The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Date.parse in the date gem through 3.2.0 for Ruby allows ReDoS (regular expression Denial of Service) via a long string. The fixed versions are 3.2.1, 3.1.2, 3.0.2, and 2.0.1.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade ruby-develUpgrade rubygem-bundlerUpgrade rubygem-rakeUpgrade rubygem-io-consoleUpgrade rubygem-abrtUpgrade rubygem-mongo-docUpgrade rubygem-rexmlUpgrade rubygem-rdocUpgrade ruby-irbUpgrade rubyUpgrade rubygems-develUpgrade rubygem-irbUpgrade rubygem-did_you_meanUpgrade ruby-docUpgrade rubygem-mysql2-docUpgrade rubygem-bigdecimalUpgrade rubygem-pg-docUpgrade rubygem-opensslUpgrade ruby-default-gemsUpgrade rubygem-mysql2Upgrade rubygem-bsonUpgrade rubygem-abrt-docUpgrade rubygem-rbsUpgrade rubygem-minitestUpgrade rubygem-rssUpgrade rubygem-typeprofUpgrade rubygem-bundler-docUpgrade rubygem-power_assertUpgrade rubygem-test-unitUpgrade rubygem-pgUpgrade rubygem-xmlrpcUpgrade rubygem-jsonUpgrade rubygemsUpgrade rubygem-net-telnetUpgrade rubygem-psychUpgrade ruby-libsUpgrade rubygem-bson-docUpgrade rubygem-mongo | May 4, 2022 | Jan 1, 2022 |
| Alpine Linux | — | Upgrade ruby | Aug 22, 2024 | Jan 1, 2022 |
| Amazon Linux Ami 2 | — | Upgrade ruby-develUpgrade ruby-libsUpgrade rubygem-rexmlUpgrade rubygem-opensslUpgrade ruby-tcltkUpgrade rubygem-did_you_meanUpgrade rubygem-psychUpgrade ruby-docUpgrade rubygem-jsonUpgrade rubyUpgrade rubygem-rbsUpgrade rubygem-rakeUpgrade rubygem-rssUpgrade ruby-default-gemsUpgrade rubygem-irbUpgrade rubygem-bundlerUpgrade rubygem-minitestUpgrade ruby-debuginfoUpgrade rubygem-rdocUpgrade rubygem-power_assertUpgrade rubygem-net-telnetUpgrade rubygemsUpgrade rubygem-bigdecimalUpgrade ruby-irbUpgrade rubygem-test-unitUpgrade rubygem-xmlrpcUpgrade rubygem-typeprofUpgrade rubygems-develUpgrade rubygem-io-console | Sep 28, 2023 | Jan 1, 2022 |
| Centos_linux | — | Upgrade rubygem-mysql2-debuginfoUpgrade rubygem-pg-debuginfoUpgrade ruby-develUpgrade rubygem-test-unitUpgrade rubygem-pg-debugsourceUpgrade rubygem-mongo-docUpgrade ruby-irbUpgrade rubygem-rakeUpgrade rubygem-opensslUpgrade rubygem-irbUpgrade rubyUpgrade rubygem-mysql2-docUpgrade rubygem-abrtUpgrade rubygem-io-consoleUpgrade rubygem-bundlerUpgrade rubygem-mysql2Upgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-io-console-debuginfoUpgrade rubygem-xmlrpcUpgrade ruby-default-gemsUpgrade rubygem-rbsUpgrade rubygem-pg-docUpgrade rubygem-did_you_meanUpgrade rubygem-bson-debugsourceUpgrade ruby-docUpgrade rubygem-rdocUpgrade rubygem-rexmlUpgrade rubygemsUpgrade rubygem-net-telnetUpgrade rubygem-minitestUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-typeprofUpgrade rubygem-power_assertUpgrade rubygem-psych-debuginfoUpgrade rubygem-jsonUpgrade rubygem-bundler-docUpgrade ruby-libs-debuginfoUpgrade rubygem-bson-debuginfoUpgrade rubygem-pgUpgrade rubygem-mongoUpgrade ruby-libsUpgrade rubygem-psychUpgrade rubygem-bsonUpgrade ruby-debugsourceUpgrade ruby-debuginfoUpgrade rubygem-abrt-docUpgrade rubygem-openssl-debuginfoUpgrade rubygems-develUpgrade rubygem-bson-docUpgrade rubygem-bigdecimalUpgrade rubygem-rssUpgrade rubygem-json-debuginfo | Feb 17, 2022 | Jan 1, 2022 |
| Debian | — | Upgrade ruby2.7 | Dec 28, 2021 | Dec 28, 2021 |
| Freebsd | — | Upgrade ruby27Upgrade rubygem-dateUpgrade ruby30Upgrade rubyUpgrade ruby26 | Nov 4, 2022 | Nov 15, 2021 |
