vulnerability
Imported story
Ruby Fixes Three Regex Engine Bugs Responsible for Four Critical GitLab RCE Flaws
Source: The Hacker News · Published · Last checked 1 week ago · 1 min read
Publisher excerpt From The Hacker News
Ruby has released versions 4.0.9, 3.4.12, and 3.3.13 to fix three bugs in Onigmo, the regular expression engine built into the language. The bugs lie behind four critical security flaws that GitLab patched over the past month. GitLab found that a specially crafted pattern could corrupt memory while Ruby compiles it, potentially leading to code execution on its own servers. Ruby says any
Excerpt only, shown with attribution. This content belongs to the original publisher and has not been independently verified by CyberSecurity.pk.
Keywords: rcesecurity flawawsvulnerabilityvulnerability newsThe Hacker Newscybersecurity newssecurity news Pakistan
Reference: The Hacker News — thehackernews.com ↗