Lucene search

K
oraclelinuxOracleLinuxELSA-2023-3821
HistoryJul 08, 2023 - 12:00 a.m.

ruby:2.7 security, bug fix, and enhancement update

2023-07-0800:00:00
linux.oracle.com
18
ruby 2.7.8
http response splitting
redos vulnerabilities
ruby gems
bug fixes
security update

EPSS

0.005

Percentile

77.3%

ruby
[2.7.8-139]

  • Upgrade to Ruby 2.7.8.
    Resolves: rhbz#2149262
  • Fix HTTP response splitting in CGI.
    Resolves: CVE-2021-33621
  • Fix ReDoS vulnerability in URI.
    Resolves: CVE-2023-28755
  • Fix ReDoS vulnerability in Time.
    Resolves: CVE-2023-28756
    rubygem-abrt
    [0.4.0-1]
  • Update to abrt 0.4.0.
    Resolves: rhbz#1842476
    rubygem-bson
    [4.8.1-1]
  • Update to bson 4.8.1 by merging Fedora master branch (commit: 0741dbc)
    Resolves: rhbz#1817135
    rubygem-mongo
    [2.11.3-1]
  • Update to mongo 2.11.3 by merging Fedora master branch (commit: c3f83c2)
    Resolves: rhbz#1817135
    rubygem-mysql2
    [0.5.3-2]
  • Update by merging Fedora rawhide branch (commit: 81e2cc9)
  • Fix Mysql2::Result test for Ruby 3.1.
  • Remove gem_make.out and mkmf.log files from the binary RPM package.
  • Fix test assertion for mariadb-connector-c.
    Related: rhbz#2063772
    [0.5.3-1]
  • New upstream release 0.5.3 by merging Fedora master branch (commit: 674d475)
    Resolves: rhbz#1817135
    [0.5.2-1]
  • New upstream release 0.5.2 by merging Fedora master branch (commit: cc15309)
    Resolves: rhbz#1672575
    rubygem-pg
    [1.2.3-1]
  • Update to pg 1.2.3 by merging Fedora master branch (commit: 5db4d26)
    Resolves: rhbz#1817135