libruby3_1-3_1-3.1.4-1.1 on GA media SUSE Patch security@suse.de SUSE Security Team openSUSE-SU-2024:12849 Final 1 1 2024-06-17T21:45:33Z current 2024-06-17T21:45:33Z 2024-06-17T21:45:33Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z libruby3_1-3_1-3.1.4-1.1 on GA media These are all security issues fixed in the libruby3_1-3_1-3.1.4-1.1 package on the GA media of openSUSE Tumbleweed. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). openSUSE-Tumbleweed-2024-12849 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) E-Mail link for openSUSE-SU-2024:12849 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://www.suse.com/security/cve/CVE-2023-28755/ SUSE CVE CVE-2023-28755 page openSUSE Tumbleweed libruby3_1-3_1-3.1.4-1.1 ruby3.1-3.1.4-1.1 ruby3.1-devel-3.1.4-1.1 ruby3.1-devel-extra-3.1.4-1.1 ruby3.1-doc-3.1.4-1.1 ruby3.1-doc-ri-3.1.4-1.1 libruby3_1-3_1-3.1.4-1.1 as a component of openSUSE Tumbleweed ruby3.1-3.1.4-1.1 as a component of openSUSE Tumbleweed ruby3.1-devel-3.1.4-1.1 as a component of openSUSE Tumbleweed ruby3.1-devel-extra-3.1.4-1.1 as a component of openSUSE Tumbleweed ruby3.1-doc-3.1.4-1.1 as a component of openSUSE Tumbleweed ruby3.1-doc-ri-3.1.4-1.1 as a component of openSUSE Tumbleweed A ReDoS issue was discovered in the URI component through 0.12.0 in Ruby through 3.2.1. The URI parser mishandles invalid URLs that have specific characters. It causes an increase in execution time for parsing strings to URI objects. The fixed versions are 0.12.1, 0.11.1, 0.10.2 and 0.10.0.1. CVE-2023-28755 openSUSE Tumbleweed:libruby3_1-3_1-3.1.4-1.1 openSUSE Tumbleweed:ruby3.1-3.1.4-1.1 openSUSE Tumbleweed:ruby3.1-devel-3.1.4-1.1 openSUSE Tumbleweed:ruby3.1-devel-extra-3.1.4-1.1 openSUSE Tumbleweed:ruby3.1-doc-3.1.4-1.1 openSUSE Tumbleweed:ruby3.1-doc-ri-3.1.4-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2023-28755.html CVE-2023-28755 https://bugzilla.suse.com/1209891 SUSE Bug 1209891 https://bugzilla.suse.com/1212890 SUSE Bug 1212890