critical
CVE-2022-28738
Ruby: Double free in Regexp compilation
In the Trivy database since at least 24 Oct 2026, 07:11 UTCWhen it arrived before that build is not recorded.
Severity by source
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Red Hat7.7CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Bitnami9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Trivy's own label is CRITICAL. Rated critical by NVD, Bitnami. Rated lower by Red Hat (medium), AlmaLinux (medium), Oracle (medium), Rocky Linux (medium), Ubuntu (medium).
Description
A double free was found in the Regexp compiler in Ruby 3.x before 3.0.4 and 3.1.x before 3.1.2. If a victim attempts to create a Regexp from untrusted user input, an attacker may be able to write to unexpected memory locations.
Affected packages and fixed versions
| Source | Package | Fixed in |
|---|---|---|
| bitnami::Bitnami Vulnerability Database | ruby, ruby-min | 3.0.4, 3.1.2 |
| alma 8 | ruby:3.0::ruby, ruby:3.0::ruby-default-gems, ruby:3.0::ruby-devel and 25 more | 3.0.4-141.module_el8.6.0+3263+41cde0c0 and 19 more |
| alma 9 | ruby, ruby-default-gems, ruby-devel and 19 more | 3.0.4-160.el9_0 and 16 more |
| alpine 3.15 | ruby | 3.0.4-r0 |
| alpine 3.16 | ruby | 3.1.2-r0 |
| alpine 3.17 | ruby | 3.1.2-r0 |
| alpine 3.18 | ruby | 3.1.2-r0 |
| alpine 3.19 | ruby | 3.1.2-r0 |
| alpine 3.20 | ruby | 3.1.2-r0 |
| alpine 3.21 | ruby | 3.1.2-r0 |
| alpine 3.22 | ruby | 3.1.2-r0 |
| alpine 3.23 | ruby | 3.1.2-r0 |
Show all 216 entries from 24 sources
| Source | Package | Fixed in |
|---|---|---|
| bitnami::Bitnami Vulnerability Database | ruby | 3.0.4, 3.1.2 |
| bitnami::Bitnami Vulnerability Database | ruby-min | 3.0.4, 3.1.2 |
| alma 8 | ruby:3.0::ruby | 3.0.4-141.module_el8.6.0+3263+41cde0c0 |
| alma 8 | ruby:3.0::ruby-default-gems | 3.0.4-141.module_el8.6.0+3263+41cde0c0 |
| alma 8 | ruby:3.0::ruby-devel | 3.0.4-141.module_el8.6.0+3263+41cde0c0 |
| alma 8 | ruby:3.0::ruby-doc | 3.0.4-141.module_el8.6.0+3263+41cde0c0 |
| alma 8 | ruby:3.0::ruby-libs | 3.0.4-141.module_el8.6.0+3263+41cde0c0 |
| alma 8 | ruby:3.0::rubygem-abrt | 0.4.0-1.module_el8.5.0+2595+0c654ebc |
| alma 8 | ruby:3.0::rubygem-abrt-doc | 0.4.0-1.module_el8.5.0+2595+0c654ebc |
| alma 8 | ruby:3.0::rubygem-bigdecimal | 3.0.0-141.module_el8.6.0+3263+41cde0c0 |
| alma 8 | ruby:3.0::rubygem-bundler | 2.2.33-141.module_el8.6.0+3263+41cde0c0 |
