Important: rubygem-nokogiri

Issue Overview:

A flaw was found in the rubygem-nokogiri package. This flaw allows malicious users to change partial contents or configurations on the system. Additionally, this vulnerability can also cause a limited denial of service in the form of interruptions in resource availability. (CVE-2022-29181)

Affected Packages:

rubygem-nokogiri

Issue Correction:
Run yum update rubygem-nokogiri to update your system.

New Packages:

i686:  
    rubygem21-nokogiri-1.6.1-1.23.amzn1.i686  
    rubygem21-nokogiri-doc-1.6.1-1.23.amzn1.i686  
    rubygem20-nokogiri-1.6.1-1.23.amzn1.i686  
    rubygem22-nokogiri-1.6.1-1.23.amzn1.i686  
    rubygem20-nokogiri-doc-1.6.1-1.23.amzn1.i686  
    rubygem22-nokogiri-doc-1.6.1-1.23.amzn1.i686  
    rubygem-nokogiri-debuginfo-1.6.1-1.23.amzn1.i686  
  
src:  
    rubygem-nokogiri-1.6.1-1.23.amzn1.src  
  
x86_64:  
    rubygem22-nokogiri-1.6.1-1.23.amzn1.x86_64  
    rubygem20-nokogiri-doc-1.6.1-1.23.amzn1.x86_64  
    rubygem21-nokogiri-doc-1.6.1-1.23.amzn1.x86_64  
    rubygem22-nokogiri-doc-1.6.1-1.23.amzn1.x86_64  
    rubygem20-nokogiri-1.6.1-1.23.amzn1.x86_64  
    rubygem21-nokogiri-1.6.1-1.23.amzn1.x86_64  
    rubygem-nokogiri-debuginfo-1.6.1-1.23.amzn1.x86_64  

Additional References

Red Hat: CVE-2022-29181

Mitre: CVE-2022-29181