Description
DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 25.10 | ruby-webrick | 1.8.1-1ubuntu1 | — |
| Ubuntu 24.04 LTS | ruby-webrick | 1.8.1-1ubuntu0.1 | USN-7057-1 |
| Ubuntu 22.04 LTS | ruby-webrick | 1.7.0-3ubuntu0.1 | USN-7057-2 |
Show 3 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro 20.04 LTS | ruby2.7 | 2.7.0-5ubuntu1.18+esm3 | USN-7840-1 |
| Ubuntu Pro 18.04 LTS | ruby2.5 | 2.5.1-1ubuntu1.16+esm6 | USN-7840-1 |
| Ubuntu Pro 16.04 LTS | ruby2.3 | 2.3.1-2~ubuntu16.04.16+esm11 | USN-7840-1 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP7 | ruby2.5 | 2.5.9-150700.24.3.1 | SUSE-SU-2025:4264-1 |
| SLES 15 SP6 | ruby2.5 | 2.5.9-150000.4.36.1 | SUSE-SU-2025:1369-1, SUSE-SU-2025:0736-1 |
| SLES 15 SP5 | ruby2.5 | 2.5.9-150000.4.36.1 | SUSE-SU-2025:1369-1, SUSE-SU-2025:0736-1 |
| SLES 15 SP4 | ruby2.5 | 2.5.9-150000.4.36.1 | SUSE-SU-2025:1369-1, SUSE-SU-2025:0736-1 |
| SLES 15 SP3 | ruby2.5 | 2.5.9-150000.4.36.1 | SUSE-SU-2025:1369-1, SUSE-SU-2025:0736-1 |
Show 10 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 12 SP5 | ruby2.1 | 2.1.9-19.9.1 | SUSE-SU-2024:3939-1 |
| SLES for SAP 15 SP5 | ruby2.5 | 2.5.9-150000.4.36.1 | SUSE-SU-2025:1369-1, SUSE-SU-2025:0736-1 |
| SLES for SAP 15 SP4 | ruby2.5 | 2.5.9-150000.4.36.1 | SUSE-SU-2025:1369-1, SUSE-SU-2025:0736-1 |
| SLES for SAP 15 SP3 | ruby2.5 | 2.5.9-150000.4.36.1 | SUSE-SU-2025:1369-1, SUSE-SU-2025:0736-1 |
| SLE HPC 15 SP5 | ruby2.5 | 2.5.9-150000.4.36.1 | SUSE-SU-2025:1369-1, SUSE-SU-2025:0736-1 |
| SLE HPC 15 SP4 | ruby2.5 | 2.5.9-150000.4.36.1 | SUSE-SU-2025:1369-1, SUSE-SU-2025:0736-1 |
| SLE HPC 15 SP3 | ruby2.5 | 2.5.9-150000.4.36.1 | SUSE-SU-2025:1369-1, SUSE-SU-2025:0736-1 |
| SUSE Manager Server 4.3 | ruby2.5 | 2.5.9-150000.4.36.1 | SUSE-SU-2025:1369-1, SUSE-SU-2025:0736-1 |
| SUSE Manager Proxy 4.3 | ruby2.5 | 2.5.9-150000.4.36.1 | SUSE-SU-2025:1369-1, SUSE-SU-2025:0736-1 |
| SUSE Enterprise Storage 7.1 | ruby2.5 | 2.5.9-150000.4.36.1 | SUSE-SU-2025:1369-1, SUSE-SU-2025:0736-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Leap 15.6 | ruby2.5 | 2.5.9-150000.4.36.1 | SUSE-SU-2025:1369-1, SUSE-SU-2025:0736-1 |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2023 | ruby3.2 +5 | 3.2.2-180.amzn2023.0.4 | ALAS2023-2024-743 |
| Amazon Linux 2023 | ruby3.2-rubygem-bigdecimal | 3.1.3-180.amzn2023.0.4 | ALAS2023-2024-743 |
| Amazon Linux 2023 | ruby3.2-rubygem-bundler | 2.4.10-180.amzn2023.0.4 | ALAS2023-2024-743 |
| Amazon Linux 2023 | ruby3.2-rubygem-io-console | 0.6.0-180.amzn2023.0.4 | ALAS2023-2024-743 |
| Amazon Linux 2023 | ruby3.2-rubygem-irb | 1.6.2-180.amzn2023.0.4 | ALAS2023-2024-743 |
| Amazon Linux 2023 | ruby3.2-rubygem-json | 2.6.3-180.amzn2023.0.4 | ALAS2023-2024-743 |
| Amazon Linux 2023 | ruby3.2-rubygem-minitest | 5.16.3-180.amzn2023.0.4 | ALAS2023-2024-743 |
| Amazon Linux 2023 | ruby3.2-rubygem-power_assert | 2.0.3-180.amzn2023.0.4 | ALAS2023-2024-743 |
| Amazon Linux 2023 | ruby3.2-rubygem-psych | 5.0.1-180.amzn2023.0.4 | ALAS2023-2024-743 |
| Amazon Linux 2023 | ruby3.2-rubygem-rake | 13.0.6-180.amzn2023.0.4 | ALAS2023-2024-743 |
| Amazon Linux 2023 | ruby3.2-rubygem-rbs | 2.8.2-180.amzn2023.0.4 | ALAS2023-2024-743 |
| Amazon Linux 2023 | ruby3.2-rubygem-rdoc | 6.5.0-180.amzn2023.0.4 | ALAS2023-2024-743 |
| Amazon Linux 2023 | ruby3.2-rubygem-rexml | 3.2.5-180.amzn2023.0.4 | ALAS2023-2024-743 |
| Amazon Linux 2023 | ruby3.2-rubygem-rss | 0.2.9-180.amzn2023.0.4 | ALAS2023-2024-743 |
| Amazon Linux 2023 | ruby3.2-rubygem-test-unit | 3.5.7-180.amzn2023.0.4 | ALAS2023-2024-743 |
| Amazon Linux 2023 | ruby3.2-rubygem-typeprof | 0.21.3-180.amzn2023.0.4 | ALAS2023-2024-743 |
| Amazon Linux 2023 | ruby3.2-rubygems +1 | 3.4.10-180.amzn2023.0.4 | ALAS2023-2024-743 |
| Amazon Linux 2 | ruby +5 | 2.0.0.648-36.amzn2.0.13 | ALAS2-2024-2706 |
| Amazon Linux 2 | rubygem-bigdecimal | 1.2.0-36.amzn2.0.13 | ALAS2-2024-2706 |
| Amazon Linux 2 | rubygem-io-console | 0.4.2-36.amzn2.0.13 | ALAS2-2024-2706 |
| Amazon Linux 2 | rubygem-json | 1.7.7-36.amzn2.0.13 | ALAS2-2024-2706 |
| Amazon Linux 2 | rubygem-minitest | 4.3.2-36.amzn2.0.13 | ALAS2-2024-2706 |
| Amazon Linux 2 | rubygem-psych | 2.0.0-36.amzn2.0.13 | ALAS2-2024-2706 |
| Amazon Linux 2 | rubygem-rake | 0.9.6-36.amzn2.0.13 | ALAS2-2024-2706 |
| Amazon Linux 2 | rubygem-rdoc | 4.0.0-36.amzn2.0.13 | ALAS2-2024-2706 |
| Amazon Linux 2 | rubygems +1 | 2.0.14.1-36.amzn2.0.13 | ALAS2-2024-2706 |
Wolfi
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Wolfi rolling | kube-fluentd-operator +3 | 1.18.2-r33 | — |
| Wolfi rolling | ruby3.2-webrick | 1.8.2-r0 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| RubyGems | webrick | < 1.8.2 | 1.8.2 | GHSA-6f62-3596-g6w7 |
Advisories 12
- WID-SEC-2025-1439 Dell Secure Connect Gateway: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff BSI CERT-Bund (WID) · Oct 11, 2026
- WID-SEC-2025-0001 IBM DB2: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 11, 2026
- USN-7840-1 ruby2.3, ruby2.5, ruby2.7 vulnerabilities Ubuntu Security Notices (USN) · Jun 25, 2026
- USN-7057-1 ruby-webrick vulnerability Ubuntu Security Notices (USN) · Apr 27, 2026
- USN-7057-2 ruby-webrick vulnerability Ubuntu Security Notices (USN) · Apr 27, 2026
- SUSE-SU-2025:4264-1 Security update for ruby2.5 SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:0736-1 Security update for ruby2.5 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2025:1369-1 Security update for ruby2.5 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:3939-1 Security update for ruby2.1 SUSE / openSUSE Security Updates · Feb 4, 2026
- WID-SEC-2025-1366 F5 BIG-IP: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen BSI CERT-Bund (WID) · Jun 22, 2025
- ALAS2-2024-2706 Important: ruby security update (Amazon Linux 2) Amazon Linux Security Center (ALAS) · Dec 19, 2024
- ALAS2023-2024-743 Important: ruby3.2 security update (Amazon Linux 2023) Amazon Linux Security Center (ALAS) · Oct 31, 2024