2181 matches found
CVE-2018-7159 affecting package rubygem-http_parser for versions less than 0.8.0-1
CVE-2018-7159 affecting package rubygem-httpparser for versions less than 0.8.0-1. A patched version of the package is available...
CVE-2022-24795 affecting package rubygem-yajl-ruby for versions less than 1.4.3-1
CVE-2022-24795 affecting package rubygem-yajl-ruby for versions less than 1.4.3-1. An upgraded version of the package is available that resolves this issue...
Photon OS 3.0: Rubygem PHSA-2022-3.0-0399
An update of the rubygem package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2022-3.0-0399. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Photon OS 4.0: Rubygem PHSA-2021-4.0-0139
An update of the rubygem package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-4.0-0139. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Photon OS 4.0: Rubygem PHSA-2021-4.0-0115
An update of the rubygem package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-4.0-0115. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
RLSA-2024:4499 Moderate: ruby security update
Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. Security Fixes: rubygem-uri: ReDoS vulnerability - upstream's incomplete fix for CVE-2023-28755 CVE-2023-36617 ruby: Buffer overread vulnerability...
Rocky Linux 8 : ruby (RLSA-2024:4499)
The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2024:4499 advisory. rubygem-uri: ReDoS vulnerability - upstream's incomplete fix for CVE-2023-28755 CVE-2023-36617 ruby: Buffer overread vulnerability in StringIO...
ruby security update
ruby 2.5.9-112 - Fix ReDoS vulnerability - upstream's incomplete fix for CVE-2023-28755. CVE-2023-36617 Resolves: RHEL-5614 - Fix Buffer overread vulnerability in StringIO. CVE-2024-27280 Resolves: RHEL-34125 - Fix RCE vulnerability with .rdocoptions in RDoc. CVE-2024-27281 Resolves: RHEL-34117 -...
OPENSUSE-SU-2024:14178-1 ruby3.3-rubygem-tzinfo-1.2-1.2.11-1.5 on GA media
These are all security issues fixed in the ruby3.3-rubygem-tzinfo-1.2-1.2.11-1.5 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:14172-1 ruby3.3-rubygem-minitar-0.9-1.17 on GA media
These are all security issues fixed in the ruby3.3-rubygem-minitar-0.9-1.17 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:14168-1 ruby3.3-rubygem-globalid-1.2.1-1.5 on GA media
These are all security issues fixed in the ruby3.3-rubygem-globalid-1.2.1-1.5 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:14180-1 ruby3.3-rubygem-websocket-extensions-0.1.5-1.20 on GA media
These are all security issues fixed in the ruby3.3-rubygem-websocket-extensions-0.1.5-1.20 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:14177-1 ruby3.3-rubygem-sprockets-4.2.1-1.5 on GA media
These are all security issues fixed in the ruby3.3-rubygem-sprockets-4.2.1-1.5 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:14171-1 ruby3.3-rubygem-loofah-2.22.0-1.5 on GA media
These are all security issues fixed in the ruby3.3-rubygem-loofah-2.22.0-1.5 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:14173-1 ruby3.3-rubygem-multi_xml-0.6.0-1.27 on GA media
These are all security issues fixed in the ruby3.3-rubygem-multixml-0.6.0-1.27 package on the GA media of openSUSE Tumbleweed...
ruby: Buffer overread vulnerability in StringIO
A buffer overread flaw was found in rubygem StringIO. The ungetbyte and ungetc methods on a StringIO object can read past the end of a string, and a subsequent call to StringIO.gets may return the memory value...
rubygem-uri: ReDoS vulnerability - upstream's incomplete fix for CVE-2023-28755
A flaw was found in the rubygem URI. The URI parser mishandles invalid URLs that have specific characters, which causes an increase in execution time parsing strings to URI objects. This issue may result in a regular expression denial of service ReDoS...
OESA-2024-1778 rubygem-actionpack security update
Eases web-request routing, handling, and response as a half-way front, half-way page controller. Implemented with specific emphasis on enabling easy unit/integration testing that doesn't require a browser. Security Fixes: Action Pack is a framework for handling and responding to web requests. Und...
OESA-2024-1775 rubygem-actionview security update
Simple, battle-tested conventions and helpers for building web pages. Security Fixes: A flaw was found in Rails. rails-ujs may allow an attacker to perform Cross-Site Scripting XSS, which could lead to stolen information, phishing attacks, and other types of attacks.CVE-2023-23913...
