Affected version:

Java, all versions

JRuby <= 1.6.5

PHP <= 5.3.8, <= 5.4.0RC3

Python, all versions

Rubinius, all versions

Ruby <= 1.8.7-p356

Apache Geronimo, all versions

Apache Tomcat <= 5.5.34, <= 6.0.34, <= 7.0.22

Oracle Glassfish <= 3.1.1

Jetty, all versions

Plone, all versions

Rack <= 1.3.5, <= 1.2.4, <= 1.1.2

V8 JavaScript Engine, all versions

Fixed version:

Java, N/A

JRuby >= 1.6.5.1

PHP >= 5.3.9, >= 5.4.0RC4

Python, N/A

Rubinius, N/A

Ruby >= 1.8.7-p357, 1.9.x

Apache Geronimo, N/A

Apache Tomcat >= 5.5.35, >= 6.0.35, >= 7.0.23

Oracle Glassfish, N/A (Oracle reports that the issue is fixed in the main codeline and scheduled for a future CPU)

Jetty, N/A

Plone, N/A

Rack >= 1.4.0, >= 1.3.6, >= 1.2.5, >= 1.1.3

V8 JavaScript Engine, N/A