Description
The attack vector is a potential Denial of Service (DoS). The vulnerability is caused by an insufficient check on the length of a decompressed domain name within a DNS packet.
An attacker can craft a malicious DNS packet containing a highly compressed domain name. When the resolv library parses such a packet, the name decompression process consumes a large amount of CPU resources, as the library does not limit the resulting length of the name.
This resource consumption can cause the application thread to become unresponsive, resulting in a Denial of Service condition.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Ruby | resolv | 0.2 – ≤ 0.2.2, 0.3.0 – ≤ 0.3.0, 0.6 – ≤ 0.6.1 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | ruby3.3 | No fix yet | — |
| Debian 13 | ruby3.3 | 3.3.13-0+deb13u1 | — |
| Debian 12 | ruby3.1 | No fix yet | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 26.10 | jruby | No fix yet | — |
| Ubuntu 26.04 LTS | jruby | No fix yet | — |
| Ubuntu 26.04 LTS | ruby3.3 | 3.3.8-2ubuntu2 | — |
| Ubuntu 26.04 LTS | rubygems | 3.6.7-2ubuntu1 | — |
| Ubuntu 25.10 | jruby | No fix yet | — |
| Ubuntu 25.10 | ruby3.3 | 3.3.8-2ubuntu2 | — |
| Ubuntu 25.10 | rubygems | 3.6.7-2ubuntu1 | — |
| Ubuntu 24.04 LTS | jruby | No fix yet | — |
| Ubuntu 24.04 LTS | ruby3.2 | 3.2.3-1ubuntu0.24.04.6 | USN-7734-1 |
| Ubuntu 22.04 LTS | ruby3.0 | 3.0.2-7ubuntu2.11 | USN-7734-1 |
| Ubuntu 22.04 LTS | rubygems | 3.3.5-2ubuntu1.1 | USN-7735-1 |
Show 7 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 20.04 LTS | jruby | No fix yet | — |
| Ubuntu 18.04 LTS | jruby | No fix yet | — |
| Ubuntu 16.04 LTS | jruby | No fix yet | — |
| Ubuntu Pro 20.04 LTS | ruby2.7 | 2.7.0-5ubuntu1.18+esm1 | USN-7734-1 |
| Ubuntu Pro 18.04 LTS | ruby2.5 | 2.5.1-1ubuntu1.16+esm5 | USN-7734-1 |
| Ubuntu Pro 16.04 LTS | ruby2.3 | No fix yet | — |
| Ubuntu Pro 14.04 LTS | jruby | No fix yet | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 10 | ruby +5 | 3.3.10-11.el10_1 | RHSA-2025:23141 |
| RHEL 10 | rubygem-bigdecimal | 3.1.5-11.el10_1 | RHSA-2025:23141 |
| RHEL 10 | rubygem-bundler | 2.5.22-11.el10_1 | RHSA-2025:23141 |
| RHEL 10 | rubygem-io-console | 0.7.1-11.el10_1 | RHSA-2025:23141 |
| RHEL 10 | rubygem-irb | 1.13.1-11.el10_1 | RHSA-2025:23141 |
| RHEL 10 | rubygem-json | 2.7.2-11.el10_1 | RHSA-2025:23141 |
| RHEL 10 | rubygem-minitest | 5.20.0-11.el10_1 | RHSA-2025:23141 |
| RHEL 10 | rubygem-power_assert | 2.0.3-11.el10_1 | RHSA-2025:23141 |
| RHEL 10 | rubygem-psych | 5.1.2-11.el10_1 | RHSA-2025:23141 |
| RHEL 10 | rubygem-racc | 1.7.3-11.el10_1 | RHSA-2025:23141 |
| RHEL 10 | rubygem-rake | 13.1.0-11.el10_1 | RHSA-2025:23141 |
| RHEL 10 | rubygem-rbs | 3.4.0-11.el10_1 | RHSA-2025:23141 |
| RHEL 10 | rubygem-rdoc | 6.6.3.1-11.el10_1 | RHSA-2025:23141 |
| RHEL 10 | rubygem-rexml | 3.4.4-11.el10_1 | RHSA-2025:23141 |
| RHEL 10 | rubygem-rss | 0.3.1-11.el10_1 | RHSA-2025:23141 |
| RHEL 10 | rubygem-test-unit | 3.6.1-11.el10_1 | RHSA-2025:23141 |
| RHEL 10 | rubygem-typeprof | 0.21.9-11.el10_1 | RHSA-2025:23141 |
| RHEL 10 | rubygems +1 | 3.5.22-11.el10_1 | RHSA-2025:23141 |
| RHEL 9 | ruby +5 | 3.3.10-5.module+el9.7.0+23651+15dc1615 | RHSA-2025:23063 |
| RHEL 9 | rubygem-bigdecimal | 3.1.5-5.module+el9.7.0+23651+15dc1615 | RHSA-2025:23063 |
| RHEL 9 | rubygem-bundler | 2.5.22-5.module+el9.7.0+23651+15dc1615 | RHSA-2025:23063 |
| RHEL 9 | rubygem-io-console | 0.7.1-5.module+el9.7.0+23651+15dc1615 | RHSA-2025:23063 |
| RHEL 9 | rubygem-irb | 1.13.1-5.module+el9.7.0+23651+15dc1615 | RHSA-2025:23063 |
| RHEL 9 | rubygem-json | 2.7.2-5.module+el9.7.0+23651+15dc1615 | RHSA-2025:23063 |
| RHEL 9 | rubygem-minitest | 5.20.0-5.module+el9.7.0+23651+15dc1615 | RHSA-2025:23063 |
| RHEL 9 | rubygem-mysql2 +1 | 0.5.5-3.module+el9.7.0+23362+7018fe7e | RHSA-2025:23063 |
| RHEL 9 | rubygem-pg +1 | 1.5.4-1.module+el9.4.0+21222+faeeed2f | RHSA-2025:23063 |
| RHEL 9 | rubygem-power_assert | 2.0.3-5.module+el9.7.0+23651+15dc1615 | RHSA-2025:23063 |
| RHEL 9 | rubygem-psych | 5.1.2-5.module+el9.7.0+23651+15dc1615 | RHSA-2025:23063 |
| RHEL 9 | rubygem-racc | 1.7.3-5.module+el9.7.0+23651+15dc1615 | RHSA-2025:23063 |
| RHEL 9 | rubygem-rake | 13.1.0-5.module+el9.7.0+23651+15dc1615 | RHSA-2025:23063 |
| RHEL 9 | rubygem-rbs | 3.4.0-5.module+el9.7.0+23651+15dc1615 | RHSA-2025:23063 |
| RHEL 9 | rubygem-rdoc | 6.6.3.1-5.module+el9.7.0+23651+15dc1615 | RHSA-2025:23063 |
| RHEL 9 | rubygem-rexml | 3.4.4-5.module+el9.7.0+23651+15dc1615 | RHSA-2025:23063 |
| RHEL 9 | rubygem-rss | 0.3.1-5.module+el9.7.0+23651+15dc1615 | RHSA-2025:23063 |
| RHEL 9 | rubygem-test-unit | 3.6.1-5.module+el9.7.0+23651+15dc1615 | RHSA-2025:23063 |
| RHEL 9 | rubygem-typeprof | 0.21.9-5.module+el9.7.0+23651+15dc1615 | RHSA-2025:23063 |
| RHEL 9 | rubygems +1 | 3.5.22-5.module+el9.7.0+23651+15dc1615 | RHSA-2025:23063 |
| RHEL 8 | ruby +5 | 3.3.10-5.module+el8.10.0+23696+c42b0f57 | RHSA-2025:23062 |
| RHEL 8 | rubygem-abrt +1 | 0.4.0-1.module+el8.10.0+21226+b78a28c4 | RHSA-2025:23062 |
| RHEL 8 | rubygem-bigdecimal | 3.1.5-5.module+el8.10.0+23696+c42b0f57 | RHSA-2025:23062 |
| RHEL 8 | rubygem-bundler | 2.5.22-5.module+el8.10.0+23696+c42b0f57 | RHSA-2025:23062 |
| RHEL 8 | rubygem-io-console | 0.7.1-5.module+el8.10.0+23696+c42b0f57 | RHSA-2025:23062 |
| RHEL 8 | rubygem-irb | 1.13.1-5.module+el8.10.0+23696+c42b0f57 | RHSA-2025:23062 |
| RHEL 8 | rubygem-json | 2.7.2-5.module+el8.10.0+23696+c42b0f57 | RHSA-2025:23062 |
| RHEL 8 | rubygem-minitest | 5.20.0-5.module+el8.10.0+23696+c42b0f57 | RHSA-2025:23062 |
| RHEL 8 | rubygem-mysql2 +1 | 0.5.5-1.module+el8.10.0+21226+b78a28c4 | RHSA-2025:23062 |
| RHEL 8 | rubygem-pg +1 | 1.5.4-1.module+el8.10.0+21226+b78a28c4 | RHSA-2025:23062 |
| RHEL 8 | rubygem-power_assert | 2.0.3-5.module+el8.10.0+23696+c42b0f57 | RHSA-2025:23062 |
| RHEL 8 | rubygem-psych | 5.1.2-5.module+el8.10.0+23696+c42b0f57 | RHSA-2025:23062 |
| RHEL 8 | rubygem-racc | 1.7.3-5.module+el8.10.0+23696+c42b0f57 | RHSA-2025:23062 |
| RHEL 8 | rubygem-rake | 13.1.0-5.module+el8.10.0+23696+c42b0f57 | RHSA-2025:23062 |
| RHEL 8 | rubygem-rbs | 3.4.0-5.module+el8.10.0+23696+c42b0f57 | RHSA-2025:23062 |
| RHEL 8 | rubygem-rdoc | 6.6.3.1-5.module+el8.10.0+23696+c42b0f57 | RHSA-2025:23062 |
| RHEL 8 | rubygem-rexml | 3.4.4-5.module+el8.10.0+23696+c42b0f57 | RHSA-2025:23062 |
| RHEL 8 | rubygem-rss | 0.3.1-5.module+el8.10.0+23696+c42b0f57 | RHSA-2025:23062 |
| RHEL 8 | rubygem-test-unit | 3.6.1-5.module+el8.10.0+23696+c42b0f57 | RHSA-2025:23062 |
| RHEL 8 | rubygem-typeprof | 0.21.9-5.module+el8.10.0+23696+c42b0f57 | RHSA-2025:23062 |
| RHEL 8 | rubygems +1 | 3.5.22-5.module+el8.10.0+23696+c42b0f57 | RHSA-2025:23062 |
Show 2 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 10.0 EUS | ruby +5 | 3.3.10-11.el10_0 | RHSA-2025:23927 |
| RHEL 10.0 EUS | rubygem-bigdecimal | 3.1.5-11.el10_0 | RHSA-2025:23927 |
| RHEL 10.0 EUS | rubygem-bundler | 2.5.22-11.el10_0 | RHSA-2025:23927 |
| RHEL 10.0 EUS | rubygem-io-console | 0.7.1-11.el10_0 | RHSA-2025:23927 |
| RHEL 10.0 EUS | rubygem-irb | 1.13.1-11.el10_0 | RHSA-2025:23927 |
| RHEL 10.0 EUS | rubygem-json | 2.7.2-11.el10_0 | RHSA-2025:23927 |
| RHEL 10.0 EUS | rubygem-minitest | 5.20.0-11.el10_0 | RHSA-2025:23927 |
| RHEL 10.0 EUS | rubygem-power_assert | 2.0.3-11.el10_0 | RHSA-2025:23927 |
| RHEL 10.0 EUS | rubygem-psych | 5.1.2-11.el10_0 | RHSA-2025:23927 |
| RHEL 10.0 EUS | rubygem-racc | 1.7.3-11.el10_0 | RHSA-2025:23927 |
| RHEL 10.0 EUS | rubygem-rake | 13.1.0-11.el10_0 | RHSA-2025:23927 |
| RHEL 10.0 EUS | rubygem-rbs | 3.4.0-11.el10_0 | RHSA-2025:23927 |
| RHEL 10.0 EUS | rubygem-rdoc | 6.6.3.1-11.el10_0 | RHSA-2025:23927 |
| RHEL 10.0 EUS | rubygem-rexml | 3.4.4-11.el10_0 | RHSA-2025:23927 |
| RHEL 10.0 EUS | rubygem-rss | 0.3.1-11.el10_0 | RHSA-2025:23927 |
| RHEL 10.0 EUS | rubygem-test-unit | 3.6.1-11.el10_0 | RHSA-2025:23927 |
| RHEL 10.0 EUS | rubygem-typeprof | 0.21.9-11.el10_0 | RHSA-2025:23927 |
| RHEL 10.0 EUS | rubygems +1 | 3.5.22-11.el10_0 | RHSA-2025:23927 |
| RHEL 9.6 EUS | ruby +5 | 3.3.10-5.module+el9.6.0+23780+e40d2335 | RHSA-2025:23648 |
| RHEL 9.6 EUS | rubygem-bigdecimal | 3.1.5-5.module+el9.6.0+23780+e40d2335 | RHSA-2025:23648 |
| RHEL 9.6 EUS | rubygem-bundler | 2.5.22-5.module+el9.6.0+23780+e40d2335 | RHSA-2025:23648 |
| RHEL 9.6 EUS | rubygem-io-console | 0.7.1-5.module+el9.6.0+23780+e40d2335 | RHSA-2025:23648 |
| RHEL 9.6 EUS | rubygem-irb | 1.13.1-5.module+el9.6.0+23780+e40d2335 | RHSA-2025:23648 |
| RHEL 9.6 EUS | rubygem-json | 2.7.2-5.module+el9.6.0+23780+e40d2335 | RHSA-2025:23648 |
| RHEL 9.6 EUS | rubygem-minitest | 5.20.0-5.module+el9.6.0+23780+e40d2335 | RHSA-2025:23648 |
| RHEL 9.6 EUS | rubygem-mysql2 +1 | 0.5.5-1.module+el9.4.0+21222+faeeed2f | RHSA-2025:23648 |
| RHEL 9.6 EUS | rubygem-pg +1 | 1.5.4-1.module+el9.4.0+21222+faeeed2f | RHSA-2025:23648 |
| RHEL 9.6 EUS | rubygem-power_assert | 2.0.3-5.module+el9.6.0+23780+e40d2335 | RHSA-2025:23648 |
| RHEL 9.6 EUS | rubygem-psych | 5.1.2-5.module+el9.6.0+23780+e40d2335 | RHSA-2025:23648 |
| RHEL 9.6 EUS | rubygem-racc | 1.7.3-5.module+el9.6.0+23780+e40d2335 | RHSA-2025:23648 |
| RHEL 9.6 EUS | rubygem-rake | 13.1.0-5.module+el9.6.0+23780+e40d2335 | RHSA-2025:23648 |
| RHEL 9.6 EUS | rubygem-rbs | 3.4.0-5.module+el9.6.0+23780+e40d2335 | RHSA-2025:23648 |
| RHEL 9.6 EUS | rubygem-rdoc | 6.6.3.1-5.module+el9.6.0+23780+e40d2335 | RHSA-2025:23648 |
| RHEL 9.6 EUS | rubygem-rexml | 3.4.4-5.module+el9.6.0+23780+e40d2335 | RHSA-2025:23648 |
| RHEL 9.6 EUS | rubygem-rss | 0.3.1-5.module+el9.6.0+23780+e40d2335 | RHSA-2025:23648 |
| RHEL 9.6 EUS | rubygem-test-unit | 3.6.1-5.module+el9.6.0+23780+e40d2335 | RHSA-2025:23648 |
| RHEL 9.6 EUS | rubygem-typeprof | 0.21.9-5.module+el9.6.0+23780+e40d2335 | RHSA-2025:23648 |
| RHEL 9.6 EUS | rubygems +1 | 3.5.22-5.module+el9.6.0+23780+e40d2335 | RHSA-2025:23648 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 10 | ruby-doc +1 | 3.3.10-11.el10_1 | ALSA-2025:23141 |
| AlmaLinux 10 | rubygem-bundler | 2.5.22-11.el10_1 | ALSA-2025:23141 |
| AlmaLinux 10 | rubygem-irb | 1.13.1-11.el10_1 | ALSA-2025:23141 |
| AlmaLinux 10 | rubygem-minitest | 5.20.0-11.el10_1 | ALSA-2025:23141 |
| AlmaLinux 10 | rubygem-power_assert | 2.0.3-11.el10_1 | ALSA-2025:23141 |
| AlmaLinux 10 | rubygem-rake | 13.1.0-11.el10_1 | ALSA-2025:23141 |
| AlmaLinux 10 | rubygem-rdoc | 6.6.3.1-11.el10_1 | ALSA-2025:23141 |
| AlmaLinux 10 | rubygem-rexml | 3.4.4-11.el10_1 | ALSA-2025:23141 |
| AlmaLinux 10 | rubygem-rss | 0.3.1-11.el10_1 | ALSA-2025:23141 |
| AlmaLinux 10 | rubygem-test-unit | 3.6.1-11.el10_1 | ALSA-2025:23141 |
| AlmaLinux 10 | rubygem-typeprof | 0.21.9-11.el10_1 | ALSA-2025:23141 |
| AlmaLinux 10 | rubygems +1 | 3.5.22-11.el10_1 | ALSA-2025:23141 |
| AlmaLinux 9 | ruby +5 | 3.3.10-5.module_el9.7.0+193+58179166 | ALSA-2025:23063 |
| AlmaLinux 9 | rubygem-bigdecimal | 3.1.5-5.module_el9.7.0+193+58179166 | ALSA-2025:23063 |
| AlmaLinux 9 | rubygem-bundler | 2.5.22-5.module_el9.7.0+193+58179166 | ALSA-2025:23063 |
| AlmaLinux 9 | rubygem-io-console | 0.7.1-5.module_el9.7.0+193+58179166 | ALSA-2025:23063 |
| AlmaLinux 9 | rubygem-irb | 1.13.1-5.module_el9.7.0+193+58179166 | ALSA-2025:23063 |
| AlmaLinux 9 | rubygem-json | 2.7.2-5.module_el9.7.0+193+58179166 | ALSA-2025:23063 |
| AlmaLinux 9 | rubygem-minitest | 5.20.0-5.module_el9.7.0+193+58179166 | ALSA-2025:23063 |
| AlmaLinux 9 | rubygem-mysql2 +1 | 0.5.5-3.module_el9.7.0+184+e2e36072 | ALSA-2025:23063 |
| AlmaLinux 9 | rubygem-pg +1 | 1.5.4-1.module_el9.4.0+75+1a8fe981 | ALSA-2025:23063 |
| AlmaLinux 9 | rubygem-power_assert | 2.0.3-5.module_el9.7.0+193+58179166 | ALSA-2025:23063 |
| AlmaLinux 9 | rubygem-psych | 5.1.2-5.module_el9.7.0+193+58179166 | ALSA-2025:23063 |
| AlmaLinux 9 | rubygem-racc | 1.7.3-5.module_el9.7.0+193+58179166 | ALSA-2025:23063 |
| AlmaLinux 9 | rubygem-rake | 13.1.0-5.module_el9.7.0+193+58179166 | ALSA-2025:23063 |
| AlmaLinux 9 | rubygem-rbs | 3.4.0-5.module_el9.7.0+193+58179166 | ALSA-2025:23063 |
| AlmaLinux 9 | rubygem-rdoc | 6.6.3.1-5.module_el9.7.0+193+58179166 | ALSA-2025:23063 |
| AlmaLinux 9 | rubygem-rexml | 3.4.4-5.module_el9.7.0+193+58179166 | ALSA-2025:23063 |
| AlmaLinux 9 | rubygem-rss | 0.3.1-5.module_el9.7.0+193+58179166 | ALSA-2025:23063 |
| AlmaLinux 9 | rubygem-test-unit | 3.6.1-5.module_el9.7.0+193+58179166 | ALSA-2025:23063 |
| AlmaLinux 9 | rubygem-typeprof | 0.21.9-5.module_el9.7.0+193+58179166 | ALSA-2025:23063 |
| AlmaLinux 9 | rubygems +1 | 3.5.22-5.module_el9.7.0+193+58179166 | ALSA-2025:23063 |
| AlmaLinux 8 | ruby +5 | 3.3.10-5.module_el8.10.0+4075+e5f6dad1 | ALSA-2025:23062 |
| AlmaLinux 8 | rubygem-abrt +1 | 0.4.0-1.module_el8.10.0+3799+191214cc | ALSA-2025:23062 |
| AlmaLinux 8 | rubygem-bigdecimal | 3.1.5-5.module_el8.10.0+4075+e5f6dad1 | ALSA-2025:23062 |
| AlmaLinux 8 | rubygem-bundler | 2.5.22-5.module_el8.10.0+4075+e5f6dad1 | ALSA-2025:23062 |
| AlmaLinux 8 | rubygem-io-console | 0.7.1-5.module_el8.10.0+4075+e5f6dad1 | ALSA-2025:23062 |
| AlmaLinux 8 | rubygem-irb | 1.13.1-5.module_el8.10.0+4075+e5f6dad1 | ALSA-2025:23062 |
| AlmaLinux 8 | rubygem-json | 2.7.2-5.module_el8.10.0+4075+e5f6dad1 | ALSA-2025:23062 |
| AlmaLinux 8 | rubygem-minitest | 5.20.0-5.module_el8.10.0+4075+e5f6dad1 | ALSA-2025:23062 |
| AlmaLinux 8 | rubygem-mysql2 +1 | 0.5.5-1.module_el8.10.0+3799+191214cc | ALSA-2025:23062 |
| AlmaLinux 8 | rubygem-pg +1 | 1.5.4-1.module_el8.10.0+3799+191214cc | ALSA-2025:23062 |
| AlmaLinux 8 | rubygem-power_assert | 2.0.3-5.module_el8.10.0+4075+e5f6dad1 | ALSA-2025:23062 |
| AlmaLinux 8 | rubygem-psych | 5.1.2-5.module_el8.10.0+4075+e5f6dad1 | ALSA-2025:23062 |
| AlmaLinux 8 | rubygem-racc | 1.7.3-5.module_el8.10.0+4075+e5f6dad1 | ALSA-2025:23062 |
| AlmaLinux 8 | rubygem-rake | 13.1.0-5.module_el8.10.0+4075+e5f6dad1 | ALSA-2025:23062 |
| AlmaLinux 8 | rubygem-rbs | 3.4.0-5.module_el8.10.0+4075+e5f6dad1 | ALSA-2025:23062 |
| AlmaLinux 8 | rubygem-rdoc | 6.6.3.1-5.module_el8.10.0+4075+e5f6dad1 | ALSA-2025:23062 |
| AlmaLinux 8 | rubygem-rexml | 3.4.4-5.module_el8.10.0+4075+e5f6dad1 | ALSA-2025:23062 |
| AlmaLinux 8 | rubygem-rss | 0.3.1-5.module_el8.10.0+4075+e5f6dad1 | ALSA-2025:23062 |
| AlmaLinux 8 | rubygem-test-unit | 3.6.1-5.module_el8.10.0+4075+e5f6dad1 | ALSA-2025:23062 |
| AlmaLinux 8 | rubygem-typeprof | 0.21.9-5.module_el8.10.0+4075+e5f6dad1 | ALSA-2025:23062 |
| AlmaLinux 8 | rubygems +1 | 3.5.22-5.module_el8.10.0+4075+e5f6dad1 | ALSA-2025:23062 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 10 | ruby | 3.3.10-11.el10_1 | RLSA-2025:23141 |
| Rocky Linux 9 | ruby | 3.3.10-5.module+el9.7.0+40039+300ba1ed | RLSA-2025:23063 |
| Rocky Linux 9 | rubygem-mysql2 | 0.5.5-3.module+el9.7.0+40032+36e56d0d | RLSA-2025:23063 |
| Rocky Linux 9 | rubygem-pg | 1.5.4-1.module+el9.7.0+40032+36e56d0d.0.1 | RLSA-2025:23063 |
| Rocky Linux 8 | ruby | 3.3.10-5.module+el8.10.0+40038+e29e4152 | RLSA-2025:23062 |
| Rocky Linux 8 | rubygem-abrt | 0.4.0-1.module+el8.5.0+668+665814fa | RLSA-2025:23062 |
| Rocky Linux 8 | rubygem-mysql2 | 0.5.5-1.module+el8.10.0+1679+61871737 | RLSA-2025:23062 |
| Rocky Linux 8 | rubygem-pg | 1.5.4-1.module+el8.10.0+1679+61871737 | RLSA-2025:23062 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP7 | ruby2.5 | 2.5.9-150700.24.3.1 | SUSE-SU-2025:4264-1 |
| SLES 15 SP6 | ruby2.5 | 2.5.9-150000.4.54.1 | SUSE-SU-2025:3776-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Leap 15.6 | ruby2.5 | 2.5.9-150000.4.54.1 | SUSE-SU-2025:3776-1 |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2023 | ruby3.2 +5 | 3.2.8-184.amzn2023.0.3 | ALAS2023-2025-1131 |
| Amazon Linux 2023 | ruby3.2-rubygem-bigdecimal | 3.1.3-184.amzn2023.0.3 | ALAS2023-2025-1131 |
| Amazon Linux 2023 | ruby3.2-rubygem-bundler | 2.4.19-184.amzn2023.0.3 | ALAS2023-2025-1131 |
| Amazon Linux 2023 | ruby3.2-rubygem-io-console | 0.6.0-184.amzn2023.0.3 | ALAS2023-2025-1131 |
| Amazon Linux 2023 | ruby3.2-rubygem-irb | 1.6.2-184.amzn2023.0.3 | ALAS2023-2025-1131 |
| Amazon Linux 2023 | ruby3.2-rubygem-json | 2.6.3-184.amzn2023.0.3 | ALAS2023-2025-1131 |
| Amazon Linux 2023 | ruby3.2-rubygem-minitest | 5.25.1-184.amzn2023.0.3 | ALAS2023-2025-1131 |
| Amazon Linux 2023 | ruby3.2-rubygem-power_assert | 2.0.3-184.amzn2023.0.3 | ALAS2023-2025-1131 |
| Amazon Linux 2023 | ruby3.2-rubygem-psych | 5.0.1-184.amzn2023.0.3 | ALAS2023-2025-1131 |
| Amazon Linux 2023 | ruby3.2-rubygem-rake | 13.0.6-184.amzn2023.0.3 | ALAS2023-2025-1131 |
| Amazon Linux 2023 | ruby3.2-rubygem-rbs | 2.8.2-184.amzn2023.0.3 | ALAS2023-2025-1131 |
| Amazon Linux 2023 | ruby3.2-rubygem-rdoc | 6.5.1.1-184.amzn2023.0.3 | ALAS2023-2025-1131 |
| Amazon Linux 2023 | ruby3.2-rubygem-rexml | 3.3.9-184.amzn2023.0.3 | ALAS2023-2025-1131 |
| Amazon Linux 2023 | ruby3.2-rubygem-rss | 0.3.1-184.amzn2023.0.3 | ALAS2023-2025-1131 |
| Amazon Linux 2023 | ruby3.2-rubygem-test-unit | 3.5.7-184.amzn2023.0.3 | ALAS2023-2025-1131 |
| Amazon Linux 2023 | ruby3.2-rubygem-typeprof | 0.21.3-184.amzn2023.0.3 | ALAS2023-2025-1131 |
| Amazon Linux 2023 | ruby3.2-rubygems +1 | 3.4.19-184.amzn2023.0.3 | ALAS2023-2025-1131 |
| Amazon Linux 2 | ruby +5 | 2.0.0.648-36.amzn2.0.16 | ALAS2-2025-2957 |
| Amazon Linux 2 | rubygem-bigdecimal | 1.2.0-36.amzn2.0.16 | ALAS2-2025-2957 |
| Amazon Linux 2 | rubygem-io-console | 0.4.2-36.amzn2.0.16 | ALAS2-2025-2957 |
| Amazon Linux 2 | rubygem-json | 1.7.7-36.amzn2.0.16 | ALAS2-2025-2957 |
| Amazon Linux 2 | rubygem-minitest | 4.3.2-36.amzn2.0.16 | ALAS2-2025-2957 |
| Amazon Linux 2 | rubygem-psych | 2.0.0-36.amzn2.0.16 | ALAS2-2025-2957 |
| Amazon Linux 2 | rubygem-rake | 0.9.6-36.amzn2.0.16 | ALAS2-2025-2957 |
| Amazon Linux 2 | rubygem-rdoc | 4.0.0-36.amzn2.0.16 | ALAS2-2025-2957 |
| Amazon Linux 2 | rubygems +1 | 2.0.14.1-36.amzn2.0.16 | ALAS2-2025-2957 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 3 | ruby | 3.3.5-5 | — |
| Azure Linux 2 (CBL-Mariner) | ruby | 3.1.7-3 | — |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 10 | ruby +5 | 3.3.10-11.el10_1 | ELSA-2025-23141 |
| Oracle Linux 10 | rubygem-bigdecimal | 3.1.5-11.el10_1 | ELSA-2025-23141 |
| Oracle Linux 10 | rubygem-bundler | 2.5.22-11.el10_1 | ELSA-2025-23141 |
| Oracle Linux 10 | rubygem-io-console | 0.7.1-11.el10_1 | ELSA-2025-23141 |
| Oracle Linux 10 | rubygem-irb | 1.13.1-11.el10_1 | ELSA-2025-23141 |
| Oracle Linux 10 | rubygem-json | 2.7.2-11.el10_1 | ELSA-2025-23141 |
| Oracle Linux 10 | rubygem-minitest | 5.20.0-11.el10_1 | ELSA-2025-23141 |
| Oracle Linux 10 | rubygem-power_assert | 2.0.3-11.el10_1 | ELSA-2025-23141 |
| Oracle Linux 10 | rubygem-psych | 5.1.2-11.el10_1 | ELSA-2025-23141 |
| Oracle Linux 10 | rubygem-racc | 1.7.3-11.el10_1 | ELSA-2025-23141 |
| Oracle Linux 10 | rubygem-rake | 13.1.0-11.el10_1 | ELSA-2025-23141 |
| Oracle Linux 10 | rubygem-rbs | 3.4.0-11.el10_1 | ELSA-2025-23141 |
| Oracle Linux 10 | rubygem-rdoc | 6.6.3.1-11.el10_1 | ELSA-2025-23141 |
| Oracle Linux 10 | rubygem-rexml | 3.4.4-11.el10_1 | ELSA-2025-23141 |
| Oracle Linux 10 | rubygem-rss | 0.3.1-11.el10_1 | ELSA-2025-23141 |
| Oracle Linux 10 | rubygem-test-unit | 3.6.1-11.el10_1 | ELSA-2025-23141 |
| Oracle Linux 10 | rubygem-typeprof | 0.21.9-11.el10_1 | ELSA-2025-23141 |
| Oracle Linux 10 | rubygems +1 | 3.5.22-11.el10_1 | ELSA-2025-23141 |
| Oracle Linux 9 | ruby +5 | 3.3.10-5.module+el9.7.0+90719+1f3245a0 | ELSA-2025-23063 |
| Oracle Linux 9 | rubygem-bigdecimal | 3.1.5-5.module+el9.7.0+90719+1f3245a0 | ELSA-2025-23063 |
| Oracle Linux 9 | rubygem-bundler | 2.5.22-5.module+el9.7.0+90719+1f3245a0 | ELSA-2025-23063 |
| Oracle Linux 9 | rubygem-io-console | 0.7.1-5.module+el9.7.0+90719+1f3245a0 | ELSA-2025-23063 |
| Oracle Linux 9 | rubygem-irb | 1.13.1-5.module+el9.7.0+90719+1f3245a0 | ELSA-2025-23063 |
| Oracle Linux 9 | rubygem-json | 2.7.2-5.module+el9.7.0+90719+1f3245a0 | ELSA-2025-23063 |
| Oracle Linux 9 | rubygem-minitest | 5.20.0-5.module+el9.7.0+90719+1f3245a0 | ELSA-2025-23063 |
| Oracle Linux 9 | rubygem-mysql2 +1 | 0.5.5-3.module+el9.7.0+90719+1f3245a0 | ELSA-2025-23063 |
| Oracle Linux 9 | rubygem-pg +1 | 1.5.4-1.module+el9.4.0+90257+8524dee7 | ELSA-2025-23063 |
| Oracle Linux 9 | rubygem-power_assert | 2.0.3-5.module+el9.7.0+90719+1f3245a0 | ELSA-2025-23063 |
| Oracle Linux 9 | rubygem-psych | 5.1.2-5.module+el9.7.0+90719+1f3245a0 | ELSA-2025-23063 |
| Oracle Linux 9 | rubygem-racc | 1.7.3-5.module+el9.7.0+90719+1f3245a0 | ELSA-2025-23063 |
| Oracle Linux 9 | rubygem-rake | 13.1.0-5.module+el9.7.0+90719+1f3245a0 | ELSA-2025-23063 |
| Oracle Linux 9 | rubygem-rbs | 3.4.0-5.module+el9.7.0+90719+1f3245a0 | ELSA-2025-23063 |
| Oracle Linux 9 | rubygem-rdoc | 6.6.3.1-5.module+el9.7.0+90719+1f3245a0 | ELSA-2025-23063 |
| Oracle Linux 9 | rubygem-rexml | 3.4.4-5.module+el9.7.0+90719+1f3245a0 | ELSA-2025-23063 |
| Oracle Linux 9 | rubygem-rss | 0.3.1-5.module+el9.7.0+90719+1f3245a0 | ELSA-2025-23063 |
| Oracle Linux 9 | rubygem-test-unit | 3.6.1-5.module+el9.7.0+90719+1f3245a0 | ELSA-2025-23063 |
| Oracle Linux 9 | rubygem-typeprof | 0.21.9-5.module+el9.7.0+90719+1f3245a0 | ELSA-2025-23063 |
| Oracle Linux 9 | rubygems +1 | 3.5.22-5.module+el9.7.0+90719+1f3245a0 | ELSA-2025-23063 |
| Oracle Linux 8 | ruby +5 | 3.3.10-5.module+el8.10.0+90720+35d8666a | ELSA-2025-23062 |
| Oracle Linux 8 | rubygem-abrt +1 | 0.4.0-1.module+el8.10.0+90287+d51aa4ed | ELSA-2025-23062 |
| Oracle Linux 8 | rubygem-bigdecimal | 3.1.5-5.module+el8.10.0+90720+35d8666a | ELSA-2025-23062 |
| Oracle Linux 8 | rubygem-bundler | 2.5.22-5.module+el8.10.0+90720+35d8666a | ELSA-2025-23062 |
| Oracle Linux 8 | rubygem-io-console | 0.7.1-5.module+el8.10.0+90720+35d8666a | ELSA-2025-23062 |
| Oracle Linux 8 | rubygem-irb | 1.13.1-5.module+el8.10.0+90720+35d8666a | ELSA-2025-23062 |
| Oracle Linux 8 | rubygem-json | 2.7.2-5.module+el8.10.0+90720+35d8666a | ELSA-2025-23062 |
| Oracle Linux 8 | rubygem-minitest | 5.20.0-5.module+el8.10.0+90720+35d8666a | ELSA-2025-23062 |
| Oracle Linux 8 | rubygem-mysql2 +1 | 0.5.5-1.module+el8.10.0+90287+d51aa4ed | ELSA-2025-23062 |
| Oracle Linux 8 | rubygem-pg +1 | 1.5.4-1.module+el8.10.0+90287+d51aa4ed | ELSA-2025-23062 |
| Oracle Linux 8 | rubygem-power_assert | 2.0.3-5.module+el8.10.0+90720+35d8666a | ELSA-2025-23062 |
| Oracle Linux 8 | rubygem-psych | 5.1.2-5.module+el8.10.0+90720+35d8666a | ELSA-2025-23062 |
| Oracle Linux 8 | rubygem-racc | 1.7.3-5.module+el8.10.0+90720+35d8666a | ELSA-2025-23062 |
| Oracle Linux 8 | rubygem-rake | 13.1.0-5.module+el8.10.0+90720+35d8666a | ELSA-2025-23062 |
| Oracle Linux 8 | rubygem-rbs | 3.4.0-5.module+el8.10.0+90720+35d8666a | ELSA-2025-23062 |
| Oracle Linux 8 | rubygem-rdoc | 6.6.3.1-5.module+el8.10.0+90720+35d8666a | ELSA-2025-23062 |
| Oracle Linux 8 | rubygem-rexml | 3.4.4-5.module+el8.10.0+90720+35d8666a | ELSA-2025-23062 |
| Oracle Linux 8 | rubygem-rss | 0.3.1-5.module+el8.10.0+90720+35d8666a | ELSA-2025-23062 |
| Oracle Linux 8 | rubygem-test-unit | 3.6.1-5.module+el8.10.0+90720+35d8666a | ELSA-2025-23062 |
| Oracle Linux 8 | rubygem-typeprof | 0.21.9-5.module+el8.10.0+90720+35d8666a | ELSA-2025-23062 |
| Oracle Linux 8 | rubygems +1 | 3.5.22-5.module+el8.10.0+90720+35d8666a | ELSA-2025-23062 |
Wolfi
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Wolfi rolling | jruby-9.4 +1 | 9.4.13.0-r1 | — |
| Wolfi rolling | ruby-3.1 +3 | No fix yet | — |
| Wolfi rolling | ruby-3.2 +2 | 3.2.8-r3 | — |
| Wolfi rolling | ruby-3.4 +2 | 3.4.5-r0 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| RubyGems | resolv | < 0.2.3 | 0.2.3 | GHSA-xh69-987w-hrp8 |
| RubyGems | resolv | >= 0.4.0, < 0.6.2 | 0.6.2 | GHSA-xh69-987w-hrp8 |
| RubyGems | resolv | >= 0.3.0, < 0.3.1 | 0.3.1 | GHSA-xh69-987w-hrp8 |
Advisories 22
- WID-SEC-2025-1472 Ruby: Schwachstelle ermöglicht Denial of Service BSI CERT-Bund (WID) · Nov 8, 2026
- ALSA-2025:23141 Moderate: ruby security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2025:23063 Moderate: ruby:3.3 security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2025:23062 Moderate: ruby:3.3 security update AlmaLinux Security Advisories · Oct 29, 2026
- RHSA-2025:23927 Red Hat Security Advisory: ruby security update Red Hat Security Advisories (RHSA) · Oct 14, 2026
- RHSA-2025:23648 Red Hat Security Advisory: ruby:3.3 security update Red Hat Security Advisories (RHSA) · Oct 14, 2026
- RHSA-2025:23141 Red Hat Security Advisory: ruby security update Red Hat Security Advisories (RHSA) · Oct 14, 2026
- RHSA-2025:23063 Red Hat Security Advisory: ruby:3.3 security update Red Hat Security Advisories (RHSA) · Oct 14, 2026
- RHSA-2025:23062 Red Hat Security Advisory: ruby:3.3 security update Red Hat Security Advisories (RHSA) · Oct 14, 2026
- WID-SEC-2026-0778 Dell Secure Connect Gateway Policy Manager: Mehrere Schwachstellen BSI CERT-Bund (WID) · May 11, 2026
- USN-7734-1 ruby2.5, ruby2.7, ruby3.0, ruby3.2, ruby3.3 vulnerabilities Ubuntu Security Notices (USN) · Apr 27, 2026
- USN-7735-1 rubygems vulnerabilities Ubuntu Security Notices (USN) · Apr 27, 2026
- SUSE-SU-2025:4264-1 Security update for ruby2.5 SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:3776-1 Security update for ruby2.5 SUSE / openSUSE Security Updates · Feb 4, 2026
- RLSA-2025:23062 Moderate: ruby:3.3 security update Rocky Linux Security Advisories · Jan 3, 2026
- RLSA-2025:23063 Moderate: ruby:3.3 security update Rocky Linux Security Advisories · Jan 3, 2026
- RLSA-2025:23141 Moderate: ruby security update Rocky Linux Security Advisories · Jan 3, 2026
- ELSA-2025-23141 Moderate: ruby security update (Oracle Linux 10) Oracle Linux Security Advisories (ELSA) · Dec 11, 2025
- ELSA-2025-23063 Moderate: ruby:3.3 security update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · Dec 11, 2025
- ELSA-2025-23062 Moderate: ruby:3.3 security update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · Dec 11, 2025
- ALAS2023-2025-1131 Moderate: ruby3.2 security update (Amazon Linux 2023) Amazon Linux Security Center (ALAS) · Aug 8, 2025
- ALAS2-2025-2957 Moderate: ruby security update (Amazon Linux 2) Amazon Linux Security Center (ALAS) · Aug 4, 2025