gpp_maybe Security update for ruby2.5

SUSE-SLE-Module-Basesystem-15-SP5-2024-3874

This update for ruby2.5 fixes the following issues: - CVE-2024-43398: Fixed DoS when parsing a XML that has many deep elements with the same local name attributes (bsc#1229673) - CVE-2024-41123: Fixed DoS when parsing an XML that contains many specific characters such as whitespaces, >] and ]> (bsc#1228794) - CVE-2024-41946: Fixed DoS when parsing an XML that has many entity expansions with SAX2 or pull parser API (bsc#1228799) - CVE-2024-35176: Fixed DoS when parsing an XML that has many left angled brackets in an attribute value (bsc#1224390) - CVE-2024-39908: Fixed ReDos when parsing an XML that has many specific characters (bsc#1228072)

• Release Date
  Nov 1 2024
• References
  Bugzilla: 1224390, 1229673, 1228072, 1228799, 1228794
  CVEs: CVE-2024-35176, CVE-2024-43398, CVE-2024-41946, CVE-2024-39908, CVE-2024-41123
• Type
  security
• Severity
  important

cloud_download Downloads

Basesystem Module 15.5 aarch64

• Packages
  libruby2_5-2_5
  Dynamic runtime library for Ruby

  2.5.9-150000.4.32.1 lock rpm

  ruby2.5
  An Interpreted Object-Oriented Scripting Language

  2.5.9-150000.4.32.1 lock rpm lock src

  ruby2.5-devel
  Development files to link against Ruby

  2.5.9-150000.4.32.1 lock rpm

  ruby2.5-devel-extra
  Special development files of ruby, normally not installed

  2.5.9-150000.4.32.1 lock rpm

  ruby2.5-stdlib
  The Ruby standard library

  2.5.9-150000.4.32.1 lock rpm

Basesystem Module 15.5 x86_64

• Packages
  libruby2_5-2_5
  Dynamic runtime library for Ruby

  2.5.9-150000.4.32.1 lock rpm

  ruby2.5
  An Interpreted Object-Oriented Scripting Language

  2.5.9-150000.4.32.1 lock rpm lock src

  ruby2.5-devel
  Development files to link against Ruby

  2.5.9-150000.4.32.1 lock rpm

  ruby2.5-devel-extra
  Special development files of ruby, normally not installed

  2.5.9-150000.4.32.1 lock rpm

  ruby2.5-stdlib
  The Ruby standard library

  2.5.9-150000.4.32.1 lock rpm

Basesystem Module 15.5 ppc64le

• Packages
  libruby2_5-2_5
  Dynamic runtime library for Ruby

  2.5.9-150000.4.32.1 lock rpm

  ruby2.5
  An Interpreted Object-Oriented Scripting Language

  2.5.9-150000.4.32.1 lock rpm lock src

  ruby2.5-devel
  Development files to link against Ruby

  2.5.9-150000.4.32.1 lock rpm

  ruby2.5-devel-extra
  Special development files of ruby, normally not installed

  2.5.9-150000.4.32.1 lock rpm

  ruby2.5-stdlib
  The Ruby standard library

  2.5.9-150000.4.32.1 lock rpm

Basesystem Module 15.5 s390x

• Packages
  libruby2_5-2_5
  Dynamic runtime library for Ruby

  2.5.9-150000.4.32.1 lock rpm

  ruby2.5
  An Interpreted Object-Oriented Scripting Language

  2.5.9-150000.4.32.1 lock rpm lock src

  ruby2.5-devel
  Development files to link against Ruby

  2.5.9-150000.4.32.1 lock rpm

  ruby2.5-devel-extra
  Special development files of ruby, normally not installed

  2.5.9-150000.4.32.1 lock rpm

  ruby2.5-stdlib
  The Ruby standard library

  2.5.9-150000.4.32.1 lock rpm