The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
A ReDoS issue was discovered in the URI component through 0.12.0 in Ruby through 3.2.1. The URI parser mishandles invalid URLs that have specific characters. It causes an increase in execution time for parsing strings to URI objects. The fixed versions are 0.12.1, 0.11.1, 0.10.2 and 0.10.0.1.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rubygem-rdocUpgrade rubygem-did_you_meanUpgrade rubygem-mysql2Upgrade ruby-irbUpgrade rubyUpgrade ruby-develUpgrade rubygem-rakeUpgrade rubygem-pg-docUpgrade rubygem-mongo-docUpgrade ruby-default-gemsUpgrade rubygem-bundlerUpgrade rubygem-rssUpgrade rubygem-opensslUpgrade ruby-bundled-gemsUpgrade rubygem-rbsUpgrade rubygem-bundler-docUpgrade rubygem-rexmlUpgrade rubygem-bsonUpgrade rubygem-abrtUpgrade rubygem-irbUpgrade rubygem-mysql2-docUpgrade ruby-docUpgrade rubygem-jsonUpgrade ruby-libsUpgrade rubygemsUpgrade rubygem-xmlrpcUpgrade rubygem-io-consoleUpgrade rubygem-minitestUpgrade rubygem-psychUpgrade rubygems-develUpgrade rubygem-test-unitUpgrade rubygem-bigdecimalUpgrade rubygem-abrt-docUpgrade rubygem-bson-docUpgrade rubygem-pgUpgrade rubygem-typeprofUpgrade rubygem-net-telnetUpgrade rubygem-mongoUpgrade rubygem-power_assert | Jul 4, 2023 | Mar 31, 2023 |
| Alpine Linux | — | Upgrade ruby | Mar 26, 2024 | Mar 31, 2023 |
| Amazon Linux Ami 2 | — | Upgrade ruby-libsUpgrade rubygem-irbUpgrade ruby-default-gemsUpgrade rubygemsUpgrade rubygem-psychUpgrade rubygem-bigdecimalUpgrade rubyUpgrade rubygem-jsonUpgrade rubygem-test-unitUpgrade ruby-debuginfoUpgrade rubygem-rbsUpgrade rubygem-bundlerUpgrade rubygem-rssUpgrade ruby-docUpgrade rubygem-rexmlUpgrade rubygem-typeprofUpgrade rubygems-develUpgrade rubygem-io-consoleUpgrade rubygem-minitestUpgrade rubygem-power_assertUpgrade rubygem-rdocUpgrade ruby-develUpgrade rubygem-rake | Sep 28, 2023 | Mar 31, 2023 |
| Amazon_linux_2023 | — | Upgrade ruby3.2-bundled-gemsUpgrade ruby3.2-rubygem-typeprofUpgrade ruby3.2-rubygem-io-consoleUpgrade ruby3.2-rubygem-jsonUpgrade ruby3.2-bundled-gems-debuginfoUpgrade ruby3.2-libs-debuginfoUpgrade ruby3.2-rubygem-json-debuginfoUpgrade ruby3.2-rubygems-develUpgrade ruby3.2-rubygem-rbsUpgrade ruby3.2-rubygem-irbUpgrade ruby3.2-rubygem-rakeUpgrade ruby3.2-rubygem-rbs-debuginfoUpgrade ruby3.2-debugsourceUpgrade ruby3.2-debuginfoUpgrade ruby3.2-rubygem-rdocUpgrade ruby3.2-rubygem-bundlerUpgrade ruby3.2-libsUpgrade ruby3.2-rubygem-psych-debuginfoUpgrade ruby3.2-rubygem-rssUpgrade ruby3.2-rubygem-io-console-debuginfoUpgrade ruby3.2-docUpgrade ruby3.2-rubygem-power_assertUpgrade ruby3.2-rubygem-rexmlUpgrade ruby3.2-rubygem-psychUpgrade ruby3.2-rubygem-test-unitUpgrade ruby3.2-default-gemsUpgrade ruby3.2-develUpgrade ruby3.2Upgrade ruby3.2-rubygem-bigdecimal-debuginfoUpgrade ruby3.2-rubygem-bigdecimalUpgrade ruby3.2-rubygemsUpgrade ruby3.2-rubygem-minitest | Feb 17, 2025 | Mar 21, 2023 |
| Centos_linux | — | Upgrade rubygem-net-telnetUpgrade rubygem-bson-debuginfoUpgrade rubygem-pg-docUpgrade rubygem-rakeUpgrade ruby-libsUpgrade rubygem-bsonUpgrade rubygem-json-debuginfoUpgrade rubygem-mysql2-debugsourceUpgrade rubygems-develUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-openssl-debuginfoUpgrade rubygem-bson-docUpgrade rubygem-jsonUpgrade rubygem-abrt-docUpgrade ruby-debugsourceUpgrade rubygem-did_you_meanUpgrade rubygem-psychUpgrade rubygem-io-consoleUpgrade rubygem-bigdecimalUpgrade rubygem-pg-debuginfoUpgrade rubygem-bson-debugsourceUpgrade rubygem-pgUpgrade rubygem-xmlrpcUpgrade rubygem-mysql2-debuginfoUpgrade rubyUpgrade ruby-irbUpgrade ruby-debuginfoUpgrade rubygem-test-unitUpgrade rubygem-mysql2Upgrade rubygem-io-console-debuginfoUpgrade ruby-docUpgrade ruby-develUpgrade rubygem-mongoUpgrade rubygem-power_assertUpgrade ruby-default-gemsUpgrade rubygem-psych-debuginfoUpgrade rubygem-pg-debugsourceUpgrade rubygem-abrtUpgrade ruby-libs-debuginfoUpgrade rubygemsUpgrade rubygem-mongo-docUpgrade rubygem-bundlerUpgrade rubygem-opensslUpgrade rubygem-mysql2-docUpgrade rubygem-irbUpgrade rubygem-bundler-docUpgrade rubygem-minitestUpgrade rubygem-rdoc | Jun 28, 2023 | Mar 31, 2023 |
| Debian | — | Upgrade ruby2.7Upgrade jrubyUpgrade rubygems | May 2, 2023 | Mar 31, 2023 |
| Dell Powerstore Dsa2024158 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Apr 4, 2024 |
| Dell Powerstore Dsa2024225 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | May 29, 2024 |
| Freebsd | — | Upgrade ruby31Upgrade rubyUpgrade ruby27Upgrade rubygem-uriUpgrade ruby32Upgrade ruby30 | Apr 1, 2023 | Mar 30, 2023 |
| Gentoo Linux | — | Upgrade dev-lang/ruby. | Jan 25, 2024 | Mar 31, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade ruby-irbUpgrade ruby-helpUpgrade ruby | Jul 18, 2023 | Mar 31, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade rubyUpgrade ruby-helpUpgrade ruby-irb | Jan 10, 2024 | Mar 31, 2023 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Sep 22, 2023 |
| Oracle_linux | — | Upgrade rubygem-minitestUpgrade rubygem-io-consoleUpgrade rubygem-typeprofUpgrade ruby-develUpgrade rubygem-bigdecimalUpgrade rubygem-mysql2-docUpgrade rubygem-pg-docUpgrade rubygem-bson-docUpgrade rubygems-develUpgrade rubygem-rakeUpgrade rubygem-power_assertUpgrade rubygem-mongoUpgrade ruby-irbUpgrade rubygem-irbUpgrade rubygem-psychUpgrade rubyUpgrade rubygem-bundlerUpgrade rubygem-rbsUpgrade rubygem-mongo-docUpgrade rubygem-net-telnetUpgrade ruby-docUpgrade rubygem-pgUpgrade rubygem-mysql2Upgrade rubygem-abrtUpgrade rubygemsUpgrade ruby-libsUpgrade rubygem-rexmlUpgrade rubygem-opensslUpgrade ruby-default-gemsUpgrade rubygem-bundler-docUpgrade rubygem-jsonUpgrade rubygem-bsonUpgrade rubygem-xmlrpcUpgrade rubygem-rdocUpgrade rubygem-did_you_meanUpgrade ruby-bundled-gemsUpgrade rubygem-rssUpgrade rubygem-abrt-docUpgrade rubygem-test-unit | Jul 8, 2023 | Mar 21, 2023 |
| Redhat_linux | — | Upgrade ruby-develUpgrade ruby-default-gemsUpgrade rubygem-bundler-docUpgrade rubygem-abrtUpgrade rubygem-rexmlUpgrade rubygem-opensslUpgrade rubygem-rdocUpgrade ruby-bundled-gemsUpgrade rubygem-bundlerUpgrade rubygem-pg-debugsourceUpgrade ruby-bundled-gems-debuginfoUpgrade rubygem-rakeUpgrade rubygem-test-unitUpgrade rubygem-rbsUpgrade ruby-irbUpgrade rubygem-mongo-docUpgrade rubyUpgrade rubygem-irbUpgrade rubygem-io-console-debuginfoUpgrade rubygem-pgUpgrade rubygem-mysql2Upgrade ruby-libs-debuginfoUpgrade ruby-docUpgrade rubygem-did_you_meanUpgrade rubygem-xmlrpcUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-pg-docUpgrade rubygem-pg-debuginfoUpgrade rubygem-mysql2-docUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-bigdecimalUpgrade rubygems-develUpgrade rubygem-io-consoleUpgrade ruby-debugsourceUpgrade rubygem-rbs-debuginfoUpgrade rubygem-json-debuginfoNo solution existsUpgrade rubygem-bson-debuginfoUpgrade rubygem-net-telnetUpgrade rubygem-psychUpgrade rubygem-openssl-debuginfoUpgrade rubygemsUpgrade rubygem-psych-debuginfoUpgrade rubygem-mongoUpgrade rubygem-power_assertUpgrade rubygem-typeprofUpgrade rubygem-rssUpgrade ruby-debuginfoUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-bsonUpgrade rubygem-jsonUpgrade rubygem-minitestUpgrade rubygem-bson-debugsourceUpgrade ruby-libsUpgrade rubygem-abrt-docUpgrade rubygem-bson-doc | Jun 28, 2023 | Mar 31, 2023 |
| Rocky_linux | — | Upgrade rubygem-pg-debugsourceUpgrade ruby-libsUpgrade rubygem-jsonUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-bsonUpgrade ruby-debuginfoUpgrade rubygem-openssl-debuginfoUpgrade rubygem-psychUpgrade rubygem-rbsUpgrade ruby-bundled-gemsUpgrade rubygem-pgUpgrade ruby-debugsourceUpgrade rubygem-psych-debuginfoUpgrade ruby-libs-debuginfoUpgrade rubygem-json-debuginfoUpgrade rubygem-mysql2Upgrade rubygem-pg-debuginfoUpgrade ruby-develUpgrade rubyUpgrade rubygem-opensslUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-bigdecimalUpgrade rubygem-rbs-debuginfoUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-bson-debugsourceUpgrade rubygem-io-console-debuginfoUpgrade rubygem-bson-debuginfoUpgrade rubygem-io-consoleUpgrade ruby-bundled-gems-debuginfo | Mar 5, 2024 | Mar 31, 2023 |
| Suse | — | Upgrade ruby2.5-doc-riUpgrade ruby2.5-stdlibUpgrade libruby2_5-2_5Upgrade ruby2.5-docUpgrade ruby2.5-devel-extraUpgrade ruby2.5-develUpgrade ruby2.5 | Oct 25, 2023 | Mar 31, 2023 |
| Ubuntu | — | Upgrade ruby-rubygemsUpgrade libruby2.5Upgrade ruby2.3 (Ubuntu Pro)Upgrade ruby3.1Upgrade libruby2.7Upgrade libruby3.1Upgrade ruby2.5Upgrade libruby2.3 (Ubuntu Pro)Upgrade ruby2.7 | May 5, 2023 | Mar 31, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 31, 2023 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub