# CVE-2025-6442: Ruby: Multiple issues in ruby CVE-2025-6442 is fixed in 40 products on 2 platforms, first by libruby2.5 2.5.1-1ubuntu1.16+esm6, released June 25, 2025. It is not reported as exploited. Patch Radar priority: Routine. - Web page: https://patchblox.com/security/cve/CVE-2025-6442 - Priority: Routine - CVSS: 6.5 (MEDIUM) - EPSS: 0.0050 - CISA KEV: not listed - Exploited (vendor report): no - Publicly disclosed: no - Published: Jun 25, 2025 - Vendor advisory: https://support.apple.com/en-us/125634 ## Description This is a vulnerability in open source code and Apple Software is among the affected projects. The ## Where it's fixed | Platform | Product | Fixed in | Fix | Released | |---|---|---|---|---| | macOS | Sequoia | 15.7.2 | [Sequoia 15.7.2](https://patchblox.com/security/data/fix/macos/sequoia-15.7.2.md) | Nov 3, 2025 | | macOS | Sonoma | 14.8.2 | [Sonoma 14.8.2](https://patchblox.com/security/data/fix/macos/sonoma-14.8.2.md) | Nov 3, 2025 | | macOS | Tahoe | 26.1 | [Tahoe 26.1](https://patchblox.com/security/data/fix/macos/tahoe-26.1.md) | Nov 3, 2025 | | Linux | libruby2.5 Ubuntu 18.04.6 LTS (bionic) | 2.5.1-1ubuntu1.16+esm6 | [libruby2.5 2.5.1-1ubuntu1.16+esm6](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libruby2.5-2.5.1-1ubuntu1.16-esm6.md) | Jun 25, 2025 | | Linux | libruby2.7 Ubuntu 20.04 LTS (focal) | 2.7.0-5ubuntu1.18+esm3 | [libruby2.7 2.7.0-5ubuntu1.18+esm3](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libruby2.7-2.7.0-5ubuntu1.18-esm3.md) | Jun 25, 2025 | | Linux | ruby-webrick Debian 13.5 (trixie) | 1.9.1-1 | [DEBIAN-CVE-2025-6442](https://patchblox.com/security/data/fix/linux/debian-cve-2025-6442.md) | Jun 25, 2025 | | Linux | ruby-webrick Debian 14 | 1.9.1-1 | [DEBIAN-CVE-2025-6442](https://patchblox.com/security/data/fix/linux/debian-cve-2025-6442.md) | Jun 25, 2025 | | Linux | ruby-webrick Ubuntu 22.04.1 LTS (jammy) | 1.7.0-3ubuntu0.2 | [ruby-webrick 1.7.0-3ubuntu0.2](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-ruby-webrick-1.7.0-3ubuntu0.2.md) | Jun 25, 2025 | | Linux | ruby-webrick Ubuntu 24.04.5 LTS (noble) | 1.8.1-1ubuntu0.2 | [ruby-webrick 1.8.1-1ubuntu0.2](https://patchblox.com/security/data/fix/linux/ubuntu-noble-ruby-webrick-1.8.1-1ubuntu0.2.md) | Jun 25, 2025 | | Linux | ruby-webrick Ubuntu 25.04 (plucky) | 1.8.1-1ubuntu1.1 | [ruby-webrick 1.8.1-1ubuntu1.1](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-ruby-webrick-1.8.1-1ubuntu1.1.md) | Jan 16, 2026 | | Linux | ruby-webrick Ubuntu 25.10 (questing) | 1.9.1-1 | [ruby-webrick 1.9.1-1](https://patchblox.com/security/data/fix/linux/ubuntu-questing-ruby-webrick-1.9.1-1.md) | Jun 25, 2025 | | Linux | ruby-webrick Ubuntu 26.04.1 LTS (resolute) | 1.9.1-1 | [ruby-webrick 1.9.1-1](https://patchblox.com/security/data/fix/linux/ubuntu-resolute-ruby-webrick-1.9.1-1.md) | Jun 25, 2025 | | Linux | ruby2.5 Ubuntu 18.04.6 LTS (bionic) | 2.5.1-1ubuntu1.16+esm6 | [ruby2.5 2.5.1-1ubuntu1.16+esm6](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-ruby2.5-2.5.1-1ubuntu1.16-esm6.md) | Jun 25, 2025 | | Linux | ruby2.5 opensuse-leap 15.6 | 2.5.9-150000.4.46.1 | [SUSE-SU-2025:02739-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02739-1.md) | Aug 8, 2025 | | Linux | ruby2.5 sles 15.6 | 2.5.9-150000.4.46.1 | [SUSE-SU-2025:02739-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02739-1.md) | Aug 8, 2025 | | Linux | ruby2.5 sles 15.7 | 2.5.9-150700.24.3.1 | [SUSE-SU-2025:4264-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-4264-1.md) | Nov 26, 2025 | | Linux | ruby2.7 Ubuntu 20.04 LTS (focal) | 2.7.0-5ubuntu1.18+esm3 | [ruby2.7 2.7.0-5ubuntu1.18+esm3](https://patchblox.com/security/data/fix/linux/ubuntu-focal-ruby2.7-2.7.0-5ubuntu1.18-esm3.md) | Jun 25, 2025 | | Linux | ruby3.2 amzn 2023 | 3.2.8-184.amzn2023.0.2 | [ALAS2023-2025-1115](https://patchblox.com/security/data/fix/linux/alas2023-2025-1115.md) | Jul 26, 2025 | | Linux | ruby3.2-bundled-gems amzn 2023 | 3.2.8-184.amzn2023.0.2 | [ALAS2023-2025-1115](https://patchblox.com/security/data/fix/linux/alas2023-2025-1115.md) | Jul 26, 2025 | | Linux | ruby3.2-bundled-gems-debuginfo amzn 2023 | 3.2.8-184.amzn2023.0.2 | [ALAS2023-2025-1115](https://patchblox.com/security/data/fix/linux/alas2023-2025-1115.md) | Jul 26, 2025 | | Linux | ruby3.2-debuginfo amzn 2023 | 3.2.8-184.amzn2023.0.2 | [ALAS2023-2025-1115](https://patchblox.com/security/data/fix/linux/alas2023-2025-1115.md) | Jul 26, 2025 | | Linux | ruby3.2-debugsource amzn 2023 | 3.2.8-184.amzn2023.0.2 | [ALAS2023-2025-1115](https://patchblox.com/security/data/fix/linux/alas2023-2025-1115.md) | Jul 26, 2025 | | Linux | ruby3.2-default-gems amzn 2023 | 3.2.8-184.amzn2023.0.2 | [ALAS2023-2025-1115](https://patchblox.com/security/data/fix/linux/alas2023-2025-1115.md) | Jul 26, 2025 | | Linux | ruby3.2-devel amzn 2023 | 3.2.8-184.amzn2023.0.2 | [ALAS2023-2025-1115](https://patchblox.com/security/data/fix/linux/alas2023-2025-1115.md) | Jul 26, 2025 | | Linux | ruby3.2-doc amzn 2023 | 3.2.8-184.amzn2023.0.2 | [ALAS2023-2025-1115](https://patchblox.com/security/data/fix/linux/alas2023-2025-1115.md) | Jul 26, 2025 | | Linux | ruby3.2-libs amzn 2023 | 3.2.8-184.amzn2023.0.2 | [ALAS2023-2025-1115](https://patchblox.com/security/data/fix/linux/alas2023-2025-1115.md) | Jul 26, 2025 | | Linux | ruby3.2-libs-debuginfo amzn 2023 | 3.2.8-184.amzn2023.0.2 | [ALAS2023-2025-1115](https://patchblox.com/security/data/fix/linux/alas2023-2025-1115.md) | Jul 26, 2025 | | Linux | ruby3.2-rubygem-bigdecimal amzn 2023 | 3.1.3-184.amzn2023.0.2 | [ALAS2023-2025-1115](https://patchblox.com/security/data/fix/linux/alas2023-2025-1115.md) | Jul 26, 2025 | | Linux | ruby3.2-rubygem-bigdecimal-debuginfo amzn 2023 | 3.1.3-184.amzn2023.0.2 | [ALAS2023-2025-1115](https://patchblox.com/security/data/fix/linux/alas2023-2025-1115.md) | Jul 26, 2025 | | Linux | ruby3.2-rubygem-bundler amzn 2023 | 2.4.19-184.amzn2023.0.2 | [ALAS2023-2025-1115](https://patchblox.com/security/data/fix/linux/alas2023-2025-1115.md) | Jul 26, 2025 | | Linux | ruby3.2-rubygem-io-console amzn 2023 | 0.6.0-184.amzn2023.0.2 | [ALAS2023-2025-1115](https://patchblox.com/security/data/fix/linux/alas2023-2025-1115.md) | Jul 26, 2025 | | Linux | ruby3.2-rubygem-io-console-debuginfo amzn 2023 | 0.6.0-184.amzn2023.0.2 | [ALAS2023-2025-1115](https://patchblox.com/security/data/fix/linux/alas2023-2025-1115.md) | Jul 26, 2025 | | Linux | ruby3.2-rubygem-irb amzn 2023 | 1.6.2-184.amzn2023.0.2 | [ALAS2023-2025-1115](https://patchblox.com/security/data/fix/linux/alas2023-2025-1115.md) | Jul 26, 2025 | | Linux | ruby3.2-rubygem-json amzn 2023 | 2.6.3-184.amzn2023.0.2 | [ALAS2023-2025-1115](https://patchblox.com/security/data/fix/linux/alas2023-2025-1115.md) | Jul 26, 2025 | | Linux | ruby3.2-rubygem-json-debuginfo amzn 2023 | 2.6.3-184.amzn2023.0.2 | [ALAS2023-2025-1115](https://patchblox.com/security/data/fix/linux/alas2023-2025-1115.md) | Jul 26, 2025 | | Linux | ruby3.2-rubygem-minitest amzn 2023 | 5.25.1-184.amzn2023.0.2 | [ALAS2023-2025-1115](https://patchblox.com/security/data/fix/linux/alas2023-2025-1115.md) | Jul 26, 2025 | | Linux | ruby3.2-rubygem-power_assert amzn 2023 | 2.0.3-184.amzn2023.0.2 | [ALAS2023-2025-1115](https://patchblox.com/security/data/fix/linux/alas2023-2025-1115.md) | Jul 26, 2025 | | Linux | ruby3.2-rubygem-psych amzn 2023 | 5.0.1-184.amzn2023.0.2 | [ALAS2023-2025-1115](https://patchblox.com/security/data/fix/linux/alas2023-2025-1115.md) | Jul 26, 2025 | | Linux | ruby3.2-rubygem-psych-debuginfo amzn 2023 | 5.0.1-184.amzn2023.0.2 | [ALAS2023-2025-1115](https://patchblox.com/security/data/fix/linux/alas2023-2025-1115.md) | Jul 26, 2025 | | Linux | ruby3.2-rubygem-rake amzn 2023 | 13.0.6-184.amzn2023.0.2 | [ALAS2023-2025-1115](https://patchblox.com/security/data/fix/linux/alas2023-2025-1115.md) | Jul 26, 2025 | | Linux | ruby3.2-rubygem-rbs amzn 2023 | 2.8.2-184.amzn2023.0.2 | [ALAS2023-2025-1115](https://patchblox.com/security/data/fix/linux/alas2023-2025-1115.md) | Jul 26, 2025 | | Linux | ruby3.2-rubygem-rbs-debuginfo amzn 2023 | 2.8.2-184.amzn2023.0.2 | [ALAS2023-2025-1115](https://patchblox.com/security/data/fix/linux/alas2023-2025-1115.md) | Jul 26, 2025 | | Linux | ruby3.2-rubygem-rdoc amzn 2023 | 6.5.1.1-184.amzn2023.0.2 | [ALAS2023-2025-1115](https://patchblox.com/security/data/fix/linux/alas2023-2025-1115.md) | Jul 26, 2025 | | Linux | ruby3.2-rubygem-rexml amzn 2023 | 3.3.9-184.amzn2023.0.2 | [ALAS2023-2025-1115](https://patchblox.com/security/data/fix/linux/alas2023-2025-1115.md) | Jul 26, 2025 | | Linux | ruby3.2-rubygem-rss amzn 2023 | 0.3.1-184.amzn2023.0.2 | [ALAS2023-2025-1115](https://patchblox.com/security/data/fix/linux/alas2023-2025-1115.md) | Jul 26, 2025 | | Linux | ruby3.2-rubygem-test-unit amzn 2023 | 3.5.7-184.amzn2023.0.2 | [ALAS2023-2025-1115](https://patchblox.com/security/data/fix/linux/alas2023-2025-1115.md) | Jul 26, 2025 | | Linux | ruby3.2-rubygem-typeprof amzn 2023 | 0.21.3-184.amzn2023.0.2 | [ALAS2023-2025-1115](https://patchblox.com/security/data/fix/linux/alas2023-2025-1115.md) | Jul 26, 2025 | | Linux | ruby3.2-rubygems amzn 2023 | 3.4.19-184.amzn2023.0.2 | [ALAS2023-2025-1115](https://patchblox.com/security/data/fix/linux/alas2023-2025-1115.md) | Jul 26, 2025 | | Linux | ruby3.2-rubygems-devel amzn 2023 | 3.4.19-184.amzn2023.0.2 | [ALAS2023-2025-1115](https://patchblox.com/security/data/fix/linux/alas2023-2025-1115.md) | Jul 26, 2025 | --- Data as of 2026-11-08T13:06:02Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.