The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
An issue was discovered in Ruby 2.5.x through 2.5.7, 2.6.x through 2.6.5, and 2.7.0. If a victim calls BasicSocket#read_nonblock(requested_size, buffer, exception: false), the method resizes the buffer to fit the requested size, but no data is copied. Thus, the buffer string provides the previous value of the heap. This may expose possibly sensitive data from the interpreter.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rubygem-abrtUpgrade rubygem-mysql2Upgrade rubygem-mongoUpgrade rubygem-pg-docUpgrade rubygem-bsonUpgrade rubygem-mongo-docUpgrade rubygem-pgUpgrade rubygem-mysql2-docUpgrade rubygem-bson-docUpgrade rubygem-abrt-doc | May 4, 2022 | May 4, 2020 |
| Alpine Linux | — | Upgrade ruby | Aug 22, 2024 | May 4, 2020 |
| Amazon Linux Ami 2 | — | Upgrade ruby-libsUpgrade rubygem-jsonUpgrade rubyUpgrade rubygem-bigdecimalUpgrade rubygem-psychUpgrade rubygem-net-telnetUpgrade rubygem-io-consoleUpgrade rubygemsUpgrade ruby-docUpgrade rubygem-xmlrpcUpgrade rubygem-irbUpgrade rubygem-rakeUpgrade rubygem-minitestUpgrade rubygem-test-unitUpgrade rubygem-opensslUpgrade rubygem-bundlerUpgrade ruby-develUpgrade ruby-debuginfoUpgrade rubygem-did_you_meanUpgrade rubygems-develUpgrade rubygem-power_assertUpgrade rubygem-rdoc | Sep 28, 2023 | May 4, 2020 |
| Centos_linux | — | Upgrade rubygem-power_assertUpgrade rubygem-mongoUpgrade rubygem-abrtUpgrade rubygem-pg-debugsourceUpgrade ruby-develUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-pg-docUpgrade rubygem-bson-debuginfoUpgrade rubygem-rakeUpgrade rubygem-net-telnetUpgrade rubygem-openssl-debuginfoUpgrade rubygem-bson-debugsourceUpgrade rubygem-minitestUpgrade rubygem-io-console-debuginfoUpgrade rubygem-pg-debuginfoUpgrade rubygem-mysql2Upgrade rubygem-bigdecimal-debuginfoUpgrade ruby-libsUpgrade ruby-irbUpgrade rubyUpgrade rubygem-io-consoleUpgrade rubygem-bson-docUpgrade rubygem-irbUpgrade rubygem-mysql2-debuginfoUpgrade ruby-debugsourceUpgrade rubygem-jsonUpgrade rubygems-develUpgrade rubygem-psych-debuginfoUpgrade rubygemsUpgrade rubygem-test-unitUpgrade rubygem-bigdecimalUpgrade rubygem-pgUpgrade ruby-docUpgrade rubygem-psychUpgrade rubygem-mysql2-docUpgrade ruby-debuginfoUpgrade rubygem-bundlerUpgrade rubygem-mongo-docUpgrade rubygem-xmlrpcUpgrade rubygem-rdocUpgrade rubygem-bsonUpgrade rubygem-json-debuginfoUpgrade rubygem-bundler-docUpgrade ruby-libs-debuginfoUpgrade rubygem-opensslUpgrade rubygem-did_you_meanUpgrade rubygem-abrt-doc | Jun 30, 2021 | May 4, 2020 |
| Debian | — | Upgrade ruby2.7 | Jul 10, 2020 | May 4, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade ruby-irbUpgrade ruby-libsUpgrade ruby | May 27, 2020 | May 4, 2020 |
| Oracle Solaris | — | Upgrade runtime/ruby-25 to version 2.5.8-11.4.24.0.1.75.1 on Solaris 11.4Upgrade runtime/ruby-26 to version 2.6.6-11.4.24.0.1.75.1 on Solaris 11.4 | Jan 19, 2021 | May 4, 2020 |
| Oracle_linux | — | Upgrade rubygem-irbUpgrade rubygem-bundlerUpgrade rubygem-mongoUpgrade rubygem-abrt-docUpgrade rubygem-pg-docUpgrade rubygem-psychUpgrade rubygem-test-unitUpgrade rubygem-mysql2-docUpgrade rubyUpgrade rubygem-bundler-docUpgrade rubygem-net-telnetUpgrade rubygem-pgUpgrade rubygem-opensslUpgrade ruby-develUpgrade rubygemsUpgrade rubygem-mysql2Upgrade rubygem-rdocUpgrade rubygem-abrtUpgrade rubygem-power_assertUpgrade rubygem-xmlrpcUpgrade rubygem-bsonUpgrade rubygem-minitestUpgrade ruby-docUpgrade rubygem-bigdecimalUpgrade rubygem-did_you_meanUpgrade ruby-irbUpgrade rubygem-mongo-docUpgrade rubygem-rakeUpgrade rubygem-jsonUpgrade rubygem-bson-docUpgrade rubygem-io-consoleUpgrade ruby-libsUpgrade rubygems-devel | Jul 2, 2021 | Mar 31, 2020 |
| Redhat_linux | — | Upgrade rubygem-mysql2-debugsourceUpgrade rubygem-rdocUpgrade rubygem-net-telnetUpgrade rubygem-bson-docUpgrade ruby-debugsourceUpgrade rubygems-develUpgrade rubygem-mongoUpgrade rubygem-json-debuginfoUpgrade ruby-libs-debuginfoUpgrade rubygem-bundler-docUpgrade rubygem-abrt-docUpgrade rubygem-bson-debugsourceUpgrade ruby-irbUpgrade rubygemsUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-power_assertUpgrade rubygem-minitestUpgrade rubygem-pgUpgrade rubygem-bson-debuginfoUpgrade rubygem-pg-docUpgrade rubygem-io-console-debuginfoUpgrade rubygem-openssl-debuginfoUpgrade rubygem-io-consoleUpgrade rubygem-mysql2-docUpgrade rubygem-abrtUpgrade rubygem-bundlerUpgrade ruby-libsUpgrade rubygem-bsonUpgrade rubygem-psychUpgrade ruby-docUpgrade rubygem-test-unitUpgrade rubygem-psych-debuginfoUpgrade rubygem-irbUpgrade ruby-develUpgrade rubyUpgrade ruby-debuginfoUpgrade rubygem-mysql2Upgrade rubygem-did_you_meanUpgrade rubygem-xmlrpcUpgrade rubygem-opensslUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-bigdecimalUpgrade rubygem-jsonUpgrade rubygem-pg-debuginfoUpgrade rubygem-mongo-docUpgrade rubygem-rakeUpgrade rubygem-pg-debugsource | Jun 30, 2021 | May 4, 2020 |
| Rocky_linux | — | Upgrade rubygem-pg-debuginfoUpgrade rubyUpgrade rubygem-bigdecimalUpgrade rubygem-io-console-debuginfoUpgrade rubygem-bson-debugsourceUpgrade rubygem-pg-debugsourceUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-openssl-debuginfoUpgrade ruby-develUpgrade rubygem-bson-debuginfoUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-io-consoleUpgrade rubygem-psychUpgrade rubygem-bsonUpgrade rubygem-pgUpgrade rubygem-json-debuginfoUpgrade ruby-debuginfoUpgrade rubygem-jsonUpgrade ruby-libs-debuginfoUpgrade rubygem-opensslUpgrade rubygem-psych-debuginfoUpgrade rubygem-mysql2Upgrade ruby-libsUpgrade ruby-debugsource | May 5, 2022 | May 4, 2020 |
| Suse | — | Upgrade ruby2.5-develUpgrade ruby2.5-doc-riUpgrade ruby2.5-devel-extraUpgrade ruby2.5-stdlibUpgrade ruby2.5Upgrade ruby2.5-docUpgrade libruby2_5-2_5 | May 7, 2020 | May 4, 2020 |
| Ubuntu | — | Upgrade libruby2.3Upgrade ruby2.7Upgrade ruby2.5Upgrade ruby2.3Upgrade libruby2.5Upgrade libruby2.7 | Mar 19, 2021 | May 4, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 4, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub