The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
A ReDoS issue was discovered in the URI component through 0.12.0 in Ruby through 3.2.1. The URI parser mishandles invalid URLs that have specific characters. It causes an increase in execution time for parsing strings to URI objects. The fixed versions are 0.12.1, 0.11.1, 0.10.2 and 0.10.0.1.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rubygem-io-consoleUpgrade rubygem-bigdecimalUpgrade rubygem-net-telnetUpgrade rubygem-bson-docUpgrade rubygem-power_assertUpgrade rubygem-pgUpgrade rubygem-minitestUpgrade rubygem-typeprofUpgrade rubygem-xmlrpcUpgrade rubygemsUpgrade rubygem-mongoUpgrade rubygem-abrt-docUpgrade rubygem-psychUpgrade rubygem-test-unitUpgrade ruby-libsUpgrade rubygems-develUpgrade ruby-default-gemsUpgrade ruby-develUpgrade rubygem-rakeUpgrade rubygem-bundlerUpgrade rubygem-mongo-docUpgrade rubygem-rbsUpgrade ruby-bundled-gemsUpgrade rubygem-irbUpgrade rubygem-rdocUpgrade rubygem-mysql2-docUpgrade rubyUpgrade rubygem-jsonUpgrade rubygem-opensslUpgrade rubygem-pg-docUpgrade rubygem-mysql2Upgrade ruby-irbUpgrade ruby-docUpgrade rubygem-abrtUpgrade rubygem-bundler-docUpgrade rubygem-did_you_meanUpgrade rubygem-bsonUpgrade rubygem-rexmlUpgrade rubygem-rss | Jul 4, 2023 | Mar 31, 2023 |
| Alpine Linux | — | Upgrade ruby | Mar 26, 2024 | Mar 31, 2023 |
| Amazon Linux Ami 2 | — | Upgrade rubygem-io-consoleUpgrade rubygem-rakeUpgrade rubygem-power_assertUpgrade rubygems-develUpgrade rubygem-minitestUpgrade rubygem-typeprofUpgrade ruby-develUpgrade rubygem-rdocUpgrade rubyUpgrade rubygem-jsonUpgrade rubygem-bigdecimalUpgrade rubygem-rexmlUpgrade rubygem-test-unitUpgrade ruby-default-gemsUpgrade ruby-docUpgrade rubygem-bundlerUpgrade rubygem-rbsUpgrade rubygem-irbUpgrade rubygemsUpgrade rubygem-rssUpgrade ruby-debuginfoUpgrade rubygem-psychUpgrade ruby-libs | Sep 28, 2023 | Mar 31, 2023 |
| Amazon_linux_2023 | — | Upgrade ruby3.2-rubygem-io-console-debuginfoUpgrade ruby3.2-rubygem-bigdecimal-debuginfoUpgrade ruby3.2-default-gemsUpgrade ruby3.2-rubygem-psych-debuginfoUpgrade ruby3.2-develUpgrade ruby3.2-rubygem-test-unitUpgrade ruby3.2-rubygem-bigdecimalUpgrade ruby3.2-rubygemsUpgrade ruby3.2-debugsourceUpgrade ruby3.2-rubygem-minitestUpgrade ruby3.2-docUpgrade ruby3.2-rubygem-rexmlUpgrade ruby3.2-debuginfoUpgrade ruby3.2-libsUpgrade ruby3.2Upgrade ruby3.2-rubygem-bundlerUpgrade ruby3.2-rubygem-power_assertUpgrade ruby3.2-rubygem-rdocUpgrade ruby3.2-rubygem-rssUpgrade ruby3.2-rubygem-psychUpgrade ruby3.2-rubygem-rbs-debuginfoUpgrade ruby3.2-rubygem-io-consoleUpgrade ruby3.2-rubygem-irbUpgrade ruby3.2-rubygem-json-debuginfoUpgrade ruby3.2-bundled-gemsUpgrade ruby3.2-rubygem-rbsUpgrade ruby3.2-rubygem-typeprofUpgrade ruby3.2-rubygem-rakeUpgrade ruby3.2-rubygems-develUpgrade ruby3.2-bundled-gems-debuginfoUpgrade ruby3.2-libs-debuginfoUpgrade ruby3.2-rubygem-json | Feb 17, 2025 | Mar 21, 2023 |
