Güvenlik Danışarlıklarına Dön

Sinatra Vulnerability — Ubuntu Security Update (USN-8624-1)

This is a security release for Ubuntu 20.04, Ubuntu 22.04. The fix ships in the current release line (referenced builds: 22.04, 20.04, 18.04, 16.04). Update the product on every affected server to the patched release — there is no workaround, and unpatched servers remain exposed until updated.

High
Ubuntu 20.04 Ubuntu 22.04

Düzeltme Komutları

Debian/Ubuntu

sudo apt update && sudo apt upgrade

SharedLicense lisansı altında bunun anlamı

Your SharedLicense license itself is not affected — this is a change in Ubuntu 20.04, Ubuntu 22.04 software, not in licensing. Update the product through its standard update channel. Licenses keep working through updates; nothing needs re-issuing or re-activating.

  1. Ubuntu Security Notices

  2. USN-8624-1

Publication date

29 July 2026

Overview

Sinatra could be made to crash if it received specially crafted network
traffic.

Releases


22.04 LTS


20.04 LTS


18.04 LTS


16.04 LTS

Open side navigation

Packages

Details

It was discovered that Sinatra did not properly handle header parsing,
causing ETag generation to hang when given specific input. A remote
attacker could possibly use this issue to cause a denial of service.

It was discovered that Sinatra did not properly handle header parsing,
causing ETag generation to hang when given specific input. A remote
attacker could possibly use this issue to cause a denial of service.

Update instructions

After a standard system update you need to restart any applications that
use ruby-sinatra to make all the necessary changes.

Learn more about how to get the fixes.

The problem can be corrected by updating your system to the following package versions:

Ubuntu Release Package Version
22.04

LTS jammy

 ruby-sinatra – 

2.0.8.1-2+deb11u1ubuntu0.1~esm1

Ubuntu Pro
Fix available with Ubuntu Pro via ESM Apps. A community fix might become publicly available in the future.

20.04

LTS focal

 ruby-sinatra – 

2.0.8.1-1ubuntu0.1~esm3

Ubuntu Pro
Fix available with Ubuntu Pro via ESM Apps. A community fix might become publicly available in the future.

18.04

LTS bionic

 ruby-sinatra – 

1.4.8-1ubuntu0.1~esm3

Ubuntu Pro
Fix available with Ubuntu Pro via ESM Apps. A community fix might become publicly available in the future.

16.04

LTS xenial

 ruby-sinatra – 

1.4.7-3ubuntu0.1~esm3

Reduce your security exposure

Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines.

Get Ubuntu Pro

References

Referanslar

Güvenlik Danışarlıkları

İlgili Danışarlıklar

Plesk CVE-2026-68492: Untrusted Search Path

2026-09-23 00:00:00

Plesk CVE-2026-87898: OS Command Injection

2026-09-23 00:00:00

Virtualizor CVE-2026-43641: OS Command Injection

2026-09-22 00:00:00

Sisteminizi güvenlik açıkları açısından kontrol edin

Size uygun tam düzeltme komutlarını görmek için ürününüzü ve işletim sisteminizi seçin.

Sisteminizi Kontrol Edin