The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 allows HTTP Response Splitting. If a program using WEBrick inserts untrusted input into the response header, an attacker can exploit it to insert a newline character to split a header, and inject malicious content to deceive clients. NOTE: this issue exists because of an incomplete fix for CVE-2017-17742, which addressed the CRLF vector, but did not address an isolated CR or an isolated LF.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rubygem-bsonUpgrade rubygem-abrt-docUpgrade rubygem-mongo-docUpgrade rubygem-mysql2-docUpgrade rubygem-pgUpgrade rubygem-pg-docUpgrade rubygem-bson-docUpgrade rubygem-mysql2Upgrade rubygem-abrtUpgrade rubygem-mongo | May 4, 2022 | Nov 26, 2019 |
| Alpine Linux | — | Upgrade ruby | Aug 22, 2024 | Nov 26, 2019 |
| Amazon Linux Ami 2 | — | Upgrade rubygem-opensslUpgrade ruby-irbUpgrade rubygem-did_you_meanUpgrade rubygem-jsonUpgrade rubygem-minitestUpgrade rubyUpgrade ruby-tcltkUpgrade rubygem-bundlerUpgrade ruby-docUpgrade rubygem-irbUpgrade rubygem-rdocUpgrade rubygemsUpgrade rubygem-power_assertUpgrade ruby-develUpgrade rubygem-xmlrpcUpgrade rubygems-develUpgrade rubygem-io-consoleUpgrade ruby-debuginfoUpgrade rubygem-rakeUpgrade rubygem-bigdecimalUpgrade rubygem-test-unitUpgrade ruby-libsUpgrade rubygem-psychUpgrade rubygem-net-telnet | Sep 28, 2023 | Nov 26, 2019 |
| Amazon_linux | — | Upgrade ruby24 | Sep 1, 2020 | Oct 1, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Nov 26, 2019 |
| Centos_linux | — | Upgrade rubygem-bsonUpgrade rubygem-power_assertUpgrade rubygem-bigdecimal-debuginfoUpgrade ruby-libsUpgrade rubygem-pg-debugsourceUpgrade rubygem-jsonUpgrade rubygem-opensslUpgrade rubygem-mysql2-docUpgrade rubyUpgrade rubygem-mongoUpgrade rubygem-minitestUpgrade rubygem-bson-debugsourceUpgrade rubygem-io-console-debuginfoUpgrade ruby-libs-debuginfoUpgrade rubygem-pg-docUpgrade rubygem-rdocUpgrade ruby-docUpgrade ruby-develUpgrade rubygem-bundlerUpgrade rubygem-irbUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-pgUpgrade rubygem-net-telnetUpgrade rubygem-mysql2Upgrade rubygem-abrtUpgrade rubygem-bundler-docUpgrade rubygemsUpgrade rubygem-psych-debuginfoUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-xmlrpcUpgrade rubygem-json-debuginfoUpgrade rubygem-mongo-docUpgrade rubygem-openssl-debuginfoUpgrade rubygem-io-consoleUpgrade rubygems-develUpgrade rubygem-bson-debuginfoUpgrade rubygem-abrt-docUpgrade ruby-debugsourceUpgrade ruby-debuginfoUpgrade rubygem-bigdecimalUpgrade rubygem-bson-docUpgrade rubygem-test-unitUpgrade rubygem-did_you_meanUpgrade rubygem-rakeUpgrade rubygem-pg-debuginfoUpgrade ruby-irbUpgrade rubygem-psych | Jun 30, 2021 | Nov 26, 2019 |
| Debian | — | Upgrade jruby | Nov 27, 2019 | Nov 27, 2019 |
| Freebsd | — | Upgrade ruby | Oct 3, 2019 | Oct 2, 2019 |
| Gentoo Linux | — | Upgrade dev-lang/ruby. | Mar 16, 2020 | Nov 26, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade rubyUpgrade ruby-irbUpgrade ruby-libs | Sep 28, 2020 | Nov 26, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade rubyUpgrade ruby-irbUpgrade ruby-libs | Feb 24, 2020 | Nov 26, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade ruby-libsUpgrade rubyUpgrade ruby-irb | Jan 3, 2020 | Nov 26, 2019 |
| Oracle Solaris | — | Upgrade runtime/ruby-25 to version 2.5.7-11.4.19.0.1.2.0 on Solaris 11.4Upgrade runtime/ruby-26 to version 2.6.5-11.4.19.0.1.2.0 on Solaris 11.4 | Jan 19, 2021 | Nov 26, 2019 |
| Oracle_linux | — | Upgrade rubygems-develUpgrade rubygem-mysql2-docUpgrade rubygem-rakeUpgrade rubygem-xmlrpcUpgrade rubygem-abrt-docUpgrade rubygem-io-consoleUpgrade rubygem-bson-docUpgrade rubygem-test-unitUpgrade rubygem-rdocUpgrade rubygem-did_you_meanUpgrade rubygem-bigdecimalUpgrade ruby-develUpgrade ruby-libsUpgrade ruby-docUpgrade rubygem-bundler-docUpgrade rubygem-pgUpgrade rubygem-opensslUpgrade rubygem-mongoUpgrade rubygem-bundlerUpgrade rubygem-psychUpgrade rubygem-mysql2Upgrade ruby-irbUpgrade rubygem-pg-docUpgrade rubygem-power_assertUpgrade rubygem-irbUpgrade rubygem-mongo-docUpgrade rubygem-minitestUpgrade rubygemsUpgrade rubygem-abrtUpgrade rubygem-bsonUpgrade rubygem-jsonUpgrade rubygem-net-telnetUpgrade ruby | Jul 2, 2021 | Oct 25, 2019 |
| Redhat_linux | — | Upgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-pg-debuginfoUpgrade rubygem-jsonUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-mysql2Upgrade rubygem-openssl-debuginfoUpgrade ruby-docUpgrade rubygem-io-consoleUpgrade ruby-debugsourceUpgrade rubygem-bson-debugsourceUpgrade ruby-irbUpgrade rubygem-bson-debuginfoUpgrade rubygem-did_you_meanUpgrade rubygem-bson-docUpgrade rubygem-pg-docUpgrade rubygem-json-debuginfoUpgrade rubygem-rakeUpgrade rubygem-mongo-docUpgrade rubygem-bigdecimalUpgrade ruby-libsUpgrade rubygem-mysql2-debuginfoUpgrade rubygemsUpgrade ruby-develUpgrade rubygem-mysql2-docUpgrade rubygem-opensslUpgrade rubygem-net-telnetUpgrade rubygem-abrt-docUpgrade rubygem-psych-debuginfoUpgrade rubygems-develNo solution existsUpgrade ruby-debuginfoUpgrade rubygem-power_assertUpgrade rubygem-pg-debugsourceUpgrade rubygem-abrtUpgrade rubygem-io-console-debuginfoUpgrade rubygem-bundlerUpgrade rubygem-minitestUpgrade rubygem-xmlrpcUpgrade rubygem-psychUpgrade ruby-libs-debuginfoUpgrade rubygem-mongoUpgrade rubygem-irbUpgrade rubygem-pgUpgrade rubygem-rdocUpgrade rubyUpgrade rubygem-test-unitUpgrade rubygem-bsonUpgrade rubygem-bundler-doc | Jun 30, 2021 | Nov 26, 2019 |
| Rocky_linux | — | Upgrade rubygem-mysql2-debugsourceUpgrade rubygem-json-debuginfoUpgrade rubygem-psych-debuginfoUpgrade ruby-debuginfoUpgrade rubygem-bigdecimalUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-io-console-debuginfoUpgrade rubygem-opensslUpgrade rubygem-pg-debuginfoUpgrade rubygem-mysql2Upgrade ruby-develUpgrade rubygem-bsonUpgrade rubyUpgrade rubygem-pgUpgrade rubygem-jsonUpgrade rubygem-io-consoleUpgrade ruby-libsUpgrade ruby-debugsourceUpgrade rubygem-psychUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-bson-debuginfoUpgrade rubygem-openssl-debuginfoUpgrade ruby-libs-debuginfoUpgrade rubygem-pg-debugsourceUpgrade rubygem-bson-debugsource | May 5, 2022 | Nov 26, 2019 |
| Suse | — | Upgrade ruby2.5-devel-extraUpgrade ruby2.1-develUpgrade libruby2_1-2_1Upgrade ruby2.5-doc-riUpgrade yast2-ruby-bindingsUpgrade ruby2.1Upgrade ruby2.1-stdlibUpgrade ruby2.5-develUpgrade ruby2.5-docUpgrade libruby2_5-2_5Upgrade ruby2.5Upgrade ruby2.5-stdlib | Mar 21, 2020 | Oct 1, 2019 |
| Ubuntu | — | Upgrade libruby2.5Upgrade ruby2.3Upgrade libruby2.3Upgrade ruby2.5 | Nov 27, 2019 | Oct 1, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub