Corrective releases of Ruby 3.1.2, 3.0.4, 2.7.6, 2.6.10 addressing vulnerabilities
The corrective releases of the Ruby programming language 3.1.2, 3.0.4, 2.7.6, 2.6.10 have been formed, fixing two vulnerabilities: CVE-2022-28738 — a double free in the regular expression compilation code, occurring when a specially crafted string is passed while creating a Regexp object. The vulnerability can be exploited when untrusted external data is used in a Regexp object. CVE-2022-28739 — a buffer overflow in the conversion code […]
