| Name: | rubygem-test-unit |
|---|
| Version: | 3.6.1 |
|---|
| Release: | 13.el10_2 |
|---|
| Architecture: | noarch |
|---|
| Group: | Unspecified |
|---|
| Size: | 421966 |
|---|
| License: | (Ruby OR BSD-2-Clause) AND (Ruby OR BSD-2-Clause OR Python-2.0.1) |
|---|
| RPM: |
rubygem-test-unit-3.6.1-13.el10_2.noarch.rpm
|
| Source RPM: |
ruby-3.3.10-13.el10_2.src.rpm
|
| Build Date: | Tue Jun 30 2026 |
|---|
| Build Host: | build-ol10-x86_64.oracle.com |
|---|
| Vendor: | Oracle America |
|---|
| URL: | https://www.ruby-lang.org/ |
|---|
| Summary: | An xUnit family unit testing framework for Ruby |
|---|
| Description: | Test::Unit (test-unit) is unit testing framework for Ruby, based on xUnit
principles. These were originally designed by Kent Beck, creator of extreme
programming software development methodology, for Smalltalk's SUnit. It allows
writing tests, checking results and automated testing in Ruby. |
|---|
-
Thu Jun 11 2026 Jarek Prokop <jprokop@redhat.com> - 3.3.10-13
- Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245)
Resolves: RHEL-181687
- Fix information disclosure via MITM attack bypassing TLS in net-imap.
(CVE-2026-42246)
Resolves: RHEL-181775
- Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258)
Resolves: RHEL-181797
-
Tue Apr 28 2026 Jarek Prokop <jprokop@redhat.com> - 3.3.10-12
- Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316)
Resolves: RHEL-171245
-
Thu Nov 13 2025 Jun Aruga <jaruga@redhat.com> - 3.3.10-11
- Upgrade to Ruby 3.3.10.
Resolves: RHEL-130160
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
Resolves: RHEL-122028
-
Mon Apr 14 2025 Jarek Prokop <jprokop@redhat.com> - 3.3.8-10
- Upgrade to Ruby 3.3.8.
Resolves: RHEL-87342
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
Resolves: RHEL-86116
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)
-
Thu Jan 30 2025 Jun Aruga <jaruga@redhat.com> - 3.3.7-9
- Upgrade to Ruby 3.3.7
Resolves: RHEL-77994
- Fix Ruby OpenSSL to respect crypto-policies TLS minimal version.
Resolves: RHEL-21019
-
Tue Oct 29 2024 Troy Dawson <tdawson@redhat.com>
- Bump release for October 2024 mass rebuild:
Resolves: RHEL-64018
-
Wed Sep 04 2024 Jarek Prokop <jprokop@redhat.com> - 3.3.5-7
- Upgrade to Ruby 3.3.5
Resolves: RHEL-59035
- Fix DoS vulnerability in rexml.
(CVE-2024-39908)
(CVE-2024-41946)
(CVE-2024-43398)
Resolves: RHEL-57047
Resolves: RHEL-57059
Resolves: RHEL-57070
- Fix REXML DoS when parsing an XML having many specific characters such as
whitespace character, >] and ]>.
(CVE-2024-41123)
Resolves: RHEL-52802
-
Mon Jun 24 2024 Troy Dawson <tdawson@redhat.com>
- Bump release for June 2024 mass rebuild
-
Thu May 09 2024 Jun Aruga <jaruga@redhat.com> - 3.3.1-5
- Upgrade to Ruby 3.3.1.
Resolves: RHEL-33975
- Fix buffer overread vulnerability in StringIO.
Resolves: RHEL-34124
- Fix RCE vulnerability with .rdoc_options in RDoc.
Resolves: RHEL-34116
- Fix arbitrary memory address read vulnerability with Regex search.
Resolves: RHEL-33866
-
Fri Jan 26 2024 Jarek Prokop <jprokop@redhat.com> - 3.3.0-4
- Do not set AI_ADDRCONFIG by default when calling getaddrinfo(3).