The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
An issue was discovered in Ruby through 2.5.8, 2.6.x through 2.6.6, and 2.7.x through 2.7.1. WEBrick, a simple HTTP server bundled with Ruby, had not checked the transfer-encoding header value rigorously. An attacker may potentially exploit this issue to bypass a reverse proxy (which also has a poor header check), which may lead to an HTTP Request Smuggling attack.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rubygem-bson-docUpgrade rubygem-pg-docUpgrade rubygem-bsonUpgrade rubygem-abrt-docUpgrade rubygem-pgUpgrade rubygem-mongoUpgrade rubygem-abrtUpgrade rubygem-mysql2Upgrade rubygem-mongo-docUpgrade rubygem-mysql2-doc | May 4, 2022 | Oct 6, 2020 |
| Alpine Linux | — | Upgrade ruby | Aug 22, 2024 | Oct 6, 2020 |
| Amazon Linux Ami 2 | — | Upgrade rubygems-develUpgrade rubygem-minitestUpgrade rubygem-rakeUpgrade ruby-irbUpgrade rubygem-bigdecimalUpgrade rubygem-power_assertUpgrade ruby-tcltkUpgrade rubygem-io-consoleUpgrade rubygem-irbUpgrade ruby-develUpgrade ruby-docUpgrade rubygem-test-unitUpgrade rubygem-bundlerUpgrade rubygem-jsonUpgrade ruby-debuginfoUpgrade ruby-libsUpgrade rubygem-xmlrpcUpgrade rubygem-psychUpgrade rubygem-net-telnetUpgrade rubygemsUpgrade rubygem-rdocUpgrade rubygem-opensslUpgrade rubyUpgrade rubygem-did_you_mean | May 26, 2021 | Oct 6, 2020 |
| Amazon_linux | — | Upgrade ruby20Upgrade ruby24 | Dec 19, 2020 | Oct 6, 2020 |
| Centos_linux | — | Upgrade ruby-debugsourceUpgrade rubygem-pgUpgrade rubygem-minitestUpgrade ruby-libs-debuginfoUpgrade rubygem-openssl-debuginfoUpgrade rubygem-bson-docUpgrade rubygem-bundler-docUpgrade rubygem-abrt-docUpgrade rubygem-net-telnetUpgrade rubygem-pg-docUpgrade rubygem-mongoUpgrade rubygemsUpgrade rubygem-bigdecimal-debuginfoUpgrade ruby-libsUpgrade rubygem-bson-debugsourceUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-json-debuginfoUpgrade rubygems-develUpgrade rubygem-psych-debuginfoUpgrade rubygem-psychUpgrade rubygem-power_assertUpgrade ruby-develUpgrade ruby-irbUpgrade rubygem-opensslUpgrade rubygem-bson-debuginfoUpgrade rubygem-did_you_meanUpgrade rubygem-irbUpgrade rubygem-mongo-docUpgrade ruby-default-gemsUpgrade ruby-docUpgrade rubygem-xmlrpcUpgrade rubygem-mysql2-docUpgrade rubygem-io-consoleUpgrade rubyUpgrade rubygem-rakeUpgrade rubygem-pg-debuginfoUpgrade rubygem-bundlerUpgrade rubygem-abrtUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-io-console-debuginfoUpgrade rubygem-mysql2Upgrade ruby-debuginfoUpgrade rubygem-test-unitUpgrade rubygem-pg-debugsourceUpgrade rubygem-rdocUpgrade rubygem-bsonUpgrade rubygem-bigdecimalUpgrade rubygem-json | Jun 30, 2021 | Oct 6, 2020 |
| Debian | — | Upgrade ruby2.7Upgrade jruby | Oct 5, 2020 | Oct 5, 2020 |
| Gentoo Linux | — | Upgrade dev-lang/ruby. | Jan 25, 2024 | Oct 6, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade rubyUpgrade ruby-libsUpgrade ruby-irb | Feb 22, 2021 | Oct 6, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade rubyUpgrade ruby-irbUpgrade ruby-libs | Jan 20, 2021 | Oct 6, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade rubyUpgrade ruby-libsUpgrade ruby-irb | Feb 3, 2021 | Oct 6, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade ruby-libsUpgrade rubyUpgrade ruby-irb | Nov 3, 2020 | Oct 6, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade ruby-irbUpgrade ruby | Nov 3, 2020 | Oct 6, 2020 |
| Oracle Solaris | — | Upgrade runtime/ruby-26 to version 2.6.6-11.4.28.0.1.82.1 on Solaris 11.4Upgrade runtime/ruby-25 to version 2.5.8-11.4.28.0.1.82.1 on Solaris 11.4 | Jan 19, 2021 | Oct 6, 2020 |
| Oracle_linux | — | Upgrade ruby-docUpgrade rubygem-mongo-docUpgrade rubygem-io-consoleUpgrade rubygem-rakeUpgrade ruby-develUpgrade rubygem-bsonUpgrade rubygem-test-unitUpgrade rubygem-xmlrpcUpgrade rubygem-irbUpgrade rubygem-bundlerUpgrade rubygem-mysql2Upgrade rubyUpgrade rubygem-psychUpgrade rubygem-bigdecimalUpgrade rubygem-jsonUpgrade ruby-libsUpgrade rubygem-did_you_meanUpgrade rubygem-abrtUpgrade rubygem-bundler-docUpgrade rubygem-net-telnetUpgrade rubygem-mongoUpgrade rubygemsUpgrade rubygems-develUpgrade ruby-irbUpgrade rubygem-opensslUpgrade rubygem-abrt-docUpgrade rubygem-rdocUpgrade rubygem-pgUpgrade rubygem-mysql2-docUpgrade rubygem-pg-docUpgrade rubygem-power_assertUpgrade rubygem-minitestUpgrade ruby-default-gemsUpgrade rubygem-bson-doc | Jul 2, 2021 | Sep 29, 2020 |
| Redhat_linux | — | Upgrade rubygem-bson-debuginfoUpgrade rubygem-pg-debuginfoUpgrade rubygem-bsonUpgrade rubygem-did_you_meanUpgrade rubygem-json-debuginfoUpgrade ruby-docUpgrade rubygem-xmlrpcUpgrade rubygem-rakeUpgrade rubygem-test-unitNo solution existsUpgrade rubygem-mongo-docUpgrade ruby-develUpgrade rubygem-io-console-debuginfoUpgrade rubygem-jsonUpgrade rubygem-openssl-debuginfoUpgrade ruby-irbUpgrade rubygem-io-consoleUpgrade ruby-debuginfoUpgrade rubygem-bigdecimalUpgrade rubyUpgrade rubygem-mysql2-debugsourceUpgrade ruby-debugsourceUpgrade rubygem-irbUpgrade rubygem-abrtUpgrade rubygem-bundlerUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-rdocUpgrade rubygem-bundler-docUpgrade rubygemsUpgrade rubygem-pg-debugsourceUpgrade rubygem-opensslUpgrade rubygem-psych-debuginfoUpgrade rubygem-mysql2-docUpgrade rubygem-net-telnetUpgrade ruby-libsUpgrade rubygem-minitestUpgrade rubygem-mysql2Upgrade rubygem-pgUpgrade ruby-default-gemsUpgrade rubygem-mongoUpgrade ruby-libs-debuginfoUpgrade rubygem-pg-docUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-bson-debugsourceUpgrade rubygem-bson-docUpgrade rubygem-abrt-docUpgrade rubygem-psychUpgrade rubygems-develUpgrade rubygem-power_assert | Jun 30, 2021 | Oct 6, 2020 |
| Rocky_linux | — | Upgrade ruby-debuginfoUpgrade rubygem-pg-debuginfoUpgrade rubygem-bigdecimalUpgrade rubygem-opensslUpgrade ruby-develUpgrade rubygem-json-debuginfoUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-io-console-debuginfoUpgrade rubygem-bson-debugsourceUpgrade rubygem-bigdecimal-debuginfoUpgrade ruby-debugsourceUpgrade ruby-libsUpgrade rubygem-psychUpgrade rubygem-mysql2Upgrade rubygem-io-consoleUpgrade rubygem-openssl-debuginfoUpgrade rubygem-psych-debuginfoUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-pgUpgrade rubygem-bsonUpgrade rubyUpgrade rubygem-bson-debuginfoUpgrade ruby-libs-debuginfoUpgrade rubygem-pg-debugsourceUpgrade rubygem-json | May 5, 2022 | Oct 6, 2020 |
| Suse | — | Upgrade libruby2_1-2_1Upgrade ruby2.1-develUpgrade ruby2.5-devel-extraUpgrade ruby2.5-doc-riUpgrade ruby2.5-docUpgrade ruby2.5-stdlibUpgrade libruby2_5-2_5Upgrade ruby2.1Upgrade ruby2.5Upgrade ruby2.1-stdlibUpgrade ruby2.5-devel | Mar 25, 2021 | Oct 6, 2020 |
| Ubuntu | — | Upgrade libruby2.3Upgrade ruby2.3Upgrade ruby2.7Upgrade libruby2.7Upgrade ruby2.5Upgrade libruby2.5 | Mar 19, 2021 | Oct 6, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 6, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub