The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
zlib is a Ruby interface for the zlib compression/decompression library. Versions 3.0.0 and below, 3.1.0, 3.1.1, 3.2.0 and 3.2.1 contain a buffer overflow vulnerability in the Zlib::GzipReader. The zstream_buffer_ungets function prepends caller-provided bytes ahead of previously produced output but fails to guarantee the backing Ruby string has enough capacity before the memmove shifts the existing data. This can lead to memory corruption when the buffer length exceeds capacity. This issue has been fixed in versions 3.0.1, 3.1.2 and 3.2.3.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rubygem-rakeUpgrade ruby-docUpgrade rubygem-rssUpgrade rubygem-rexmlUpgrade rubygem-test-unitUpgrade rubygem-io-consoleUpgrade rubygem-bigdecimalUpgrade rubygem-raccUpgrade rubygems-develUpgrade rubygem-rbsUpgrade rubyUpgrade rubygem-rdocUpgrade ruby-develUpgrade ruby-default-gemsUpgrade rubygem-typeprofUpgrade rubygemsUpgrade rubygem-minitestUpgrade rubygem-abrtUpgrade rubygem-mysql2Upgrade ruby-libsUpgrade rubygem-mysql2-docUpgrade rubygem-psychUpgrade rubygem-abrt-docUpgrade rubygem-pgUpgrade rubygem-pg-docUpgrade rubygem-bundlerUpgrade rubygem-jsonUpgrade rubygem-irbUpgrade rubygem-power_assertUpgrade ruby-bundled-gems | Oct 11, 2026 | Aug 5, 2026 |
| Alpine Linux | — | Upgrade ruby | Apr 17, 2026 | Apr 16, 2026 |
| Amazon_linux_2023 | — | Upgrade ruby3.4-rubygem-psych-debuginfoUpgrade ruby3.4Upgrade ruby3.4-bundled-gemsUpgrade ruby3.4-rubygem-irbUpgrade ruby3.4-rubygem-io-console-debuginfoUpgrade ruby3.4-rubygem-typeprofUpgrade ruby3.4-rubygems-develUpgrade ruby3.4-debugsourceUpgrade ruby3.4-rubygem-rakeUpgrade ruby3.4-rubygem-rssUpgrade ruby3.4-libsUpgrade ruby3.4-develUpgrade ruby3.4-rubygem-rdocUpgrade ruby3.4-default-gemsUpgrade ruby3.4-rubygem-bigdecimalUpgrade ruby3.4-rubygem-bundlerUpgrade ruby3.4-rubygem-rbs-debuginfoUpgrade ruby3.4-rubygem-io-consoleUpgrade ruby3.4-rubygem-json-debuginfoUpgrade ruby3.4-rubygem-psychUpgrade ruby3.4-bundled-gems-debuginfoUpgrade ruby3.4-rubygem-rexmlUpgrade ruby3.4-rubygem-raccUpgrade ruby3.4-rubygemsUpgrade ruby3.4-rubygem-racc-debuginfoUpgrade ruby3.4-debuginfoUpgrade ruby3.4-rubygem-test-unitUpgrade ruby3.4-rubygem-minitestUpgrade ruby3.4-rubygem-bigdecimal-debuginfoUpgrade ruby3.4-libs-debuginfoUpgrade ruby3.4-rubygem-jsonUpgrade ruby3.4-docUpgrade ruby3.4-rubygem-power_assertUpgrade ruby3.4-rubygem-rbs | Jun 9, 2026 | Apr 16, 2026 |
| Debian | — | Upgrade ruby2.7 | Aug 5, 2026 | Aug 5, 2026 |
| Oracle_linux | — | Upgrade rubygem-pg-docUpgrade ruby4.0-develUpgrade rubygem-irbUpgrade rubygemsUpgrade ruby-docUpgrade ruby4.0-rubygem-pgUpgrade rubygem-bundlerUpgrade rubygem-power_assertUpgrade rubygem-mysql2-docUpgrade rubygem-minitestUpgrade ruby-develUpgrade rubygem-rbsUpgrade rubygem-pgUpgrade rubygem-test-unitUpgrade ruby-default-gemsUpgrade rubygem-mysql2Upgrade rubygem-rdocUpgrade rubygem-abrtUpgrade rubyUpgrade ruby-bundled-gemsUpgrade rubygem-abrt-docUpgrade ruby4.0Upgrade ruby-libsUpgrade rubygem-jsonUpgrade ruby4.0-rubygem-mysql2Upgrade rubygem-raccUpgrade rubygem-rexmlUpgrade rubygem-rssUpgrade rubygems-develUpgrade rubygem-psychUpgrade ruby4.0-docUpgrade rubygem-rakeUpgrade rubygem-io-consoleUpgrade rubygem-typeprofUpgrade rubygem-bigdecimal | Oct 22, 2026 | Apr 16, 2026 |
| Redhat_linux | — | Upgrade rubygem-jsonUpgrade ruby-libs-debuginfoUpgrade ruby4.0-develUpgrade rubygem-abrtUpgrade ruby-develUpgrade ruby-default-gemsUpgrade rubygem-io-console-debuginfoUpgrade rubyNo solution existsUpgrade rubygem-pg-docUpgrade rubygem-rssUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-bundlerUpgrade rubygem-minitestUpgrade rubygem-mysql2-docUpgrade rubygem-rbsUpgrade rubygemsUpgrade rubygem-mysql2Upgrade ruby4.0-debuginfoUpgrade rubygem-power_assertUpgrade rubygem-rdocUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-psych-debuginfoUpgrade rubygem-raccUpgrade rubygem-irbUpgrade rubygem-pg-debugsourceUpgrade ruby-docUpgrade ruby-libsUpgrade ruby-bundled-gemsUpgrade ruby-bundled-gems-debuginfoUpgrade rubygem-pgUpgrade rubygem-rbs-debuginfoUpgrade rubygem-bigdecimalUpgrade ruby4.0-rubygem-mysql2-debuginfoUpgrade rubygem-io-consoleUpgrade rubygem-racc-debuginfoUpgrade rubygem-rakeUpgrade rubygem-psychUpgrade rubygem-abrt-docUpgrade ruby4.0-debugsourceUpgrade rubygem-pg-debuginfoUpgrade ruby4.0-rubygem-pg-debuginfoUpgrade ruby4.0Upgrade rubygem-test-unitUpgrade ruby4.0-docUpgrade ruby-debugsourceUpgrade rubygem-typeprofUpgrade rubygem-json-debuginfoUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-rexmlUpgrade rubygems-develUpgrade ruby4.0-rubygem-mysql2Upgrade ruby-debuginfoUpgrade ruby4.0-rubygem-pg | Jul 17, 2026 | Apr 16, 2026 |
| Rocky_linux | — | Upgrade rubygem-io-console-debuginfoUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-bigdecimalUpgrade ruby4.0Upgrade ruby4.0-develUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-io-consoleUpgrade ruby4.0-rubygem-mysql2-debuginfoUpgrade rubygem-pg-debuginfoUpgrade ruby-develUpgrade ruby4.0-debuginfoUpgrade rubygem-raccUpgrade rubygem-json-debuginfoUpgrade rubygem-rbs-debuginfoUpgrade ruby4.0-rubygem-pg-debuginfoUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-psych-debuginfoUpgrade ruby4.0-debugsourceUpgrade rubygem-psychUpgrade ruby-libs-debuginfoUpgrade ruby-libsUpgrade rubygem-pg-debugsourceUpgrade rubygem-jsonUpgrade rubygem-pgUpgrade ruby-bundled-gems-debuginfoUpgrade ruby-debuginfoUpgrade rubygem-racc-debuginfoUpgrade ruby-bundled-gemsUpgrade ruby-debugsourceUpgrade rubygem-rbsUpgrade ruby4.0-rubygem-mysql2Upgrade rubyUpgrade ruby4.0-rubygem-pgUpgrade rubygem-mysql2 | Aug 28, 2026 | Aug 27, 2026 |
| Ubuntu | — | Upgrade libruby2.3 (Ubuntu Pro) | Jul 20, 2026 | Jul 16, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub