[ubuntu/jammy-updates] ruby3.0 3.0.2-7ubuntu2.1 (Accepted)

[Ubuntu Archive Robot]

ruby3.0 (3.0.2-7ubuntu2.1) jammy-security; urgency=medium

  * SECURITY UPDATE: Double free
    - debian/patches/CVE-2022-28738.patch: just free compiled
      pattern if no space is used in regcomp.c, test/ruby/test_regexp.rb.
    - CVE-2022-28738
  * SECURITY UPDATE: Buffer over-read
    - debian/patches/CVE-2022-28739.patch: fix dtoa buffer
      overrun in missing/dtoa.c, test/ruby/test_float.rb.
    - CVE-2022-28739

Date: 2022-05-24 20:29:12.019285+00:00
Changed-By: leo.barbosa at canonical.com (Leonidas S. Barbosa)
Signed-By: Ubuntu Archive Robot <ubuntu-archive-robot at lists.canonical.com>
https://launchpad.net/ubuntu/+source/ruby3.0/3.0.2-7ubuntu2.1
-------------- next part --------------
Sorry, changesfile not available.