| Gentoo Linux | — | Upgrade dev-lang/ruby. | Jan 25, 2024 | Jan 1, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade ruby-irbUpgrade rubyUpgrade ruby-libs | Jun 22, 2022 | Jan 1, 2022 |
| Oracle_linux | — | Upgrade rubygem-irbUpgrade rubygem-mongoUpgrade rubygem-mysql2Upgrade rubygem-opensslUpgrade rubyUpgrade ruby-default-gemsUpgrade rubygem-psychUpgrade rubygem-rbsUpgrade rubygem-abrtUpgrade rubygem-abrt-docUpgrade rubygem-bson-docUpgrade rubygem-mysql2-docUpgrade rubygem-power_assertUpgrade rubygem-xmlrpcUpgrade rubygem-typeprofUpgrade rubygem-bundler-docUpgrade rubygemsUpgrade rubygem-pg-docUpgrade rubygem-rssUpgrade rubygem-net-telnetUpgrade rubygem-pgUpgrade rubygem-minitestUpgrade rubygem-bundlerUpgrade rubygem-rdocUpgrade rubygem-rakeUpgrade rubygem-rexmlUpgrade rubygem-bigdecimalUpgrade ruby-libsUpgrade rubygem-did_you_meanUpgrade ruby-irbUpgrade rubygem-io-consoleUpgrade rubygem-jsonUpgrade rubygem-bsonUpgrade rubygems-develUpgrade ruby-docUpgrade ruby-develUpgrade rubygem-mongo-docUpgrade rubygem-test-unit | Feb 17, 2022 | Nov 15, 2021 |
| Redhat_linux | — | Upgrade rubygem-rexmlUpgrade rubygem-did_you_meanUpgrade rubygem-typeprofUpgrade ruby-debugsourceUpgrade rubygem-io-consoleUpgrade ruby-libsUpgrade rubygem-bson-debuginfoNo solution existsUpgrade rubygem-pg-debuginfoUpgrade rubygem-json-debuginfoUpgrade rubygem-bsonUpgrade ruby-irbUpgrade rubygem-jsonUpgrade rubygem-bson-docUpgrade rubygem-pg-docUpgrade rubygem-bson-debugsourceUpgrade rubygem-rssUpgrade rubygem-psychUpgrade rubygem-mongo-docUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-rakeUpgrade rubygem-openssl-debuginfoUpgrade rubygem-abrt-docUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-mysql2Upgrade rubygem-bigdecimalUpgrade rubygem-net-telnetUpgrade rubygem-abrtUpgrade rubygemsUpgrade ruby-develUpgrade rubygem-xmlrpcUpgrade rubygem-power_assertUpgrade rubygem-pg-debugsourceUpgrade rubygem-pgUpgrade rubygem-rdocUpgrade rubygem-opensslUpgrade rubygem-mysql2-docUpgrade rubygem-io-console-debuginfoUpgrade rubygem-irbUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-mongoUpgrade ruby-docUpgrade rubygem-rbsUpgrade rubygem-psych-debuginfoUpgrade rubygem-test-unitUpgrade ruby-default-gemsUpgrade ruby-debuginfoUpgrade rubygem-bundler-docUpgrade rubyUpgrade rubygems-develUpgrade rubygem-bundlerUpgrade ruby-libs-debuginfoUpgrade rubygem-minitest | Feb 17, 2022 | Jan 1, 2022 |
| Rocky_linux | — | Upgrade rubygem-opensslUpgrade rubygem-io-console-debuginfoUpgrade ruby-develUpgrade ruby-libs-debuginfoUpgrade rubygem-mysql2-debuginfoUpgrade ruby-debuginfoUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-pgUpgrade rubygem-json-debuginfoUpgrade rubyUpgrade ruby-libsUpgrade ruby-debugsourceUpgrade rubygem-mysql2Upgrade rubygem-bigdecimalUpgrade rubygem-io-consoleUpgrade rubygem-bson-debugsourceUpgrade rubygem-bsonUpgrade rubygem-openssl-debuginfoUpgrade rubygem-pg-debugsourceUpgrade rubygem-psychUpgrade rubygem-bson-debuginfoUpgrade rubygem-jsonUpgrade rubygem-psych-debuginfoUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-pg-debuginfo | Mar 5, 2024 | Jan 1, 2022 |
| Suse | — | Upgrade ruby2.5-develUpgrade ruby2.5Upgrade ruby2.5-devel-extraUpgrade libruby2_5-2_5Upgrade ruby2.5-docUpgrade ruby2.5-stdlibUpgrade ruby2.5-doc-ri | Oct 26, 2022 | Jan 1, 2022 |
| Ubuntu | — | Upgrade ruby2.5Upgrade ruby2.7Upgrade ruby2.3 (Ubuntu Pro) | Jan 19, 2022 | Jan 1, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 1, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub