Corrective releases of Ruby 3.1.2, 3.0.4, 2.7.6, 2.6.10 addressing vulnerabilities
Corrective releases for the Ruby programming language 3.1.2, 3.0.4, 2.7.6, 2.6.10 have been formed, addressing two vulnerabilities: CVE-2022-28738 — double-free memory issues in the regular expression compilation code, occurring when passing a specially crafted string during the creation of a Regexp object. The vulnerability can be exploited when untrusted external data is used in a Regexp object. CVE-2022-28739 — buffer overflow in the conversion code […]
