[FEDORA-2023-a7be7ea1aa] Fedora 36: ruby

Severity Medium

Affected Packages 1

CVEs 2

Upgrade to Ruby 3.1.4. * Fix ReDoS vulnerability in URI (CVE-2023-28755) * Fix
ReDoS vulnerability in Time (CVE-2023-28756) Fix bundler improperly resolving
archful gems in Gemfile.lock. (rhbz#2178171)

Package	Affected Version
pkg:rpm/fedora/ruby?distro=fedora-36	< 3.1.4.175.fc36

ID

FEDORA-2023-a7be7ea1aa

Severity

medium

Severity from

CVE-2023-28755

URL

https://bodhi.fedoraproject.org/updates/FEDORA-2023-a7be7ea1aa

Published

2023-04-21T01:25:27
(17 months ago)

Modified

2023-04-21T01:25:27
(17 months ago)

Rights

Other Advisories

Source	# ID	Name	URL
Bugzilla	2184061	Bug #2184061 - CVE-2023-28756 ruby: ReDoS vulnerability in Time	https://bugzilla.redhat.com/show_bug.cgi?id=2184061
Bugzilla	2184059	Bug #2184059 - CVE-2023-28755 ruby: ReDoS vulnerability in URI	https://bugzilla.redhat.com/show_bug.cgi?id=2184059

Type	Package URL	Namespace	Name / Product	Version	Distribution / Platform	Arch	Patch / Fix
Affected	pkg:rpm/fedora/ruby?distro=fedora-36	fedora	ruby	< 3.1.4.175.fc36	fedora-36

# CVE	Description	CVSS	EPSS	EPSS Trend (30 days)	Affected Products	Weaknesses	Security Advisories	Exploits	PoC	Pubblication Date	Modification Date
# CVE	Description	CVSS	EPSS	EPSS Trend (30 days)	Affected Products	Weaknesses	Security Advisories	PoC	Pubblication Date	Modification Date