OESA-2024-1121

See a problem?
Please try reporting it to the source first.
Source
https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-1121
Import Source
https://repo.openeuler.org/security/data/osv/OESA-2024-1121.json
JSON Data
https://api.osv.dev/v1/vulns/OESA-2024-1121
Upstream
Published
2024-02-02T11:06:53Z
Modified
2025-09-03T06:19:06.418695Z
Summary
jruby security update
Details

JRuby is a 100% Java implementation of the Ruby programming language. It is Ruby for the JVM. JRuby provides a complete set of core "builtin" classes and syntax for the Ruby language, as well as most of the Ruby Standard Libraries.

Security Fix(es):

A ReDoS issue was discovered in the Time component through 0.2.1 in Ruby through 3.2.1. The Time parser mishandles invalid URLs that have specific characters. It causes an increase in execution time for parsing strings to Time objects. The fixed versions are 0.1.1 and 0.2.2.(CVE-2023-28756)

Database specific 
{
    "severity": "Medium"
}
References

Affected packages

openEuler:20.03-LTS-SP1 / jruby

Package

Name
jruby
Purl
pkg:rpm/openEuler/jruby&distro=openEuler-20.03-LTS-SP1

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.7.22-4.oe1

Ecosystem specific 

{
    "noarch": [
        "jruby-javadoc-1.7.22-4.oe1.noarch.rpm",
        "jruby-devel-1.7.22-4.oe1.noarch.rpm",
        "jruby-1.7.22-4.oe1.noarch.rpm"
    ],
    "src": [
        "jruby-1.7.22-4.oe1.src.rpm"
    ]
}

openEuler:20.03-LTS-SP4 / jruby

Package

Name
jruby
Purl
pkg:rpm/openEuler/jruby&distro=openEuler-20.03-LTS-SP4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.7.22-4.oe2003sp4

Ecosystem specific 

{
    "noarch": [
        "jruby-1.7.22-4.oe2003sp4.noarch.rpm",
        "jruby-javadoc-1.7.22-4.oe2003sp4.noarch.rpm",
        "jruby-devel-1.7.22-4.oe2003sp4.noarch.rpm"
    ],
    "src": [
        "jruby-1.7.22-4.oe2003sp4.src.rpm"
    ]
}

openEuler:22.03-LTS / jruby

Package

Name
jruby
Purl
pkg:rpm/openEuler/jruby&distro=openEuler-22.03-LTS

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.7.22-4.oe2203sp3

Ecosystem specific 

{
    "noarch": [
        "jruby-devel-1.7.22-4.oe2203.noarch.rpm",
        "jruby-javadoc-1.7.22-4.oe2203.noarch.rpm",
        "jruby-1.7.22-4.oe2203.noarch.rpm",
        "jruby-javadoc-1.7.22-4.oe2203sp1.noarch.rpm",
        "jruby-devel-1.7.22-4.oe2203sp1.noarch.rpm",
        "jruby-1.7.22-4.oe2203sp1.noarch.rpm",
        "jruby-javadoc-1.7.22-4.oe2203sp2.noarch.rpm",
        "jruby-devel-1.7.22-4.oe2203sp2.noarch.rpm",
        "jruby-1.7.22-4.oe2203sp2.noarch.rpm",
        "jruby-javadoc-1.7.22-4.oe2203sp3.noarch.rpm",
        "jruby-devel-1.7.22-4.oe2203sp3.noarch.rpm",
        "jruby-1.7.22-4.oe2203sp3.noarch.rpm"
    ],
    "src": [
        "jruby-1.7.22-4.oe2203.src.rpm",
        "jruby-1.7.22-4.oe2203sp1.src.rpm",
        "jruby-1.7.22-4.oe2203sp2.src.rpm",
        "jruby-1.7.22-4.oe2203sp3.src.rpm"
    ]
}

openEuler:22.03-LTS-SP1 / jruby

Package

Name
jruby
Purl
pkg:rpm/openEuler/jruby&distro=openEuler-22.03-LTS-SP1

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.7.22-4.oe2203sp1

Ecosystem specific 

{
    "noarch": [
        "jruby-javadoc-1.7.22-4.oe2203sp1.noarch.rpm",
        "jruby-devel-1.7.22-4.oe2203sp1.noarch.rpm",
        "jruby-1.7.22-4.oe2203sp1.noarch.rpm"
    ],
    "src": [
        "jruby-1.7.22-4.oe2203sp1.src.rpm"
    ]
}

openEuler:22.03-LTS-SP2 / jruby

Package

Name
jruby
Purl
pkg:rpm/openEuler/jruby&distro=openEuler-22.03-LTS-SP2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.7.22-4.oe2203sp2

Ecosystem specific 

{
    "noarch": [
        "jruby-javadoc-1.7.22-4.oe2203sp2.noarch.rpm",
        "jruby-devel-1.7.22-4.oe2203sp2.noarch.rpm",
        "jruby-1.7.22-4.oe2203sp2.noarch.rpm"
    ],
    "src": [
        "jruby-1.7.22-4.oe2203sp2.src.rpm"
    ]
}

openEuler:22.03-LTS-SP3 / jruby

Package

Name
jruby
Purl
pkg:rpm/openEuler/jruby&distro=openEuler-22.03-LTS-SP3

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.7.22-4.oe2203sp3

Ecosystem specific 

{
    "noarch": [
        "jruby-javadoc-1.7.22-4.oe2203sp3.noarch.rpm",
        "jruby-devel-1.7.22-4.oe2203sp3.noarch.rpm",
        "jruby-1.7.22-4.oe2203sp3.noarch.rpm"
    ],
    "src": [
        "jruby-1.7.22-4.oe2203sp3.src.rpm"
    ]
}