| Centos_linux | — | Upgrade rubygem-net-telnetUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-did_you_meanUpgrade rubygem-psychUpgrade rubygem-io-consoleUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-bson-debugsourceUpgrade rubygems-develUpgrade rubygem-openssl-debuginfoUpgrade ruby-debugsourceUpgrade rubygem-bson-docUpgrade rubygem-pg-docUpgrade rubygem-abrt-docUpgrade rubygem-jsonUpgrade rubygem-rakeUpgrade rubygem-bson-debuginfoUpgrade rubygem-bsonUpgrade rubygem-json-debuginfoUpgrade rubygem-pg-debuginfoUpgrade rubygem-bigdecimalUpgrade ruby-libsUpgrade rubygem-mysql2Upgrade rubygem-xmlrpcUpgrade ruby-develUpgrade rubygem-bundlerUpgrade rubygem-pg-debugsourceUpgrade rubygemsUpgrade rubygem-mongo-docUpgrade ruby-libs-debuginfoUpgrade rubygem-abrtUpgrade rubygem-psych-debuginfoUpgrade rubygem-pgUpgrade rubygem-io-console-debuginfoUpgrade rubygem-mongoUpgrade rubygem-mysql2-debuginfoUpgrade ruby-default-gemsUpgrade rubygem-power_assertUpgrade rubygem-minitestUpgrade rubygem-rdocUpgrade rubygem-mysql2-docUpgrade rubygem-opensslUpgrade rubygem-irbUpgrade rubygem-bundler-docUpgrade rubyUpgrade ruby-irbUpgrade ruby-debuginfoUpgrade rubygem-test-unitUpgrade ruby-doc | Jun 28, 2023 | Mar 31, 2023 |
| Debian | — | Upgrade ruby2.7Upgrade jrubyUpgrade rubygems | May 2, 2023 | Mar 31, 2023 |
| Dell Powerstore Dsa2024158 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Apr 4, 2024 |
| Dell Powerstore Dsa2024225 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | May 29, 2024 |
| Freebsd | — | Upgrade ruby32Upgrade ruby30Upgrade rubygem-uriUpgrade ruby31Upgrade ruby27Upgrade ruby | Apr 1, 2023 | Mar 30, 2023 |
| Gentoo Linux | — | Upgrade dev-lang/ruby. | Jan 25, 2024 | Mar 31, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade ruby-helpUpgrade ruby-irbUpgrade ruby | Jul 18, 2023 | Mar 31, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade ruby-helpUpgrade ruby-irbUpgrade ruby | Jan 10, 2024 | Mar 31, 2023 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Sep 22, 2023 |
| Oracle_linux | — | Upgrade rubygem-rssUpgrade rubygem-bundlerUpgrade ruby-default-gemsUpgrade rubygem-opensslUpgrade rubygem-net-telnetUpgrade rubygem-did_you_meanUpgrade ruby-docUpgrade rubygem-rdocUpgrade rubygem-rexmlUpgrade rubyUpgrade rubygem-rbsUpgrade rubygem-xmlrpcUpgrade rubygem-mongo-docUpgrade rubygem-abrt-docUpgrade rubygem-test-unitUpgrade rubygem-mysql2Upgrade rubygem-jsonUpgrade rubygem-bsonUpgrade ruby-bundled-gemsUpgrade rubygemsUpgrade rubygem-abrtUpgrade ruby-libsUpgrade rubygem-pgUpgrade rubygem-bundler-docUpgrade rubygem-psychUpgrade rubygems-develUpgrade rubygem-bigdecimalUpgrade rubygem-rakeUpgrade rubygem-power_assertUpgrade rubygem-irbUpgrade rubygem-typeprofUpgrade rubygem-bson-docUpgrade rubygem-mongoUpgrade rubygem-minitestUpgrade rubygem-io-consoleUpgrade ruby-irbUpgrade rubygem-pg-docUpgrade rubygem-mysql2-docUpgrade ruby-devel | Jul 8, 2023 | Mar 21, 2023 |
| Redhat_linux | — | Upgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-rssUpgrade ruby-debuginfoUpgrade rubygems-develUpgrade rubygem-abrt-docUpgrade rubygem-psych-debuginfoUpgrade rubygem-power_assertUpgrade rubygem-typeprofUpgrade rubygemsNo solution existsUpgrade rubygem-rbs-debuginfoUpgrade rubygem-json-debuginfoUpgrade rubygem-io-consoleUpgrade rubygem-mongoUpgrade rubygem-bson-docUpgrade rubygem-openssl-debuginfoUpgrade rubygem-psychUpgrade rubygem-net-telnetUpgrade rubygem-bson-debugsourceUpgrade rubygem-bigdecimalUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-bson-debuginfoUpgrade rubygem-minitestUpgrade rubygem-bsonUpgrade rubygem-jsonUpgrade ruby-debugsourceUpgrade ruby-libsUpgrade ruby-default-gemsUpgrade rubygem-rexmlUpgrade rubygem-abrtUpgrade rubygem-pg-docUpgrade rubygem-irbUpgrade rubygem-mysql2-debuginfoUpgrade ruby-docUpgrade ruby-bundled-gemsUpgrade rubygem-pg-debugsourceUpgrade rubygem-pgUpgrade rubyUpgrade ruby-irbUpgrade rubygem-bundler-docUpgrade rubygem-test-unitUpgrade rubygem-opensslUpgrade rubygem-rdocUpgrade rubygem-did_you_meanUpgrade rubygem-xmlrpcUpgrade ruby-bundled-gems-debuginfoUpgrade rubygem-pg-debuginfoUpgrade ruby-libs-debuginfoUpgrade rubygem-mysql2Upgrade ruby-develUpgrade rubygem-bundlerUpgrade rubygem-rakeUpgrade rubygem-rbsUpgrade rubygem-mysql2-docUpgrade rubygem-mongo-docUpgrade rubygem-io-console-debuginfo | Jun 28, 2023 | Mar 31, 2023 |
| Rocky_linux | — | Upgrade rubyUpgrade rubygem-opensslUpgrade rubygem-mysql2-debuginfoUpgrade ruby-develUpgrade rubygem-io-consoleUpgrade rubygem-bson-debuginfoUpgrade ruby-bundled-gems-debuginfoUpgrade rubygem-pg-debuginfoUpgrade rubygem-bigdecimalUpgrade rubygem-bson-debugsourceUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-io-console-debuginfoUpgrade rubygem-rbs-debuginfoUpgrade ruby-debugsourceUpgrade ruby-libs-debuginfoUpgrade rubygem-rbsUpgrade rubygem-json-debuginfoUpgrade ruby-debuginfoUpgrade rubygem-mysql2Upgrade rubygem-openssl-debuginfoUpgrade rubygem-bsonUpgrade rubygem-pgUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-jsonUpgrade ruby-libsUpgrade rubygem-pg-debugsourceUpgrade rubygem-psych-debuginfoUpgrade ruby-bundled-gemsUpgrade rubygem-psych | Mar 5, 2024 | Mar 31, 2023 |
| Suse | — | Upgrade ruby2.5-develUpgrade ruby2.5Upgrade ruby2.5-docUpgrade ruby2.5-devel-extraUpgrade ruby2.5-stdlibUpgrade libruby2_5-2_5Upgrade ruby2.5-doc-ri | Oct 25, 2023 | Mar 31, 2023 |
| Ubuntu | — | Upgrade ruby2.5Upgrade libruby2.3 (Ubuntu Pro)Upgrade ruby2.7Upgrade libruby3.1Upgrade ruby3.1Upgrade libruby2.7Upgrade ruby2.3 (Ubuntu Pro)Upgrade ruby-rubygemsUpgrade libruby2.5 | May 5, 2023 | Mar 31, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 31, 2023 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub