The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
An issue was discovered in Ruby 3.x through 3.3.0. If attacker-supplied data is provided to the Ruby regex compiler, it is possible to extract arbitrary heap data relative to the start of the text, including pointers and sensitive strings. The fixed versions are 3.0.7, 3.1.5, 3.2.4, and 3.3.1.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rubygem-bigdecimalUpgrade ruby-bundled-gemsUpgrade rubygem-abrtUpgrade ruby-irbUpgrade rubygem-xmlrpcUpgrade rubygem-did_you_meanUpgrade rubygem-bsonUpgrade rubyUpgrade rubygem-mongo-docUpgrade rubygem-jsonUpgrade rubygem-irbUpgrade rubygem-io-consoleUpgrade rubygem-bundlerUpgrade ruby-develUpgrade rubygem-rbsUpgrade rubygem-rexmlUpgrade rubygem-test-unitUpgrade rubygem-rssUpgrade rubygem-rakeUpgrade ruby-docUpgrade rubygem-mysql2Upgrade rubygem-raccUpgrade rubygem-mysql2-docUpgrade rubygems-develUpgrade rubygem-mongoUpgrade rubygem-pg-docUpgrade rubygem-opensslUpgrade rubygem-power_assertUpgrade rubygemsUpgrade ruby-default-gemsUpgrade rubygem-abrt-docUpgrade rubygem-psychUpgrade ruby-libsUpgrade rubygem-minitestUpgrade rubygem-bson-docUpgrade rubygem-pgUpgrade rubygem-rdocUpgrade rubygem-net-telnetUpgrade rubygem-bundler-docUpgrade rubygem-typeprof | Jun 3, 2024 | May 14, 2024 |
| Alpine Linux | — | Upgrade ruby | Jun 6, 2024 | May 8, 2024 |
| Amazon Linux Ami 2 | — | Upgrade rubyUpgrade rubygem-jsonUpgrade rubygem-rdocUpgrade rubygemsUpgrade ruby-irbUpgrade ruby-tcltkUpgrade ruby-develUpgrade rubygem-minitestUpgrade ruby-docUpgrade rubygem-bigdecimalUpgrade ruby-debuginfoUpgrade rubygems-develUpgrade rubygem-rakeUpgrade ruby-libsUpgrade rubygem-io-consoleUpgrade rubygem-psych | Sep 19, 2024 | May 14, 2024 |
| Amazon_linux_2023 | — | Upgrade ruby3.2-rubygem-minitestUpgrade ruby3.2-libsUpgrade ruby3.2-default-gemsUpgrade ruby3.2-bundled-gemsUpgrade ruby3.2-libs-debuginfoUpgrade ruby3.2-rubygemsUpgrade ruby3.2-develUpgrade ruby3.2-rubygem-power_assertUpgrade ruby3.2-bundled-gems-debuginfoUpgrade ruby3.2-rubygem-io-console-debuginfoUpgrade ruby3.2-debuginfoUpgrade ruby3.2-rubygem-rdocUpgrade ruby3.2-docUpgrade ruby3.2-rubygem-typeprofUpgrade ruby3.2-rubygem-rbs-debuginfoUpgrade ruby3.2-rubygem-bigdecimal-debuginfoUpgrade ruby3.2-rubygem-jsonUpgrade ruby3.2-rubygem-bundlerUpgrade ruby3.2-rubygem-bigdecimalUpgrade ruby3.2-rubygem-rexmlUpgrade ruby3.2-rubygem-rakeUpgrade ruby3.2-rubygem-psych-debuginfoUpgrade ruby3.2-rubygem-test-unitUpgrade ruby3.2-rubygem-json-debuginfoUpgrade ruby3.2-rubygem-psychUpgrade ruby3.2-debugsourceUpgrade ruby3.2-rubygem-irbUpgrade ruby3.2Upgrade ruby3.2-rubygem-rssUpgrade ruby3.2-rubygem-io-consoleUpgrade ruby3.2-rubygem-rbsUpgrade ruby3.2-rubygems-devel | Feb 17, 2025 | Apr 23, 2024 |
| Debian | — | Upgrade ruby2.7Upgrade ruby3.1 | May 6, 2024 | May 6, 2024 |
| Freebsd | — | Upgrade ruby31Upgrade rubyUpgrade ruby33Upgrade ruby32 | Dec 10, 2025 | Apr 23, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade rubyUpgrade ruby-helpUpgrade ruby-irb | Oct 8, 2024 | May 14, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade ruby-helpUpgrade ruby-irbUpgrade ruby | Oct 9, 2024 | May 14, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade ruby-helpUpgrade ruby-irbUpgrade ruby | Oct 8, 2024 | May 14, 2024 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Oct 8, 2024 |
| Oracle_linux | — | Upgrade rubygem-rakeUpgrade rubygem-bigdecimalUpgrade rubygem-psychUpgrade rubygem-typeprofUpgrade ruby-irbUpgrade rubygem-bsonUpgrade rubygem-rssUpgrade rubygem-io-consoleUpgrade ruby-bundled-gemsUpgrade rubygem-bson-docUpgrade ruby-libsUpgrade rubygem-abrt-docUpgrade rubygem-did_you_meanUpgrade rubygem-mysql2Upgrade rubygem-pg-docUpgrade rubygem-rbsUpgrade rubygem-jsonUpgrade rubygem-xmlrpcUpgrade rubygem-opensslUpgrade rubygem-irbUpgrade rubygem-raccUpgrade rubygemsUpgrade rubygem-rdocUpgrade ruby-develUpgrade rubygem-net-telnetUpgrade rubygem-minitestUpgrade rubygem-mysql2-docUpgrade rubygem-pgUpgrade ruby-default-gemsUpgrade rubyUpgrade rubygem-abrtUpgrade ruby-docUpgrade rubygem-bundlerUpgrade rubygem-mongoUpgrade rubygem-test-unitUpgrade rubygem-bundler-docUpgrade rubygem-power_assertUpgrade rubygem-mongo-docUpgrade rubygems-develUpgrade rubygem-rexml | Jun 1, 2024 | Apr 23, 2024 |
| Redhat_linux | — | Upgrade rubygem-xmlrpcUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-raccUpgrade ruby-libs-debuginfoUpgrade rubygemsUpgrade rubygem-json-debuginfoUpgrade ruby-irbUpgrade rubygem-pg-debuginfoUpgrade rubygem-bigdecimalUpgrade rubygems-develUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-power_assertUpgrade rubygem-pgUpgrade rubygem-mysql2-docUpgrade rubygem-io-console-debuginfoUpgrade rubygem-minitestUpgrade rubygem-pg-docUpgrade rubygem-rbs-debuginfoUpgrade rubygem-io-consoleUpgrade rubygem-abrt-docUpgrade rubygem-rdocUpgrade rubygem-bson-docUpgrade rubygem-typeprofUpgrade rubygem-test-unitUpgrade rubygem-mongoUpgrade rubygem-net-telnetUpgrade rubygem-bson-debugsourceUpgrade rubygem-jsonUpgrade rubygem-mongo-docUpgrade rubygem-bundler-docUpgrade ruby-bundled-gemsUpgrade rubygem-bsonUpgrade rubygem-abrtNo solution existsUpgrade rubygem-openssl-debuginfoUpgrade ruby-docUpgrade ruby-bundled-gems-debuginfoUpgrade rubygem-irbUpgrade rubygem-rakeUpgrade rubygem-bson-debuginfoUpgrade rubygem-rssUpgrade rubyUpgrade rubygem-psychUpgrade rubygem-did_you_meanUpgrade ruby-libsUpgrade rubygem-pg-debugsourceUpgrade rubygem-mysql2Upgrade ruby-default-gemsUpgrade rubygem-bundlerUpgrade rubygem-racc-debuginfoUpgrade ruby-develUpgrade ruby-debuginfoUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-opensslUpgrade ruby-debugsourceUpgrade rubygem-rbsUpgrade rubygem-psych-debuginfoUpgrade rubygem-rexml | May 31, 2024 | May 14, 2024 |
| Rocky_linux | — | Upgrade rubygem-pg-debugsourceUpgrade ruby-debuginfoUpgrade rubygem-io-consoleUpgrade rubygem-rbsUpgrade rubygem-raccUpgrade ruby-develUpgrade rubyUpgrade rubygem-io-console-debuginfoUpgrade rubygem-rbs-debuginfoUpgrade rubygem-jsonUpgrade ruby-bundled-gemsUpgrade rubygem-bson-debuginfoUpgrade rubygem-bsonUpgrade ruby-bundled-gems-debuginfoUpgrade rubygem-opensslUpgrade rubygem-pg-debuginfoUpgrade rubygem-racc-debuginfoUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-bigdecimalUpgrade rubygem-mysql2Upgrade rubygem-json-debuginfoUpgrade rubygem-pgUpgrade rubygem-bson-debugsourceUpgrade rubygem-openssl-debuginfoUpgrade ruby-libsUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-psych-debuginfoUpgrade rubygem-psychUpgrade rubygem-bigdecimal-debuginfoUpgrade ruby-libs-debuginfoUpgrade ruby-debugsource | Jun 17, 2024 | May 14, 2024 |
| Ubuntu | — | Upgrade ruby2.7Upgrade libruby3.2Upgrade libruby2.5 (Ubuntu Pro)Upgrade libruby3.0Upgrade libruby3.1Upgrade ruby3.2Upgrade ruby3.0Upgrade ruby2.5 (Ubuntu Pro)Upgrade ruby3.1Upgrade libruby2.7 | Jun 21, 2024 | May 14, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | May 8, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub