 3.3.2-143.module_el8.10.0+3852+ce828b19 | ALSA-2024:3500 |
| AlmaLinux:9 | rubygem-psych | 3.3.2-162.el9_4 | ALSA-2024:3838 |
| AlmaLinux:9 | rubygem-psych | 4.0.4-143.module_el9.3.0+60+5ebc989a | ALSA-2024:1576 |
| AlmaLinux:8 | rubygem-rake | 13.0.1-139.module_el8.8.0+3578+2b4b06da | ALSA-2023:3821 |
| AlmaLinux:8 | rubygem-rake | 12.3.3-111.module_el8.9.0+3635+c6f99506 | ALSA-2023:7025 |
| AlmaLinux:8 | rubygem-rake | 12.3.3-112.module_el8.10.0+3871+342e2c2f | ALSA-2024:4499 |
| AlmaLinux:8 | rubygem-rake | 13.0.6-142.module_el8.9.0+3746+91b8233a | ALSA-2024:1431 |
| AlmaLinux:8 | rubygem-rake | 13.0.3-143.module_el8.10.0+3852+ce828b19 | ALSA-2024:3500 |
| AlmaLinux:9 | rubygem-rake | 13.0.6-143.module_el9.3.0+60+5ebc989a | ALSA-2024:1576 |
| AlmaLinux:9 | rubygem-rake | 13.0.3-162.el9_4 | ALSA-2024:3838 |
| AlmaLinux:8 | rubygem-rbs | 2.7.0-142.module_el8.9.0+3746+91b8233a | ALSA-2024:1431 |
| AlmaLinux:8 | rubygem-rbs | 1.4.0-143.module_el8.10.0+3852+ce828b19 | ALSA-2024:3500 |
| AlmaLinux:9 | rubygem-rbs | 2.7.0-143.module_el9.3.0+60+5ebc989a | ALSA-2024:1576 |
| AlmaLinux:9 | rubygem-rbs | 1.4.0-162.el9_4 | ALSA-2024:3838 |
| AlmaLinux:8 | rubygem-rdoc | 6.0.1.1-112.module_el8.10.0+3871+342e2c2f | ALSA-2024:4499 |
| AlmaLinux:8 | rubygem-rdoc | 6.3.4.1-143.module_el8.10.0+3852+ce828b19 | ALSA-2024:3500 |
| AlmaLinux:8 | rubygem-rdoc | 6.2.1.1-139.module_el8.8.0+3578+2b4b06da | ALSA-2023:3821 |
| AlmaLinux:8 | rubygem-rdoc | 6.4.0-142.module_el8.9.0+3746+91b8233a | ALSA-2024:1431 |
| AlmaLinux:8 | rubygem-rdoc | 6.0.1.1-111.module_el8.9.0+3635+c6f99506 | ALSA-2023:7025 |
| AlmaLinux:9 | rubygem-rdoc | 6.4.0-143.module_el9.3.0+60+5ebc989a | ALSA-2024:1576 |
| AlmaLinux:9 | rubygem-rdoc | 6.3.4.1-162.el9_4 | ALSA-2024:3838 |
| AlmaLinux:8 | rubygem-rexml | 3.2.5-143.module_el8.10.0+3852+ce828b19 | ALSA-2024:3500 |
| AlmaLinux:8 | rubygem-rexml | 3.2.5-142.module_el8.9.0+3746+91b8233a | ALSA-2024:1431 |
| AlmaLinux:9 | rubygem-rexml | 3.2.5-162.el9_4 | ALSA-2024:3838 |
| AlmaLinux:9 | rubygem-rexml | 3.2.5-143.module_el9.3.0+60+5ebc989a | ALSA-2024:1576 |
| AlmaLinux:8 | rubygem-rss | 0.2.9-143.module_el8.10.0+3852+ce828b19 | ALSA-2024:3500 |
| AlmaLinux:8 | rubygem-rss | 0.2.9-142.module_el8.9.0+3746+91b8233a | ALSA-2024:1431 |
| AlmaLinux:9 | rubygem-rss | 0.2.9-143.module_el9.3.0+60+5ebc989a | ALSA-2024:1576 |
| AlmaLinux:9 | rubygem-rss | 0.2.9-162.el9_4 | ALSA-2024:3838 |
| AlmaLinux:8 | rubygem-test-unit | 3.3.4-139.module_el8.8.0+3578+2b4b06da | ALSA-2023:3821 |
| AlmaLinux:8 | rubygem-test-unit | 3.3.7-143.module_el8.10.0+3852+ce828b19 | ALSA-2024:3500 |
| AlmaLinux:8 | rubygem-test-unit | 3.5.3-142.module_el8.9.0+3746+91b8233a | ALSA-2024:1431 |
| AlmaLinux:8 | rubygem-test-unit | 3.2.7-111.module_el8.9.0+3635+c6f99506 | ALSA-2023:7025 |
| AlmaLinux:8 | rubygem-test-unit | 3.2.7-112.module_el8.10.0+3871+342e2c2f | ALSA-2024:4499 |
| AlmaLinux:9 | rubygem-test-unit | 3.5.3-143.module_el9.3.0+60+5ebc989a | ALSA-2024:1576 |
| AlmaLinux:9 | rubygem-test-unit | 3.3.7-162.el9_4 | ALSA-2024:3838 |
Affected products (as reported)
Weakness: CWE-1333 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
References
- https://www.ruby-lang.org/en/news/2022/12/25/ruby-3-2-0-released/
- https://www.ruby-lang.org/en/downloads/releases/
- https://github.com/ruby/uri/releases/
- https://www.ruby-lang.org/en/news/2023/03/28/redos-in-uri-cve-2023-28755/
- FEDORA-2023-6b924d3b75 vendor-advisory
- FEDORA-2023-a7be7ea1aa vendor-advisory
- FEDORA-2023-f58d72c700 vendor-advisory
- [debian-lts-announce] 20230430 [SECURITY] [DLA 3408-1] jruby security update mailing-list
- https://security.netapp.com/advisory/ntap-20230526-0003/
- GLSA-202401-27 vendor-advisory
- FEDORA-2024-31cac8b8ec vendor-advisory
- FEDORA-2024-48bdd3abbf vendor-advisory
- https://lists.debian.org/debian-lts-announce/2025/05/msg00015.html
- https://lists.debian.org/debian-lts-announce/2024/09/msg00000.html
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/27LUWREIFTP3MQAW7QE4PJM4DPAQJWXF/