Zurück zu den Sicherheitshinweisen

Sinatra Vulnerability — Ubuntu Security Update (USN-8624-1)

This is a security release for Ubuntu 20.04, Ubuntu 22.04. The fix ships in the current release line (referenced builds: 22.04, 20.04, 18.04, 16.04). Update the product on every affected server to the patched release — there is no workaround, and unpatched servers remain exposed until updated.

High 7.5 CVSS
Ubuntu 20.04 Ubuntu 22.04

Fix-Befehle

Debian/Ubuntu

sudo apt update && sudo apt upgrade

Was das unter einer SharedLicense-Lizenz bedeutet

The advisory's own severity data peaks at CVSS 7.5 (CWE-1333); unpatched Ubuntu 20.04, Ubuntu 22.04 servers remain exposed until updated.

  1. Ubuntu Security Notices

  2. USN-8624-1

Publication date

29 July 2026

Overview

Sinatra could be made to crash if it received specially crafted network
traffic.

Releases


22.04 LTS


20.04 LTS


18.04 LTS


16.04 LTS

Packages

Details

It was discovered that Sinatra did not properly handle header parsing,
causing ETag generation to hang when given specific input. A remote
attacker could possibly use this issue to cause a denial of service.

It was discovered that Sinatra did not properly handle header parsing,
causing ETag generation to hang when given specific input. A remote
attacker could possibly use this issue to cause a denial of service.

Update instructions

After a standard system update you need to restart any applications that
use ruby-sinatra to make all the necessary changes.

Learn more about how to get the fixes.

The problem can be corrected by updating your system to the following package versions:

Ubuntu Release Package Version
22.04 LTS jammy ruby-sinatra –  2.0.8.1-2+deb11u1ubuntu0.1~esm1 Ubuntu Pro
Fix available with Ubuntu Pro via ESM Apps. A community fix might become publicly available in the future.
20.04 LTS focal ruby-sinatra –  2.0.8.1-1ubuntu0.1~esm3 Ubuntu Pro
Fix available with Ubuntu Pro via ESM Apps. A community fix might become publicly available in the future.
18.04 LTS bionic ruby-sinatra –  1.4.8-1ubuntu0.1~esm3 Ubuntu Pro
Fix available with Ubuntu Pro via ESM Apps. A community fix might become publicly available in the future.
16.04 LTS xenial ruby-sinatra –  1.4.7-3ubuntu0.1~esm3

References

Häufig gestellte Fragen

What does USN-8624-1 fix?
It was discovered that Sinatra did not properly handle header parsing, causing ETag generation to hang when given specific input.
Which Ubuntu releases are covered?
Ubuntu 20.04, Ubuntu 22.04.
How do I apply it?
Standard package update (apt).

Referenzen

Sicherheitshinweise

Verwandte Warnhinweise

Linux Kernel (FIPS) Vulnerabilities — Ubuntu Security Update (USN-9027-2)

2026-11-13

Linux Kernel (NVIDIA Tegra) Vulnerabilities — Ubuntu Security Update (USN-9091-1)

2026-11-13

Linux Kernel (HWE) Vulnerabilities — Ubuntu Security Update (USN-9018-2)

2026-11-12

System auf Schwachstellen prüfen

Wählen Sie Ihr Produkt und Betriebssystem, um die passenden Fix-Befehle zu sehen.

System prüfen