CVE:CVE-2023-28755
CNNVD:CNNVD-202303-2412
Ruby是松本行弘个人开发者的一种跨平台、面向对象的动态类型编程语言。
Ruby 存在安全漏洞，该漏洞源于在 URI 组件中存在ReDoS问题。以下产品和版本受到影响：Ruby URI gem 0.12.0版本，0.11.0版本，0.10.1版本，0.10.0 及之前版本。
solution:Upgrade ruby-lang uri to a higher version than 0.10.0,0.10.1,0.11.0,0.12.0,and avoid the version (,0.10.0],0.10.1,0.11.0,0.12.0; Upgrade debian debian_linux to a higher version than 10.0,and avoid the version 10.0; Upgrade fedoraproject fedora to a higher version than 36,37,38,and avoid the version 36,37,38