| Name: | ruby-bundled-gems |
|---|---|
| Version: | 3.1.7 |
| Release: | 146.module+el9.5.0+90564+273a1edd |
| Architecture: | aarch64 |
| Module: | ruby:3.1:9050020250506050702:9 |
| Group: | Unspecified |
| Size: | 765116 |
| License: | (Ruby or BSD) and Public Domain and MIT and CC0 and zlib and UCD |
| RPM: | ruby-bundled-gems-3.1.7-146.module+el9.5.0+90564+273a1edd.aarch64.rpm |
| Source RPM: | ruby-3.1.7-146.module+el9.5.0+90564+273a1edd.src.rpm |
| Build Date: | Tue May 06 2025 |
| Build Host: | build-ol9-aarch64.oracle.com |
| Vendor: | Oracle America |
| URL: | https://www.ruby-lang.org/ |
| Summary: | Bundled gems which are part of Ruby StdLib |
| Description: | Bundled gems which are part of Ruby StdLib. While being part of Ruby, these needs to be listed in Gemfile to be used by Bundler. |
- Upgrade to Ruby 3.1.7. Resolves: RHEL-55410 - Fix DoS vulnerability in REXML. (CVE-2024-39908) Resolves: RHEL-86077
- Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68530
- Upgrade to Ruby 3.1.5. Resolves: RHEL-33978 - Fix buffer overread vulnerability in StringIO. Resolves: RHEL-34129 - Fix RCE vulnerability with .rdoc_options in RDoc. Resolves: RHEL-34121 - Fix arbitrary memory address read vulnerability with Regex search. Resolves: RHEL-33871
- Upgrade to Ruby 3.1.4. Resolves: RHEL-5586 - Fix HTTP response splitting in CGI. Resolves: RHEL-5591 - Fix ReDos vulnerability in URI. Resolves: RHEL-28919 Resolves: RHEL-5612 - Fix ReDos vulnerability in Time. Resolves: RHEL-28920 - Make RDoc soft dependency in IRB. Resolves: RHEL-5613
- Bypass git submodule test failure on Git >= 2.38.1. - Fix tests with Europe/Amsterdam pre-1970 time on tzdata version 2022b. - Fix for tzdata-2022g. - Fix OpenSSL.fips_mode and OpenSSL::PKey.read in OpenSSL 3 FIPS. Resolves: RHEL-5590 - ssl: use ffdhe2048 from RFC 7919 as the default DH group parameters Related: RHEL-5590 - Disable fiddle tests that use FFI closures. Related: RHEL-5590