| alma 8 | ruby:3.0::rubygem-io-console | 0.5.7-141.module_el8.6.0+3263+41cde0c0 |
| alma 8 | ruby:3.0::rubygem-irb | 1.3.5-141.module_el8.6.0+3263+41cde0c0 |
| alma 8 | ruby:3.0::rubygem-json | 2.5.1-141.module_el8.6.0+3263+41cde0c0 |
| alma 8 | ruby:3.0::rubygem-minitest | 5.14.2-141.module_el8.6.0+3263+41cde0c0 |
| alma 8 | ruby:3.0::rubygem-mysql2 | 0.5.3-1.module_el8.5.0+2595+0c654ebc |
| alma 8 | ruby:3.0::rubygem-mysql2-doc | 0.5.3-1.module_el8.5.0+2595+0c654ebc |
| alma 8 | ruby:3.0::rubygem-pg | 1.2.3-1.module_el8.5.0+2595+0c654ebc |
| alma 8 | ruby:3.0::rubygem-pg-doc | 1.2.3-1.module_el8.5.0+2595+0c654ebc |
| alma 8 | ruby:3.0::rubygem-power_assert | 1.2.0-141.module_el8.6.0+3263+41cde0c0 |
| alma 8 | ruby:3.0::rubygem-psych | 3.3.2-141.module_el8.6.0+3263+41cde0c0 |
| alma 8 | ruby:3.0::rubygem-rake | 13.0.3-141.module_el8.6.0+3263+41cde0c0 |
| alma 8 | ruby:3.0::rubygem-rbs | 1.4.0-141.module_el8.6.0+3263+41cde0c0 |
| alma 8 | ruby:3.0::rubygem-rdoc | 6.3.3-141.module_el8.6.0+3263+41cde0c0 |
| alma 8 | ruby:3.0::rubygem-rexml | 3.2.5-141.module_el8.6.0+3263+41cde0c0 |
| alma 8 | ruby:3.0::rubygem-rss | 0.2.9-141.module_el8.6.0+3263+41cde0c0 |
| alma 8 | ruby:3.0::rubygem-test-unit | 3.3.7-141.module_el8.6.0+3263+41cde0c0 |
| alma 8 | ruby:3.0::rubygem-typeprof | 0.15.2-141.module_el8.6.0+3263+41cde0c0 |
| alma 8 | ruby:3.0::rubygems | 3.2.33-141.module_el8.6.0+3263+41cde0c0 |
| alma 8 | ruby:3.0::rubygems-devel | 3.2.33-141.module_el8.6.0+3263+41cde0c0 |
| alma 9 | ruby | 3.0.4-160.el9_0 |
| alma 9 | ruby-default-gems | 3.0.4-160.el9_0 |
| alma 9 | ruby-devel | 3.0.4-160.el9_0 |
| alma 9 | ruby-doc | 3.0.4-160.el9_0 |
| alma 9 | ruby-libs | 3.0.4-160.el9_0 |
| alma 9 | rubygem-bigdecimal | 3.0.0-160.el9_0 |
| alma 9 | rubygem-bundler | 2.2.33-160.el9_0 |
| alma 9 | rubygem-io-console | 0.5.7-160.el9_0 |
| alma 9 | rubygem-irb | 1.3.5-160.el9_0 |
| alma 9 | rubygem-json | 2.5.1-160.el9_0 |
| alma 9 | rubygem-minitest | 5.14.2-160.el9_0 |
| alma 9 | rubygem-power_assert | 1.2.0-160.el9_0 |
| alma 9 | rubygem-psych | 3.3.2-160.el9_0 |
| alma 9 | rubygem-rake | 13.0.3-160.el9_0 |
| alma 9 | rubygem-rbs | 1.4.0-160.el9_0 |
| alma 9 | rubygem-rdoc | 6.3.3-160.el9_0 |
| alma 9 | rubygem-rexml | 3.2.5-160.el9_0 |
| alma 9 | rubygem-rss | 0.2.9-160.el9_0 |
| alma 9 | rubygem-test-unit | 3.3.7-160.el9_0 |
| alma 9 | rubygem-typeprof | 0.15.2-160.el9_0 |
| alma 9 | rubygems | 3.2.33-160.el9_0 |
| alma 9 | rubygems-devel | 3.2.33-160.el9_0 |
| alpine 3.15 | ruby | 3.0.4-r0 |
| alpine 3.16 | ruby | 3.1.2-r0 |
| alpine 3.17 | ruby | 3.1.2-r0 |
| alpine 3.18 | ruby | 3.1.2-r0 |
| alpine 3.19 | ruby | 3.1.2-r0 |
| alpine 3.20 | ruby | 3.1.2-r0 |
| alpine 3.21 | ruby | 3.1.2-r0 |
| alpine 3.22 | ruby | 3.1.2-r0 |
| alpine 3.23 | ruby | 3.1.2-r0 |
| alpine 3.24 | ruby | 3.1.2-r0 |
| alpine edge | ruby | 3.1.2-r0 |
| Oracle Linux 8 | ruby | 3.0.4-141.module+el8.6.0+20741+4fdba061 |
| Oracle Linux 8 | ruby-default-gems | 3.0.4-141.module+el8.6.0+20741+4fdba061 |
| Oracle Linux 8 | ruby-devel | 3.0.4-141.module+el8.6.0+20741+4fdba061 |
| Oracle Linux 8 | ruby-doc | 3.0.4-141.module+el8.6.0+20741+4fdba061 |
| Oracle Linux 8 | ruby-libs | 3.0.4-141.module+el8.6.0+20741+4fdba061 |
| Oracle Linux 8 | rubygem-abrt | 0.4.0-1.module+el8.5.0+20321+0ba6c954 |
| Oracle Linux 8 | rubygem-abrt-doc | 0.4.0-1.module+el8.5.0+20321+0ba6c954 |
| Oracle Linux 8 | rubygem-bigdecimal | 3.0.0-141.module+el8.6.0+20741+4fdba061 |
| Oracle Linux 8 | rubygem-bundler | 2.2.33-141.module+el8.6.0+20741+4fdba061 |
| Oracle Linux 8 | rubygem-io-console | 0.5.7-141.module+el8.6.0+20741+4fdba061 |
| Oracle Linux 8 | rubygem-irb | 1.3.5-141.module+el8.6.0+20741+4fdba061 |
| Oracle Linux 8 | rubygem-json | 2.5.1-141.module+el8.6.0+20741+4fdba061 |
| Oracle Linux 8 | rubygem-minitest | 5.14.2-141.module+el8.6.0+20741+4fdba061 |
| Oracle Linux 8 | rubygem-mysql2 | 0.5.3-1.module+el8.5.0+20321+0ba6c954 |
| Oracle Linux 8 | rubygem-mysql2-doc | 0.5.3-1.module+el8.5.0+20321+0ba6c954 |
| Oracle Linux 8 | rubygem-pg | 1.2.3-1.module+el8.5.0+20321+0ba6c954 |
| Oracle Linux 8 | rubygem-pg-doc | 1.2.3-1.module+el8.5.0+20321+0ba6c954 |
| Oracle Linux 8 | rubygem-power_assert | 1.2.0-141.module+el8.6.0+20741+4fdba061 |
| Oracle Linux 8 | rubygem-psych | 3.3.2-141.module+el8.6.0+20741+4fdba061 |
| Oracle Linux 8 | rubygem-rake | 13.0.3-141.module+el8.6.0+20741+4fdba061 |
| Oracle Linux 8 | rubygem-rbs | 1.4.0-141.module+el8.6.0+20741+4fdba061 |
| Oracle Linux 8 | rubygem-rdoc | 6.3.3-141.module+el8.6.0+20741+4fdba061 |
| Oracle Linux 8 | rubygem-rexml | 3.2.5-141.module+el8.6.0+20741+4fdba061 |
| Oracle Linux 8 | rubygem-rss | 0.2.9-141.module+el8.6.0+20741+4fdba061 |
| Oracle Linux 8 | rubygem-test-unit | 3.3.7-141.module+el8.6.0+20741+4fdba061 |
| Oracle Linux 8 | rubygem-typeprof | 0.15.2-141.module+el8.6.0+20741+4fdba061 |
| Oracle Linux 8 | rubygems | 3.2.33-141.module+el8.6.0+20741+4fdba061 |
| Oracle Linux 8 | rubygems-devel | 3.2.33-141.module+el8.6.0+20741+4fdba061 |
| Oracle Linux 9 | ruby | 3.0.4-160.el9_0 |
| Oracle Linux 9 | ruby-default-gems | 3.0.4-160.el9_0 |
| Oracle Linux 9 | ruby-devel | 3.0.4-160.el9_0 |
| Oracle Linux 9 | ruby-doc | 3.0.4-160.el9_0 |
| Oracle Linux 9 | ruby-libs | 3.0.4-160.el9_0 |
| Oracle Linux 9 | rubygem-bigdecimal | 3.0.0-160.el9_0 |
| Oracle Linux 9 | rubygem-bundler | 2.2.33-160.el9_0 |
| Oracle Linux 9 | rubygem-io-console | 0.5.7-160.el9_0 |
| Oracle Linux 9 | rubygem-irb | 1.3.5-160.el9_0 |
| Oracle Linux 9 | rubygem-json | 2.5.1-160.el9_0 |
| Oracle Linux 9 | rubygem-minitest | 5.14.2-160.el9_0 |
| Oracle Linux 9 | rubygem-power_assert | 1.2.0-160.el9_0 |
| Oracle Linux 9 | rubygem-psych | 3.3.2-160.el9_0 |
| Oracle Linux 9 | rubygem-rake | 13.0.3-160.el9_0 |
| Oracle Linux 9 | rubygem-rbs | 1.4.0-160.el9_0 |
| Oracle Linux 9 | rubygem-rdoc | 6.3.3-160.el9_0 |
| Oracle Linux 9 | rubygem-rexml | 3.2.5-160.el9_0 |
| Oracle Linux 9 | rubygem-rss | 0.2.9-160.el9_0 |
| Oracle Linux 9 | rubygem-test-unit | 3.3.7-160.el9_0 |
| Oracle Linux 9 | rubygem-typeprof | 0.15.2-160.el9_0 |
| Oracle Linux 9 | rubygems | 3.2.33-160.el9_0 |
| Oracle Linux 9 | rubygems-devel | 3.2.33-160.el9_0 |
| rapidfort Oracle Linux 9 | ruby | 0:3.0.4-160.el9_0 |
| rapidfort Oracle Linux 9 | ruby-default-gems | 0:3.0.4-160.el9_0 |
| rapidfort Oracle Linux 9 | ruby-devel | 0:3.0.4-160.el9_0 |
| rapidfort Oracle Linux 9 | ruby-libs | 0:3.0.4-160.el9_0 |
| rapidfort Oracle Linux 9 | rubygem-bigdecimal | 0:3.0.0-160.el9_0 |
| rapidfort Oracle Linux 9 | rubygem-bundler | 0:2.2.33-160.el9_0 |
| rapidfort Oracle Linux 9 | rubygem-io-console | 0:0.5.7-160.el9_0 |
| rapidfort Oracle Linux 9 | rubygem-irb | 0:1.3.5-160.el9_0 |
| rapidfort Oracle Linux 9 | rubygem-json | 0:2.5.1-160.el9_0 |
| rapidfort Oracle Linux 9 | rubygem-minitest | 0:5.14.2-160.el9_0 |
| rapidfort Oracle Linux 9 | rubygem-power_assert | 0:1.2.0-160.el9_0 |
| rapidfort Oracle Linux 9 | rubygem-psych | 0:3.3.2-160.el9_0 |
| rapidfort Oracle Linux 9 | rubygem-rake | 0:13.0.3-160.el9_0 |
| rapidfort Oracle Linux 9 | rubygem-rbs | 0:1.4.0-160.el9_0 |
| rapidfort Oracle Linux 9 | rubygem-rdoc | 0:6.3.3-160.el9_0 |
| rapidfort Oracle Linux 9 | rubygem-rexml | 0:3.2.5-160.el9_0 |
| rapidfort Oracle Linux 9 | rubygem-rss | 0:0.2.9-160.el9_0 |
| rapidfort Oracle Linux 9 | rubygem-test-unit | 0:3.3.7-160.el9_0 |
| rapidfort Oracle Linux 9 | rubygem-typeprof | 0:0.15.2-160.el9_0 |
| rapidfort Oracle Linux 9 | rubygems | 0:3.2.33-160.el9_0 |
| rapidfort Oracle Linux 9 | rubygems-devel | 0:3.2.33-160.el9_0 |
| rapidfort rocky 9 | ruby | 0:3.0.4-160.el9_0 |
| rapidfort ubuntu 20.04 | ruby3.0 | 0:3.0.2-7ubuntu2.1 |
| rapidfort ubuntu 22.04 | ruby3.0 | 0:3.0.2-7ubuntu2.1 |
| rapidfort ubuntu 24.04 | ruby3.0 | 0:3.0.2-7ubuntu2.1 |
| rocky 8 | ruby | 3.0.4-141.module+el8.6.0+1002+a7dba0ac |
| rocky 8 | ruby-default-gems | 3.0.4-141.module+el8.6.0+1002+a7dba0ac |
| rocky 8 | ruby-devel | 3.0.4-141.module+el8.6.0+1002+a7dba0ac |
| rocky 8 | ruby-doc | 3.0.4-141.module+el8.6.0+1002+a7dba0ac |
| rocky 8 | ruby-libs | 3.0.4-141.module+el8.6.0+1002+a7dba0ac |
| rocky 8 | ruby:3.0::ruby | 3.0.4-141.module+el8.6.0+1002+a7dba0ac |
| rocky 8 | ruby:3.0::ruby-default-gems | 3.0.4-141.module+el8.6.0+1002+a7dba0ac |
| rocky 8 | ruby:3.0::ruby-devel | 3.0.4-141.module+el8.6.0+1002+a7dba0ac |
| rocky 8 | ruby:3.0::ruby-doc | 3.0.4-141.module+el8.6.0+1002+a7dba0ac |
| rocky 8 | ruby:3.0::ruby-libs | 3.0.4-141.module+el8.6.0+1002+a7dba0ac |
| rocky 8 | ruby:3.0::rubygem-abrt | 0.4.0-1.module+el8.5.0+668+665814fa |
| rocky 8 | ruby:3.0::rubygem-abrt-doc | 0.4.0-1.module+el8.5.0+668+665814fa |
| rocky 8 | ruby:3.0::rubygem-bigdecimal | 3.0.0-141.module+el8.6.0+1002+a7dba0ac |
| rocky 8 | ruby:3.0::rubygem-bundler | 2.2.33-141.module+el8.6.0+1002+a7dba0ac |
| rocky 8 | ruby:3.0::rubygem-io-console | 0.5.7-141.module+el8.6.0+1002+a7dba0ac |
| rocky 8 | ruby:3.0::rubygem-irb | 1.3.5-141.module+el8.6.0+1002+a7dba0ac |
| rocky 8 | ruby:3.0::rubygem-json | 2.5.1-141.module+el8.6.0+1002+a7dba0ac |
| rocky 8 | ruby:3.0::rubygem-minitest | 5.14.2-141.module+el8.6.0+1002+a7dba0ac |
| rocky 8 | ruby:3.0::rubygem-mysql2 | 0.5.3-1.module+el8.5.0+668+665814fa |
| rocky 8 | ruby:3.0::rubygem-mysql2-doc | 0.5.3-1.module+el8.5.0+668+665814fa |
| rocky 8 | ruby:3.0::rubygem-pg | 1.2.3-1.module+el8.5.0+668+665814fa |
| rocky 8 | ruby:3.0::rubygem-pg-doc | 1.2.3-1.module+el8.5.0+668+665814fa |
| rocky 8 | ruby:3.0::rubygem-power_assert | 1.2.0-141.module+el8.6.0+1002+a7dba0ac |
| rocky 8 | ruby:3.0::rubygem-psych | 3.3.2-141.module+el8.6.0+1002+a7dba0ac |
| rocky 8 | ruby:3.0::rubygem-rake | 13.0.3-141.module+el8.6.0+1002+a7dba0ac |
| rocky 8 | ruby:3.0::rubygem-rbs | 1.4.0-141.module+el8.6.0+1002+a7dba0ac |
| rocky 8 | ruby:3.0::rubygem-rdoc | 6.3.3-141.module+el8.6.0+1002+a7dba0ac |
| rocky 8 | ruby:3.0::rubygem-rexml | 3.2.5-141.module+el8.6.0+1002+a7dba0ac |
| rocky 8 | ruby:3.0::rubygem-rss | 0.2.9-141.module+el8.6.0+1002+a7dba0ac |
| rocky 8 | ruby:3.0::rubygem-test-unit | 3.3.7-141.module+el8.6.0+1002+a7dba0ac |
| rocky 8 | ruby:3.0::rubygem-typeprof | 0.15.2-141.module+el8.6.0+1002+a7dba0ac |
| rocky 8 | ruby:3.0::rubygems | 3.2.33-141.module+el8.6.0+1002+a7dba0ac |
| rocky 8 | ruby:3.0::rubygems-devel | 3.2.33-141.module+el8.6.0+1002+a7dba0ac |
| rocky 8 | rubygem-abrt | 0.4.0-1.module+el8.6.0+1001+b5678180 |
| rocky 8 | rubygem-abrt-doc | 0.4.0-1.module+el8.6.0+1001+b5678180 |
| rocky 8 | rubygem-bigdecimal | 3.0.0-141.module+el8.6.0+1002+a7dba0ac |
| rocky 8 | rubygem-bundler | 2.2.33-141.module+el8.6.0+1002+a7dba0ac |
| rocky 8 | rubygem-io-console | 0.5.7-141.module+el8.6.0+1002+a7dba0ac |
| rocky 8 | rubygem-irb | 1.3.5-141.module+el8.6.0+1002+a7dba0ac |
| rocky 8 | rubygem-json | 2.5.1-141.module+el8.6.0+1002+a7dba0ac |
| rocky 8 | rubygem-minitest | 5.14.2-141.module+el8.6.0+1002+a7dba0ac |
| rocky 8 | rubygem-mysql2 | 0.5.3-1.module+el8.6.0+1001+b5678180 |
| rocky 8 | rubygem-mysql2-doc | 0.5.3-1.module+el8.6.0+1001+b5678180 |
| rocky 8 | rubygem-pg | 1.2.3-1.module+el8.6.0+1001+b5678180 |
| rocky 8 | rubygem-pg-doc | 1.2.3-1.module+el8.6.0+1001+b5678180 |
| rocky 8 | rubygem-power_assert | 1.2.0-141.module+el8.6.0+1002+a7dba0ac |
| rocky 8 | rubygem-psych | 3.3.2-141.module+el8.6.0+1002+a7dba0ac |
| rocky 8 | rubygem-rake | 13.0.3-141.module+el8.6.0+1002+a7dba0ac |
| rocky 8 | rubygem-rbs | 1.4.0-141.module+el8.6.0+1002+a7dba0ac |
| rocky 8 | rubygem-rdoc | 6.3.3-141.module+el8.6.0+1002+a7dba0ac |
| rocky 8 | rubygem-rexml | 3.2.5-141.module+el8.6.0+1002+a7dba0ac |
| rocky 8 | rubygem-rss | 0.2.9-141.module+el8.6.0+1002+a7dba0ac |
| rocky 8 | rubygem-test-unit | 3.3.7-141.module+el8.6.0+1002+a7dba0ac |
| rocky 8 | rubygem-typeprof | 0.15.2-141.module+el8.6.0+1002+a7dba0ac |
| rocky 8 | rubygems | 3.2.33-141.module+el8.6.0+1002+a7dba0ac |
| rocky 8 | rubygems-devel | 3.2.33-141.module+el8.6.0+1002+a7dba0ac |
| rocky 9 | ruby | 3.0.4-160.el9_0 |
| rocky 9 | ruby-default-gems | 3.0.4-160.el9_0 |
| rocky 9 | ruby-devel | 3.0.4-160.el9_0 |
| rocky 9 | ruby-libs | 3.0.4-160.el9_0 |
| rocky 9 | rubygem-bigdecimal | 3.0.0-160.el9_0 |
| rocky 9 | rubygem-bundler | 2.2.33-160.el9_0 |
| rocky 9 | rubygem-io-console | 0.5.7-160.el9_0 |
| rocky 9 | rubygem-irb | 1.3.5-160.el9_0 |
| rocky 9 | rubygem-json | 2.5.1-160.el9_0 |
| rocky 9 | rubygem-minitest | 5.14.2-160.el9_0 |
| rocky 9 | rubygem-power_assert | 1.2.0-160.el9_0 |
| rocky 9 | rubygem-psych | 3.3.2-160.el9_0 |
| rocky 9 | rubygem-rake | 13.0.3-160.el9_0 |
| rocky 9 | rubygem-rbs | 1.4.0-160.el9_0 |
| rocky 9 | rubygem-rdoc | 6.3.3-160.el9_0 |
| rocky 9 | rubygem-rexml | 3.2.5-160.el9_0 |
| rocky 9 | rubygem-rss | 0.2.9-160.el9_0 |
| rocky 9 | rubygem-test-unit | 3.3.7-160.el9_0 |
| rocky 9 | rubygem-typeprof | 0.15.2-160.el9_0 |
| rocky 9 | rubygems | 3.2.33-160.el9_0 |
| rocky 9 | rubygems-devel | 3.2.33-160.el9_0 |
| ubuntu 22.04 | ruby3.0 | 3.0.2-7ubuntu2.1 |
References
- http://www.ruby-lang.org/en/news/2022/04/12/double-free-in-regexp-compilation-cve-2022-28738/
- https://access.redhat.com/errata/RHSA-2022:6585
- https://access.redhat.com/security/cve/CVE-2022-28738
- https://bugzilla.redhat.com/2075685
- https://bugzilla.redhat.com/2075687
- https://bugzilla.redhat.com/show_bug.cgi?id=2075685
- https://bugzilla.redhat.com/show_bug.cgi?id=2075687
- https://bugzilla.redhat.com/show_bug.cgi?id=2109428
All 25 references
- https://creativecommons.org/licenses/by/4.0/
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28738
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28739
- https://errata.almalinux.org/9/ALSA-2022-6585.html
- https://errata.rockylinux.org/RLSA-2022:6585
- https://github.com/ruby/ruby/commit/052ec6d2585c3ace95671013d336f5543624ef3d%20%28v3_0_4%29
- https://github.com/ruby/ruby/commit/73f45e5e96ccc13a131f7c0122cf8600ce5b930f%20%28v3_1_2%29
- https://hackerone.com/reports/1220911
- https://linux.oracle.com/cve/CVE-2022-28738.html
- https://linux.oracle.com/errata/ELSA-2022-6585.html
- https://nvd.nist.gov/vuln/detail/CVE-2022-28738
- https://security-tracker.debian.org/tracker/CVE-2022-28738
- https://security.gentoo.org/glsa/202401-27
- https://security.netapp.com/advisory/ntap-20220624-0002/
- https://ubuntu.com/security/notices/USN-5462-1
- https://www.cve.org/CVERecord?id=CVE-2022-28738
- https://www.ruby-lang.org/en/news/2022/04/12/double-free-in-regexp-compilation-cve-2022-28738/