A ReDoS issue was discovered in the Time component through 0.2.1 in Ruby through 3.2.1. The Time parser mishandles invalid URLs that have specific characters. It causes an increase in execution time for parsing strings to Time objects. The fixed versions are 0.1.1 and 0.2.2.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rubygem-abrt-docUpgrade ruby-default-gemsUpgrade rubygem-psychUpgrade rubygem-pgUpgrade rubygem-irbUpgrade ruby-bundled-gemsUpgrade rubygem-power_assertUpgrade rubygem-rdocUpgrade rubygem-bundler-docUpgrade rubygem-rbsUpgrade rubygem-bundlerUpgrade rubygem-opensslUpgrade rubygem-abrtUpgrade rubygem-net-telnetUpgrade rubyUpgrade rubygem-typeprofUpgrade rubygem-pg-docUpgrade rubygem-minitestUpgrade rubygem-jsonUpgrade rubygemsUpgrade ruby-develUpgrade rubygem-mysql2-docUpgrade rubygem-mysql2Upgrade rubygem-mongoUpgrade rubygem-bsonUpgrade rubygem-bigdecimalUpgrade rubygem-rexmlUpgrade rubygems-develUpgrade rubygem-io-consoleUpgrade ruby-docUpgrade rubygem-did_you_meanUpgrade rubygem-mongo-docUpgrade rubygem-bson-docUpgrade ruby-irbUpgrade rubygem-xmlrpcUpgrade rubygem-rakeUpgrade rubygem-rssUpgrade rubygem-test-unitUpgrade ruby-libs | Jul 4, 2023 | Mar 31, 2023 |
| Alpine Linux | — | Upgrade ruby | Mar 26, 2024 | Mar 31, 2023 |
| Amazon Linux Ami 2 | — | Upgrade ruby-tcltkUpgrade rubygem-rexmlUpgrade rubygems-develUpgrade rubygem-rssUpgrade rubygem-bigdecimalUpgrade rubygem-io-consoleUpgrade rubygem-psychUpgrade ruby-libsUpgrade rubygem-jsonUpgrade rubygem-rakeUpgrade rubygem-typeprofUpgrade ruby-irbUpgrade rubygem-rbsUpgrade rubygemsUpgrade rubygem-minitestUpgrade rubygem-power_assertUpgrade ruby-develUpgrade rubygem-bundlerUpgrade rubyUpgrade ruby-default-gemsUpgrade ruby-debuginfoUpgrade ruby-docUpgrade rubygem-test-unitUpgrade rubygem-rdocUpgrade rubygem-irb | Jun 13, 2023 | Mar 31, 2023 |
| Amazon_linux_2023 | — | Upgrade ruby3.2-rubygem-rakeUpgrade ruby3.2-docUpgrade ruby3.2-bundled-gemsUpgrade ruby3.2-rubygem-io-consoleUpgrade ruby3.2-rubygem-psychUpgrade ruby3.2-rubygem-test-unitUpgrade ruby3.2-rubygem-bundlerUpgrade ruby3.2-default-gemsUpgrade ruby3.2-rubygemsUpgrade ruby3.2-rubygem-json-debuginfoUpgrade ruby3.2-rubygem-bigdecimal-debuginfoUpgrade ruby3.2-rubygem-rssUpgrade ruby3.2-debugsourceUpgrade ruby3.2-rubygem-io-console-debuginfoUpgrade ruby3.2-bundled-gems-debuginfoUpgrade ruby3.2-rubygem-irbUpgrade ruby3.2-libsUpgrade ruby3.2-rubygem-minitestUpgrade ruby3.2-libs-debuginfoUpgrade ruby3.2-rubygems-develUpgrade ruby3.2-rubygem-rbs-debuginfoUpgrade ruby3.2-develUpgrade ruby3.2-rubygem-power_assertUpgrade ruby3.2-debuginfoUpgrade ruby3.2-rubygem-bigdecimalUpgrade ruby3.2-rubygem-rdocUpgrade ruby3.2-rubygem-typeprofUpgrade ruby3.2-rubygem-rbsUpgrade ruby3.2-rubygem-jsonUpgrade ruby3.2-rubygem-psych-debuginfoUpgrade ruby3.2Upgrade ruby3.2-rubygem-rexml | Feb 17, 2025 | Mar 21, 2023 |
| Centos_linux | — | Upgrade rubygem-jsonUpgrade rubygem-xmlrpcUpgrade rubygem-mongo-docUpgrade rubygem-bsonUpgrade rubygem-irbUpgrade rubygem-pg-debugsourceUpgrade rubygem-rakeUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-io-consoleUpgrade ruby-irbUpgrade rubygem-bson-debuginfoUpgrade rubygem-mysql2Upgrade rubygem-abrtUpgrade rubygem-did_you_meanUpgrade rubygem-openssl-debuginfoUpgrade rubygem-bigdecimalUpgrade rubygem-mysql2-docUpgrade rubygem-pg-debuginfoUpgrade ruby-develUpgrade ruby-debuginfoUpgrade rubygem-mysql2-debugsourceUpgrade ruby-docUpgrade rubyUpgrade rubygem-test-unitUpgrade rubygem-io-console-debuginfoUpgrade rubygem-bundlerUpgrade rubygem-bundler-docUpgrade rubygem-pg-docUpgrade rubygem-opensslUpgrade ruby-debugsourceUpgrade rubygem-bson-docUpgrade rubygem-power_assertUpgrade rubygem-net-telnetUpgrade rubygem-mongoUpgrade rubygem-abrt-docUpgrade rubygems-develUpgrade rubygemsUpgrade rubygem-json-debuginfoUpgrade ruby-libsUpgrade ruby-default-gemsUpgrade rubygem-psych-debuginfoUpgrade rubygem-bson-debugsourceUpgrade rubygem-psychUpgrade rubygem-bigdecimal-debuginfoUpgrade ruby-libs-debuginfoUpgrade rubygem-minitestUpgrade rubygem-rdocUpgrade rubygem-pg | Jun 28, 2023 | Mar 31, 2023 |
| Debian | — | Upgrade jrubyUpgrade ruby2.7 | May 2, 2023 | Mar 31, 2023 |
| Dell Powerstore Dsa2024158 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Apr 4, 2024 |
| Dell Powerstore Dsa2024225 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | May 29, 2024 |
| Freebsd | — | Upgrade rubygem-timeUpgrade ruby32Upgrade rubyUpgrade ruby30Upgrade ruby27Upgrade ruby31 | Apr 1, 2023 | Mar 30, 2023 |
| Gentoo Linux | — | Upgrade dev-lang/ruby. | Jan 25, 2024 | Mar 31, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade ruby-irbUpgrade ruby-helpUpgrade ruby | May 9, 2023 | Mar 31, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade ruby-irbUpgrade ruby-helpUpgrade ruby | Jan 10, 2024 | Mar 31, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade rubyUpgrade ruby-irbUpgrade ruby-help | Jul 10, 2023 | Mar 31, 2023 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Sep 22, 2023 |
| Oracle_linux | — | Upgrade rubygem-rdocUpgrade rubygem-pgUpgrade rubygems-develUpgrade rubygem-abrt-docUpgrade rubygem-opensslUpgrade rubygem-power_assertUpgrade ruby-default-gemsUpgrade rubygem-test-unitUpgrade rubygem-bsonUpgrade rubygem-psychUpgrade rubygem-rssUpgrade rubygem-typeprofUpgrade rubygem-mysql2-docUpgrade rubygem-bundler-docUpgrade rubygem-minitestUpgrade rubygemsUpgrade rubygem-bson-docUpgrade rubygem-jsonUpgrade rubygem-mongoUpgrade ruby-libsUpgrade ruby-bundled-gemsUpgrade rubygem-net-telnetUpgrade rubygem-xmlrpcUpgrade rubygem-mysql2Upgrade ruby-irbUpgrade rubygem-rakeUpgrade rubygem-abrtUpgrade rubygem-mongo-docUpgrade rubygem-rbsUpgrade rubygem-irbUpgrade rubygem-rexmlUpgrade rubygem-bigdecimalUpgrade rubygem-bundlerUpgrade rubygem-pg-docUpgrade rubygem-did_you_meanUpgrade rubygem-io-consoleUpgrade ruby-docUpgrade ruby-develUpgrade ruby | Jul 8, 2023 | Mar 21, 2023 |
| Redhat_linux | — | Upgrade rubygem-bigdecimalUpgrade rubygem-power_assertUpgrade rubygem-openssl-debuginfoUpgrade rubygem-rssUpgrade rubygem-minitestUpgrade rubygem-io-consoleUpgrade rubygem-mongoUpgrade rubygem-jsonUpgrade rubygem-bundlerUpgrade rubygem-pg-debugsourceUpgrade ruby-docUpgrade rubygem-mysql2Upgrade rubygem-bson-debuginfoUpgrade rubygem-abrtUpgrade rubygem-bsonUpgrade rubygem-psychUpgrade rubygem-mysql2-debugsourceNo solution existsUpgrade rubygem-net-telnetUpgrade rubygem-rakeUpgrade rubygem-irbUpgrade ruby-bundled-gemsUpgrade rubygem-bigdecimal-debuginfoUpgrade ruby-irbUpgrade rubygem-bson-debugsourceUpgrade rubygem-abrt-docUpgrade rubygem-typeprofUpgrade rubygem-pg-docUpgrade rubyUpgrade rubygem-rbsUpgrade ruby-libsUpgrade ruby-debugsourceUpgrade rubygem-pg-debuginfoUpgrade rubygem-io-console-debuginfoUpgrade rubygem-psych-debuginfoUpgrade ruby-develUpgrade rubygem-test-unitUpgrade ruby-bundled-gems-debuginfoUpgrade rubygem-bson-docUpgrade rubygem-rdocUpgrade rubygem-opensslUpgrade ruby-default-gemsUpgrade rubygem-json-debuginfoUpgrade rubygem-rexmlUpgrade rubygem-mysql2-docUpgrade rubygem-did_you_meanUpgrade rubygem-rbs-debuginfoUpgrade rubygem-bundler-docUpgrade ruby-libs-debuginfoUpgrade rubygem-mongo-docUpgrade rubygem-pgUpgrade rubygem-mysql2-debuginfoUpgrade rubygemsUpgrade rubygems-develUpgrade ruby-debuginfoUpgrade rubygem-xmlrpc | Jun 28, 2023 | Mar 31, 2023 |
| Rocky_linux | — | Upgrade rubygem-mysql2-debuginfoUpgrade ruby-develUpgrade rubyUpgrade ruby-bundled-gems-debuginfoUpgrade rubygem-pgUpgrade rubygem-opensslUpgrade rubygem-psych-debuginfoUpgrade ruby-libs-debuginfoUpgrade rubygem-io-console-debuginfoUpgrade rubygem-mysql2Upgrade rubygem-pg-debugsourceUpgrade rubygem-rbsUpgrade rubygem-psychUpgrade rubygem-bson-debuginfoUpgrade rubygem-bigdecimalUpgrade ruby-libsUpgrade ruby-debuginfoUpgrade rubygem-pg-debuginfoUpgrade rubygem-io-consoleUpgrade rubygem-openssl-debuginfoUpgrade rubygem-bson-debugsourceUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-jsonUpgrade rubygem-json-debuginfoUpgrade ruby-debugsourceUpgrade rubygem-bsonUpgrade ruby-bundled-gemsUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-rbs-debuginfo | Mar 5, 2024 | Mar 31, 2023 |
| Suse | — | Upgrade ruby2.5-develUpgrade ruby2.5Upgrade ruby2.5-docUpgrade ruby2.5-stdlibUpgrade ruby2.5-doc-riUpgrade libruby2_5-2_5Upgrade ruby2.5-devel-extra | Oct 25, 2023 | Mar 31, 2023 |
| Ubuntu | — | Upgrade ruby2.5Upgrade libruby2.3 (Ubuntu Pro)Upgrade libruby2.5Upgrade libruby2.7Upgrade ruby3.1Upgrade ruby2.7Upgrade libruby3.1Upgrade ruby2.3 (Ubuntu Pro) | May 5, 2023 | Mar 31, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 31, 2023 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub