Ruby Fixes Three Regex Engine Bugs Responsible for Four Critical GitLab RCE Flaws

Ruby has released new versions to fix three bugs in its regular expression engine, Onigmo. These bugs are linked to four critical security flaws that GitLab recently patched. The issues could be exploited by a specially crafted pattern that corrupts memory during compilation, potentially allowing code execution. The vulnerabilities were found by GitLab, which discovered the potential for code execution on its own servers. Ruby has addressed these issues in versions 4.0.9, 3.4.12, and 3.3.13. The fixes are intended to prevent potential remote code execution attacks.