The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
zlib is a Ruby interface for the zlib compression/decompression library. Versions 3.0.0 and below, 3.1.0, 3.1.1, 3.2.0 and 3.2.1 contain a buffer overflow vulnerability in the Zlib::GzipReader. The zstream_buffer_ungets function prepends caller-provided bytes ahead of previously produced output but fails to guarantee the backing Ruby string has enough capacity before the memmove shifts the existing data. This can lead to memory corruption when the buffer length exceeds capacity. This issue has been fixed in versions 3.0.1, 3.1.2 and 3.2.3.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade ruby-develUpgrade rubygem-rdocUpgrade rubygem-pgUpgrade rubygem-power_assertUpgrade rubygem-irbUpgrade ruby-bundled-gemsUpgrade ruby-default-gemsUpgrade rubygem-abrt-docUpgrade rubygem-mysql2-docUpgrade rubygem-bundlerUpgrade rubygem-jsonUpgrade rubygem-abrtUpgrade rubyUpgrade rubygem-psychUpgrade rubygem-pg-docUpgrade rubygem-typeprofUpgrade rubygemsUpgrade ruby-libsUpgrade rubygem-rbsUpgrade rubygem-minitestUpgrade rubygem-mysql2Upgrade rubygem-raccUpgrade rubygems-develUpgrade ruby-docUpgrade rubygem-test-unitUpgrade rubygem-rexmlUpgrade rubygem-io-consoleUpgrade rubygem-rssUpgrade rubygem-rakeUpgrade rubygem-bigdecimal | Oct 11, 2026 | Aug 5, 2026 |
| Alpine Linux | — | Upgrade ruby | Apr 17, 2026 | Apr 16, 2026 |
| Amazon_linux_2023 | — | Upgrade ruby3.4-rubygem-minitestUpgrade ruby3.4-rubygem-racc-debuginfoUpgrade ruby3.4-rubygem-test-unitUpgrade ruby3.4-debuginfoUpgrade ruby3.4-bundled-gems-debuginfoUpgrade ruby3.4-libs-debuginfoUpgrade ruby3.4-rubygemsUpgrade ruby3.4-rubygem-psychUpgrade ruby3.4-rubygem-raccUpgrade ruby3.4-rubygem-io-consoleUpgrade ruby3.4-rubygem-jsonUpgrade ruby3.4-docUpgrade ruby3.4-rubygem-power_assertUpgrade ruby3.4-rubygem-json-debuginfoUpgrade ruby3.4-rubygem-bigdecimal-debuginfoUpgrade ruby3.4-rubygem-rbsUpgrade ruby3.4-rubygem-rexmlUpgrade ruby3.4-rubygem-rdocUpgrade ruby3.4-rubygem-typeprofUpgrade ruby3.4Upgrade ruby3.4-libsUpgrade ruby3.4-rubygem-rbs-debuginfoUpgrade ruby3.4-rubygem-bundlerUpgrade ruby3.4-rubygem-psych-debuginfoUpgrade ruby3.4-bundled-gemsUpgrade ruby3.4-rubygem-io-console-debuginfoUpgrade ruby3.4-default-gemsUpgrade ruby3.4-rubygem-bigdecimalUpgrade ruby3.4-rubygem-irbUpgrade ruby3.4-rubygem-rssUpgrade ruby3.4-debugsourceUpgrade ruby3.4-develUpgrade ruby3.4-rubygem-rakeUpgrade ruby3.4-rubygems-devel | Jun 9, 2026 | Apr 16, 2026 |
| Debian | — | Upgrade ruby2.7 | Aug 5, 2026 | Aug 5, 2026 |
| Oracle_linux | — | Upgrade rubygem-rssUpgrade rubygems-develUpgrade ruby4.0-rubygem-mysql2Upgrade rubygem-io-consoleUpgrade rubygem-rexmlUpgrade rubygem-jsonUpgrade ruby4.0-docUpgrade ruby4.0Upgrade rubygem-psychUpgrade rubygem-abrt-docUpgrade ruby-libsUpgrade rubygem-raccUpgrade rubygem-typeprofUpgrade rubygem-bigdecimalUpgrade rubygem-rakeUpgrade rubygem-mysql2Upgrade ruby4.0-develUpgrade rubygem-pgUpgrade rubygem-test-unitUpgrade rubyUpgrade rubygem-pg-docUpgrade rubygem-minitestUpgrade rubygem-bundlerUpgrade rubygem-power_assertUpgrade rubygem-rdocUpgrade rubygem-mysql2-docUpgrade ruby-default-gemsUpgrade ruby-docUpgrade rubygem-irbUpgrade ruby4.0-rubygem-pgUpgrade ruby-develUpgrade rubygemsUpgrade rubygem-abrtUpgrade ruby-bundled-gemsUpgrade rubygem-rbs | Oct 22, 2026 | Apr 16, 2026 |
| Redhat_linux | — | Upgrade ruby-debuginfoUpgrade rubygem-rakeUpgrade rubygem-racc-debuginfoUpgrade ruby4.0-rubygem-mysql2-debuginfoUpgrade ruby4.0-rubygem-mysql2Upgrade rubygems-develUpgrade ruby4.0-docUpgrade ruby-debugsourceUpgrade rubygem-psychUpgrade ruby4.0Upgrade rubygem-rbs-debuginfoUpgrade ruby4.0-rubygem-pgUpgrade rubygem-rexmlUpgrade rubygem-test-unitUpgrade rubygem-typeprofUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-json-debuginfoUpgrade rubygem-io-consoleUpgrade ruby4.0-debugsourceUpgrade rubygem-abrt-docUpgrade rubygem-pg-debuginfoUpgrade ruby4.0-rubygem-pg-debuginfoUpgrade rubygem-bigdecimalUpgrade rubygem-irbUpgrade ruby4.0-develUpgrade rubygem-pgUpgrade rubygem-raccUpgrade rubygem-jsonUpgrade rubyUpgrade rubygem-mysql2-debuginfoUpgrade ruby-default-gemsUpgrade ruby4.0-debuginfoUpgrade rubygem-rdocUpgrade rubygem-mysql2-docUpgrade rubygem-bundlerUpgrade rubygem-minitestUpgrade rubygem-pg-docUpgrade ruby-docUpgrade rubygem-pg-debugsourceUpgrade rubygem-rbsUpgrade ruby-libsUpgrade rubygem-rssUpgrade rubygem-io-console-debuginfoUpgrade ruby-libs-debuginfoUpgrade rubygem-bigdecimal-debuginfoUpgrade ruby-bundled-gems-debuginfoUpgrade rubygem-mysql2Upgrade ruby-bundled-gemsUpgrade rubygemsUpgrade rubygem-power_assertUpgrade rubygem-psych-debuginfoUpgrade rubygem-abrtUpgrade ruby-develNo solution exists | Jul 17, 2026 | Apr 16, 2026 |
| Rocky_linux | — | Upgrade rubygem-json-debuginfoUpgrade rubygem-rbs-debuginfoUpgrade rubygem-pg-debuginfoUpgrade ruby4.0-rubygem-pg-debuginfoUpgrade ruby4.0-develUpgrade rubygem-io-console-debuginfoUpgrade rubygem-raccUpgrade ruby4.0-debuginfoUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-bigdecimalUpgrade ruby-develUpgrade rubygem-mysql2-debugsourceUpgrade ruby4.0-rubygem-mysql2-debuginfoUpgrade ruby4.0Upgrade rubygem-io-consoleUpgrade ruby-libsUpgrade rubygem-psychUpgrade ruby4.0-rubygem-pgUpgrade ruby4.0-debugsourceUpgrade ruby-libs-debuginfoUpgrade rubygem-mysql2Upgrade rubygem-psych-debuginfoUpgrade rubygem-rbsUpgrade ruby-debugsourceUpgrade rubyUpgrade rubygem-pgUpgrade ruby4.0-rubygem-mysql2Upgrade ruby-bundled-gemsUpgrade rubygem-racc-debuginfoUpgrade ruby-debuginfoUpgrade rubygem-jsonUpgrade ruby-bundled-gems-debuginfoUpgrade rubygem-pg-debugsource | Aug 28, 2026 | Aug 27, 2026 |
| Ubuntu | — | Upgrade libruby2.3 (Ubuntu Pro) | Jul 20, 2026 | Jul 16, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub