RHSA-2022:6585: Moderate: ruby security, bug fix, and enhancement update
Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.The following packages have been upgraded to a later upstream version: ruby (3.0.4). (BZ#2109428)Security Fix(es): Ruby: Double free in Regexp compilation (CVE-2022-28738) Ruby: Buffer overrun in String-to-Float conversion (CVE-2022-28739) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2022:6585?
The severity of RHSA-2022:6585 is not specified in the available details, but it addresses security issues in Ruby 3.0.4.
How do I fix RHSA-2022:6585?
To fix RHSA-2022:6585, upgrade to the latest version of Ruby packages, specifically ruby 3.0.4-160.el9_0 and related packages.
Which Ruby packages are affected by RHSA-2022:6585?
RHSA-2022:6585 affects multiple Ruby packages including ruby, ruby-devel, ruby-libs, and numerous rubygem packages.
Is there a recommended action for RHSA-2022:6585?
The recommended action for RHSA-2022:6585 is to apply the security updates provided by Red Hat for the mentioned Ruby packages.
What is the purpose of the advisory RHSA-2022:6585?
The purpose of advisory RHSA-2022:6585 is to inform users about security updates and potential vulnerabilities in Ruby and its associated packages.