USN-5462-1

Source

https://ubuntu.com/security/notices/USN-5462-1

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/USN-5462-1.json

Related

Published

2022-06-06T17:23:28.988481Z

Modified

2022-06-06T17:23:28.988481Z

Summary

ruby2.5, ruby2.7, ruby3.0 vulnerabilities

Details

It was discovered that Ruby incorrectly handled certain regular expressions. An attacker could possibly use this issue to execute arbitrary code. This issue only affected Ubuntu 22.04 LTS. (CVE-2022-28738)

It was discovered that Ruby incorrectly handled certain inputs. An attacker could possibly use this issue to expose sensitive information. (CVE-2022-28739)

References

Affected packages

Ubuntu:22.04:LTS / ruby3.0

Package

Name: ruby3.0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0The exact introduced commit is unknown

Fixed

3.0.2-7ubuntu2.1

Ecosystem specific

{
    "availability": "No subscription needed",
    "binaries": [
        {
            "ruby3.0-dev": "3.0.2-7ubuntu2.1",
            "ruby3.0": "3.0.2-7ubuntu2.1",
            "ruby3.0-doc": "3.0.2-7ubuntu2.1",
            "libruby3.0": "3.0.2-7ubuntu2.1"
        }
    ]
}

Ubuntu:20.04:LTS / ruby2.7

Package

Name: ruby2.7

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0The exact introduced commit is unknown

Fixed

2.7.0-5ubuntu1.7

Ecosystem specific

{
    "availability": "No subscription needed",
    "binaries": [
        {
            "ruby2.7-doc": "2.7.0-5ubuntu1.7",
            "ruby2.7": "2.7.0-5ubuntu1.7",
            "libruby2.7": "2.7.0-5ubuntu1.7",
            "ruby2.7-dev": "2.7.0-5ubuntu1.7"
        }
    ]
}

Ubuntu:18.04:LTS / ruby2.5

Package

Name: ruby2.5

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0The exact introduced commit is unknown

Fixed

2.5.1-1ubuntu1.12

Ecosystem specific

{
    "availability": "No subscription needed",
    "binaries": [
        {
            "ruby2.5": "2.5.1-1ubuntu1.12",
            "libruby2.5": "2.5.1-1ubuntu1.12",
            "ruby2.5-dev": "2.5.1-1ubuntu1.12",
            "ruby2.5-doc": "2.5.1-1ubuntu1.12"
        }
    ]
}