{ "document": { "aggregate_severity": { "text": "Medium" }, "category": "csaf_vex", "csaf_version": "2.0", "distribution": { "text": "TuxCare License Agreement", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Cloud Linux Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://tuxcare.com/contact/", "name": "TuxCare", "namespace": "https://tuxcare.com/" }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://security.tuxcare.com/csaf/v2/els_alt_ruby/el8/vex/2023/cve-2023-28756-els_alt_ruby-el8.json" } ], "tracking": { "current_release_date": "2026-03-18T17:09:06Z", "generator": { "date": "2026-03-18T17:09:06Z", "engine": { "name": "pyCSAF" } }, "id": "CVE-2023-28756-ELS_ALT_RUBY-EL8", "initial_release_date": "2023-03-31T04:15:00Z", "revision_history": [ { "date": "2023-03-31T04:15:00Z", "number": "1", "summary": "Initial version" }, { "date": "2026-03-18T17:09:06Z", "number": "2", "summary": "Official Publication" } ], "status": "final", "version": "2" }, "title": "Security update on CVE-2023-28756" }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Community Enterprise Operating System 8", "product": { "name": "Community Enterprise Operating System 8", "product_id": "CentOS-8", "product_identification_helper": { "cpe": "cpe:2.3:o:centos:centos:8:*:*:*:*:*:*:*" } } } ], "category": "product_family", "name": "Community Enterprise Operating System" } ], "category": "vendor", "name": "Cloud Linux Software, Inc." }, { "branches": [ { "branches": [ { "category": "product_version", "name": "alt-ruby27-doc-0:2.7.8-141.el8.noarch", "product": { "name": "alt-ruby27-doc-0:2.7.8-141.el8.noarch", "product_id": "alt-ruby27-doc-0:2.7.8-141.el8.noarch", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/alt-ruby27-doc@2.7.8-141.el8?arch=noarch&os_name=centos&os_version=8" } } }, { "category": "product_version", "name": "alt-ruby27-rubygem-irb-0:1.2.6-141.el8.noarch", "product": { "name": "alt-ruby27-rubygem-irb-0:1.2.6-141.el8.noarch", "product_id": "alt-ruby27-rubygem-irb-0:1.2.6-141.el8.noarch", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/alt-ruby27-rubygem-irb@1.2.6-141.el8?arch=noarch&os_name=centos&os_version=8" } } }, { "category": "product_version", "name": "alt-ruby27-rubygem-net-telnet-1:0.2.0-141.el8.noarch", "product": { "name": "alt-ruby27-rubygem-net-telnet-1:0.2.0-141.el8.noarch", "product_id": "alt-ruby27-rubygem-net-telnet-1:0.2.0-141.el8.noarch", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/alt-ruby27-rubygem-net-telnet@0.2.0-141.el8?arch=noarch&epoch=1&os_name=centos&os_version=8" } } }, { "category": "product_version", "name": "alt-ruby27-rubygem-bundler-0:2.2.24-141.el8.noarch", "product": { "name": "alt-ruby27-rubygem-bundler-0:2.2.24-141.el8.noarch", "product_id": "alt-ruby27-rubygem-bundler-0:2.2.24-141.el8.noarch", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/alt-ruby27-rubygem-bundler@2.2.24-141.el8?arch=noarch&os_name=centos&os_version=8" } } }, { "category": "product_version", "name": "alt-ruby27-rubygem-rdoc-0:6.2.1.1-141.el8.noarch", "product": { "name": "alt-ruby27-rubygem-rdoc-0:6.2.1.1-141.el8.noarch", "product_id": "alt-ruby27-rubygem-rdoc-0:6.2.1.1-141.el8.noarch", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/alt-ruby27-rubygem-rdoc@6.2.1.1-141.el8?arch=noarch&os_name=centos&os_version=8" } } }, { "category": "product_version", "name": "alt-ruby27-rubygem-minitest-0:5.13.0-141.el8.noarch", "product": { "name": "alt-ruby27-rubygem-minitest-0:5.13.0-141.el8.noarch", "product_id": "alt-ruby27-rubygem-minitest-0:5.13.0-141.el8.noarch", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/alt-ruby27-rubygem-minitest@5.13.0-141.el8?arch=noarch&os_name=centos&os_version=8" } } }, { "category": "product_version", "name": "alt-ruby27-rubygem-rake-0:13.0.1-141.el8.noarch", "product": { "name": "alt-ruby27-rubygem-rake-0:13.0.1-141.el8.noarch", "product_id": "alt-ruby27-rubygem-rake-0:13.0.1-141.el8.noarch", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/alt-ruby27-rubygem-rake@13.0.1-141.el8?arch=noarch&os_name=centos&os_version=8" } } }, { "category": "product_version", "name": "alt-ruby27-rubygem-power_assert-0:1.1.7-141.el8.noarch", "product": { "name": "alt-ruby27-rubygem-power_assert-0:1.1.7-141.el8.noarch", "product_id": "alt-ruby27-rubygem-power_assert-0:1.1.7-141.el8.noarch", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/alt-ruby27-rubygem-power_assert@1.1.7-141.el8?arch=noarch&os_name=centos&os_version=8" } } }, { "category": "product_version", "name": "alt-ruby27-rubygems-0:3.1.6-141.el8.noarch", "product": { "name": "alt-ruby27-rubygems-0:3.1.6-141.el8.noarch", "product_id": "alt-ruby27-rubygems-0:3.1.6-141.el8.noarch", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/alt-ruby27-rubygems@3.1.6-141.el8?arch=noarch&os_name=centos&os_version=8" } } }, { "category": "product_version", "name": "alt-ruby27-rubygem-test-unit-0:3.3.4-141.el8.noarch", "product": { "name": "alt-ruby27-rubygem-test-unit-0:3.3.4-141.el8.noarch", "product_id": "alt-ruby27-rubygem-test-unit-0:3.3.4-141.el8.noarch", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/alt-ruby27-rubygem-test-unit@3.3.4-141.el8?arch=noarch&os_name=centos&os_version=8" } } }, { "category": "product_version", "name": "alt-ruby27-rubygems-devel-0:3.1.6-141.el8.noarch", "product": { "name": "alt-ruby27-rubygems-devel-0:3.1.6-141.el8.noarch", "product_id": "alt-ruby27-rubygems-devel-0:3.1.6-141.el8.noarch", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/alt-ruby27-rubygems-devel@3.1.6-141.el8?arch=noarch&os_name=centos&os_version=8" } } }, { "category": "product_version", "name": "alt-ruby27-default-gems-0:2.7.8-141.el8.noarch", "product": { "name": "alt-ruby27-default-gems-0:2.7.8-141.el8.noarch", "product_id": "alt-ruby27-default-gems-0:2.7.8-141.el8.noarch", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/alt-ruby27-default-gems@2.7.8-141.el8?arch=noarch&os_name=centos&os_version=8" } } }, { "category": "product_version", "name": "alt-ruby27-rubygem-xmlrpc-0:0.3.0-141.el8.noarch", "product": { "name": "alt-ruby27-rubygem-xmlrpc-0:0.3.0-141.el8.noarch", "product_id": "alt-ruby27-rubygem-xmlrpc-0:0.3.0-141.el8.noarch", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/alt-ruby27-rubygem-xmlrpc@0.3.0-141.el8?arch=noarch&os_name=centos&os_version=8" } } } ], "category": "architecture", "name": "noarch" }, { "branches": [ { "category": "product_version", "name": "alt-ruby27-rubygem-openssl-0:2.1.4-141.el8.x86_64", "product": { "name": "alt-ruby27-rubygem-openssl-0:2.1.4-141.el8.x86_64", "product_id": "alt-ruby27-rubygem-openssl-0:2.1.4-141.el8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/alt-ruby27-rubygem-openssl@2.1.4-141.el8?arch=x86_64&os_name=centos&os_version=8" } } }, { "category": "product_version", "name": "alt-ruby27-0:2.7.8-141.el8.x86_64", "product": { "name": "alt-ruby27-0:2.7.8-141.el8.x86_64", "product_id": "alt-ruby27-0:2.7.8-141.el8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/alt-ruby27@2.7.8-141.el8?arch=x86_64&os_name=centos&os_version=8" } } }, { "category": "product_version", "name": "alt-ruby27-rubygem-psych-0:3.1.0-141.el8.x86_64", "product": { "name": "alt-ruby27-rubygem-psych-0:3.1.0-141.el8.x86_64", "product_id": "alt-ruby27-rubygem-psych-0:3.1.0-141.el8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/alt-ruby27-rubygem-psych@3.1.0-141.el8?arch=x86_64&os_name=centos&os_version=8" } } }, { "category": "product_version", "name": "alt-ruby27-rubygem-json-0:2.3.0-141.el8.x86_64", "product": { "name": "alt-ruby27-rubygem-json-0:2.3.0-141.el8.x86_64", "product_id": "alt-ruby27-rubygem-json-0:2.3.0-141.el8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/alt-ruby27-rubygem-json@2.3.0-141.el8?arch=x86_64&os_name=centos&os_version=8" } } }, { "category": "product_version", "name": "alt-ruby27-rubygem-bigdecimal-0:2.0.0-141.el8.x86_64", "product": { "name": "alt-ruby27-rubygem-bigdecimal-0:2.0.0-141.el8.x86_64", "product_id": "alt-ruby27-rubygem-bigdecimal-0:2.0.0-141.el8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/alt-ruby27-rubygem-bigdecimal@2.0.0-141.el8?arch=x86_64&os_name=centos&os_version=8" } } }, { "category": "product_version", "name": "alt-ruby27-rubygem-io-console-0:0.5.6-141.el8.x86_64", "product": { "name": "alt-ruby27-rubygem-io-console-0:0.5.6-141.el8.x86_64", "product_id": "alt-ruby27-rubygem-io-console-0:0.5.6-141.el8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/alt-ruby27-rubygem-io-console@0.5.6-141.el8?arch=x86_64&os_name=centos&os_version=8" } } }, { "category": "product_version", "name": "alt-ruby27-libs-0:2.7.8-141.el8.x86_64", "product": { "name": "alt-ruby27-libs-0:2.7.8-141.el8.x86_64", "product_id": "alt-ruby27-libs-0:2.7.8-141.el8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/alt-ruby27-libs@2.7.8-141.el8?arch=x86_64&os_name=centos&os_version=8" } } }, { "category": "product_version", "name": "alt-ruby27-devel-0:2.7.8-141.el8.x86_64", "product": { "name": "alt-ruby27-devel-0:2.7.8-141.el8.x86_64", "product_id": "alt-ruby27-devel-0:2.7.8-141.el8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/alt-ruby27-devel@2.7.8-141.el8?arch=x86_64&os_name=centos&os_version=8" } } } ], "category": "architecture", "name": "x86_64" } ], "category": "vendor", "name": "CloudLinux" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "alt-ruby27-doc-0:2.7.8-141.el8.noarch as a component of Community Enterprise Operating System 8", "product_id": "CentOS-8:alt-ruby27-doc-0:2.7.8-141.el8.noarch" }, "product_reference": "alt-ruby27-doc-0:2.7.8-141.el8.noarch", "relates_to_product_reference": "CentOS-8" }, { "category": "default_component_of", "full_product_name": { "name": "alt-ruby27-rubygem-irb-0:1.2.6-141.el8.noarch as a component of Community Enterprise Operating System 8", "product_id": "CentOS-8:alt-ruby27-rubygem-irb-0:1.2.6-141.el8.noarch" }, "product_reference": "alt-ruby27-rubygem-irb-0:1.2.6-141.el8.noarch", "relates_to_product_reference": "CentOS-8" }, { "category": "default_component_of", "full_product_name": { "name": "alt-ruby27-rubygem-openssl-0:2.1.4-141.el8.x86_64 as a component of Community Enterprise Operating System 8", "product_id": "CentOS-8:alt-ruby27-rubygem-openssl-0:2.1.4-141.el8.x86_64" }, "product_reference": "alt-ruby27-rubygem-openssl-0:2.1.4-141.el8.x86_64", "relates_to_product_reference": "CentOS-8" }, { "category": "default_component_of", "full_product_name": { "name": "alt-ruby27-rubygem-net-telnet-1:0.2.0-141.el8.noarch as a component of Community Enterprise Operating System 8", "product_id": "CentOS-8:alt-ruby27-rubygem-net-telnet-1:0.2.0-141.el8.noarch" }, "product_reference": "alt-ruby27-rubygem-net-telnet-1:0.2.0-141.el8.noarch", "relates_to_product_reference": "CentOS-8" }, { "category": "default_component_of", "full_product_name": { "name": "alt-ruby27-rubygem-bundler-0:2.2.24-141.el8.noarch as a component of Community Enterprise Operating System 8", "product_id": "CentOS-8:alt-ruby27-rubygem-bundler-0:2.2.24-141.el8.noarch" }, "product_reference": "alt-ruby27-rubygem-bundler-0:2.2.24-141.el8.noarch", "relates_to_product_reference": "CentOS-8" }, { "category": "default_component_of", "full_product_name": { "name": "alt-ruby27-rubygem-rdoc-0:6.2.1.1-141.el8.noarch as a component of Community Enterprise Operating System 8", "product_id": "CentOS-8:alt-ruby27-rubygem-rdoc-0:6.2.1.1-141.el8.noarch" }, "product_reference": "alt-ruby27-rubygem-rdoc-0:6.2.1.1-141.el8.noarch", "relates_to_product_reference": "CentOS-8" }, { "category": "default_component_of", "full_product_name": { "name": "alt-ruby27-0:2.7.8-141.el8.x86_64 as a component of Community Enterprise Operating System 8", "product_id": "CentOS-8:alt-ruby27-0:2.7.8-141.el8.x86_64" }, "product_reference": "alt-ruby27-0:2.7.8-141.el8.x86_64", "relates_to_product_reference": "CentOS-8" }, { "category": "default_component_of", "full_product_name": { "name": "alt-ruby27-rubygem-psych-0:3.1.0-141.el8.x86_64 as a component of Community Enterprise Operating System 8", "product_id": "CentOS-8:alt-ruby27-rubygem-psych-0:3.1.0-141.el8.x86_64" }, "product_reference": "alt-ruby27-rubygem-psych-0:3.1.0-141.el8.x86_64", "relates_to_product_reference": "CentOS-8" }, { "category": "default_component_of", "full_product_name": { "name": "alt-ruby27-rubygem-json-0:2.3.0-141.el8.x86_64 as a component of Community Enterprise Operating System 8", "product_id": "CentOS-8:alt-ruby27-rubygem-json-0:2.3.0-141.el8.x86_64" }, "product_reference": "alt-ruby27-rubygem-json-0:2.3.0-141.el8.x86_64", "relates_to_product_reference": "CentOS-8" }, { "category": "default_component_of", "full_product_name": { "name": "alt-ruby27-rubygem-minitest-0:5.13.0-141.el8.noarch as a component of Community Enterprise Operating System 8", "product_id": "CentOS-8:alt-ruby27-rubygem-minitest-0:5.13.0-141.el8.noarch" }, "product_reference": "alt-ruby27-rubygem-minitest-0:5.13.0-141.el8.noarch", "relates_to_product_reference": "CentOS-8" }, { "category": "default_component_of", "full_product_name": { "name": "alt-ruby27-rubygem-rake-0:13.0.1-141.el8.noarch as a component of Community Enterprise Operating System 8", "product_id": "CentOS-8:alt-ruby27-rubygem-rake-0:13.0.1-141.el8.noarch" }, "product_reference": "alt-ruby27-rubygem-rake-0:13.0.1-141.el8.noarch", "relates_to_product_reference": "CentOS-8" }, { "category": "default_component_of", "full_product_name": { "name": "alt-ruby27-rubygem-power_assert-0:1.1.7-141.el8.noarch as a component of Community Enterprise Operating System 8", "product_id": "CentOS-8:alt-ruby27-rubygem-power_assert-0:1.1.7-141.el8.noarch" }, "product_reference": "alt-ruby27-rubygem-power_assert-0:1.1.7-141.el8.noarch", "relates_to_product_reference": "CentOS-8" }, { "category": "default_component_of", "full_product_name": { "name": "alt-ruby27-rubygems-0:3.1.6-141.el8.noarch as a component of Community Enterprise Operating System 8", "product_id": "CentOS-8:alt-ruby27-rubygems-0:3.1.6-141.el8.noarch" }, "product_reference": "alt-ruby27-rubygems-0:3.1.6-141.el8.noarch", "relates_to_product_reference": "CentOS-8" }, { "category": "default_component_of", "full_product_name": { "name": "alt-ruby27-rubygem-bigdecimal-0:2.0.0-141.el8.x86_64 as a component of Community Enterprise Operating System 8", "product_id": "CentOS-8:alt-ruby27-rubygem-bigdecimal-0:2.0.0-141.el8.x86_64" }, "product_reference": "alt-ruby27-rubygem-bigdecimal-0:2.0.0-141.el8.x86_64", "relates_to_product_reference": "CentOS-8" }, { "category": "default_component_of", "full_product_name": { "name": "alt-ruby27-rubygem-test-unit-0:3.3.4-141.el8.noarch as a component of Community Enterprise Operating System 8", "product_id": "CentOS-8:alt-ruby27-rubygem-test-unit-0:3.3.4-141.el8.noarch" }, "product_reference": "alt-ruby27-rubygem-test-unit-0:3.3.4-141.el8.noarch", "relates_to_product_reference": "CentOS-8" }, { "category": "default_component_of", "full_product_name": { "name": "alt-ruby27-rubygems-devel-0:3.1.6-141.el8.noarch as a component of Community Enterprise Operating System 8", "product_id": "CentOS-8:alt-ruby27-rubygems-devel-0:3.1.6-141.el8.noarch" }, "product_reference": "alt-ruby27-rubygems-devel-0:3.1.6-141.el8.noarch", "relates_to_product_reference": "CentOS-8" }, { "category": "default_component_of", "full_product_name": { "name": "alt-ruby27-rubygem-io-console-0:0.5.6-141.el8.x86_64 as a component of Community Enterprise Operating System 8", "product_id": "CentOS-8:alt-ruby27-rubygem-io-console-0:0.5.6-141.el8.x86_64" }, "product_reference": "alt-ruby27-rubygem-io-console-0:0.5.6-141.el8.x86_64", "relates_to_product_reference": "CentOS-8" }, { "category": "default_component_of", "full_product_name": { "name": "alt-ruby27-libs-0:2.7.8-141.el8.x86_64 as a component of Community Enterprise Operating System 8", "product_id": "CentOS-8:alt-ruby27-libs-0:2.7.8-141.el8.x86_64" }, "product_reference": "alt-ruby27-libs-0:2.7.8-141.el8.x86_64", "relates_to_product_reference": "CentOS-8" }, { "category": "default_component_of", "full_product_name": { "name": "alt-ruby27-default-gems-0:2.7.8-141.el8.noarch as a component of Community Enterprise Operating System 8", "product_id": "CentOS-8:alt-ruby27-default-gems-0:2.7.8-141.el8.noarch" }, "product_reference": "alt-ruby27-default-gems-0:2.7.8-141.el8.noarch", "relates_to_product_reference": "CentOS-8" }, { "category": "default_component_of", "full_product_name": { "name": "alt-ruby27-rubygem-xmlrpc-0:0.3.0-141.el8.noarch as a component of Community Enterprise Operating System 8", "product_id": "CentOS-8:alt-ruby27-rubygem-xmlrpc-0:0.3.0-141.el8.noarch" }, "product_reference": "alt-ruby27-rubygem-xmlrpc-0:0.3.0-141.el8.noarch", "relates_to_product_reference": "CentOS-8" }, { "category": "default_component_of", "full_product_name": { "name": "alt-ruby27-devel-0:2.7.8-141.el8.x86_64 as a component of Community Enterprise Operating System 8", "product_id": "CentOS-8:alt-ruby27-devel-0:2.7.8-141.el8.x86_64" }, "product_reference": "alt-ruby27-devel-0:2.7.8-141.el8.x86_64", "relates_to_product_reference": "CentOS-8" } ] }, "vulnerabilities": [ { "cve": "CVE-2023-28756", "cwe": { "id": "CWE-1333", "name": "Inefficient Regular Expression Complexity" }, "notes": [ { "category": "description", "text": "A ReDoS issue was discovered in the Time component through 0.2.1 in Ruby through 3.2.1. The Time parser mishandles invalid URLs that have specific characters. It causes an increase in execution time for parsing strings to Time objects. The fixed versions are 0.1.1 and 0.2.2.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-8:alt-ruby27-0:2.7.8-141.el8.x86_64", "CentOS-8:alt-ruby27-default-gems-0:2.7.8-141.el8.noarch", "CentOS-8:alt-ruby27-devel-0:2.7.8-141.el8.x86_64", "CentOS-8:alt-ruby27-doc-0:2.7.8-141.el8.noarch", "CentOS-8:alt-ruby27-libs-0:2.7.8-141.el8.x86_64", "CentOS-8:alt-ruby27-rubygem-bigdecimal-0:2.0.0-141.el8.x86_64", "CentOS-8:alt-ruby27-rubygem-bundler-0:2.2.24-141.el8.noarch", "CentOS-8:alt-ruby27-rubygem-io-console-0:0.5.6-141.el8.x86_64", "CentOS-8:alt-ruby27-rubygem-irb-0:1.2.6-141.el8.noarch", "CentOS-8:alt-ruby27-rubygem-json-0:2.3.0-141.el8.x86_64", "CentOS-8:alt-ruby27-rubygem-minitest-0:5.13.0-141.el8.noarch", "CentOS-8:alt-ruby27-rubygem-net-telnet-1:0.2.0-141.el8.noarch", "CentOS-8:alt-ruby27-rubygem-openssl-0:2.1.4-141.el8.x86_64", "CentOS-8:alt-ruby27-rubygem-power_assert-0:1.1.7-141.el8.noarch", "CentOS-8:alt-ruby27-rubygem-psych-0:3.1.0-141.el8.x86_64", "CentOS-8:alt-ruby27-rubygem-rake-0:13.0.1-141.el8.noarch", "CentOS-8:alt-ruby27-rubygem-rdoc-0:6.2.1.1-141.el8.noarch", "CentOS-8:alt-ruby27-rubygem-test-unit-0:3.3.4-141.el8.noarch", "CentOS-8:alt-ruby27-rubygem-xmlrpc-0:0.3.0-141.el8.noarch", "CentOS-8:alt-ruby27-rubygems-0:3.1.6-141.el8.noarch", "CentOS-8:alt-ruby27-rubygems-devel-0:3.1.6-141.el8.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-lang/cve/CVE-2023-28756" }, { "category": "external", "summary": "https://github.com/ruby/time/releases/", "url": "https://github.com/ruby/time/releases/" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2023/04/msg00033.html", "url": "https://lists.debian.org/debian-lts-announce/2023/04/msg00033.html" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FFZANOQA4RYX7XCB42OO3P24DQKWHEKA/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FFZANOQA4RYX7XCB42OO3P24DQKWHEKA/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/G76GZG3RAGYF4P75YY7J7TGYAU7Z5E2T/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/G76GZG3RAGYF4P75YY7J7TGYAU7Z5E2T/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WMIOPLBAAM3FEQNAXA2L7BDKOGSVUT5Z/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WMIOPLBAAM3FEQNAXA2L7BDKOGSVUT5Z/" }, { "category": "external", "summary": "https://security.gentoo.org/glsa/202401-27", "url": "https://security.gentoo.org/glsa/202401-27" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20230526-0004/", "url": "https://security.netapp.com/advisory/ntap-20230526-0004/" }, { "category": "external", "summary": "https://www.ruby-lang.org/en/downloads/releases/", "url": "https://www.ruby-lang.org/en/downloads/releases/" }, { "category": "external", "summary": "https://www.ruby-lang.org/en/news/2022/12/25/ruby-3-2-0-released/", "url": "https://www.ruby-lang.org/en/news/2022/12/25/ruby-3-2-0-released/" }, { "category": "external", "summary": "https://www.ruby-lang.org/en/news/2023/03/30/redos-in-time-cve-2023-28756/", "url": "https://www.ruby-lang.org/en/news/2023/03/30/redos-in-time-cve-2023-28756/" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2024/09/msg00000.html", "url": "https://lists.debian.org/debian-lts-announce/2024/09/msg00000.html" } ], "release_date": "2023-03-31T04:15:00Z", "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.1" }, "products": [ "CentOS-8:alt-ruby27-0:2.7.8-141.el8.x86_64", "CentOS-8:alt-ruby27-default-gems-0:2.7.8-141.el8.noarch", "CentOS-8:alt-ruby27-devel-0:2.7.8-141.el8.x86_64", "CentOS-8:alt-ruby27-doc-0:2.7.8-141.el8.noarch", "CentOS-8:alt-ruby27-libs-0:2.7.8-141.el8.x86_64", "CentOS-8:alt-ruby27-rubygem-bigdecimal-0:2.0.0-141.el8.x86_64", "CentOS-8:alt-ruby27-rubygem-bundler-0:2.2.24-141.el8.noarch", "CentOS-8:alt-ruby27-rubygem-io-console-0:0.5.6-141.el8.x86_64", "CentOS-8:alt-ruby27-rubygem-irb-0:1.2.6-141.el8.noarch", "CentOS-8:alt-ruby27-rubygem-json-0:2.3.0-141.el8.x86_64", "CentOS-8:alt-ruby27-rubygem-minitest-0:5.13.0-141.el8.noarch", "CentOS-8:alt-ruby27-rubygem-net-telnet-1:0.2.0-141.el8.noarch", "CentOS-8:alt-ruby27-rubygem-openssl-0:2.1.4-141.el8.x86_64", "CentOS-8:alt-ruby27-rubygem-power_assert-0:1.1.7-141.el8.noarch", "CentOS-8:alt-ruby27-rubygem-psych-0:3.1.0-141.el8.x86_64", "CentOS-8:alt-ruby27-rubygem-rake-0:13.0.1-141.el8.noarch", "CentOS-8:alt-ruby27-rubygem-rdoc-0:6.2.1.1-141.el8.noarch", "CentOS-8:alt-ruby27-rubygem-test-unit-0:3.3.4-141.el8.noarch", "CentOS-8:alt-ruby27-rubygem-xmlrpc-0:0.3.0-141.el8.noarch", "CentOS-8:alt-ruby27-rubygems-0:3.1.6-141.el8.noarch", "CentOS-8:alt-ruby27-rubygems-devel-0:3.1.6-141.el8.noarch" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] } ] }