========================================================================== Ubuntu Security Notice USN-7735-1 September 03, 2025
rubygems vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 25.04 - Ubuntu 22.04 LTS Summary: Several security issues were fixed in RubyGems. Software Description: - rubygems: package management framework for Ruby libraries/applications Details: It was discovered that RubyGems incorrectly handled certain regular expressions. An attacker could use this issue to cause RubyGems to crash, resulting in a denial of service. This issue only affected Ubuntu 22.04 LTS. (CVE-2023-28755) It was discovered that RubyGems incorrectly handled decompressed domain names within a DNS packet. An attacker could use this issue to cause RubyGems to crash, resulting in a denial of service. This issue only affected Ubuntu 25.04. (CVE-2025-24294) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 25.04 ruby-rubygems 3.6.3-1ubuntu0.1 Ubuntu 22.04 LTS ruby-rubygems 3.3.5-2ubuntu1.1 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-7735-1 CVE-2023-28755, CVE-2025-24294 Package Information: https://launchpad.net/ubuntu/+source/rubygems/3.6.3-1ubuntu0.1 https://launchpad.net/ubuntu/+source/rubygems/3.3.5-2ubuntu1.1
signature.asc
Description: OpenPGP digital signature
