[SSA:2023-090-01] ruby
New ruby packages are available for Slackware 15.0 and -current to
fix security issues.
Here are the details from the Slackware 15.0 ChangeLog
patches/packages/ruby-3.0.6-i586-1_slack15.0.txz: Upgraded.
This update fixes security issues:
ReDoS vulnerability in URI.
ReDoS vulnerability in Time.
For more information, see:
https://www.ruby-lang.org/en/news/2023/03/28/redos-in-uri-cve-2023-28755/
https://www.ruby-lang.org/en/news/2023/03/30/redos-in-time-cve-2023-28756/
https://www.cve.org/CVERecord?id=CVE-2023-28755
https://www.cve.org/CVERecord?id=CVE-2023-28756
(* Security fix *)
Where to find the new packages
Thanks to the friendly folks at the OSU Open Source Lab
(http://osuosl.org) for donating FTP and rsync hosting
to the Slackware project! :-)
Also see the "Get Slack" section on http://slackware.com for
additional mirror sites near you.
Updated package for Slackware 15.0:
ftp://ftp.slackware.com/pub/slackware/slackware-15.0/patches/packages/ruby-3.0.6-i586-1_slack15.0.txz
Updated package for Slackware x86_64 15.0:
ftp://ftp.slackware.com/pub/slackware/slackware64-15.0/patches/packages/ruby-3.0.6-x86_64-1_slack15.0.txz
Updated package for Slackware -current:
ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/d/ruby-3.2.2-i586-1.txz
Updated package for Slackware x86_64 -current:
ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/d/ruby-3.2.2-x86_64-1.txz
MD5 signatures
Slackware 15.0 package:
22ffa16679294ddce3265d913f2fac20 ruby-3.0.6-i586-1_slack15.0.txz
Slackware x86_64 15.0 package:
0724127e313f586f6677e12e0316a070 ruby-3.0.6-x86_64-1_slack15.0.txz
Slackware -current package:
d39ba074e9714480e07880be54466086 d/ruby-3.2.2-i586-1.txz
Slackware x86_64 -current package:
94a42ee743ed273628c09d9242ff125f d/ruby-3.2.2-x86_64-1.txz
Installation instructions
Upgrade the package as root:
# upgradepkg ruby-3.0.6-i586-1_slack15.0.txz
- ID
- SSA:2023-090-01
- Severity
- medium
- Severity from
- CVE-2023-28755
- URL
- http://www.slackware.com/security/viewer.php?l=slackware-security&y=2023&m=slackware-security.351755
- Published
-
2023-03-31T18:29:16
(17 months ago) - Modified
-
2023-03-31T18:29:16
(17 months ago) - Rights
- Slackware Linux Security Team
- Other Advisories
-
-
ALAS2-2023-2084
-
ALPINE:CVE-2023-28755
-
ALPINE:CVE-2023-28756
-
ALSA-2023:3821
-
ALSA-2023:7025
-
ALSA-2024:1431
-
ALSA-2024:1576
-
ALSA-2024:3500
-
ALSA-2024:3838
-
ELSA-2023-3821
-
ELSA-2023-7025
-
ELSA-2024-1431
-
ELSA-2024-1576
-
ELSA-2024-3500
-
ELSA-2024-3838
-
FEDORA-2023-6b924d3b75
-
FEDORA-2023-a7be7ea1aa
-
FEDORA-2023-f58d72c700
-
FEDORA-2024-31cac8b8ec
-
FEDORA-2024-48bdd3abbf
-
FREEBSD:6BD2773C-CF1A-11ED-BD44-080027F5FEC9
-
FREEBSD:9B60BBA1-CF18-11ED-BD44-080027F5FEC9
-
GLSA-202401-27
-
RHSA-2023:3821
-
RHSA-2023:7025
-
RHSA-2024:1431
-
RHSA-2024:1576
-
RHSA-2024:3500
-
RHSA-2024:3838
-
RUBYSEC:TIME-2023-28756
-
RUBYSEC:URI-2023-28755
-
RUBYSEC:URI-2023-36617
-
SUSE-SU-2023:4176-1
-
USN-6055-1
-
USN-6055-2
-
USN-6087-1
-
USN-6181-1
-
USN-6219-1
-
Type | Package URL | Namespace | Name / Product | Version | Distribution / Platform | Arch | Patch / Fix |
---|---|---|---|---|---|---|---|
Affected | pkg:slackbuild/slackware/ruby?arch=x86_64&distro=slackware64-current | slackware |
![]() |
< 3.2.2 | slackware64-current | x86_64 | |
Affected | pkg:slackbuild/slackware/ruby?arch=x86_64&distro=slackware64-15.0 | slackware |
![]() |
< 3.0.6 | slackware64-15.0 | x86_64 | |
Affected | pkg:slackbuild/slackware/ruby?arch=i586&distro=slackware-current | slackware |
![]() |
< 3.2.2 | slackware-current | i586 | |
Affected | pkg:slackbuild/slackware/ruby?arch=i586&distro=slackware-15.0 | slackware |
![]() |
< 3.0.6 | slackware-15.0 | i586 |
# CVE | Description | CVSS | EPSS | EPSS Trend (30 days) | Affected Products | Weaknesses | Security Advisories | Exploits | PoC | Pubblication Date | Modification Date |
---|---|---|---|---|---|---|---|---|---|---|---|
# CVE | Description | CVSS | EPSS | EPSS Trend (30 days) | Affected Products | Weaknesses | Security Advisories | PoC | Pubblication Date | Modification Date |