HCE2-SA-2024-0169 Critical HCE 2.0 Security Fix(es): An issue was discovered in Ruby 3.x through 3.3.0. If attacker-supplied data is provided to the Ruby regex compiler, it is possible to extract arbitrary heap data relative to the start of the text, including pointers and sensitive strings. The fixed versions are 3.0.7, 3.1.5, 3.2.4, and 3.3.1. (CVE-2024-27282) There is a buffer over-read in Ruby before 2.6.10, 2.7.x before 2.7.6, 3.x before 3.0.4, and 3.1.x before 3.1.2. It occurs in String-to-Float conversion, including Kernel#Float and String#to_f. (CVE-2022-28739) A double free was found in the Regexp compiler in Ruby 3.x before 3.0.4 and 3.1.x before 3.1.2. If a victim attempts to create a Regexp from untrusted user input, an attacker may be able to write to unexpected memory locations. (CVE-2022-28738) HCE 2.0 rubygems-3.2.32-122.r11.hce2.noarch.rpm rubygems-devel-3.2.32-122.r11.hce2.noarch.rpm rubygem-bigdecimal-3.0.0-122.r11.hce2.aarch64.rpm rubygem-did_you_mean-1.5.0-122.r11.hce2.noarch.rpm rubygem-io-console-0.5.7-122.r11.hce2.aarch64.rpm rubygem-json-2.5.1-122.r11.hce2.aarch64.rpm rubygem-minitest-5.14.2-122.r11.hce2.noarch.rpm rubygem-openssl-2.2.1-122.r11.hce2.aarch64.rpm rubygem-power_assert-1.2.0-122.r11.hce2.noarch.rpm rubygem-psych-3.3.2-122.r11.hce2.aarch64.rpm rubygem-rake-13.0.3-122.r11.hce2.noarch.rpm rubygem-rbs-1.4.0-122.r11.hce2.noarch.rpm rubygem-rdoc-6.3.3-122.r11.hce2.noarch.rpm rubygem-rexml-3.2.5-122.r11.hce2.noarch.rpm rubygem-rss-0.2.9-122.r11.hce2.noarch.rpm rubygem-test-unit-3.3.7-122.r11.hce2.noarch.rpm rubygem-typeprof-0.15.2-122.r11.hce2.noarch.rpm ruby-3.0.3-122.r11.hce2.aarch64.rpm ruby-devel-3.0.3-122.r11.hce2.aarch64.rpm ruby-help-3.0.3-122.r11.hce2.noarch.rpm ruby-irb-3.0.3-122.r11.hce2.noarch.rpm rubygem-bigdecimal-3.0.0-122.r11.hce2.x86_64.rpm rubygem-io-console-0.5.7-122.r11.hce2.x86_64.rpm rubygem-json-2.5.1-122.r11.hce2.x86_64.rpm rubygem-openssl-2.2.1-122.r11.hce2.x86_64.rpm rubygem-psych-3.3.2-122.r11.hce2.x86_64.rpm ruby-3.0.3-122.r11.hce2.x86_64.rpm ruby-devel-3.0.3-122.r11.hce2.x86_64.rpm