Uzha
Sign in
← Today's brief

Security · Updated 23 Oct, 11:24 pm IST

Ruby fixes three Onigmo regex bugs behind four GitLab RCE flaws

Image: The Hacker News

Why it matters for readers: If you use Ruby or GitLab, these fixes stop patterns that could crash or allow attackers to run code on servers.

  • Ruby published versions 4.0.9, 3.4.12, and 3.3.13 to address bugs in the Onigmo regex engine.1
  • The three Onigmo bugs were responsible for four critical RCE vulnerabilities that GitLab patched recently.1
  • GitLab discovered that a specially crafted regex pattern could corrupt memory while Ruby compiles it, possibly leading to code execution on GitLab servers.1
SaveAsk about this story
Report a mistake in this summary

Get a brief like this every morning

Uzha reads hundreds of sources and gives you the stories that matter for your work, with every source linked. Free.

Get started