Red Hat Security AdvisoryRHSA-2025:7539
ruby:2.5 security update
Released 2025-05-14 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 8) ruby-2.5.9-114.module+el8.10.0+23088+750dc6ca.aarch64::ruby:2.5, ruby-2.5.9-114.module+el8.10.0+23088+750dc6ca.i686::ruby:2.5, ruby-2.5.9-114.module+el8.10.0+23088+750dc6ca.ppc64le::ruby:2.5 +47
Fixes 2 records
Priority MEDIUM 55
An integer overflow in the search_in_range function in regexec.c in Oniguruma 6.x before 6.9.4_rc2 leads to an out-of-bounds read, in which the offset of this read is under the control of an attacker.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.10628 · Published 2019-11-16 · Partial fix CWE-125
Priority LOW 37
`Bundler` is a package for managing application dependencies in Ruby.
CVSS 3.1HIGH 7.3· Local · Low privileges · User interaction · EPSS 0.02909 · Published 2021-12-08 · Partial fix · 2.2.33 CWE-88
