title: Red Hat Security Advisory: rh-ruby24-ruby security, bug fix, and enhancement update
description: ruby: Buffer underrun vulnerability in Kernel.sprintf rubygems: Escape sequence in the "summary" field of gemspec rubygems: No size limit in summary length of gem spec rubygems: Arbitrary file overwrite due to incorrect validation of specification name rubygems: DNS hijacking vulnerability rubygems: Unsafe object deserialization through YAML formatted gem specifications ruby: Escape sequence injection vulnerability in the Basic authentication of WEBrick ruby: Arbitrary heap exposure during a JSON.generate call
cpes: cpe:/a:redhat:rhel_software_collections:3::el6 cpe:/a:redhat:rhel_software_collections:3::el7