The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The Basic authentication code in WEBrick library in Ruby before 2.2.8, 2.3.x before 2.3.5, and 2.4.x through 2.4.1 allows remote attackers to inject terminal emulator escape sequences into its log and possibly execute arbitrary commands via a crafted user name.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade rubyUpgrade ruby2.2 | Aug 22, 2024 | Sep 19, 2017 |
| Amazon_linux | — | Upgrade ruby23Upgrade ruby22Upgrade ruby24 | Oct 3, 2017 | Sep 19, 2017 |
| Apple Osx Ruby | — | Upgrade macOS to the latest versionApply Apple macOS Security Update 2018-002 High Sierra | Oct 31, 2018 | Sep 19, 2017 |
| Centos_linux | — | Upgrade rubygemsUpgrade ruby-debuginfoUpgrade rubygems-develUpgrade rubygem-psychUpgrade rubygem-rdocUpgrade rubyUpgrade ruby-tcltkUpgrade ruby-libsUpgrade ruby-irbUpgrade rubygem-jsonUpgrade rubygem-io-consoleUpgrade ruby-docUpgrade ruby-develUpgrade rubygem-minitestUpgrade rubygem-bigdecimalUpgrade rubygem-rake | Mar 13, 2018 | Sep 19, 2017 |
| Debian | — | Upgrade ruby1.8Upgrade ruby1.9.1Upgrade ruby2.3 | Dec 5, 2017 | Sep 19, 2017 |
| Freebsd | — | Upgrade ruby | Sep 19, 2017 | Sep 19, 2017 |
| Gentoo Linux | — | Upgrade dev-lang/ruby. | Oct 30, 2017 | Sep 19, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade ruby-libsUpgrade rubyUpgrade ruby-irb | Mar 16, 2018 | Sep 19, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade rubyUpgrade ruby-irbUpgrade ruby-libs | Mar 16, 2018 | Sep 19, 2017 |
| Oracle Solaris | — | Upgrade runtime/ruby-23/ruby-tk to version 2.3.8-11.4.6.0.1.1.0 on Solaris 11.4Upgrade runtime/ruby-23 to version 2.3.8-11.4.6.0.1.1.0 on Solaris 11.4 | Feb 20, 2019 | Sep 19, 2017 |
| Oracle_linux | — | Upgrade ruby-tcltkUpgrade ruby-irbUpgrade rubygem-io-consoleUpgrade rubygem-rakeUpgrade ruby-develUpgrade rubygem-rdocUpgrade rubygems-develUpgrade rubygem-minitestUpgrade ruby-libsUpgrade ruby-docUpgrade rubygem-psychUpgrade rubygemsUpgrade rubyUpgrade rubygem-jsonUpgrade rubygem-bigdecimal | Mar 1, 2018 | Sep 14, 2017 |
| Redhat_linux | — | Upgrade rubygem-io-consoleUpgrade rubygem-bigdecimalUpgrade ruby-debuginfoUpgrade rubygem-rakeUpgrade rubygems-develUpgrade rubygem-rdocUpgrade rubygem-psychUpgrade ruby-develUpgrade ruby-libsUpgrade rubygem-jsonUpgrade ruby-tcltkUpgrade ruby-irbUpgrade rubyUpgrade rubygem-minitestUpgrade ruby-docNo solution existsUpgrade rubygems | Mar 1, 2018 | Sep 19, 2017 |
| Suse | — | Upgrade ruby2.1-develUpgrade ruby2.1Upgrade yast2-ruby-bindingsUpgrade ruby2.1-stdlibUpgrade libruby2_1-2_1 | Jun 10, 2020 | Sep 19, 2017 |
| Ubuntu | — | Upgrade ruby1.9.3Upgrade libruby1.9.1Upgrade ruby1.9.1Upgrade ruby2.0Upgrade libruby2.3Upgrade libruby2.0Upgrade ruby2.3 | Oct 5, 2017 | Sep 19, 2017 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub