The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
CGI::Cookie.parse in Ruby through 2.6.8 mishandles security prefixes in cookie names. This also affects the CGI gem through 0.3.0 for Ruby.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rubygem-abrt-docUpgrade rubygem-mongoUpgrade ruby-default-gemsUpgrade rubygem-power_assertUpgrade rubygems-develUpgrade rubygem-psychUpgrade rubygem-rdocUpgrade rubygem-bson-docUpgrade rubygem-pgUpgrade rubygem-pg-docUpgrade rubygem-bundler-docUpgrade rubygemsUpgrade rubygem-typeprofUpgrade rubygem-net-telnetUpgrade ruby-libsUpgrade rubygem-opensslUpgrade rubygem-minitestUpgrade rubygem-rakeUpgrade rubygem-bigdecimalUpgrade rubygem-jsonUpgrade rubygem-did_you_meanUpgrade rubygem-mongo-docUpgrade rubyUpgrade rubygem-mysql2Upgrade rubygem-xmlrpcUpgrade rubygem-io-consoleUpgrade rubygem-rexmlUpgrade ruby-docUpgrade rubygem-rbsUpgrade ruby-develUpgrade rubygem-bundlerUpgrade rubygem-mysql2-docUpgrade ruby-irbUpgrade rubygem-bsonUpgrade rubygem-abrtUpgrade rubygem-test-unitUpgrade rubygem-rssUpgrade rubygem-irb | May 4, 2022 | Jan 1, 2022 |
| Alpine Linux | — | Upgrade ruby | Aug 22, 2024 | Jan 1, 2022 |
| Amazon Linux Ami 2 | — | Upgrade rubygem-bigdecimalUpgrade rubygem-xmlrpcUpgrade rubygem-rbsUpgrade rubygem-test-unitUpgrade rubygem-rexmlUpgrade rubyUpgrade ruby-debuginfoUpgrade rubygem-irbUpgrade rubygem-bundlerUpgrade rubygem-io-consoleUpgrade rubygem-opensslUpgrade ruby-default-gemsUpgrade ruby-irbUpgrade rubygem-rakeUpgrade rubygem-rdocUpgrade ruby-docUpgrade rubygem-did_you_meanUpgrade ruby-develUpgrade rubygem-rssUpgrade rubygem-net-telnetUpgrade ruby-libsUpgrade rubygemsUpgrade rubygem-typeprofUpgrade rubygems-develUpgrade rubygem-psychUpgrade rubygem-jsonUpgrade rubygem-minitestUpgrade ruby-tcltkUpgrade rubygem-power_assert | Sep 28, 2023 | Jan 1, 2022 |
| Centos_linux | — | Upgrade rubygem-pg-docUpgrade rubygem-io-console-debuginfoUpgrade rubygem-bundler-docUpgrade rubygem-psychUpgrade rubygem-irbUpgrade rubygem-rdocUpgrade ruby-develUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-pgUpgrade rubygem-abrtUpgrade rubygem-mongoUpgrade rubygem-rbsUpgrade rubygem-opensslUpgrade rubygem-psych-debuginfoUpgrade rubygem-bundlerUpgrade rubygemsUpgrade rubygem-pg-debugsourceUpgrade rubygem-mysql2Upgrade rubygem-power_assertUpgrade rubygem-bigdecimal-debuginfoUpgrade rubyUpgrade rubygem-typeprofUpgrade rubygem-jsonUpgrade rubygem-minitestUpgrade rubygem-abrt-docUpgrade rubygem-bson-debugsourceUpgrade rubygem-mysql2-docUpgrade ruby-default-gemsUpgrade rubygem-net-telnetUpgrade ruby-libs-debuginfoUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-json-debuginfoUpgrade rubygem-bson-docUpgrade rubygems-develUpgrade ruby-libsUpgrade rubygem-bsonUpgrade rubygem-rexmlUpgrade rubygem-test-unitUpgrade rubygem-bson-debuginfoUpgrade ruby-debugsourceUpgrade rubygem-mongo-docUpgrade rubygem-io-consoleUpgrade rubygem-rssUpgrade rubygem-bigdecimalUpgrade rubygem-xmlrpcUpgrade ruby-debuginfoUpgrade rubygem-openssl-debuginfoUpgrade rubygem-did_you_meanUpgrade rubygem-pg-debuginfoUpgrade ruby-docUpgrade rubygem-rakeUpgrade ruby-irb | Feb 17, 2022 | Jan 1, 2022 |
| Debian | — | Upgrade ruby2.7 | Dec 28, 2021 | Dec 28, 2021 |
| Freebsd | — | Upgrade ruby27Upgrade rubyUpgrade rubygem-cgiUpgrade ruby30Upgrade ruby26 | Nov 4, 2022 | Nov 24, 2021 |
| Gentoo Linux | — | Upgrade dev-lang/ruby. | Jan 25, 2024 | Jan 1, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade rubyUpgrade ruby-helpUpgrade ruby-irb | Apr 20, 2022 | Jan 1, 2022 |
| Huawei Euleros 2_0_sp3 | — | Upgrade rubyUpgrade ruby-irbUpgrade ruby-libs | May 25, 2022 | Jan 1, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade ruby-irbUpgrade ruby-libsUpgrade ruby | Mar 22, 2022 | Jan 1, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade ruby-libsUpgrade rubyUpgrade ruby-irb | Mar 29, 2022 | Jan 1, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade ruby-irbUpgrade ruby-helpUpgrade ruby | Apr 19, 2022 | Jan 1, 2022 |
| Oracle_linux | — | Upgrade ruby-libsUpgrade rubygem-power_assertUpgrade rubygemsUpgrade rubygem-bigdecimalUpgrade rubygem-bundler-docUpgrade rubygem-net-telnetUpgrade rubygem-jsonUpgrade rubygems-develUpgrade rubygem-mongoUpgrade rubygem-minitestUpgrade rubygem-mysql2Upgrade rubygem-bson-docUpgrade rubygem-typeprofUpgrade rubygem-abrt-docUpgrade rubygem-psychUpgrade rubygem-bsonUpgrade rubygem-pgUpgrade rubygem-rssUpgrade rubygem-io-consoleUpgrade rubygem-opensslUpgrade rubygem-irbUpgrade rubygem-rexmlUpgrade rubygem-test-unitUpgrade ruby-default-gemsUpgrade rubygem-mysql2-docUpgrade rubygem-pg-docUpgrade rubygem-rdocUpgrade ruby-develUpgrade rubygem-rakeUpgrade rubygem-abrtUpgrade rubygem-bundlerUpgrade rubygem-rbsUpgrade rubygem-did_you_meanUpgrade rubyUpgrade ruby-docUpgrade rubygem-mongo-docUpgrade rubygem-xmlrpcUpgrade ruby-irb | Feb 17, 2022 | Nov 24, 2021 |
| Redhat_linux | — | Upgrade rubygem-net-telnetUpgrade ruby-debugsourceUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-openssl-debuginfoUpgrade rubygem-io-consoleUpgrade rubygem-bigdecimalUpgrade rubygem-typeprofUpgrade rubygem-test-unitUpgrade rubygem-minitestUpgrade rubygem-json-debuginfoUpgrade rubygemsUpgrade rubygems-develUpgrade rubygem-bson-debugsourceUpgrade rubygem-psychUpgrade rubygem-mongoUpgrade rubygem-rdocUpgrade ruby-debuginfoUpgrade ruby-libs-debuginfoUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-bson-docUpgrade rubygem-xmlrpcUpgrade rubygem-abrt-docUpgrade rubygem-power_assertUpgrade rubygem-rbsUpgrade ruby-develNo solution existsUpgrade rubygem-opensslUpgrade rubygem-psych-debuginfoUpgrade rubygem-abrtUpgrade rubyUpgrade rubygem-bson-debuginfoUpgrade ruby-libsUpgrade rubygem-mysql2-docUpgrade rubygem-pg-debuginfoUpgrade ruby-irbUpgrade rubygem-io-console-debuginfoUpgrade rubygem-pg-debugsourceUpgrade rubygem-bsonUpgrade rubygem-jsonUpgrade rubygem-bundler-docUpgrade rubygem-rssUpgrade rubygem-pgUpgrade rubygem-irbUpgrade rubygem-rakeUpgrade rubygem-pg-docUpgrade rubygem-mysql2Upgrade ruby-docUpgrade rubygem-did_you_meanUpgrade rubygem-rexmlUpgrade rubygem-mysql2-debuginfoUpgrade ruby-default-gemsUpgrade rubygem-bundlerUpgrade rubygem-mongo-doc | Feb 17, 2022 | Jan 1, 2022 |
| Rocky_linux | — | Upgrade rubygem-jsonUpgrade rubygem-bsonUpgrade rubygem-mysql2Upgrade ruby-libs-debuginfoUpgrade rubygem-openssl-debuginfoUpgrade ruby-debugsourceUpgrade rubygem-json-debuginfoUpgrade ruby-libsUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-pgUpgrade rubygem-psych-debuginfoUpgrade rubygem-psychUpgrade ruby-debuginfoUpgrade rubygem-io-consoleUpgrade rubygem-bigdecimalUpgrade rubygem-opensslUpgrade rubygem-bson-debuginfoUpgrade rubygem-bson-debugsourceUpgrade ruby-develUpgrade rubygem-pg-debugsourceUpgrade rubygem-io-console-debuginfoUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-pg-debuginfoUpgrade rubyUpgrade rubygem-bigdecimal-debuginfo | Mar 5, 2024 | Jan 1, 2022 |
| Suse | — | Upgrade libruby2_5-2_5Upgrade ruby2.5-devel-extraUpgrade ruby2.5-doc-riUpgrade ruby2.5-docUpgrade ruby2.5-stdlibUpgrade ruby2.5-develUpgrade ruby2.5 | Oct 26, 2022 | Jan 1, 2022 |
| Ubuntu | — | Upgrade ruby2.7Upgrade ruby2.3 (Ubuntu Pro)Upgrade ruby2.5 | Jan 19, 2022 | Jan 1, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 1, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub