PT-2026-29962 · Uri+2 · Uri+4

Publicado 2026-03-31 · Atualizado 2026-03-31

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Ruby URI gem (affected versions not specified)

Description The Ruby URI gem did not properly handle sensitive information when combining URIs. This could allow a remote attacker to leak authentication credentials.

Recommendations Run sudo pro fix USN-8137-1 to fix the vulnerability. Update to libruby2.7 - 2.7.0-5ubuntu1.18+esm4. Update to ruby2.7 - 2.7.0-5ubuntu1.18+esm4. Update to ruby2.7-dev - 2.7.0-5ubuntu1.18+esm4. Update to ruby2.7-doc - 2.7.0-5ubuntu1.18+esm4.

Identificadores relacionados

USN-8137-1

Produtos afetados

Uri

Libruby2.7

Ruby2.7

Ruby2.7-Dev

Ruby2.7-Doc

Referências · 3

• https://ubuntu.com/security/CVE-2025-61594 · Aviso do Fabricante
• https://osv.dev/vulnerability/USN-8137-1 · Aviso do Fabricante
• https://ubuntu.com/security/notices/USN-8137-1 · Aviso do Fabricante