CGI::Cookie.parse in Ruby through 2.6.8 mishandles security prefixes in cookie names. This also affects the CGI gem through 0.3.0 for Ruby.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rubygem-bigdecimalUpgrade rubygem-bsonUpgrade rubygem-did_you_meanUpgrade rubygem-rbsUpgrade rubygem-rexmlUpgrade ruby-docUpgrade rubygem-rakeUpgrade rubygem-io-consoleUpgrade rubygem-abrtUpgrade rubygem-xmlrpcUpgrade rubygem-test-unitUpgrade rubygem-mysql2Upgrade rubyUpgrade ruby-irbUpgrade rubygem-rssUpgrade rubygem-irbUpgrade rubygem-mysql2-docUpgrade rubygem-bundlerUpgrade rubygem-mongo-docUpgrade ruby-develUpgrade rubygem-jsonUpgrade rubygem-bundler-docUpgrade rubygem-mongoUpgrade rubygem-power_assertUpgrade rubygem-psychUpgrade ruby-default-gemsUpgrade rubygemsUpgrade rubygem-minitestUpgrade rubygems-develUpgrade rubygem-opensslUpgrade ruby-libsUpgrade rubygem-net-telnetUpgrade rubygem-typeprofUpgrade rubygem-pgUpgrade rubygem-abrt-docUpgrade rubygem-pg-docUpgrade rubygem-rdocUpgrade rubygem-bson-doc | May 4, 2022 | Jan 1, 2022 |
| Alpine Linux | — | Upgrade ruby | Aug 22, 2024 | Jan 1, 2022 |
| Amazon Linux Ami 2 | — | Upgrade rubygem-minitestUpgrade rubygem-typeprofUpgrade rubygem-jsonUpgrade rubygem-net-telnetUpgrade ruby-libsUpgrade rubygem-rssUpgrade rubygemsUpgrade rubygems-develUpgrade rubygem-psychUpgrade ruby-tcltkUpgrade rubygem-power_assertUpgrade rubygem-did_you_meanUpgrade ruby-default-gemsUpgrade rubyUpgrade rubygem-rakeUpgrade ruby-docUpgrade rubygem-io-consoleUpgrade rubygem-bigdecimalUpgrade ruby-debuginfoUpgrade ruby-develUpgrade rubygem-rbsUpgrade rubygem-bundlerUpgrade rubygem-irbUpgrade rubygem-xmlrpcUpgrade rubygem-rexmlUpgrade rubygem-opensslUpgrade rubygem-test-unitUpgrade ruby-irbUpgrade rubygem-rdoc | Sep 28, 2023 | Jan 1, 2022 |
| Centos_linux | — | Upgrade rubygem-did_you_meanUpgrade ruby-debuginfoUpgrade ruby-docUpgrade ruby-irbUpgrade rubygem-rexmlUpgrade rubygem-bsonUpgrade rubygem-bson-debuginfoUpgrade ruby-libsUpgrade rubygem-openssl-debuginfoUpgrade rubygem-mongo-docUpgrade ruby-debugsourceUpgrade rubygem-io-consoleUpgrade rubygem-rakeUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-rssUpgrade rubygems-develUpgrade rubygem-pg-debuginfoUpgrade rubygem-json-debuginfoUpgrade rubygem-bson-docUpgrade rubygem-bigdecimalUpgrade rubygem-xmlrpcUpgrade rubygem-test-unitUpgrade rubygem-mysql2Upgrade rubygem-rbsUpgrade ruby-libs-debuginfoUpgrade rubyUpgrade rubygem-pgUpgrade rubygem-jsonUpgrade ruby-default-gemsUpgrade rubygem-rdocUpgrade rubygem-psychUpgrade rubygem-irbUpgrade rubygem-io-console-debuginfoUpgrade rubygemsUpgrade rubygem-psych-debuginfoUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-typeprofUpgrade rubygem-net-telnetUpgrade rubygem-bson-debugsourceUpgrade rubygem-abrtUpgrade ruby-develUpgrade rubygem-bundlerUpgrade rubygem-opensslUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-bundler-docUpgrade rubygem-pg-docUpgrade rubygem-mysql2-docUpgrade rubygem-minitestUpgrade rubygem-abrt-docUpgrade rubygem-power_assertUpgrade rubygem-mongoUpgrade rubygem-pg-debugsource | Feb 17, 2022 | Jan 1, 2022 |
| Debian | — | Upgrade ruby2.7 | Dec 28, 2021 | Dec 28, 2021 |
| Freebsd | — | Upgrade rubyUpgrade ruby27Upgrade rubygem-cgiUpgrade ruby30Upgrade ruby26 | Nov 4, 2022 | Nov 24, 2021 |
| Gentoo Linux | — | Upgrade dev-lang/ruby. | Jan 25, 2024 | Jan 1, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade ruby-helpUpgrade ruby-irbUpgrade ruby | Apr 20, 2022 | Jan 1, 2022 |
| Huawei Euleros 2_0_sp3 | — | Upgrade ruby-irbUpgrade ruby-libsUpgrade ruby | May 25, 2022 | Jan 1, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade rubyUpgrade ruby-libsUpgrade ruby-irb | Mar 22, 2022 | Jan 1, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade ruby-irbUpgrade rubyUpgrade ruby-libs | Mar 29, 2022 | Jan 1, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade rubyUpgrade ruby-irbUpgrade ruby-help | Apr 19, 2022 | Jan 1, 2022 |
| Oracle_linux | — | Upgrade rubygem-io-consoleUpgrade rubygem-bigdecimalUpgrade rubygem-bundler-docUpgrade rubygem-mysql2Upgrade rubygem-bson-docUpgrade rubygem-typeprofUpgrade rubygem-pgUpgrade rubygem-psychUpgrade rubygem-abrt-docUpgrade rubygem-rssUpgrade rubygem-mongoUpgrade rubygem-minitestUpgrade rubygem-jsonUpgrade rubygems-develUpgrade ruby-libsUpgrade rubygem-net-telnetUpgrade rubygemsUpgrade rubygem-power_assertUpgrade rubygem-bsonUpgrade rubygem-rbsUpgrade ruby-irbUpgrade rubygem-rexmlUpgrade rubygem-xmlrpcUpgrade rubyUpgrade rubygem-did_you_meanUpgrade rubygem-rdocUpgrade rubygem-mongo-docUpgrade ruby-default-gemsUpgrade rubygem-pg-docUpgrade rubygem-mysql2-docUpgrade ruby-develUpgrade rubygem-test-unitUpgrade rubygem-rakeUpgrade ruby-docUpgrade rubygem-irbUpgrade rubygem-bundlerUpgrade rubygem-opensslUpgrade rubygem-abrt | Feb 17, 2022 | Nov 24, 2021 |
| Redhat_linux | — | Upgrade rubygem-bundler-docUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-bundlerUpgrade rubygem-rssUpgrade rubyUpgrade ruby-default-gemsUpgrade rubygem-did_you_meanUpgrade rubygem-pg-debugsourceUpgrade rubygem-rakeUpgrade rubygem-abrtUpgrade rubygem-io-console-debuginfoUpgrade rubygem-mysql2-docUpgrade rubygem-mongo-docUpgrade ruby-develUpgrade rubygem-mysql2Upgrade rubygem-irbUpgrade rubygem-psych-debuginfoUpgrade ruby-libsUpgrade rubygem-bson-debuginfoUpgrade rubygem-pg-docUpgrade ruby-irbUpgrade rubygem-pg-debuginfoUpgrade rubygem-rbsUpgrade ruby-docUpgrade rubygem-rexmlNo solution existsUpgrade rubygem-pgUpgrade rubygem-bsonUpgrade rubygem-jsonUpgrade rubygem-opensslUpgrade rubygems-develUpgrade rubygem-rdocUpgrade rubygem-json-debuginfoUpgrade rubygem-io-consoleUpgrade rubygem-bson-debugsourceUpgrade rubygem-power_assertUpgrade rubygem-bson-docUpgrade ruby-debugsourceUpgrade ruby-debuginfoUpgrade rubygem-mongoUpgrade rubygem-abrt-docUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-bigdecimalUpgrade rubygem-openssl-debuginfoUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-xmlrpcUpgrade rubygem-test-unitUpgrade rubygem-net-telnetUpgrade rubygem-minitestUpgrade ruby-libs-debuginfoUpgrade rubygemsUpgrade rubygem-psychUpgrade rubygem-typeprof | Feb 17, 2022 | Jan 1, 2022 |
| Rocky_linux | — | Upgrade rubygem-openssl-debuginfoUpgrade rubygem-bsonUpgrade rubygem-pgUpgrade ruby-debuginfoUpgrade ruby-debugsourceUpgrade rubygem-jsonUpgrade ruby-libs-debuginfoUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-psych-debuginfoUpgrade rubygem-mysql2Upgrade rubygem-psychUpgrade rubygem-json-debuginfoUpgrade ruby-libsUpgrade rubyUpgrade rubygem-opensslUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-bigdecimalUpgrade rubygem-io-consoleUpgrade rubygem-bigdecimal-debuginfoUpgrade ruby-develUpgrade rubygem-pg-debugsourceUpgrade rubygem-io-console-debuginfoUpgrade rubygem-bson-debugsourceUpgrade rubygem-bson-debuginfoUpgrade rubygem-pg-debuginfo | Mar 5, 2024 | Jan 1, 2022 |
| Suse | — | Upgrade ruby2.5-docUpgrade ruby2.5-doc-riUpgrade libruby2_5-2_5Upgrade ruby2.5-devel-extraUpgrade ruby2.5-develUpgrade ruby2.5-stdlibUpgrade ruby2.5 | Oct 26, 2022 | Jan 1, 2022 |
| Ubuntu | — | Upgrade ruby2.7Upgrade ruby2.3 (Ubuntu Pro)Upgrade ruby2.5 | Jan 19, 2022 | Jan 1, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 1, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub