The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
A ReDoS issue was discovered in the URI component before 0.12.2 for Ruby. The URI parser mishandles invalid URLs that have specific characters. There is an increase in execution time for parsing strings to URI objects with rfc2396_parser.rb and rfc3986_parser.rb. NOTE: this issue exists becuse of an incomplete fix for CVE-2023-28755. Version 0.10.3 is also a fixed version.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rubygem-bson-docUpgrade rubygem-rexmlUpgrade rubygems-develUpgrade rubygem-typeprofUpgrade rubygem-mysql2-docUpgrade rubygem-rakeUpgrade rubygem-rdocUpgrade ruby-irbUpgrade rubygem-test-unitUpgrade rubygem-minitestUpgrade rubygem-xmlrpcUpgrade rubygem-bigdecimalUpgrade rubygem-net-telnetUpgrade rubygem-abrt-docUpgrade rubygem-io-consoleUpgrade rubygem-power_assertUpgrade rubygem-mongoUpgrade rubygem-psychUpgrade ruby-develUpgrade ruby-docUpgrade rubygem-pg-docUpgrade rubygem-pgUpgrade rubyUpgrade rubygem-bundler-docUpgrade rubygem-opensslUpgrade ruby-bundled-gemsUpgrade ruby-default-gemsUpgrade rubygem-mongo-docUpgrade rubygem-bsonUpgrade rubygem-jsonUpgrade rubygem-mysql2Upgrade rubygem-abrtUpgrade rubygem-bundlerUpgrade rubygem-irbUpgrade rubygem-rbsUpgrade rubygem-did_you_meanUpgrade rubygemsUpgrade ruby-libsUpgrade rubygem-rss | Mar 22, 2024 | Jun 29, 2023 |
| Amazon_linux_2023 | — | Upgrade ruby3.2-debugsourceUpgrade ruby3.2-rubygem-json-debuginfoUpgrade ruby3.2-libs-debuginfoUpgrade ruby3.2-default-gemsUpgrade ruby3.2-rubygem-typeprofUpgrade ruby3.2Upgrade ruby3.2-rubygems-develUpgrade ruby3.2-rubygem-bigdecimalUpgrade ruby3.2-bundled-gems-debuginfoUpgrade ruby3.2-rubygem-rdocUpgrade ruby3.2-rubygem-psychUpgrade ruby3.2-develUpgrade ruby3.2-rubygem-rexmlUpgrade ruby3.2-rubygem-jsonUpgrade ruby3.2-debuginfoUpgrade ruby3.2-rubygem-psych-debuginfoUpgrade ruby3.2-rubygem-irbUpgrade ruby3.2-bundled-gemsUpgrade ruby3.2-rubygemsUpgrade ruby3.2-rubygem-rbs-debuginfoUpgrade ruby3.2-rubygem-rakeUpgrade ruby3.2-rubygem-minitestUpgrade ruby3.2-rubygem-io-consoleUpgrade ruby3.2-rubygem-bigdecimal-debuginfoUpgrade ruby3.2-rubygem-rssUpgrade ruby3.2-rubygem-power_assertUpgrade ruby3.2-rubygem-test-unitUpgrade ruby3.2-libsUpgrade ruby3.2-rubygem-rbsUpgrade ruby3.2-rubygem-io-console-debuginfoUpgrade ruby3.2-rubygem-bundlerUpgrade ruby3.2-doc | Feb 17, 2025 | Jun 29, 2023 |
| Debian | — | Upgrade ruby2.7 | Sep 5, 2024 | Jun 29, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade rubyUpgrade ruby-helpUpgrade ruby-irb | Jan 10, 2024 | Jun 29, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade rubyUpgrade ruby-irbUpgrade ruby-help | Jan 10, 2024 | Jun 29, 2023 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Oct 8, 2024 |
| Oracle_linux | — | Upgrade rubygem-abrt-docUpgrade rubygem-bsonUpgrade rubygem-rbsUpgrade rubygem-xmlrpcUpgrade rubygem-psychUpgrade rubygem-rssUpgrade rubygem-jsonUpgrade rubygem-bundler-docUpgrade ruby-docUpgrade rubygem-pgUpgrade rubygem-mongo-docUpgrade rubyUpgrade rubygem-rexmlUpgrade rubygem-abrtUpgrade rubygem-typeprofUpgrade rubygem-mysql2Upgrade rubygem-test-unitUpgrade rubygem-net-telnetUpgrade ruby-libsUpgrade rubygemsUpgrade ruby-bundled-gemsUpgrade rubygem-mysql2-docUpgrade ruby-develUpgrade rubygem-rakeUpgrade rubygem-mongoUpgrade rubygems-develUpgrade ruby-irbUpgrade rubygem-bson-docUpgrade rubygem-bigdecimalUpgrade rubygem-irbUpgrade rubygem-io-consoleUpgrade rubygem-pg-docUpgrade ruby-default-gemsUpgrade rubygem-minitestUpgrade rubygem-bundlerUpgrade rubygem-power_assertUpgrade rubygem-did_you_meanUpgrade rubygem-rdocUpgrade rubygem-openssl | Mar 21, 2024 | Jun 29, 2023 |
| Redhat_linux | — | Upgrade ruby-irbUpgrade rubygem-bundler-docUpgrade rubygem-minitestUpgrade rubygem-mysql2-docUpgrade rubygemsUpgrade rubygem-rdocUpgrade rubygem-bson-debuginfoUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-bson-debugsourceUpgrade rubygem-power_assertUpgrade rubygem-pgUpgrade rubygems-develUpgrade rubygem-io-console-debuginfoUpgrade rubygem-mongoUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-typeprofUpgrade rubygem-net-telnetUpgrade rubygem-json-debuginfoUpgrade rubygem-abrt-docUpgrade ruby-libs-debuginfoUpgrade rubygem-pg-docUpgrade ruby-debugsourceUpgrade rubygem-bson-docUpgrade rubygem-bsonUpgrade rubygem-io-consoleUpgrade ruby-libsUpgrade rubygem-rbs-debuginfoUpgrade ruby-bundled-gems-debuginfoUpgrade rubygem-rbsUpgrade rubygem-rakeUpgrade rubygem-irbUpgrade rubygem-opensslUpgrade rubygem-jsonUpgrade rubygem-did_you_meanUpgrade rubygem-openssl-debuginfoUpgrade rubygem-psychUpgrade ruby-develUpgrade rubygem-bundlerNo solution existsUpgrade rubyUpgrade rubygem-xmlrpcUpgrade ruby-default-gemsUpgrade rubygem-mysql2Upgrade rubygem-test-unitUpgrade ruby-debuginfoUpgrade rubygem-mysql2-debuginfoUpgrade ruby-docUpgrade ruby-bundled-gemsUpgrade rubygem-rssUpgrade rubygem-pg-debugsourceUpgrade rubygem-mongo-docUpgrade rubygem-rexmlUpgrade rubygem-psych-debuginfoUpgrade rubygem-pg-debuginfoUpgrade rubygem-bigdecimalUpgrade rubygem-abrt | Mar 20, 2024 | Jun 29, 2023 |
| Rocky_linux | — | Upgrade rubygem-rbs-debuginfoUpgrade rubygem-bigdecimalUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-psych-debuginfoUpgrade rubygem-io-consoleUpgrade ruby-debugsourceUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-pg-debuginfoUpgrade ruby-develUpgrade rubygem-openssl-debuginfoUpgrade ruby-debuginfoUpgrade rubygem-bsonUpgrade rubygem-json-debuginfoUpgrade ruby-bundled-gems-debuginfoUpgrade ruby-libsUpgrade rubygem-bson-debugsourceUpgrade rubygem-jsonUpgrade rubygem-pg-debugsourceUpgrade rubygem-bigdecimal-debuginfoUpgrade ruby-bundled-gemsUpgrade rubygem-mysql2Upgrade rubygem-io-console-debuginfoUpgrade rubyUpgrade rubygem-pgUpgrade rubygem-psychUpgrade ruby-libs-debuginfoUpgrade rubygem-bson-debuginfoUpgrade rubygem-rbsUpgrade rubygem-openssl | Mar 28, 2024 | Jun 29, 2023 |
| Ubuntu | — | Upgrade ruby2.5 (Ubuntu Pro)Upgrade libruby2.3 (Ubuntu Pro)Upgrade ruby3.1Upgrade libruby2.5 (Ubuntu Pro)Upgrade libruby2.7Upgrade ruby2.7Upgrade ruby3.0Upgrade libruby3.0Upgrade libruby3.1Upgrade ruby-bundlerUpgrade ruby2.3 (Ubuntu Pro) | Jul 13, 2023 | Jun 29, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 29, 2023 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub