RHSA-2024:3500
Vulnerability from csaf_opensuse - Published: 2024-05-30 00:00 - Updated: 2026-09-20 11:39Summary
security update for ruby
Severity
Low
Notes
Title of the patch: security update for ruby
Description of the patch: This security update provides a functional equivalent of RHSA-2024:3500.
The original Red Hat(R) advisory is available from the Red Hat web site at
https://access.redhat.com/errata/RHSA-2024:3500.
Patchnames: RHSA-2024:3500
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
7.5 (High)
Affected products
Recommended
35 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Liberty Linux 8:ruby-0:3.0.7-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:ruby-0:3.0.7-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:ruby-default-gems-0:3.0.7-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:ruby-devel-0:3.0.7-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:ruby-devel-0:3.0.7-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:ruby-doc-0:3.0.7-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:ruby-libs-0:3.0.7-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:ruby-libs-0:3.0.7-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:rubygem-abrt-0:0.4.0-1.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:rubygem-abrt-doc-0:0.4.0-1.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:rubygem-bigdecimal-0:3.0.0-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:rubygem-bigdecimal-0:3.0.0-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:rubygem-bundler-0:2.2.33-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:rubygem-io-console-0:0.5.7-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:rubygem-io-console-0:0.5.7-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:rubygem-irb-0:1.3.5-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:rubygem-json-0:2.5.1-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:rubygem-json-0:2.5.1-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:rubygem-minitest-0:5.14.2-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:rubygem-mysql2-0:0.5.3-2.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:rubygem-mysql2-doc-0:0.5.3-2.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:rubygem-pg-0:1.2.3-1.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:rubygem-pg-doc-0:1.2.3-1.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:rubygem-power_assert-0:1.2.1-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:rubygem-psych-0:3.3.2-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:rubygem-psych-0:3.3.2-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:rubygem-rake-0:13.0.3-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:rubygem-rbs-0:1.4.0-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:rubygem-rdoc-0:6.3.4.1-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:rubygem-rexml-0:3.2.5-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:rubygem-rss-0:0.2.9-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:rubygem-test-unit-0:3.3.7-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:rubygem-typeprof-0:0.15.2-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:rubygems-0:3.2.33-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:rubygems-devel-0:3.2.33-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0 | — |
Vendor Fix
|
Threats
Impact
important
5.3 (Medium)
Affected products
Recommended
35 products, the same list as for
CVE-2021-33621
Threats
Impact
moderate
6.5 (Medium)
Affected products
Recommended
35 products, the same list as for
CVE-2021-33621
Threats
Impact
moderate
Affected products
Recommended
35 products, the same list as for
CVE-2021-33621
Threats
Impact
low
4.5 (Medium)
Affected products
Recommended
35 products, the same list as for
CVE-2021-33621
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
35 products, the same list as for
CVE-2021-33621
Threats
Impact
moderate
References
22 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "Low"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "security update for ruby",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This security update provides a functional equivalent of RHSA-2024:3500.\nThe original Red Hat(R) advisory is available from the Red Hat web site at\nhttps://access.redhat.com/errata/RHSA-2024:3500.\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "RHSA-2024:3500",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/rhsa-2024_3500.json"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-33621 page",
"url": "https://www.suse.com/security/cve/CVE-2021-33621/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-28755 page",
"url": "https://www.suse.com/security/cve/CVE-2023-28755/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-28756 page",
"url": "https://www.suse.com/security/cve/CVE-2023-28756/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-27280 page",
"url": "https://www.suse.com/security/cve/CVE-2024-27280/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-27281 page",
"url": "https://www.suse.com/security/cve/CVE-2024-27281/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-27282 page",
"url": "https://www.suse.com/security/cve/CVE-2024-27282/"
}
],
"title": "security update for ruby",
"tracking": {
"current_release_date": "2026-09-20T11:39:56Z",
"generator": {
"date": "2024-05-30T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "RHSA-2024:3500",
"initial_release_date": "2024-05-30T00:00:00Z",
"revision_history": [
{
"date": "2024-05-30T00:00:00Z",
"number": "1",
"summary": "Current version"
},
{
"date": "2026-09-20T11:39:56Z",
"number": "2",
"summary": "unknown changes"
}
],
"status": "final",
"version": "2"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "ruby-0:3.0.7-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"product": {
"name": "ruby-0:3.0.7-143.module+el8.10.0+21858+d19f3934.i686 (ruby:3.0)",
"product_id": "ruby-0:3.0.7-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"product_identification_helper": {
"cpe": "cpe:2.3:a:ruby-lang:ruby:3.0.7:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/ruby@3.0.7-143.module+el8.10.0+21858+d19f3934?arch=i686\u0026rpmmod=ruby:3.0:8000020240530182102:rhel8\u0026upstream=ruby-0:3.0.7-143.module+el8.10.0+21858+d19f3934.src.rpm"
}
}
},
{
"category": "product_version",
"name": "ruby-devel-0:3.0.7-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"product": {
"name": "ruby-devel-0:3.0.7-143.module+el8.10.0+21858+d19f3934.i686 (ruby:3.0)",
"product_id": "ruby-devel-0:3.0.7-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"product_identification_helper": {
"cpe": "cpe:2.3:a:ruby-lang:ruby:3.0.7:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/ruby-devel@3.0.7-143.module+el8.10.0+21858+d19f3934?arch=i686\u0026rpmmod=ruby:3.0:8000020240530182102:rhel8\u0026upstream=ruby-0:3.0.7-143.module+el8.10.0+21858+d19f3934.src.rpm"
}
}
},
{
"category": "product_version",
"name": "ruby-libs-0:3.0.7-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"product": {
"name": "ruby-libs-0:3.0.7-143.module+el8.10.0+21858+d19f3934.i686 (ruby:3.0)",
"product_id": "ruby-libs-0:3.0.7-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"product_identification_helper": {
"purl": "pkg:rpm/suse/ruby-libs@3.0.7-143.module+el8.10.0+21858+d19f3934?arch=i686\u0026rpmmod=ruby:3.0:8000020240530182102:rhel8"
}
}
},
{
"category": "product_version",
"name": "rubygem-bigdecimal-0:3.0.0-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"product": {
"name": "rubygem-bigdecimal-0:3.0.0-143.module+el8.10.0+21858+d19f3934.i686 (ruby:3.0)",
"product_id": "rubygem-bigdecimal-0:3.0.0-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"product_identification_helper": {
"purl": "pkg:rpm/suse/rubygem-bigdecimal@3.0.0-143.module+el8.10.0+21858+d19f3934?arch=i686\u0026rpmmod=ruby:3.0:8000020240530182102:rhel8"
}
}
},
{
"category": "product_version",
"name": "rubygem-io-console-0:0.5.7-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"product": {
"name": "rubygem-io-console-0:0.5.7-143.module+el8.10.0+21858+d19f3934.i686 (ruby:3.0)",
"product_id": "rubygem-io-console-0:0.5.7-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"product_identification_helper": {
"purl": "pkg:rpm/suse/rubygem-io-console@0.5.7-143.module+el8.10.0+21858+d19f3934?arch=i686\u0026rpmmod=ruby:3.0:8000020240530182102:rhel8"
}
}
},
{
"category": "product_version",
"name": "rubygem-json-0:2.5.1-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"product": {
"name": "rubygem-json-0:2.5.1-143.module+el8.10.0+21858+d19f3934.i686 (ruby:3.0)",
"product_id": "rubygem-json-0:2.5.1-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"product_identification_helper": {
"purl": "pkg:rpm/suse/rubygem-json@2.5.1-143.module+el8.10.0+21858+d19f3934?arch=i686\u0026rpmmod=ruby:3.0:8000020240530182102:rhel8\u0026upstream=rubygem-json-0:2.5.1-143.module+el8.10.0+21858+d19f3934.src.rpm"
}
}
},
{
"category": "product_version",
"name": "rubygem-psych-0:3.3.2-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"product": {
"name": "rubygem-psych-0:3.3.2-143.module+el8.10.0+21858+d19f3934.i686 (ruby:3.0)",
"product_id": "rubygem-psych-0:3.3.2-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"product_identification_helper": {
"purl": "pkg:rpm/suse/rubygem-psych@3.3.2-143.module+el8.10.0+21858+d19f3934?arch=i686\u0026rpmmod=ruby:3.0:8000020240530182102:rhel8"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "ruby-default-gems-0:3.0.7-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"product": {
"name": "ruby-default-gems-0:3.0.7-143.module+el8.10.0+21858+d19f3934.noarch (ruby:3.0)",
"product_id": "ruby-default-gems-0:3.0.7-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"product_identification_helper": {
"purl": "pkg:rpm/suse/ruby-default-gems@3.0.7-143.module+el8.10.0+21858+d19f3934?arch=noarch\u0026rpmmod=ruby:3.0:8000020240530182102:rhel8"
}
}
},
{
"category": "product_version",
"name": "ruby-doc-0:3.0.7-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"product": {
"name": "ruby-doc-0:3.0.7-143.module+el8.10.0+21858+d19f3934.noarch (ruby:3.0)",
"product_id": "ruby-doc-0:3.0.7-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"product_identification_helper": {
"purl": "pkg:rpm/suse/ruby-doc@3.0.7-143.module+el8.10.0+21858+d19f3934?arch=noarch\u0026rpmmod=ruby:3.0:8000020240530182102:rhel8"
}
}
},
{
"category": "product_version",
"name": "rubygem-abrt-0:0.4.0-1.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"product": {
"name": "rubygem-abrt-0:0.4.0-1.module+el8.10.0+21858+d19f3934.noarch (ruby:3.0)",
"product_id": "rubygem-abrt-0:0.4.0-1.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"product_identification_helper": {
"purl": "pkg:rpm/suse/rubygem-abrt@0.4.0-1.module+el8.10.0+21858+d19f3934?arch=noarch\u0026rpmmod=ruby:3.0:8000020240530182102:rhel8"
}
}
},
{
"category": "product_version",
"name": "rubygem-abrt-doc-0:0.4.0-1.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"product": {
"name": "rubygem-abrt-doc-0:0.4.0-1.module+el8.10.0+21858+d19f3934.noarch (ruby:3.0)",
"product_id": "rubygem-abrt-doc-0:0.4.0-1.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"product_identification_helper": {
"purl": "pkg:rpm/suse/rubygem-abrt-doc@0.4.0-1.module+el8.10.0+21858+d19f3934?arch=noarch\u0026rpmmod=ruby:3.0:8000020240530182102:rhel8"
}
}
},
{
"category": "product_version",
"name": "rubygem-bundler-0:2.2.33-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"product": {
"name": "rubygem-bundler-0:2.2.33-143.module+el8.10.0+21858+d19f3934.noarch (ruby:3.0)",
"product_id": "rubygem-bundler-0:2.2.33-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"product_identification_helper": {
"cpe": "cpe:2.3:a:bundler:bundler:2.2.33:*:*:*:*:ruby:*:*",
"purl": "pkg:rpm/suse/rubygem-bundler@2.2.33-143.module+el8.10.0+21858+d19f3934?arch=noarch\u0026rpmmod=ruby:3.0:8000020240530182102:rhel8\u0026upstream=rubygem-bundler-0:2.2.33-143.module+el8.10.0+21858+d19f3934.src.rpm"
}
}
},
{
"category": "product_version",
"name": "rubygem-irb-0:1.3.5-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"product": {
"name": "rubygem-irb-0:1.3.5-143.module+el8.10.0+21858+d19f3934.noarch (ruby:3.0)",
"product_id": "rubygem-irb-0:1.3.5-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"product_identification_helper": {
"purl": "pkg:rpm/suse/rubygem-irb@1.3.5-143.module+el8.10.0+21858+d19f3934?arch=noarch\u0026rpmmod=ruby:3.0:8000020240530182102:rhel8"
}
}
},
{
"category": "product_version",
"name": "rubygem-minitest-0:5.14.2-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"product": {
"name": "rubygem-minitest-0:5.14.2-143.module+el8.10.0+21858+d19f3934.noarch (ruby:3.0)",
"product_id": "rubygem-minitest-0:5.14.2-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"product_identification_helper": {
"purl": "pkg:rpm/suse/rubygem-minitest@5.14.2-143.module+el8.10.0+21858+d19f3934?arch=noarch\u0026rpmmod=ruby:3.0:8000020240530182102:rhel8"
}
}
},
{
"category": "product_version",
"name": "rubygem-mysql2-doc-0:0.5.3-2.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"product": {
"name": "rubygem-mysql2-doc-0:0.5.3-2.module+el8.10.0+21858+d19f3934.noarch (ruby:3.0)",
"product_id": "rubygem-mysql2-doc-0:0.5.3-2.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"product_identification_helper": {
"purl": "pkg:rpm/suse/rubygem-mysql2-doc@0.5.3-2.module+el8.10.0+21858+d19f3934?arch=noarch\u0026rpmmod=ruby:3.0:8000020240530182102:rhel8"
}
}
},
{
"category": "product_version",
"name": "rubygem-pg-doc-0:1.2.3-1.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"product": {
"name": "rubygem-pg-doc-0:1.2.3-1.module+el8.10.0+21858+d19f3934.noarch (ruby:3.0)",
"product_id": "rubygem-pg-doc-0:1.2.3-1.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"product_identification_helper": {
"purl": "pkg:rpm/suse/rubygem-pg-doc@1.2.3-1.module+el8.10.0+21858+d19f3934?arch=noarch\u0026rpmmod=ruby:3.0:8000020240530182102:rhel8"
}
}
},
{
"category": "product_version",
"name": "rubygem-power_assert-0:1.2.1-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"product": {
"name": "rubygem-power_assert-0:1.2.1-143.module+el8.10.0+21858+d19f3934.noarch (ruby:3.0)",
"product_id": "rubygem-power_assert-0:1.2.1-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"product_identification_helper": {
"purl": "pkg:rpm/suse/rubygem-power_assert@1.2.1-143.module+el8.10.0+21858+d19f3934?arch=noarch\u0026rpmmod=ruby:3.0:8000020240530182102:rhel8"
}
}
},
{
"category": "product_version",
"name": "rubygem-rake-0:13.0.3-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"product": {
"name": "rubygem-rake-0:13.0.3-143.module+el8.10.0+21858+d19f3934.noarch (ruby:3.0)",
"product_id": "rubygem-rake-0:13.0.3-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"product_identification_helper": {
"cpe": "cpe:2.3:a:ruby-lang:rake:13.0.3:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/rubygem-rake@13.0.3-143.module+el8.10.0+21858+d19f3934?arch=noarch\u0026rpmmod=ruby:3.0:8000020240530182102:rhel8\u0026upstream=rubygem-rake-0:13.0.3-143.module+el8.10.0+21858+d19f3934.src.rpm"
}
}
},
{
"category": "product_version",
"name": "rubygem-rbs-0:1.4.0-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"product": {
"name": "rubygem-rbs-0:1.4.0-143.module+el8.10.0+21858+d19f3934.noarch (ruby:3.0)",
"product_id": "rubygem-rbs-0:1.4.0-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"product_identification_helper": {
"purl": "pkg:rpm/suse/rubygem-rbs@1.4.0-143.module+el8.10.0+21858+d19f3934?arch=noarch\u0026rpmmod=ruby:3.0:8000020240530182102:rhel8"
}
}
},
{
"category": "product_version",
"name": "rubygem-rdoc-0:6.3.4.1-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"product": {
"name": "rubygem-rdoc-0:6.3.4.1-143.module+el8.10.0+21858+d19f3934.noarch (ruby:3.0)",
"product_id": "rubygem-rdoc-0:6.3.4.1-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"product_identification_helper": {
"cpe": "cpe:2.3:a:ruby-lang:rdoc:6.3.4.1:*:*:*:*:ruby:*:*",
"purl": "pkg:rpm/suse/rubygem-rdoc@6.3.4.1-143.module+el8.10.0+21858+d19f3934?arch=noarch\u0026rpmmod=ruby:3.0:8000020240530182102:rhel8\u0026upstream=rubygem-rdoc-0:6.3.4.1-143.module+el8.10.0+21858+d19f3934.src.rpm"
}
}
},
{
"category": "product_version",
"name": "rubygem-rexml-0:3.2.5-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"product": {
"name": "rubygem-rexml-0:3.2.5-143.module+el8.10.0+21858+d19f3934.noarch (ruby:3.0)",
"product_id": "rubygem-rexml-0:3.2.5-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"product_identification_helper": {
"purl": "pkg:rpm/suse/rubygem-rexml@3.2.5-143.module+el8.10.0+21858+d19f3934?arch=noarch\u0026rpmmod=ruby:3.0:8000020240530182102:rhel8"
}
}
},
{
"category": "product_version",
"name": "rubygem-rss-0:0.2.9-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"product": {
"name": "rubygem-rss-0:0.2.9-143.module+el8.10.0+21858+d19f3934.noarch (ruby:3.0)",
"product_id": "rubygem-rss-0:0.2.9-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"product_identification_helper": {
"purl": "pkg:rpm/suse/rubygem-rss@0.2.9-143.module+el8.10.0+21858+d19f3934?arch=noarch\u0026rpmmod=ruby:3.0:8000020240530182102:rhel8"
}
}
},
{
"category": "product_version",
"name": "rubygem-test-unit-0:3.3.7-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"product": {
"name": "rubygem-test-unit-0:3.3.7-143.module+el8.10.0+21858+d19f3934.noarch (ruby:3.0)",
"product_id": "rubygem-test-unit-0:3.3.7-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"product_identification_helper": {
"purl": "pkg:rpm/suse/rubygem-test-unit@3.3.7-143.module+el8.10.0+21858+d19f3934?arch=noarch\u0026rpmmod=ruby:3.0:8000020240530182102:rhel8\u0026upstream=rubygem-test-unit-0:3.3.7-143.module+el8.10.0+21858+d19f3934.src.rpm"
}
}
},
{
"category": "product_version",
"name": "rubygem-typeprof-0:0.15.2-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"product": {
"name": "rubygem-typeprof-0:0.15.2-143.module+el8.10.0+21858+d19f3934.noarch (ruby:3.0)",
"product_id": "rubygem-typeprof-0:0.15.2-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"product_identification_helper": {
"purl": "pkg:rpm/suse/rubygem-typeprof@0.15.2-143.module+el8.10.0+21858+d19f3934?arch=noarch\u0026rpmmod=ruby:3.0:8000020240530182102:rhel8"
}
}
},
{
"category": "product_version",
"name": "rubygems-0:3.2.33-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"product": {
"name": "rubygems-0:3.2.33-143.module+el8.10.0+21858+d19f3934.noarch (ruby:3.0)",
"product_id": "rubygems-0:3.2.33-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"product_identification_helper": {
"cpe": "cpe:2.3:a:rubygems:rubygems:3.2.33:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/rubygems@3.2.33-143.module+el8.10.0+21858+d19f3934?arch=noarch\u0026rpmmod=ruby:3.0:8000020240530182102:rhel8\u0026upstream=rubygems-0:3.2.33-143.module+el8.10.0+21858+d19f3934.src.rpm"
}
}
},
{
"category": "product_version",
"name": "rubygems-devel-0:3.2.33-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"product": {
"name": "rubygems-devel-0:3.2.33-143.module+el8.10.0+21858+d19f3934.noarch (ruby:3.0)",
"product_id": "rubygems-devel-0:3.2.33-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"product_identification_helper": {
"purl": "pkg:rpm/suse/rubygems-devel@3.2.33-143.module+el8.10.0+21858+d19f3934?arch=noarch\u0026rpmmod=ruby:3.0:8000020240530182102:rhel8"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "ruby-0:3.0.7-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"product": {
"name": "ruby-0:3.0.7-143.module+el8.10.0+21858+d19f3934.x86_64 (ruby:3.0)",
"product_id": "ruby-0:3.0.7-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"product_identification_helper": {
"cpe": "cpe:2.3:a:ruby-lang:ruby:3.0.7:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/ruby@3.0.7-143.module+el8.10.0+21858+d19f3934?arch=x86_64\u0026rpmmod=ruby:3.0:8000020240530182102:rhel8\u0026upstream=ruby-0:3.0.7-143.module+el8.10.0+21858+d19f3934.src.rpm"
}
}
},
{
"category": "product_version",
"name": "ruby-devel-0:3.0.7-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"product": {
"name": "ruby-devel-0:3.0.7-143.module+el8.10.0+21858+d19f3934.x86_64 (ruby:3.0)",
"product_id": "ruby-devel-0:3.0.7-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"product_identification_helper": {
"cpe": "cpe:2.3:a:ruby-lang:ruby:3.0.7:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/ruby-devel@3.0.7-143.module+el8.10.0+21858+d19f3934?arch=x86_64\u0026rpmmod=ruby:3.0:8000020240530182102:rhel8\u0026upstream=ruby-0:3.0.7-143.module+el8.10.0+21858+d19f3934.src.rpm"
}
}
},
{
"category": "product_version",
"name": "ruby-libs-0:3.0.7-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"product": {
"name": "ruby-libs-0:3.0.7-143.module+el8.10.0+21858+d19f3934.x86_64 (ruby:3.0)",
"product_id": "ruby-libs-0:3.0.7-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"product_identification_helper": {
"purl": "pkg:rpm/suse/ruby-libs@3.0.7-143.module+el8.10.0+21858+d19f3934?arch=x86_64\u0026rpmmod=ruby:3.0:8000020240530182102:rhel8"
}
}
},
{
"category": "product_version",
"name": "rubygem-bigdecimal-0:3.0.0-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"product": {
"name": "rubygem-bigdecimal-0:3.0.0-143.module+el8.10.0+21858+d19f3934.x86_64 (ruby:3.0)",
"product_id": "rubygem-bigdecimal-0:3.0.0-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"product_identification_helper": {
"purl": "pkg:rpm/suse/rubygem-bigdecimal@3.0.0-143.module+el8.10.0+21858+d19f3934?arch=x86_64\u0026rpmmod=ruby:3.0:8000020240530182102:rhel8"
}
}
},
{
"category": "product_version",
"name": "rubygem-io-console-0:0.5.7-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"product": {
"name": "rubygem-io-console-0:0.5.7-143.module+el8.10.0+21858+d19f3934.x86_64 (ruby:3.0)",
"product_id": "rubygem-io-console-0:0.5.7-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"product_identification_helper": {
"purl": "pkg:rpm/suse/rubygem-io-console@0.5.7-143.module+el8.10.0+21858+d19f3934?arch=x86_64\u0026rpmmod=ruby:3.0:8000020240530182102:rhel8"
}
}
},
{
"category": "product_version",
"name": "rubygem-json-0:2.5.1-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"product": {
"name": "rubygem-json-0:2.5.1-143.module+el8.10.0+21858+d19f3934.x86_64 (ruby:3.0)",
"product_id": "rubygem-json-0:2.5.1-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"product_identification_helper": {
"purl": "pkg:rpm/suse/rubygem-json@2.5.1-143.module+el8.10.0+21858+d19f3934?arch=x86_64\u0026rpmmod=ruby:3.0:8000020240530182102:rhel8\u0026upstream=rubygem-json-0:2.5.1-143.module+el8.10.0+21858+d19f3934.src.rpm"
}
}
},
{
"category": "product_version",
"name": "rubygem-mysql2-0:0.5.3-2.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"product": {
"name": "rubygem-mysql2-0:0.5.3-2.module+el8.10.0+21858+d19f3934.x86_64 (ruby:3.0)",
"product_id": "rubygem-mysql2-0:0.5.3-2.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"product_identification_helper": {
"purl": "pkg:rpm/suse/rubygem-mysql2@0.5.3-2.module+el8.10.0+21858+d19f3934?arch=x86_64\u0026rpmmod=ruby:3.0:8000020240530182102:rhel8"
}
}
},
{
"category": "product_version",
"name": "rubygem-pg-0:1.2.3-1.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"product": {
"name": "rubygem-pg-0:1.2.3-1.module+el8.10.0+21858+d19f3934.x86_64 (ruby:3.0)",
"product_id": "rubygem-pg-0:1.2.3-1.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"product_identification_helper": {
"purl": "pkg:rpm/suse/rubygem-pg@1.2.3-1.module+el8.10.0+21858+d19f3934?arch=x86_64\u0026rpmmod=ruby:3.0:8000020240530182102:rhel8\u0026upstream=rubygem-pg-0:1.2.3-1.module+el8.10.0+21858+d19f3934.src.rpm"
}
}
},
{
"category": "product_version",
"name": "rubygem-psych-0:3.3.2-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"product": {
"name": "rubygem-psych-0:3.3.2-143.module+el8.10.0+21858+d19f3934.x86_64 (ruby:3.0)",
"product_id": "rubygem-psych-0:3.3.2-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"product_identification_helper": {
"purl": "pkg:rpm/suse/rubygem-psych@3.3.2-143.module+el8.10.0+21858+d19f3934?arch=x86_64\u0026rpmmod=ruby:3.0:8000020240530182102:rhel8"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Liberty Linux 8",
"product": {
"name": "SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sll:8"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby-0:3.0.7-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:ruby-0:3.0.7-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0"
},
"product_reference": "ruby-0:3.0.7-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby-0:3.0.7-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:ruby-0:3.0.7-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0"
},
"product_reference": "ruby-0:3.0.7-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby-default-gems-0:3.0.7-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:ruby-default-gems-0:3.0.7-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0"
},
"product_reference": "ruby-default-gems-0:3.0.7-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby-devel-0:3.0.7-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:ruby-devel-0:3.0.7-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0"
},
"product_reference": "ruby-devel-0:3.0.7-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby-devel-0:3.0.7-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:ruby-devel-0:3.0.7-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0"
},
"product_reference": "ruby-devel-0:3.0.7-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby-doc-0:3.0.7-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:ruby-doc-0:3.0.7-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0"
},
"product_reference": "ruby-doc-0:3.0.7-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby-libs-0:3.0.7-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:ruby-libs-0:3.0.7-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0"
},
"product_reference": "ruby-libs-0:3.0.7-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby-libs-0:3.0.7-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:ruby-libs-0:3.0.7-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0"
},
"product_reference": "ruby-libs-0:3.0.7-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-abrt-0:0.4.0-1.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:rubygem-abrt-0:0.4.0-1.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0"
},
"product_reference": "rubygem-abrt-0:0.4.0-1.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-abrt-doc-0:0.4.0-1.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:rubygem-abrt-doc-0:0.4.0-1.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0"
},
"product_reference": "rubygem-abrt-doc-0:0.4.0-1.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-bigdecimal-0:3.0.0-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:rubygem-bigdecimal-0:3.0.0-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0"
},
"product_reference": "rubygem-bigdecimal-0:3.0.0-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-bigdecimal-0:3.0.0-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:rubygem-bigdecimal-0:3.0.0-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0"
},
"product_reference": "rubygem-bigdecimal-0:3.0.0-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-bundler-0:2.2.33-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:rubygem-bundler-0:2.2.33-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0"
},
"product_reference": "rubygem-bundler-0:2.2.33-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-io-console-0:0.5.7-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:rubygem-io-console-0:0.5.7-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0"
},
"product_reference": "rubygem-io-console-0:0.5.7-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-io-console-0:0.5.7-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:rubygem-io-console-0:0.5.7-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0"
},
"product_reference": "rubygem-io-console-0:0.5.7-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-irb-0:1.3.5-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:rubygem-irb-0:1.3.5-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0"
},
"product_reference": "rubygem-irb-0:1.3.5-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-json-0:2.5.1-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:rubygem-json-0:2.5.1-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0"
},
"product_reference": "rubygem-json-0:2.5.1-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-json-0:2.5.1-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:rubygem-json-0:2.5.1-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0"
},
"product_reference": "rubygem-json-0:2.5.1-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-minitest-0:5.14.2-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:rubygem-minitest-0:5.14.2-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0"
},
"product_reference": "rubygem-minitest-0:5.14.2-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-mysql2-0:0.5.3-2.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:rubygem-mysql2-0:0.5.3-2.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0"
},
"product_reference": "rubygem-mysql2-0:0.5.3-2.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-mysql2-doc-0:0.5.3-2.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:rubygem-mysql2-doc-0:0.5.3-2.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0"
},
"product_reference": "rubygem-mysql2-doc-0:0.5.3-2.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-pg-0:1.2.3-1.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:rubygem-pg-0:1.2.3-1.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0"
},
"product_reference": "rubygem-pg-0:1.2.3-1.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-pg-doc-0:1.2.3-1.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:rubygem-pg-doc-0:1.2.3-1.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0"
},
"product_reference": "rubygem-pg-doc-0:1.2.3-1.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-power_assert-0:1.2.1-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:rubygem-power_assert-0:1.2.1-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0"
},
"product_reference": "rubygem-power_assert-0:1.2.1-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-psych-0:3.3.2-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:rubygem-psych-0:3.3.2-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0"
},
"product_reference": "rubygem-psych-0:3.3.2-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-psych-0:3.3.2-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:rubygem-psych-0:3.3.2-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0"
},
"product_reference": "rubygem-psych-0:3.3.2-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-rake-0:13.0.3-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:rubygem-rake-0:13.0.3-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0"
},
"product_reference": "rubygem-rake-0:13.0.3-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-rbs-0:1.4.0-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:rubygem-rbs-0:1.4.0-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0"
},
"product_reference": "rubygem-rbs-0:1.4.0-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-rdoc-0:6.3.4.1-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:rubygem-rdoc-0:6.3.4.1-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0"
},
"product_reference": "rubygem-rdoc-0:6.3.4.1-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-rexml-0:3.2.5-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:rubygem-rexml-0:3.2.5-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0"
},
"product_reference": "rubygem-rexml-0:3.2.5-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-rss-0:0.2.9-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:rubygem-rss-0:0.2.9-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0"
},
"product_reference": "rubygem-rss-0:0.2.9-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-test-unit-0:3.3.7-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:rubygem-test-unit-0:3.3.7-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0"
},
"product_reference": "rubygem-test-unit-0:3.3.7-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-typeprof-0:0.15.2-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:rubygem-typeprof-0:0.15.2-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0"
},
"product_reference": "rubygem-typeprof-0:0.15.2-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygems-0:3.2.33-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:rubygems-0:3.2.33-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0"
},
"product_reference": "rubygems-0:3.2.33-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygems-devel-0:3.2.33-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:rubygems-devel-0:3.2.33-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0"
},
"product_reference": "rubygems-devel-0:3.2.33-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"relates_to_product_reference": "SUSE Liberty Linux 8"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2021-33621",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-33621"
}
],
"notes": [
{
"category": "general",
"text": "The cgi gem before 0.1.0.2, 0.2.x before 0.2.2, and 0.3.x before 0.3.5 for Ruby allows HTTP response splitting. This is relevant to applications that use untrusted user input either to generate an HTTP response or to create a CGI::Cookie object.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:ruby-0:3.0.7-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"SUSE Liberty Linux 8:ruby-0:3.0.7-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:ruby-default-gems-0:3.0.7-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:ruby-devel-0:3.0.7-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"SUSE Liberty Linux 8:ruby-devel-0:3.0.7-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:ruby-doc-0:3.0.7-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:ruby-libs-0:3.0.7-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"SUSE Liberty Linux 8:ruby-libs-0:3.0.7-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-abrt-0:0.4.0-1.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-abrt-doc-0:0.4.0-1.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-bigdecimal-0:3.0.0-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-bigdecimal-0:3.0.0-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-bundler-0:2.2.33-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-io-console-0:0.5.7-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-io-console-0:0.5.7-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-irb-0:1.3.5-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-json-0:2.5.1-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-json-0:2.5.1-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-minitest-0:5.14.2-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-mysql2-0:0.5.3-2.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-mysql2-doc-0:0.5.3-2.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-pg-0:1.2.3-1.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-pg-doc-0:1.2.3-1.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-power_assert-0:1.2.1-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-psych-0:3.3.2-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-psych-0:3.3.2-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-rake-0:13.0.3-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-rbs-0:1.4.0-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-rdoc-0:6.3.4.1-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-rexml-0:3.2.5-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-rss-0:0.2.9-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-test-unit-0:3.3.7-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-typeprof-0:0.15.2-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygems-0:3.2.33-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygems-devel-0:3.2.33-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-33621",
"url": "https://www.suse.com/security/cve/CVE-2021-33621"
},
{
"category": "external",
"summary": "SUSE Bug 1205726 for CVE-2021-33621",
"url": "https://bugzilla.suse.com/1205726"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:ruby-0:3.0.7-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"SUSE Liberty Linux 8:ruby-0:3.0.7-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:ruby-default-gems-0:3.0.7-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:ruby-devel-0:3.0.7-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"SUSE Liberty Linux 8:ruby-devel-0:3.0.7-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:ruby-doc-0:3.0.7-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:ruby-libs-0:3.0.7-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"SUSE Liberty Linux 8:ruby-libs-0:3.0.7-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-abrt-0:0.4.0-1.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-abrt-doc-0:0.4.0-1.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-bigdecimal-0:3.0.0-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-bigdecimal-0:3.0.0-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-bundler-0:2.2.33-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-io-console-0:0.5.7-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-io-console-0:0.5.7-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-irb-0:1.3.5-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-json-0:2.5.1-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-json-0:2.5.1-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-minitest-0:5.14.2-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-mysql2-0:0.5.3-2.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-mysql2-doc-0:0.5.3-2.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-pg-0:1.2.3-1.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-pg-doc-0:1.2.3-1.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-power_assert-0:1.2.1-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-psych-0:3.3.2-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-psych-0:3.3.2-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-rake-0:13.0.3-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-rbs-0:1.4.0-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-rdoc-0:6.3.4.1-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-rexml-0:3.2.5-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-rss-0:0.2.9-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-test-unit-0:3.3.7-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-typeprof-0:0.15.2-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygems-0:3.2.33-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygems-devel-0:3.2.33-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:ruby-0:3.0.7-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"SUSE Liberty Linux 8:ruby-0:3.0.7-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:ruby-default-gems-0:3.0.7-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:ruby-devel-0:3.0.7-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"SUSE Liberty Linux 8:ruby-devel-0:3.0.7-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:ruby-doc-0:3.0.7-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:ruby-libs-0:3.0.7-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"SUSE Liberty Linux 8:ruby-libs-0:3.0.7-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-abrt-0:0.4.0-1.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-abrt-doc-0:0.4.0-1.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-bigdecimal-0:3.0.0-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-bigdecimal-0:3.0.0-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-bundler-0:2.2.33-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-io-console-0:0.5.7-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-io-console-0:0.5.7-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-irb-0:1.3.5-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-json-0:2.5.1-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-json-0:2.5.1-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-minitest-0:5.14.2-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-mysql2-0:0.5.3-2.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-mysql2-doc-0:0.5.3-2.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-pg-0:1.2.3-1.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-pg-doc-0:1.2.3-1.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-power_assert-0:1.2.1-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-psych-0:3.3.2-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-psych-0:3.3.2-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-rake-0:13.0.3-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-rbs-0:1.4.0-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-rdoc-0:6.3.4.1-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-rexml-0:3.2.5-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-rss-0:0.2.9-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-test-unit-0:3.3.7-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-typeprof-0:0.15.2-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygems-0:3.2.33-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygems-devel-0:3.2.33-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-05-30T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-33621"
},
{
"cve": "CVE-2023-28755",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-28755"
}
],
"notes": [
{
"category": "general",
"text": "A ReDoS issue was discovered in the URI component through 0.12.0 in Ruby through 3.2.1. The URI parser mishandles invalid URLs that have specific characters. It causes an increase in execution time for parsing strings to URI objects. The fixed versions are 0.12.1, 0.11.1, 0.10.2 and 0.10.0.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:ruby-0:3.0.7-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"SUSE Liberty Linux 8:ruby-0:3.0.7-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:ruby-default-gems-0:3.0.7-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:ruby-devel-0:3.0.7-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"SUSE Liberty Linux 8:ruby-devel-0:3.0.7-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:ruby-doc-0:3.0.7-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:ruby-libs-0:3.0.7-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"SUSE Liberty Linux 8:ruby-libs-0:3.0.7-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-abrt-0:0.4.0-1.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-abrt-doc-0:0.4.0-1.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-bigdecimal-0:3.0.0-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-bigdecimal-0:3.0.0-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-bundler-0:2.2.33-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-io-console-0:0.5.7-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-io-console-0:0.5.7-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-irb-0:1.3.5-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-json-0:2.5.1-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-json-0:2.5.1-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-minitest-0:5.14.2-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-mysql2-0:0.5.3-2.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-mysql2-doc-0:0.5.3-2.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-pg-0:1.2.3-1.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-pg-doc-0:1.2.3-1.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-power_assert-0:1.2.1-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-psych-0:3.3.2-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-psych-0:3.3.2-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-rake-0:13.0.3-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-rbs-0:1.4.0-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-rdoc-0:6.3.4.1-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-rexml-0:3.2.5-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-rss-0:0.2.9-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-test-unit-0:3.3.7-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-typeprof-0:0.15.2-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygems-0:3.2.33-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygems-devel-0:3.2.33-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-28755",
"url": "https://www.suse.com/security/cve/CVE-2023-28755"
},
{
"category": "external",
"summary": "SUSE Bug 1209891 for CVE-2023-28755",
"url": "https://bugzilla.suse.com/1209891"
},
{
"category": "external",
"summary": "SUSE Bug 1212890 for CVE-2023-28755",
"url": "https://bugzilla.suse.com/1212890"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:ruby-0:3.0.7-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"SUSE Liberty Linux 8:ruby-0:3.0.7-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:ruby-default-gems-0:3.0.7-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:ruby-devel-0:3.0.7-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"SUSE Liberty Linux 8:ruby-devel-0:3.0.7-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:ruby-doc-0:3.0.7-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:ruby-libs-0:3.0.7-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"SUSE Liberty Linux 8:ruby-libs-0:3.0.7-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-abrt-0:0.4.0-1.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-abrt-doc-0:0.4.0-1.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-bigdecimal-0:3.0.0-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-bigdecimal-0:3.0.0-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-bundler-0:2.2.33-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-io-console-0:0.5.7-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-io-console-0:0.5.7-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-irb-0:1.3.5-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-json-0:2.5.1-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-json-0:2.5.1-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-minitest-0:5.14.2-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-mysql2-0:0.5.3-2.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-mysql2-doc-0:0.5.3-2.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-pg-0:1.2.3-1.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-pg-doc-0:1.2.3-1.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-power_assert-0:1.2.1-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-psych-0:3.3.2-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-psych-0:3.3.2-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-rake-0:13.0.3-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-rbs-0:1.4.0-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-rdoc-0:6.3.4.1-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-rexml-0:3.2.5-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-rss-0:0.2.9-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-test-unit-0:3.3.7-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-typeprof-0:0.15.2-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygems-0:3.2.33-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygems-devel-0:3.2.33-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:ruby-0:3.0.7-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"SUSE Liberty Linux 8:ruby-0:3.0.7-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:ruby-default-gems-0:3.0.7-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:ruby-devel-0:3.0.7-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"SUSE Liberty Linux 8:ruby-devel-0:3.0.7-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:ruby-doc-0:3.0.7-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:ruby-libs-0:3.0.7-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"SUSE Liberty Linux 8:ruby-libs-0:3.0.7-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-abrt-0:0.4.0-1.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-abrt-doc-0:0.4.0-1.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-bigdecimal-0:3.0.0-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-bigdecimal-0:3.0.0-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-bundler-0:2.2.33-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-io-console-0:0.5.7-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-io-console-0:0.5.7-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-irb-0:1.3.5-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-json-0:2.5.1-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-json-0:2.5.1-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-minitest-0:5.14.2-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-mysql2-0:0.5.3-2.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-mysql2-doc-0:0.5.3-2.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-pg-0:1.2.3-1.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-pg-doc-0:1.2.3-1.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-power_assert-0:1.2.1-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-psych-0:3.3.2-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-psych-0:3.3.2-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-rake-0:13.0.3-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-rbs-0:1.4.0-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-rdoc-0:6.3.4.1-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-rexml-0:3.2.5-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-rss-0:0.2.9-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-test-unit-0:3.3.7-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-typeprof-0:0.15.2-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygems-0:3.2.33-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygems-devel-0:3.2.33-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-05-30T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2023-28755"
},
{
"cve": "CVE-2023-28756",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-28756"
}
],
"notes": [
{
"category": "general",
"text": "A ReDoS issue was discovered in the Time component through 0.2.1 in Ruby through 3.2.1. The Time parser mishandles invalid URLs that have specific characters. It causes an increase in execution time for parsing strings to Time objects. The fixed versions are 0.1.1 and 0.2.2.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:ruby-0:3.0.7-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"SUSE Liberty Linux 8:ruby-0:3.0.7-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:ruby-default-gems-0:3.0.7-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:ruby-devel-0:3.0.7-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"SUSE Liberty Linux 8:ruby-devel-0:3.0.7-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:ruby-doc-0:3.0.7-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:ruby-libs-0:3.0.7-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"SUSE Liberty Linux 8:ruby-libs-0:3.0.7-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-abrt-0:0.4.0-1.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-abrt-doc-0:0.4.0-1.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-bigdecimal-0:3.0.0-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-bigdecimal-0:3.0.0-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-bundler-0:2.2.33-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-io-console-0:0.5.7-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-io-console-0:0.5.7-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-irb-0:1.3.5-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-json-0:2.5.1-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-json-0:2.5.1-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-minitest-0:5.14.2-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-mysql2-0:0.5.3-2.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-mysql2-doc-0:0.5.3-2.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-pg-0:1.2.3-1.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-pg-doc-0:1.2.3-1.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-power_assert-0:1.2.1-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-psych-0:3.3.2-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-psych-0:3.3.2-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-rake-0:13.0.3-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-rbs-0:1.4.0-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-rdoc-0:6.3.4.1-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-rexml-0:3.2.5-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-rss-0:0.2.9-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-test-unit-0:3.3.7-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-typeprof-0:0.15.2-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygems-0:3.2.33-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygems-devel-0:3.2.33-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-28756",
"url": "https://www.suse.com/security/cve/CVE-2023-28756"
},
{
"category": "external",
"summary": "SUSE Bug 1209967 for CVE-2023-28756",
"url": "https://bugzilla.suse.com/1209967"
},
{
"category": "external",
"summary": "SUSE Bug 1212739 for CVE-2023-28756",
"url": "https://bugzilla.suse.com/1212739"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:ruby-0:3.0.7-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"SUSE Liberty Linux 8:ruby-0:3.0.7-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:ruby-default-gems-0:3.0.7-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:ruby-devel-0:3.0.7-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"SUSE Liberty Linux 8:ruby-devel-0:3.0.7-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:ruby-doc-0:3.0.7-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:ruby-libs-0:3.0.7-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"SUSE Liberty Linux 8:ruby-libs-0:3.0.7-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-abrt-0:0.4.0-1.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-abrt-doc-0:0.4.0-1.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-bigdecimal-0:3.0.0-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-bigdecimal-0:3.0.0-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-bundler-0:2.2.33-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-io-console-0:0.5.7-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-io-console-0:0.5.7-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-irb-0:1.3.5-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-json-0:2.5.1-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-json-0:2.5.1-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-minitest-0:5.14.2-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-mysql2-0:0.5.3-2.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-mysql2-doc-0:0.5.3-2.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-pg-0:1.2.3-1.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-pg-doc-0:1.2.3-1.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-power_assert-0:1.2.1-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-psych-0:3.3.2-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-psych-0:3.3.2-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-rake-0:13.0.3-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-rbs-0:1.4.0-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-rdoc-0:6.3.4.1-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-rexml-0:3.2.5-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-rss-0:0.2.9-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-test-unit-0:3.3.7-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-typeprof-0:0.15.2-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygems-0:3.2.33-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygems-devel-0:3.2.33-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:ruby-0:3.0.7-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"SUSE Liberty Linux 8:ruby-0:3.0.7-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:ruby-default-gems-0:3.0.7-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:ruby-devel-0:3.0.7-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"SUSE Liberty Linux 8:ruby-devel-0:3.0.7-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:ruby-doc-0:3.0.7-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:ruby-libs-0:3.0.7-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"SUSE Liberty Linux 8:ruby-libs-0:3.0.7-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-abrt-0:0.4.0-1.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-abrt-doc-0:0.4.0-1.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-bigdecimal-0:3.0.0-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-bigdecimal-0:3.0.0-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-bundler-0:2.2.33-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-io-console-0:0.5.7-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-io-console-0:0.5.7-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-irb-0:1.3.5-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-json-0:2.5.1-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-json-0:2.5.1-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-minitest-0:5.14.2-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-mysql2-0:0.5.3-2.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-mysql2-doc-0:0.5.3-2.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-pg-0:1.2.3-1.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-pg-doc-0:1.2.3-1.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-power_assert-0:1.2.1-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-psych-0:3.3.2-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-psych-0:3.3.2-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-rake-0:13.0.3-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-rbs-0:1.4.0-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-rdoc-0:6.3.4.1-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-rexml-0:3.2.5-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-rss-0:0.2.9-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-test-unit-0:3.3.7-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-typeprof-0:0.15.2-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygems-0:3.2.33-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygems-devel-0:3.2.33-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-05-30T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2023-28756"
},
{
"cve": "CVE-2024-27280",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-27280"
}
],
"notes": [
{
"category": "general",
"text": "A buffer-overread issue was discovered in StringIO 3.0.1, as distributed in Ruby 3.0.x through 3.0.6 and 3.1.x through 3.1.4. The ungetbyte and ungetc methods on a StringIO can read past the end of a string, and a subsequent call to StringIO.gets may return the memory value. 3.0.3 is the main fixed version; however, for Ruby 3.0 users, a fixed version is stringio 3.0.1.1, and for Ruby 3.1 users, a fixed version is stringio 3.0.1.2.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:ruby-0:3.0.7-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"SUSE Liberty Linux 8:ruby-0:3.0.7-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:ruby-default-gems-0:3.0.7-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:ruby-devel-0:3.0.7-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"SUSE Liberty Linux 8:ruby-devel-0:3.0.7-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:ruby-doc-0:3.0.7-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:ruby-libs-0:3.0.7-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"SUSE Liberty Linux 8:ruby-libs-0:3.0.7-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-abrt-0:0.4.0-1.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-abrt-doc-0:0.4.0-1.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-bigdecimal-0:3.0.0-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-bigdecimal-0:3.0.0-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-bundler-0:2.2.33-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-io-console-0:0.5.7-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-io-console-0:0.5.7-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-irb-0:1.3.5-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-json-0:2.5.1-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-json-0:2.5.1-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-minitest-0:5.14.2-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-mysql2-0:0.5.3-2.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-mysql2-doc-0:0.5.3-2.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-pg-0:1.2.3-1.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-pg-doc-0:1.2.3-1.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-power_assert-0:1.2.1-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-psych-0:3.3.2-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-psych-0:3.3.2-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-rake-0:13.0.3-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-rbs-0:1.4.0-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-rdoc-0:6.3.4.1-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-rexml-0:3.2.5-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-rss-0:0.2.9-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-test-unit-0:3.3.7-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-typeprof-0:0.15.2-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygems-0:3.2.33-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygems-devel-0:3.2.33-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-27280",
"url": "https://www.suse.com/security/cve/CVE-2024-27280"
},
{
"category": "external",
"summary": "SUSE Bug 1221851 for CVE-2024-27280",
"url": "https://bugzilla.suse.com/1221851"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:ruby-0:3.0.7-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"SUSE Liberty Linux 8:ruby-0:3.0.7-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:ruby-default-gems-0:3.0.7-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:ruby-devel-0:3.0.7-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"SUSE Liberty Linux 8:ruby-devel-0:3.0.7-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:ruby-doc-0:3.0.7-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:ruby-libs-0:3.0.7-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"SUSE Liberty Linux 8:ruby-libs-0:3.0.7-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-abrt-0:0.4.0-1.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-abrt-doc-0:0.4.0-1.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-bigdecimal-0:3.0.0-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-bigdecimal-0:3.0.0-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-bundler-0:2.2.33-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-io-console-0:0.5.7-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-io-console-0:0.5.7-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-irb-0:1.3.5-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-json-0:2.5.1-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-json-0:2.5.1-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-minitest-0:5.14.2-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-mysql2-0:0.5.3-2.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-mysql2-doc-0:0.5.3-2.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-pg-0:1.2.3-1.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-pg-doc-0:1.2.3-1.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-power_assert-0:1.2.1-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-psych-0:3.3.2-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-psych-0:3.3.2-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-rake-0:13.0.3-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-rbs-0:1.4.0-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-rdoc-0:6.3.4.1-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-rexml-0:3.2.5-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-rss-0:0.2.9-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-test-unit-0:3.3.7-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-typeprof-0:0.15.2-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygems-0:3.2.33-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygems-devel-0:3.2.33-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:ruby-0:3.0.7-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"SUSE Liberty Linux 8:ruby-0:3.0.7-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:ruby-default-gems-0:3.0.7-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:ruby-devel-0:3.0.7-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"SUSE Liberty Linux 8:ruby-devel-0:3.0.7-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:ruby-doc-0:3.0.7-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:ruby-libs-0:3.0.7-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"SUSE Liberty Linux 8:ruby-libs-0:3.0.7-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-abrt-0:0.4.0-1.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-abrt-doc-0:0.4.0-1.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-bigdecimal-0:3.0.0-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-bigdecimal-0:3.0.0-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-bundler-0:2.2.33-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-io-console-0:0.5.7-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-io-console-0:0.5.7-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-irb-0:1.3.5-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-json-0:2.5.1-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-json-0:2.5.1-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-minitest-0:5.14.2-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-mysql2-0:0.5.3-2.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-mysql2-doc-0:0.5.3-2.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-pg-0:1.2.3-1.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-pg-doc-0:1.2.3-1.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-power_assert-0:1.2.1-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-psych-0:3.3.2-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-psych-0:3.3.2-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-rake-0:13.0.3-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-rbs-0:1.4.0-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-rdoc-0:6.3.4.1-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-rexml-0:3.2.5-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-rss-0:0.2.9-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-test-unit-0:3.3.7-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-typeprof-0:0.15.2-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygems-0:3.2.33-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygems-devel-0:3.2.33-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-05-30T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2024-27280"
},
{
"cve": "CVE-2024-27281",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-27281"
}
],
"notes": [
{
"category": "general",
"text": "An issue was discovered in RDoc 6.3.3 through 6.6.2, as distributed in Ruby 3.x through 3.3.0. When parsing .rdoc_options (used for configuration in RDoc) as a YAML file, object injection and resultant remote code execution are possible because there are no restrictions on the classes that can be restored. (When loading the documentation cache, object injection and resultant remote code execution are also possible if there were a crafted cache.) The main fixed version is 6.6.3.1. For Ruby 3.0 users, a fixed version is rdoc 6.3.4.1. For Ruby 3.1 users, a fixed version is rdoc 6.4.1.1. For Ruby 3.2 users, a fixed version is rdoc 6.5.1.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:ruby-0:3.0.7-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"SUSE Liberty Linux 8:ruby-0:3.0.7-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:ruby-default-gems-0:3.0.7-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:ruby-devel-0:3.0.7-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"SUSE Liberty Linux 8:ruby-devel-0:3.0.7-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:ruby-doc-0:3.0.7-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:ruby-libs-0:3.0.7-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"SUSE Liberty Linux 8:ruby-libs-0:3.0.7-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-abrt-0:0.4.0-1.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-abrt-doc-0:0.4.0-1.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-bigdecimal-0:3.0.0-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-bigdecimal-0:3.0.0-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-bundler-0:2.2.33-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-io-console-0:0.5.7-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-io-console-0:0.5.7-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-irb-0:1.3.5-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-json-0:2.5.1-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-json-0:2.5.1-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-minitest-0:5.14.2-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-mysql2-0:0.5.3-2.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-mysql2-doc-0:0.5.3-2.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-pg-0:1.2.3-1.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-pg-doc-0:1.2.3-1.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-power_assert-0:1.2.1-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-psych-0:3.3.2-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-psych-0:3.3.2-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-rake-0:13.0.3-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-rbs-0:1.4.0-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-rdoc-0:6.3.4.1-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-rexml-0:3.2.5-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-rss-0:0.2.9-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-test-unit-0:3.3.7-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-typeprof-0:0.15.2-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygems-0:3.2.33-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygems-devel-0:3.2.33-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-27281",
"url": "https://www.suse.com/security/cve/CVE-2024-27281"
},
{
"category": "external",
"summary": "SUSE Bug 1221852 for CVE-2024-27281",
"url": "https://bugzilla.suse.com/1221852"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:ruby-0:3.0.7-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"SUSE Liberty Linux 8:ruby-0:3.0.7-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:ruby-default-gems-0:3.0.7-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:ruby-devel-0:3.0.7-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"SUSE Liberty Linux 8:ruby-devel-0:3.0.7-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:ruby-doc-0:3.0.7-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:ruby-libs-0:3.0.7-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"SUSE Liberty Linux 8:ruby-libs-0:3.0.7-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-abrt-0:0.4.0-1.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-abrt-doc-0:0.4.0-1.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-bigdecimal-0:3.0.0-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-bigdecimal-0:3.0.0-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-bundler-0:2.2.33-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-io-console-0:0.5.7-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-io-console-0:0.5.7-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-irb-0:1.3.5-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-json-0:2.5.1-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-json-0:2.5.1-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-minitest-0:5.14.2-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-mysql2-0:0.5.3-2.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-mysql2-doc-0:0.5.3-2.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-pg-0:1.2.3-1.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-pg-doc-0:1.2.3-1.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-power_assert-0:1.2.1-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-psych-0:3.3.2-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-psych-0:3.3.2-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-rake-0:13.0.3-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-rbs-0:1.4.0-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-rdoc-0:6.3.4.1-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-rexml-0:3.2.5-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-rss-0:0.2.9-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-test-unit-0:3.3.7-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-typeprof-0:0.15.2-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygems-0:3.2.33-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygems-devel-0:3.2.33-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:ruby-0:3.0.7-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"SUSE Liberty Linux 8:ruby-0:3.0.7-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:ruby-default-gems-0:3.0.7-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:ruby-devel-0:3.0.7-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"SUSE Liberty Linux 8:ruby-devel-0:3.0.7-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:ruby-doc-0:3.0.7-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:ruby-libs-0:3.0.7-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"SUSE Liberty Linux 8:ruby-libs-0:3.0.7-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-abrt-0:0.4.0-1.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-abrt-doc-0:0.4.0-1.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-bigdecimal-0:3.0.0-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-bigdecimal-0:3.0.0-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-bundler-0:2.2.33-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-io-console-0:0.5.7-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-io-console-0:0.5.7-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-irb-0:1.3.5-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-json-0:2.5.1-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-json-0:2.5.1-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-minitest-0:5.14.2-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-mysql2-0:0.5.3-2.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-mysql2-doc-0:0.5.3-2.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-pg-0:1.2.3-1.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-pg-doc-0:1.2.3-1.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-power_assert-0:1.2.1-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-psych-0:3.3.2-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-psych-0:3.3.2-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-rake-0:13.0.3-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-rbs-0:1.4.0-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-rdoc-0:6.3.4.1-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-rexml-0:3.2.5-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-rss-0:0.2.9-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-test-unit-0:3.3.7-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-typeprof-0:0.15.2-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygems-0:3.2.33-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygems-devel-0:3.2.33-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-05-30T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-27281"
},
{
"cve": "CVE-2024-27282",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-27282"
}
],
"notes": [
{
"category": "general",
"text": "An issue was discovered in Ruby 3.x through 3.3.0. If attacker-supplied data is provided to the Ruby regex compiler, it is possible to extract arbitrary heap data relative to the start of the text, including pointers and sensitive strings. The fixed versions are 3.0.7, 3.1.5, 3.2.4, and 3.3.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:ruby-0:3.0.7-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"SUSE Liberty Linux 8:ruby-0:3.0.7-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:ruby-default-gems-0:3.0.7-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:ruby-devel-0:3.0.7-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"SUSE Liberty Linux 8:ruby-devel-0:3.0.7-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:ruby-doc-0:3.0.7-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:ruby-libs-0:3.0.7-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"SUSE Liberty Linux 8:ruby-libs-0:3.0.7-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-abrt-0:0.4.0-1.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-abrt-doc-0:0.4.0-1.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-bigdecimal-0:3.0.0-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-bigdecimal-0:3.0.0-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-bundler-0:2.2.33-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-io-console-0:0.5.7-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-io-console-0:0.5.7-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-irb-0:1.3.5-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-json-0:2.5.1-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-json-0:2.5.1-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-minitest-0:5.14.2-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-mysql2-0:0.5.3-2.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-mysql2-doc-0:0.5.3-2.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-pg-0:1.2.3-1.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-pg-doc-0:1.2.3-1.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-power_assert-0:1.2.1-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-psych-0:3.3.2-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-psych-0:3.3.2-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-rake-0:13.0.3-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-rbs-0:1.4.0-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-rdoc-0:6.3.4.1-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-rexml-0:3.2.5-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-rss-0:0.2.9-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-test-unit-0:3.3.7-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-typeprof-0:0.15.2-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygems-0:3.2.33-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygems-devel-0:3.2.33-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-27282",
"url": "https://www.suse.com/security/cve/CVE-2024-27282"
},
{
"category": "external",
"summary": "SUSE Bug 1223314 for CVE-2024-27282",
"url": "https://bugzilla.suse.com/1223314"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:ruby-0:3.0.7-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"SUSE Liberty Linux 8:ruby-0:3.0.7-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:ruby-default-gems-0:3.0.7-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:ruby-devel-0:3.0.7-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"SUSE Liberty Linux 8:ruby-devel-0:3.0.7-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:ruby-doc-0:3.0.7-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:ruby-libs-0:3.0.7-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"SUSE Liberty Linux 8:ruby-libs-0:3.0.7-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-abrt-0:0.4.0-1.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-abrt-doc-0:0.4.0-1.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-bigdecimal-0:3.0.0-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-bigdecimal-0:3.0.0-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-bundler-0:2.2.33-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-io-console-0:0.5.7-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-io-console-0:0.5.7-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-irb-0:1.3.5-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-json-0:2.5.1-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-json-0:2.5.1-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-minitest-0:5.14.2-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-mysql2-0:0.5.3-2.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-mysql2-doc-0:0.5.3-2.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-pg-0:1.2.3-1.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-pg-doc-0:1.2.3-1.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-power_assert-0:1.2.1-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-psych-0:3.3.2-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-psych-0:3.3.2-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-rake-0:13.0.3-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-rbs-0:1.4.0-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-rdoc-0:6.3.4.1-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-rexml-0:3.2.5-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-rss-0:0.2.9-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-test-unit-0:3.3.7-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-typeprof-0:0.15.2-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygems-0:3.2.33-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygems-devel-0:3.2.33-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:ruby-0:3.0.7-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"SUSE Liberty Linux 8:ruby-0:3.0.7-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:ruby-default-gems-0:3.0.7-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:ruby-devel-0:3.0.7-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"SUSE Liberty Linux 8:ruby-devel-0:3.0.7-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:ruby-doc-0:3.0.7-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:ruby-libs-0:3.0.7-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"SUSE Liberty Linux 8:ruby-libs-0:3.0.7-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-abrt-0:0.4.0-1.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-abrt-doc-0:0.4.0-1.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-bigdecimal-0:3.0.0-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-bigdecimal-0:3.0.0-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-bundler-0:2.2.33-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-io-console-0:0.5.7-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-io-console-0:0.5.7-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-irb-0:1.3.5-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-json-0:2.5.1-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-json-0:2.5.1-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-minitest-0:5.14.2-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-mysql2-0:0.5.3-2.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-mysql2-doc-0:0.5.3-2.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-pg-0:1.2.3-1.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-pg-doc-0:1.2.3-1.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-power_assert-0:1.2.1-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-psych-0:3.3.2-143.module+el8.10.0+21858+d19f3934.i686::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-psych-0:3.3.2-143.module+el8.10.0+21858+d19f3934.x86_64::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-rake-0:13.0.3-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-rbs-0:1.4.0-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-rdoc-0:6.3.4.1-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-rexml-0:3.2.5-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-rss-0:0.2.9-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-test-unit-0:3.3.7-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygem-typeprof-0:0.15.2-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygems-0:3.2.33-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0",
"SUSE Liberty Linux 8:rubygems-devel-0:3.2.33-143.module+el8.10.0+21858+d19f3934.noarch::ruby:3.0"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-05-30T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-27282"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…