CGI::Cookie.parse in Ruby through 2.6.8 mishandles security prefixes in cookie names. This also affects the CGI gem through 0.3.0 for Ruby.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rubygem-typeprofUpgrade rubygem-rdocUpgrade rubygem-bson-docUpgrade rubygem-power_assertUpgrade rubygems-develUpgrade rubygem-abrt-docUpgrade rubygem-mongoUpgrade rubygem-pgUpgrade rubygem-net-telnetUpgrade rubygem-pg-docUpgrade rubygem-bundler-docUpgrade rubygemsUpgrade ruby-default-gemsUpgrade ruby-libsUpgrade rubygem-psychUpgrade rubygem-minitestUpgrade rubygem-opensslUpgrade ruby-develUpgrade rubygem-test-unitUpgrade rubygem-mongo-docUpgrade rubygem-rbsUpgrade rubygem-rakeUpgrade rubygem-mysql2-docUpgrade rubyUpgrade rubygem-irbUpgrade rubygem-bigdecimalUpgrade rubygem-rssUpgrade rubygem-did_you_meanUpgrade ruby-irbUpgrade rubygem-bsonUpgrade rubygem-jsonUpgrade rubygem-rexmlUpgrade ruby-docUpgrade rubygem-mysql2Upgrade rubygem-xmlrpcUpgrade rubygem-bundlerUpgrade rubygem-abrtUpgrade rubygem-io-console | May 4, 2022 | Jan 1, 2022 |
| Alpine Linux | — | Upgrade ruby | Aug 22, 2024 | Jan 1, 2022 |
| Amazon Linux Ami 2 | — | Upgrade ruby-default-gemsUpgrade rubygem-did_you_meanUpgrade rubygem-io-consoleUpgrade rubygem-rbsUpgrade rubygem-rdocUpgrade ruby-irbUpgrade ruby-develUpgrade rubygem-opensslUpgrade ruby-debuginfoUpgrade rubygem-irbUpgrade rubygem-bigdecimalUpgrade rubygem-rexmlUpgrade rubygem-xmlrpcUpgrade rubyUpgrade rubygem-test-unitUpgrade rubygem-rakeUpgrade ruby-docUpgrade rubygem-bundlerUpgrade ruby-tcltkUpgrade rubygem-typeprofUpgrade rubygem-power_assertUpgrade rubygemsUpgrade rubygem-rssUpgrade rubygem-net-telnetUpgrade rubygem-psychUpgrade rubygems-develUpgrade ruby-libsUpgrade rubygem-minitestUpgrade rubygem-json | Sep 28, 2023 | Jan 1, 2022 |
| Centos_linux | — | Upgrade rubygem-irbUpgrade rubygem-pg-docUpgrade rubygem-psychUpgrade rubygem-bundlerUpgrade rubygem-opensslUpgrade rubygem-rdocUpgrade ruby-default-gemsUpgrade rubygem-bundler-docUpgrade ruby-libs-debuginfoUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-rbsUpgrade rubygem-pgUpgrade rubygem-mysql2Upgrade rubyUpgrade rubygem-io-console-debuginfoUpgrade rubygem-psych-debuginfoUpgrade rubygem-pg-debugsourceUpgrade rubygem-mongoUpgrade rubygem-power_assertUpgrade rubygemsUpgrade rubygem-net-telnetUpgrade rubygem-mysql2-docUpgrade rubygem-bson-debugsourceUpgrade rubygem-abrt-docUpgrade ruby-develUpgrade rubygem-abrtUpgrade rubygem-minitestUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-typeprofUpgrade rubygem-jsonUpgrade rubygem-io-consoleUpgrade ruby-debugsourceUpgrade rubygem-pg-debuginfoUpgrade rubygem-rakeUpgrade rubygem-rssUpgrade rubygem-json-debuginfoUpgrade rubygem-bson-docUpgrade ruby-debuginfoUpgrade rubygem-openssl-debuginfoUpgrade rubygem-did_you_meanUpgrade ruby-irbUpgrade ruby-libsUpgrade rubygem-mongo-docUpgrade rubygem-rexmlUpgrade rubygem-bsonUpgrade rubygem-bson-debuginfoUpgrade rubygem-test-unitUpgrade rubygem-bigdecimalUpgrade ruby-docUpgrade rubygem-xmlrpcUpgrade rubygem-mysql2-debugsourceUpgrade rubygems-devel | Feb 17, 2022 | Jan 1, 2022 |
| Debian | — | Upgrade ruby2.7 | Dec 28, 2021 | Dec 28, 2021 |
| Freebsd | — | Upgrade rubyUpgrade ruby27Upgrade ruby26Upgrade ruby30Upgrade rubygem-cgi | Nov 4, 2022 | Nov 24, 2021 |
| Gentoo Linux | — | Upgrade dev-lang/ruby. | Jan 25, 2024 | Jan 1, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade ruby-irbUpgrade rubyUpgrade ruby-help | Apr 20, 2022 | Jan 1, 2022 |
| Huawei Euleros 2_0_sp3 | — | Upgrade ruby-libsUpgrade ruby-irbUpgrade ruby | May 25, 2022 | Jan 1, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade ruby-libsUpgrade ruby-irbUpgrade ruby | Mar 22, 2022 | Jan 1, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade ruby-libsUpgrade rubyUpgrade ruby-irb | Mar 29, 2022 | Jan 1, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade ruby-irbUpgrade ruby-helpUpgrade ruby | Apr 19, 2022 | Jan 1, 2022 |
| Oracle_linux | — | Upgrade rubygem-pg-docUpgrade rubygem-mongo-docUpgrade rubygem-mysql2-docUpgrade ruby-docUpgrade rubygem-rdocUpgrade ruby-default-gemsUpgrade rubygem-xmlrpcUpgrade rubygem-rexmlUpgrade rubygem-opensslUpgrade rubygem-rbsUpgrade rubygem-did_you_meanUpgrade rubygem-abrtUpgrade rubygem-test-unitUpgrade rubygem-irbUpgrade ruby-develUpgrade rubygem-rakeUpgrade ruby-irbUpgrade rubyUpgrade rubygem-bundlerUpgrade rubygems-develUpgrade rubygem-io-consoleUpgrade rubygem-mongoUpgrade rubygem-net-telnetUpgrade rubygem-rssUpgrade rubygemsUpgrade ruby-libsUpgrade rubygem-power_assertUpgrade rubygem-abrt-docUpgrade rubygem-psychUpgrade rubygem-bigdecimalUpgrade rubygem-bundler-docUpgrade rubygem-typeprofUpgrade rubygem-pgUpgrade rubygem-mysql2Upgrade rubygem-minitestUpgrade rubygem-bson-docUpgrade rubygem-bsonUpgrade rubygem-json | Feb 17, 2022 | Nov 24, 2021 |
| Redhat_linux | — | Upgrade ruby-docUpgrade rubygem-mysql2Upgrade ruby-default-gemsUpgrade rubygem-did_you_meanUpgrade rubygem-mongo-docUpgrade rubygem-bundlerUpgrade rubygem-mysql2-docUpgrade rubygem-opensslUpgrade rubygem-bundler-docUpgrade rubygem-bsonUpgrade rubygem-jsonUpgrade rubygem-pg-docUpgrade ruby-develUpgrade rubygem-rbsUpgrade rubygem-psych-debuginfoUpgrade rubygem-irbUpgrade rubygem-rssUpgrade rubygem-pg-debugsourceUpgrade rubyUpgrade rubygem-io-console-debuginfoUpgrade rubygem-mysql2-debuginfoNo solution existsUpgrade ruby-libsUpgrade rubygem-rakeUpgrade ruby-irbUpgrade rubygem-bson-debuginfoUpgrade rubygem-pg-debuginfoUpgrade rubygem-abrtUpgrade rubygem-pgUpgrade rubygem-rexmlUpgrade rubygem-json-debuginfoUpgrade rubygem-typeprofUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-net-telnetUpgrade rubygem-bson-docUpgrade rubygem-openssl-debuginfoUpgrade rubygem-psychUpgrade rubygem-bigdecimalUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-abrt-docUpgrade rubygem-rdocUpgrade rubygemsUpgrade ruby-libs-debuginfoUpgrade rubygem-power_assertUpgrade ruby-debuginfoUpgrade rubygem-mongoUpgrade rubygem-test-unitUpgrade rubygem-minitestUpgrade rubygem-xmlrpcUpgrade rubygem-bson-debugsourceUpgrade rubygems-develUpgrade ruby-debugsourceUpgrade rubygem-io-console | Feb 17, 2022 | Jan 1, 2022 |
| Rocky_linux | — | Upgrade rubyUpgrade rubygem-pg-debugsourceUpgrade rubygem-bigdecimalUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-bson-debuginfoUpgrade rubygem-io-consoleUpgrade rubygem-io-console-debuginfoUpgrade rubygem-pg-debuginfoUpgrade rubygem-bson-debugsourceUpgrade ruby-develUpgrade rubygem-opensslUpgrade rubygem-mysql2-debugsourceUpgrade ruby-libsUpgrade rubygem-json-debuginfoUpgrade rubygem-psychUpgrade rubygem-mysql2Upgrade rubygem-openssl-debuginfoUpgrade ruby-debugsourceUpgrade ruby-libs-debuginfoUpgrade rubygem-pgUpgrade rubygem-jsonUpgrade ruby-debuginfoUpgrade rubygem-psych-debuginfoUpgrade rubygem-bson | Mar 5, 2024 | Jan 1, 2022 |
| Suse | — | Upgrade ruby2.5-stdlibUpgrade ruby2.5Upgrade ruby2.5-develUpgrade ruby2.5-doc-riUpgrade ruby2.5-docUpgrade libruby2_5-2_5Upgrade ruby2.5-devel-extra | Oct 26, 2022 | Jan 1, 2022 |
| Ubuntu | — | Upgrade ruby2.5Upgrade ruby2.3 (Ubuntu Pro)Upgrade ruby2.7 | Jan 19, 2022 | Jan 1, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 1, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub