The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 allows code injection if the first argument (aka the "command" argument) to Shell#[] or Shell#test in lib/shell.rb is untrusted data. An attacker can exploit this to call an arbitrary Ruby method.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rubygem-pgUpgrade rubygem-mysql2-docUpgrade rubygem-bson-docUpgrade rubygem-bsonUpgrade rubygem-abrtUpgrade rubygem-abrt-docUpgrade rubygem-mysql2Upgrade rubygem-mongoUpgrade rubygem-mongo-docUpgrade rubygem-pg-doc | May 4, 2022 | Nov 26, 2019 |
| Alpine Linux | — | Upgrade ruby | Aug 22, 2024 | Nov 26, 2019 |
| Amazon Linux Ami 2 | — | Upgrade rubygem-opensslUpgrade ruby-docUpgrade rubygemsUpgrade ruby-develUpgrade ruby-debuginfoUpgrade rubygem-power_assertUpgrade rubygem-rdocUpgrade rubygem-did_you_meanUpgrade rubygem-minitestUpgrade rubygem-irbUpgrade rubygem-test-unitUpgrade ruby-irbUpgrade rubygem-bundlerUpgrade rubyUpgrade rubygem-xmlrpcUpgrade rubygem-bigdecimalUpgrade rubygem-io-consoleUpgrade rubygems-develUpgrade ruby-libsUpgrade rubygem-jsonUpgrade rubygem-net-telnetUpgrade ruby-tcltkUpgrade rubygem-rakeUpgrade rubygem-psych | Sep 28, 2023 | Nov 26, 2019 |
| Amazon_linux | — | Upgrade ruby24 | Sep 1, 2020 | Oct 1, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Nov 26, 2019 |
| Centos_linux | — | Upgrade ruby-debuginfoUpgrade rubygem-did_you_meanUpgrade rubygem-bigdecimalUpgrade rubygem-xmlrpcUpgrade rubygem-mysql2-docUpgrade rubygem-io-consoleUpgrade rubygem-psych-debuginfoUpgrade rubygem-abrt-docUpgrade rubygem-bson-docUpgrade rubygems-develUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-mongo-docUpgrade rubygem-rdocUpgrade rubygem-io-console-debuginfoUpgrade rubygem-json-debuginfoUpgrade rubygem-rakeUpgrade rubygem-test-unitUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-abrtUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-openssl-debuginfoUpgrade rubygem-pg-debuginfoUpgrade rubygem-bundler-docUpgrade ruby-docUpgrade rubygem-irbUpgrade rubygem-minitestUpgrade rubygem-bsonUpgrade rubygem-opensslUpgrade rubygem-mysql2Upgrade ruby-libs-debuginfoUpgrade ruby-irbUpgrade ruby-develUpgrade rubygem-jsonUpgrade rubygem-bson-debuginfoUpgrade rubygem-bson-debugsourceUpgrade rubygem-net-telnetUpgrade rubyUpgrade rubygem-power_assertUpgrade rubygem-psychUpgrade rubygemsUpgrade rubygem-pg-docUpgrade rubygem-pg-debugsourceUpgrade rubygem-mongoUpgrade rubygem-bundlerUpgrade ruby-debugsourceUpgrade rubygem-pgUpgrade ruby-libs | Jun 30, 2021 | Nov 26, 2019 |
| Debian | — | Upgrade jruby | Nov 27, 2019 | Nov 27, 2019 |
| Freebsd | — | Upgrade ruby | Oct 3, 2019 | Oct 2, 2019 |
| Gentoo Linux | — | Upgrade dev-lang/ruby. | Mar 16, 2020 | Nov 26, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade ruby-irbUpgrade ruby-libsUpgrade ruby | Sep 28, 2020 | Nov 26, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade ruby-irbUpgrade rubyUpgrade ruby-libs | Mar 24, 2020 | Nov 26, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade ruby-libsUpgrade ruby-irbUpgrade ruby | Jan 3, 2020 | Nov 26, 2019 |
| Oracle Solaris | — | Upgrade runtime/ruby-25 to version 2.5.7-11.4.19.0.1.2.0 on Solaris 11.4Upgrade runtime/ruby-26 to version 2.6.5-11.4.19.0.1.2.0 on Solaris 11.4 | Jan 19, 2021 | Nov 26, 2019 |
| Oracle_linux | — | Upgrade rubygem-net-telnetUpgrade rubygem-mongoUpgrade rubygem-opensslUpgrade rubygem-psychUpgrade rubygem-bundlerUpgrade rubygemsUpgrade rubygem-jsonUpgrade rubygem-abrtUpgrade rubygem-mongo-docUpgrade rubyUpgrade rubygem-power_assertUpgrade rubygem-pg-docUpgrade ruby-libsUpgrade ruby-develUpgrade ruby-docUpgrade rubygem-mysql2Upgrade rubygem-irbUpgrade rubygem-minitestUpgrade rubygem-pgUpgrade rubygem-bundler-docUpgrade rubygem-bsonUpgrade rubygem-bigdecimalUpgrade rubygem-abrt-docUpgrade rubygem-mysql2-docUpgrade rubygem-rdocUpgrade ruby-irbUpgrade rubygem-rakeUpgrade rubygem-test-unitUpgrade rubygem-xmlrpcUpgrade rubygem-io-consoleUpgrade rubygems-develUpgrade rubygem-bson-docUpgrade rubygem-did_you_mean | Jul 2, 2021 | Nov 26, 2019 |
| Redhat_linux | — | Upgrade rubygem-abrtNo solution existsUpgrade rubygem-openssl-debuginfoUpgrade rubygem-irbUpgrade rubygem-mysql2Upgrade rubygem-psychUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-power_assertUpgrade rubygem-bson-debuginfoUpgrade rubygem-mongoUpgrade rubygem-rakeUpgrade rubygem-mongo-docUpgrade rubygem-bigdecimal-debuginfoUpgrade ruby-docUpgrade rubygem-minitestUpgrade rubygem-jsonUpgrade rubygem-pg-docUpgrade rubygem-pg-debuginfoUpgrade rubygem-bundlerUpgrade rubygem-net-telnetUpgrade rubygem-bsonUpgrade rubygem-bigdecimalUpgrade rubygem-abrt-docUpgrade ruby-debugsourceUpgrade ruby-libsUpgrade rubygem-pg-debugsourceUpgrade rubygem-bson-debugsourceUpgrade rubyUpgrade rubygem-io-consoleUpgrade rubygem-bundler-docUpgrade rubygem-pgUpgrade rubygem-xmlrpcUpgrade rubygem-did_you_meanUpgrade rubygem-psych-debuginfoUpgrade rubygems-develUpgrade rubygemsUpgrade ruby-irbUpgrade rubygem-bson-docUpgrade ruby-develUpgrade rubygem-json-debuginfoUpgrade rubygem-io-console-debuginfoUpgrade rubygem-opensslUpgrade rubygem-test-unitUpgrade rubygem-mysql2-docUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-rdocUpgrade ruby-debuginfoUpgrade ruby-libs-debuginfo | Jun 30, 2021 | Nov 26, 2019 |
| Rocky_linux | — | Upgrade rubygem-io-console-debuginfoUpgrade rubygem-psych-debuginfoUpgrade ruby-debuginfoUpgrade rubygem-json-debuginfoUpgrade rubygem-opensslUpgrade rubyUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-pgUpgrade ruby-libs-debuginfoUpgrade ruby-develUpgrade rubygem-io-consoleUpgrade rubygem-bson-debuginfoUpgrade rubygem-jsonUpgrade rubygem-openssl-debuginfoUpgrade rubygem-psychUpgrade ruby-libsUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-bigdecimalUpgrade rubygem-bson-debugsourceUpgrade rubygem-bsonUpgrade ruby-debugsourceUpgrade rubygem-mysql2Upgrade rubygem-pg-debuginfoUpgrade rubygem-pg-debugsourceUpgrade rubygem-mysql2-debugsource | May 5, 2022 | Nov 26, 2019 |
| Suse | — | Upgrade yast2-ruby-bindingsUpgrade ruby2.5-develUpgrade ruby2.1-develUpgrade ruby2.5-docUpgrade libruby2_1-2_1Upgrade ruby2.1-stdlibUpgrade ruby2.5-stdlibUpgrade libruby2_5-2_5Upgrade ruby2.5-doc-riUpgrade ruby2.5-devel-extraUpgrade ruby2.5Upgrade ruby2.1 | Mar 21, 2020 | Oct 1, 2019 |
| Ubuntu | — | Upgrade ruby2.3Upgrade libruby2.3Upgrade libruby2.5Upgrade ruby2.5 | Nov 27, 2019 | Oct 1, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 26, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub