1. Home
  2. Security Advisories
  3. Ubuntu
  4. USN-6181-1

[USN-6181-1] Ruby vulnerabilities

Severity High
Affected Packages 8
CVEs 3
Info Packages Vulnerabilities

Several security issues were fixed in Ruby.

Hiroshi Tokumaru discovered that Ruby did not properly handle certain
user input for applications the generate HTTP responses using cgi gem.
An attacker could possibly use this issue to maliciously modify the
response a user would receive from a vulnerable application. This issue
only affected Ubuntu 22.10. (CVE-2021-33621)

It was discovered that Ruby incorrectly handled certain regular expressions.
An attacker could possibly use this issue to cause a denial of service.
(CVE-2023-28755, CVE-2023-28756)

Package Affected Version
pkg:deb/ubuntu/ruby3.1?distro=lunar < 3.1.2-6ubuntu0.23.04.1
pkg:deb/ubuntu/ruby3.1?distro=kinetic < 3.1.2-2ubuntu0.22.10.1
pkg:deb/ubuntu/ruby3.1-doc?distro=lunar < 3.1.2-6ubuntu0.23.04.1
pkg:deb/ubuntu/ruby3.1-doc?distro=kinetic < 3.1.2-2ubuntu0.22.10.1
pkg:deb/ubuntu/ruby3.1-dev?distro=lunar < 3.1.2-6ubuntu0.23.04.1
pkg:deb/ubuntu/ruby3.1-dev?distro=kinetic < 3.1.2-2ubuntu0.22.10.1
pkg:deb/ubuntu/libruby3.1?distro=lunar < 3.1.2-6ubuntu0.23.04.1
pkg:deb/ubuntu/libruby3.1?distro=kinetic < 3.1.2-2ubuntu0.22.10.1
ID
USN-6181-1
Severity
high
Severity from
CVE-2021-33621
URL
https://ubuntu.com/security/notices/USN-6181-1
Published
2023-06-21T08:42:16
(14 months ago)
Modified
2023-06-21T08:42:16
(14 months ago)
Other Advisories
Type Package URL Namespace Name / Product Version Distribution / Platform Arch Patch / Fix
Affected pkg:deb/ubuntu/ruby3.1?distro=lunar ubuntu ruby3.1 < 3.1.2-6ubuntu0.23.04.1 lunar
Affected pkg:deb/ubuntu/ruby3.1?distro=kinetic ubuntu ruby3.1 < 3.1.2-2ubuntu0.22.10.1 kinetic
Affected pkg:deb/ubuntu/ruby3.1-doc?distro=lunar ubuntu ruby3.1-doc < 3.1.2-6ubuntu0.23.04.1 lunar
Affected pkg:deb/ubuntu/ruby3.1-doc?distro=kinetic ubuntu ruby3.1-doc < 3.1.2-2ubuntu0.22.10.1 kinetic
Affected pkg:deb/ubuntu/ruby3.1-dev?distro=lunar ubuntu ruby3.1-dev < 3.1.2-6ubuntu0.23.04.1 lunar
Affected pkg:deb/ubuntu/ruby3.1-dev?distro=kinetic ubuntu ruby3.1-dev < 3.1.2-2ubuntu0.22.10.1 kinetic
Affected pkg:deb/ubuntu/libruby3.1?distro=lunar ubuntu libruby3.1 < 3.1.2-6ubuntu0.23.04.1 lunar
Affected pkg:deb/ubuntu/libruby3.1?distro=kinetic ubuntu libruby3.1 < 3.1.2-2ubuntu0.22.10.1 kinetic
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories Exploits PoC Pubblication Date Modification Date
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories PoC Pubblication Date Modification Date