Summary
It was discovered that Ruby incorrectly handled certain regular expressions.
An attacker could possibly use this issue to execute arbitrary code. This
issue only affected Ubuntu 22.04 LTS. (CVE-2022-28738)
It was discovered that Ruby incorrectly handled certain inputs.
An attacker could possibly use this issue to expose sensitive information.
(CVE-2022-28739)
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 18.04 LTS 18.04:LTS | ruby2.5 | 2.5.1-1ubuntu1.12 |
| Ubuntu · 20.04 LTS 20.04:LTS | ruby2.7 | 2.7.0-5ubuntu1.7 |
| Ubuntu · 22.04 LTS 22.04:LTS | ruby3.0 | 3.0.2-7ubuntu2.1 |
Vulnerabilities 2
-
Unscored —
A double free was found in the Regexp compiler in Ruby 3.x before 3.0.4 and 3.1.x before 3.1.2. If a victim attempts to…
-
Unscored —
There is a buffer over-read in Ruby before 2.6.10, 2.7.x before 2.7.6, 3.x before 3.0.4, and 3.1.x before 3.1.2. It occ…