The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
A buffer-overread issue was discovered in StringIO 3.0.1, as distributed in Ruby 3.0.x through 3.0.6 and 3.1.x through 3.1.4. The ungetbyte and ungetc methods on a StringIO can read past the end of a string, and a subsequent call to StringIO.gets may return the memory value. 3.0.3 is the main fixed version; however, for Ruby 3.0 users, a fixed version is stringio 3.0.1.1, and for Ruby 3.1 users, a fixed version is stringio 3.0.1.2.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rubygem-mysql2-docUpgrade rubygem-did_you_meanUpgrade rubygem-test-unitUpgrade ruby-default-gemsUpgrade rubygem-xmlrpcUpgrade rubygem-opensslUpgrade rubygem-raccUpgrade ruby-irbUpgrade ruby-develUpgrade rubygem-bundlerUpgrade rubygem-mongoUpgrade rubygem-rdocUpgrade rubygem-minitestUpgrade rubygem-irbUpgrade rubygem-power_assertUpgrade rubygem-pgUpgrade rubygems-develUpgrade rubygem-rakeUpgrade rubygem-bundler-docUpgrade rubygem-bson-docUpgrade rubygem-mysql2Upgrade rubygem-abrtUpgrade rubygem-pg-docUpgrade rubyUpgrade rubygem-abrt-docUpgrade ruby-docUpgrade rubygem-mongo-docUpgrade rubygem-typeprofUpgrade rubygem-rssUpgrade rubygem-rbsUpgrade ruby-bundled-gemsUpgrade ruby-libsUpgrade rubygem-net-telnetUpgrade rubygem-jsonUpgrade rubygem-io-consoleUpgrade rubygem-bsonUpgrade rubygem-bigdecimalUpgrade rubygem-rexmlUpgrade rubygemsUpgrade rubygem-psych | Jun 3, 2024 | May 14, 2024 |
| Alpine Linux | — | Upgrade ruby | Jun 6, 2024 | May 8, 2024 |
| Apple Osx Ruby | — | Upgrade macOS to the latest version | Oct 8, 2025 | Sep 15, 2025 |
| Debian | — | Upgrade ruby3.1Upgrade ruby2.7 | May 6, 2024 | May 6, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade ruby-irbUpgrade rubyUpgrade ruby-help | Jul 16, 2024 | May 14, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade ruby-irbUpgrade rubyUpgrade ruby-help | Jun 26, 2024 | May 14, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade ruby-irbUpgrade rubyUpgrade ruby-help | Oct 8, 2024 | May 14, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade rubyUpgrade ruby-irbUpgrade ruby-libs | Jan 21, 2025 | May 14, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade ruby-irbUpgrade rubyUpgrade ruby-help | Oct 8, 2024 | May 14, 2024 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Oct 8, 2024 |
| Oracle_linux | — | Upgrade rubygem-pg-docUpgrade rubygem-power_assertUpgrade rubygem-mongoUpgrade ruby-develUpgrade rubygem-bson-docUpgrade rubygem-minitestUpgrade rubygems-develUpgrade rubygem-typeprofUpgrade rubygem-bigdecimalUpgrade rubygem-rakeUpgrade rubygem-io-consoleUpgrade rubygem-raccUpgrade ruby-irbUpgrade ruby-bundled-gemsUpgrade rubygem-net-telnetUpgrade rubygem-mongo-docUpgrade rubygem-abrt-docUpgrade rubygem-xmlrpcUpgrade rubygem-rexmlUpgrade rubygem-rdocUpgrade rubygem-opensslUpgrade rubyUpgrade ruby-default-gemsUpgrade ruby-docUpgrade rubygem-psychUpgrade rubygem-mysql2Upgrade ruby-libsUpgrade rubygem-bundler-docUpgrade rubygem-bundlerUpgrade rubygemsUpgrade rubygem-did_you_meanUpgrade rubygem-abrtUpgrade rubygem-jsonUpgrade rubygem-rssUpgrade rubygem-mysql2-docUpgrade rubygem-test-unitUpgrade rubygem-rbsUpgrade rubygem-pgUpgrade rubygem-irbUpgrade rubygem-bson | Jun 1, 2024 | Mar 21, 2024 |
| Redhat_linux | — | Upgrade rubygem-bsonUpgrade rubygem-abrt-docUpgrade rubygem-pgUpgrade rubygem-bundler-docUpgrade rubygem-psychUpgrade rubygem-jsonUpgrade rubygem-bigdecimalUpgrade rubygem-power_assertUpgrade rubygem-minitestUpgrade rubygems-develUpgrade rubygem-openssl-debuginfoUpgrade rubygem-bson-debuginfoUpgrade rubygemsUpgrade rubygem-json-debuginfoUpgrade rubygem-rssUpgrade ruby-libs-debuginfoUpgrade ruby-bundled-gemsUpgrade ruby-libsNo solution existsUpgrade rubygem-net-telnetUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-bson-docUpgrade ruby-debugsourceUpgrade rubygem-mongoUpgrade rubygem-psych-debuginfoUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-pg-docUpgrade rubygem-racc-debuginfoUpgrade rubygem-typeprofUpgrade rubygem-mongo-docUpgrade rubygem-opensslUpgrade rubygem-rexmlUpgrade rubygem-io-console-debuginfoUpgrade ruby-irbUpgrade rubygem-mysql2-docUpgrade rubygem-mysql2Upgrade ruby-docUpgrade rubygem-rakeUpgrade rubygem-xmlrpcUpgrade ruby-debuginfoUpgrade rubygem-pg-debuginfoUpgrade rubygem-rdocUpgrade rubygem-abrtUpgrade rubygem-irbUpgrade ruby-default-gemsUpgrade rubygem-bson-debugsourceUpgrade rubygem-raccUpgrade rubygem-test-unitUpgrade rubygem-mysql2-debuginfoUpgrade ruby-bundled-gems-debuginfoUpgrade rubygem-io-consoleUpgrade rubygem-pg-debugsourceUpgrade rubygem-rbs-debuginfoUpgrade rubyUpgrade rubygem-bundlerUpgrade rubygem-did_you_meanUpgrade ruby-develUpgrade rubygem-rbs | May 31, 2024 | May 14, 2024 |
| Rocky_linux | — | Upgrade ruby-debugsourceUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-bson-debuginfoUpgrade rubygem-bigdecimalUpgrade ruby-bundled-gemsUpgrade rubygem-jsonUpgrade rubygem-openssl-debuginfoUpgrade rubygem-rbsUpgrade rubygem-raccUpgrade rubygem-io-consoleUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-rbs-debuginfoUpgrade rubygem-bigdecimal-debuginfoUpgrade ruby-develUpgrade rubygem-pg-debuginfoUpgrade rubygem-json-debuginfoUpgrade rubygem-pgUpgrade rubygem-psych-debuginfoUpgrade rubygem-psychUpgrade rubygem-bsonUpgrade rubygem-racc-debuginfoUpgrade rubyUpgrade rubygem-opensslUpgrade ruby-libs-debuginfoUpgrade ruby-debuginfoUpgrade ruby-bundled-gems-debuginfoUpgrade rubygem-io-console-debuginfoUpgrade rubygem-pg-debugsource | Jun 17, 2024 | May 14, 2024 |
| Ubuntu | — | Upgrade libruby3.1Upgrade libruby2.5 (Ubuntu Pro)Upgrade ruby3.0Upgrade libruby3.0Upgrade libruby2.7Upgrade ruby3.1Upgrade ruby2.7Upgrade ruby2.5 (Ubuntu Pro) | Jul 15, 2024 | May 14, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | May 8, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub