Vulmon
Amazon Linux AMI Security Advisory: ALAS-2023-1824
Advisory Release Date: 2023-08-30 17:56 Pacific
Advisory Updated Date: 2023-09-09 00:34 Pacific
Severity:
Medium
Issue Overview:
An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through 7.1.5. A stack out-of-bounds read occurs in match_at() during regular expression searching. A logical error involving order of validation and access in match_at() could result in an out-of-bounds read from a stack buffer. (CVE-2017-9224)
Affected Packages:
ruby20
Issue Correction:
Run yum update ruby20 to update your system.
New Packages:
i686:
ruby20-2.0.0.648-2.42.amzn1.i686
rubygem20-io-console-0.4.2-2.42.amzn1.i686
rubygem20-psych-2.0.0-2.42.amzn1.i686
ruby20-devel-2.0.0.648-2.42.amzn1.i686
rubygem20-bigdecimal-1.2.0-2.42.amzn1.i686
ruby20-libs-2.0.0.648-2.42.amzn1.i686
ruby20-debuginfo-2.0.0.648-2.42.amzn1.i686
noarch:
ruby20-irb-2.0.0.648-2.42.amzn1.noarch
rubygems20-devel-2.0.14.1-2.42.amzn1.noarch
ruby20-doc-2.0.0.648-2.42.amzn1.noarch
rubygems20-2.0.14.1-2.42.amzn1.noarch
src:
ruby20-2.0.0.648-2.42.amzn1.src
x86_64:
rubygem20-io-console-0.4.2-2.42.amzn1.x86_64
rubygem20-psych-2.0.0-2.42.amzn1.x86_64
ruby20-2.0.0.648-2.42.amzn1.x86_64
ruby20-libs-2.0.0.648-2.42.amzn1.x86_64
ruby20-debuginfo-2.0.0.648-2.42.amzn1.x86_64
ruby20-devel-2.0.0.648-2.42.amzn1.x86_64
rubygem20-bigdecimal-1.2.0-2.42.amzn1.x86_64