{ "document": { "aggregate_severity": { "text": "High" }, "category": "csaf_vex", "csaf_version": "2.0", "distribution": { "text": "TuxCare License Agreement", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Cloud Linux Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://tuxcare.com/contact/", "name": "TuxCare", "namespace": "https://tuxcare.com/" }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://security.tuxcare.com/csaf/v2/els_alt_ruby/alpinelinux3.22/vex/2022/cve-2022-28739-els_alt_ruby-alpinelinux3_22.json" } ], "tracking": { "current_release_date": "2026-03-05T20:46:46Z", "generator": { "date": "2026-03-05T20:46:46Z", "engine": { "name": "pyCSAF" } }, "id": "CVE-2022-28739-ELS_ALT_RUBY-ALPINELINUX3.22", "initial_release_date": "2022-05-09T18:15:00Z", "revision_history": [ { "date": "2022-05-09T18:15:00Z", "number": "1", "summary": "Initial version" }, { "date": "2026-03-05T20:46:46Z", "number": "2", "summary": "Official Publication" } ], "status": "final", "version": "2" }, "title": "Security update on CVE-2022-28739" }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Alpine Linux 3.22", "product": { "name": "Alpine Linux 3.22", "product_id": "Alpine-Linux-3.22", "product_identification_helper": { "cpe": "cpe:2.3:o:alpinelinux:alpine_linux:3.22:*:*:*:*:*:*:*" } } } ], "category": "product_family", "name": "Alpine Linux" } ], "category": "vendor", "name": "Alpine Linux" }, { "branches": [ { "branches": [ { "category": "product_version", "name": "alt-ruby30-rubygem-rdoc-6.3.4.1-rr171.aarch64", "product": { "name": "alt-ruby30-rubygem-rdoc-6.3.4.1-rr171.aarch64", "product_id": "alt-ruby30-rubygem-rdoc-6.3.4.1-rr171.aarch64", "product_identification_helper": { "purl": "pkg:apk/tuxcare/alt-ruby30-rubygem-rdoc@6.3.4.1-rr171?arch=aarch64&os_name=alpine&os_version=3.22" } } }, { "category": "product_version", "name": "alt-ruby30-rubygem-irb-1.3.5-rr171.aarch64", "product": { "name": "alt-ruby30-rubygem-irb-1.3.5-rr171.aarch64", "product_id": "alt-ruby30-rubygem-irb-1.3.5-rr171.aarch64", "product_identification_helper": { "purl": "pkg:apk/tuxcare/alt-ruby30-rubygem-irb@1.3.5-rr171?arch=aarch64&os_name=alpine&os_version=3.22" } } }, { "category": "product_version", "name": "alt-ruby30-rubygem-rss-0.2.9-rr171.aarch64", "product": { "name": "alt-ruby30-rubygem-rss-0.2.9-rr171.aarch64", "product_id": "alt-ruby30-rubygem-rss-0.2.9-rr171.aarch64", "product_identification_helper": { "purl": "pkg:apk/tuxcare/alt-ruby30-rubygem-rss@0.2.9-rr171?arch=aarch64&os_name=alpine&os_version=3.22" } } }, { "category": "product_version", "name": "alt-ruby30-dev-3.0.7-rr171.aarch64", "product": { "name": "alt-ruby30-dev-3.0.7-rr171.aarch64", "product_id": "alt-ruby30-dev-3.0.7-rr171.aarch64", "product_identification_helper": { "purl": "pkg:apk/tuxcare/alt-ruby30-dev@3.0.7-rr171?arch=aarch64&os_name=alpine&os_version=3.22" } } }, { "category": "product_version", "name": "alt-ruby30-rubygem-power-assert-1.2.1-rr171.aarch64", "product": { "name": "alt-ruby30-rubygem-power-assert-1.2.1-rr171.aarch64", "product_id": "alt-ruby30-rubygem-power-assert-1.2.1-rr171.aarch64", "product_identification_helper": { "purl": "pkg:apk/tuxcare/alt-ruby30-rubygem-power-assert@1.2.1-rr171?arch=aarch64&os_name=alpine&os_version=3.22" } } }, { "category": "product_version", "name": "alt-ruby30-rubygem-rbs-1.4.0-rr171.aarch64", "product": { "name": "alt-ruby30-rubygem-rbs-1.4.0-rr171.aarch64", "product_id": "alt-ruby30-rubygem-rbs-1.4.0-rr171.aarch64", "product_identification_helper": { "purl": "pkg:apk/tuxcare/alt-ruby30-rubygem-rbs@1.4.0-rr171?arch=aarch64&os_name=alpine&os_version=3.22" } } }, { "category": "product_version", "name": "alt-ruby30-default-gems-3.0.7-rr171.aarch64", "product": { "name": "alt-ruby30-default-gems-3.0.7-rr171.aarch64", "product_id": "alt-ruby30-default-gems-3.0.7-rr171.aarch64", "product_identification_helper": { "purl": "pkg:apk/tuxcare/alt-ruby30-default-gems@3.0.7-rr171?arch=aarch64&os_name=alpine&os_version=3.22" } } }, { "category": "product_version", "name": "alt-ruby30-doc-3.0.7-rr171.aarch64", "product": { "name": "alt-ruby30-doc-3.0.7-rr171.aarch64", "product_id": "alt-ruby30-doc-3.0.7-rr171.aarch64", "product_identification_helper": { "purl": "pkg:apk/tuxcare/alt-ruby30-doc@3.0.7-rr171?arch=aarch64&os_name=alpine&os_version=3.22" } } }, { "category": "product_version", "name": "alt-ruby30-rubygems-3.2.33-rr171.aarch64", "product": { "name": "alt-ruby30-rubygems-3.2.33-rr171.aarch64", "product_id": "alt-ruby30-rubygems-3.2.33-rr171.aarch64", "product_identification_helper": { "purl": "pkg:apk/tuxcare/alt-ruby30-rubygems@3.2.33-rr171?arch=aarch64&os_name=alpine&os_version=3.22" } } }, { "category": "product_version", "name": "alt-ruby30-rubygem-bundler-2.2.33-rr171.aarch64", "product": { "name": "alt-ruby30-rubygem-bundler-2.2.33-rr171.aarch64", "product_id": "alt-ruby30-rubygem-bundler-2.2.33-rr171.aarch64", "product_identification_helper": { "purl": "pkg:apk/tuxcare/alt-ruby30-rubygem-bundler@2.2.33-rr171?arch=aarch64&os_name=alpine&os_version=3.22" } } }, { "category": "product_version", "name": "alt-ruby30-3.0.7-rr171.aarch64", "product": { "name": "alt-ruby30-3.0.7-rr171.aarch64", "product_id": "alt-ruby30-3.0.7-rr171.aarch64", "product_identification_helper": { "purl": "pkg:apk/tuxcare/alt-ruby30@3.0.7-rr171?arch=aarch64&os_name=alpine&os_version=3.22" } } }, { "category": "product_version", "name": "alt-ruby30-rubygem-typeprof-0.15.2-rr171.aarch64", "product": { "name": "alt-ruby30-rubygem-typeprof-0.15.2-rr171.aarch64", "product_id": "alt-ruby30-rubygem-typeprof-0.15.2-rr171.aarch64", "product_identification_helper": { "purl": "pkg:apk/tuxcare/alt-ruby30-rubygem-typeprof@0.15.2-rr171?arch=aarch64&os_name=alpine&os_version=3.22" } } }, { "category": "product_version", "name": "alt-ruby30-rubygem-bigdecimal-3.0.0-rr171.aarch64", "product": { "name": "alt-ruby30-rubygem-bigdecimal-3.0.0-rr171.aarch64", "product_id": "alt-ruby30-rubygem-bigdecimal-3.0.0-rr171.aarch64", "product_identification_helper": { "purl": "pkg:apk/tuxcare/alt-ruby30-rubygem-bigdecimal@3.0.0-rr171?arch=aarch64&os_name=alpine&os_version=3.22" } } }, { "category": "product_version", "name": "alt-ruby30-rubygem-minitest-5.14.2-rr171.aarch64", "product": { "name": "alt-ruby30-rubygem-minitest-5.14.2-rr171.aarch64", "product_id": "alt-ruby30-rubygem-minitest-5.14.2-rr171.aarch64", "product_identification_helper": { "purl": "pkg:apk/tuxcare/alt-ruby30-rubygem-minitest@5.14.2-rr171?arch=aarch64&os_name=alpine&os_version=3.22" } } }, { "category": "product_version", "name": "alt-ruby30-rubygem-json-2.5.1-rr171.aarch64", "product": { "name": "alt-ruby30-rubygem-json-2.5.1-rr171.aarch64", "product_id": "alt-ruby30-rubygem-json-2.5.1-rr171.aarch64", "product_identification_helper": { "purl": "pkg:apk/tuxcare/alt-ruby30-rubygem-json@2.5.1-rr171?arch=aarch64&os_name=alpine&os_version=3.22" } } }, { "category": "product_version", "name": "alt-ruby30-rubygem-psych-3.3.2-rr171.aarch64", "product": { "name": "alt-ruby30-rubygem-psych-3.3.2-rr171.aarch64", "product_id": "alt-ruby30-rubygem-psych-3.3.2-rr171.aarch64", "product_identification_helper": { "purl": "pkg:apk/tuxcare/alt-ruby30-rubygem-psych@3.3.2-rr171?arch=aarch64&os_name=alpine&os_version=3.22" } } }, { "category": "product_version", "name": "alt-ruby30-libs-3.0.7-rr171.aarch64", "product": { "name": "alt-ruby30-libs-3.0.7-rr171.aarch64", "product_id": "alt-ruby30-libs-3.0.7-rr171.aarch64", "product_identification_helper": { "purl": "pkg:apk/tuxcare/alt-ruby30-libs@3.0.7-rr171?arch=aarch64&os_name=alpine&os_version=3.22" } } }, { "category": "product_version", "name": "alt-ruby30-rubygem-io-console-0.5.7-rr171.aarch64", "product": { "name": "alt-ruby30-rubygem-io-console-0.5.7-rr171.aarch64", "product_id": "alt-ruby30-rubygem-io-console-0.5.7-rr171.aarch64", "product_identification_helper": { "purl": "pkg:apk/tuxcare/alt-ruby30-rubygem-io-console@0.5.7-rr171?arch=aarch64&os_name=alpine&os_version=3.22" } } }, { "category": "product_version", "name": "alt-ruby30-rubygem-test-unit-3.3.7-rr171.aarch64", "product": { "name": "alt-ruby30-rubygem-test-unit-3.3.7-rr171.aarch64", "product_id": "alt-ruby30-rubygem-test-unit-3.3.7-rr171.aarch64", "product_identification_helper": { "purl": "pkg:apk/tuxcare/alt-ruby30-rubygem-test-unit@3.3.7-rr171?arch=aarch64&os_name=alpine&os_version=3.22" } } }, { "category": "product_version", "name": "alt-ruby30-rubygem-rake-13.0.3-rr171.aarch64", "product": { "name": "alt-ruby30-rubygem-rake-13.0.3-rr171.aarch64", "product_id": "alt-ruby30-rubygem-rake-13.0.3-rr171.aarch64", "product_identification_helper": { "purl": "pkg:apk/tuxcare/alt-ruby30-rubygem-rake@13.0.3-rr171?arch=aarch64&os_name=alpine&os_version=3.22" } } }, { "category": "product_version", "name": "alt-ruby30-rubygem-rexml-3.2.5-rr171.aarch64", "product": { "name": "alt-ruby30-rubygem-rexml-3.2.5-rr171.aarch64", "product_id": "alt-ruby30-rubygem-rexml-3.2.5-rr171.aarch64", "product_identification_helper": { "purl": "pkg:apk/tuxcare/alt-ruby30-rubygem-rexml@3.2.5-rr171?arch=aarch64&os_name=alpine&os_version=3.22" } } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "alt-ruby30-rubygem-rdoc-6.3.4.1-rr171.x86_64", "product": { "name": "alt-ruby30-rubygem-rdoc-6.3.4.1-rr171.x86_64", "product_id": "alt-ruby30-rubygem-rdoc-6.3.4.1-rr171.x86_64", "product_identification_helper": { "purl": "pkg:apk/tuxcare/alt-ruby30-rubygem-rdoc@6.3.4.1-rr171?arch=x86_64&os_name=alpine&os_version=3.22" } } }, { "category": "product_version", "name": "alt-ruby30-rubygem-irb-1.3.5-rr171.x86_64", "product": { "name": "alt-ruby30-rubygem-irb-1.3.5-rr171.x86_64", "product_id": "alt-ruby30-rubygem-irb-1.3.5-rr171.x86_64", "product_identification_helper": { "purl": "pkg:apk/tuxcare/alt-ruby30-rubygem-irb@1.3.5-rr171?arch=x86_64&os_name=alpine&os_version=3.22" } } }, { "category": "product_version", "name": "alt-ruby30-rubygem-rss-0.2.9-rr171.x86_64", "product": { "name": "alt-ruby30-rubygem-rss-0.2.9-rr171.x86_64", "product_id": "alt-ruby30-rubygem-rss-0.2.9-rr171.x86_64", "product_identification_helper": { "purl": "pkg:apk/tuxcare/alt-ruby30-rubygem-rss@0.2.9-rr171?arch=x86_64&os_name=alpine&os_version=3.22" } } }, { "category": "product_version", "name": "alt-ruby30-dev-3.0.7-rr171.x86_64", "product": { "name": "alt-ruby30-dev-3.0.7-rr171.x86_64", "product_id": "alt-ruby30-dev-3.0.7-rr171.x86_64", "product_identification_helper": { "purl": "pkg:apk/tuxcare/alt-ruby30-dev@3.0.7-rr171?arch=x86_64&os_name=alpine&os_version=3.22" } } }, { "category": "product_version", "name": "alt-ruby30-rubygem-power-assert-1.2.1-rr171.x86_64", "product": { "name": "alt-ruby30-rubygem-power-assert-1.2.1-rr171.x86_64", "product_id": "alt-ruby30-rubygem-power-assert-1.2.1-rr171.x86_64", "product_identification_helper": { "purl": "pkg:apk/tuxcare/alt-ruby30-rubygem-power-assert@1.2.1-rr171?arch=x86_64&os_name=alpine&os_version=3.22" } } }, { "category": "product_version", "name": "alt-ruby30-rubygem-rbs-1.4.0-rr171.x86_64", "product": { "name": "alt-ruby30-rubygem-rbs-1.4.0-rr171.x86_64", "product_id": "alt-ruby30-rubygem-rbs-1.4.0-rr171.x86_64", "product_identification_helper": { "purl": "pkg:apk/tuxcare/alt-ruby30-rubygem-rbs@1.4.0-rr171?arch=x86_64&os_name=alpine&os_version=3.22" } } }, { "category": "product_version", "name": "alt-ruby30-default-gems-3.0.7-rr171.x86_64", "product": { "name": "alt-ruby30-default-gems-3.0.7-rr171.x86_64", "product_id": "alt-ruby30-default-gems-3.0.7-rr171.x86_64", "product_identification_helper": { "purl": "pkg:apk/tuxcare/alt-ruby30-default-gems@3.0.7-rr171?arch=x86_64&os_name=alpine&os_version=3.22" } } }, { "category": "product_version", "name": "alt-ruby30-doc-3.0.7-rr171.x86_64", "product": { "name": "alt-ruby30-doc-3.0.7-rr171.x86_64", "product_id": "alt-ruby30-doc-3.0.7-rr171.x86_64", "product_identification_helper": { "purl": "pkg:apk/tuxcare/alt-ruby30-doc@3.0.7-rr171?arch=x86_64&os_name=alpine&os_version=3.22" } } }, { "category": "product_version", "name": "alt-ruby30-rubygems-3.2.33-rr171.x86_64", "product": { "name": "alt-ruby30-rubygems-3.2.33-rr171.x86_64", "product_id": "alt-ruby30-rubygems-3.2.33-rr171.x86_64", "product_identification_helper": { "purl": "pkg:apk/tuxcare/alt-ruby30-rubygems@3.2.33-rr171?arch=x86_64&os_name=alpine&os_version=3.22" } } }, { "category": "product_version", "name": "alt-ruby30-rubygem-bundler-2.2.33-rr171.x86_64", "product": { "name": "alt-ruby30-rubygem-bundler-2.2.33-rr171.x86_64", "product_id": "alt-ruby30-rubygem-bundler-2.2.33-rr171.x86_64", "product_identification_helper": { "purl": "pkg:apk/tuxcare/alt-ruby30-rubygem-bundler@2.2.33-rr171?arch=x86_64&os_name=alpine&os_version=3.22" } } }, { "category": "product_version", "name": "alt-ruby30-3.0.7-rr171.x86_64", "product": { "name": "alt-ruby30-3.0.7-rr171.x86_64", "product_id": "alt-ruby30-3.0.7-rr171.x86_64", "product_identification_helper": { "purl": "pkg:apk/tuxcare/alt-ruby30@3.0.7-rr171?arch=x86_64&os_name=alpine&os_version=3.22" } } }, { "category": "product_version", "name": "alt-ruby30-rubygem-typeprof-0.15.2-rr171.x86_64", "product": { "name": "alt-ruby30-rubygem-typeprof-0.15.2-rr171.x86_64", "product_id": "alt-ruby30-rubygem-typeprof-0.15.2-rr171.x86_64", "product_identification_helper": { "purl": "pkg:apk/tuxcare/alt-ruby30-rubygem-typeprof@0.15.2-rr171?arch=x86_64&os_name=alpine&os_version=3.22" } } }, { "category": "product_version", "name": "alt-ruby30-rubygem-bigdecimal-3.0.0-rr171.x86_64", "product": { "name": "alt-ruby30-rubygem-bigdecimal-3.0.0-rr171.x86_64", "product_id": "alt-ruby30-rubygem-bigdecimal-3.0.0-rr171.x86_64", "product_identification_helper": { "purl": "pkg:apk/tuxcare/alt-ruby30-rubygem-bigdecimal@3.0.0-rr171?arch=x86_64&os_name=alpine&os_version=3.22" } } }, { "category": "product_version", "name": "alt-ruby30-rubygem-minitest-5.14.2-rr171.x86_64", "product": { "name": "alt-ruby30-rubygem-minitest-5.14.2-rr171.x86_64", "product_id": "alt-ruby30-rubygem-minitest-5.14.2-rr171.x86_64", "product_identification_helper": { "purl": "pkg:apk/tuxcare/alt-ruby30-rubygem-minitest@5.14.2-rr171?arch=x86_64&os_name=alpine&os_version=3.22" } } }, { "category": "product_version", "name": "alt-ruby30-rubygem-json-2.5.1-rr171.x86_64", "product": { "name": "alt-ruby30-rubygem-json-2.5.1-rr171.x86_64", "product_id": "alt-ruby30-rubygem-json-2.5.1-rr171.x86_64", "product_identification_helper": { "purl": "pkg:apk/tuxcare/alt-ruby30-rubygem-json@2.5.1-rr171?arch=x86_64&os_name=alpine&os_version=3.22" } } }, { "category": "product_version", "name": "alt-ruby30-rubygem-psych-3.3.2-rr171.x86_64", "product": { "name": "alt-ruby30-rubygem-psych-3.3.2-rr171.x86_64", "product_id": "alt-ruby30-rubygem-psych-3.3.2-rr171.x86_64", "product_identification_helper": { "purl": "pkg:apk/tuxcare/alt-ruby30-rubygem-psych@3.3.2-rr171?arch=x86_64&os_name=alpine&os_version=3.22" } } }, { "category": "product_version", "name": "alt-ruby30-libs-3.0.7-rr171.x86_64", "product": { "name": "alt-ruby30-libs-3.0.7-rr171.x86_64", "product_id": "alt-ruby30-libs-3.0.7-rr171.x86_64", "product_identification_helper": { "purl": "pkg:apk/tuxcare/alt-ruby30-libs@3.0.7-rr171?arch=x86_64&os_name=alpine&os_version=3.22" } } }, { "category": "product_version", "name": "alt-ruby30-rubygem-io-console-0.5.7-rr171.x86_64", "product": { "name": "alt-ruby30-rubygem-io-console-0.5.7-rr171.x86_64", "product_id": "alt-ruby30-rubygem-io-console-0.5.7-rr171.x86_64", "product_identification_helper": { "purl": "pkg:apk/tuxcare/alt-ruby30-rubygem-io-console@0.5.7-rr171?arch=x86_64&os_name=alpine&os_version=3.22" } } }, { "category": "product_version", "name": "alt-ruby30-rubygem-test-unit-3.3.7-rr171.x86_64", "product": { "name": "alt-ruby30-rubygem-test-unit-3.3.7-rr171.x86_64", "product_id": "alt-ruby30-rubygem-test-unit-3.3.7-rr171.x86_64", "product_identification_helper": { "purl": "pkg:apk/tuxcare/alt-ruby30-rubygem-test-unit@3.3.7-rr171?arch=x86_64&os_name=alpine&os_version=3.22" } } }, { "category": "product_version", "name": "alt-ruby30-rubygem-rake-13.0.3-rr171.x86_64", "product": { "name": "alt-ruby30-rubygem-rake-13.0.3-rr171.x86_64", "product_id": "alt-ruby30-rubygem-rake-13.0.3-rr171.x86_64", "product_identification_helper": { "purl": "pkg:apk/tuxcare/alt-ruby30-rubygem-rake@13.0.3-rr171?arch=x86_64&os_name=alpine&os_version=3.22" } } }, { "category": "product_version", "name": "alt-ruby30-rubygem-rexml-3.2.5-rr171.x86_64", "product": { "name": "alt-ruby30-rubygem-rexml-3.2.5-rr171.x86_64", "product_id": "alt-ruby30-rubygem-rexml-3.2.5-rr171.x86_64", "product_identification_helper": { "purl": "pkg:apk/tuxcare/alt-ruby30-rubygem-rexml@3.2.5-rr171?arch=x86_64&os_name=alpine&os_version=3.22" } } } ], "category": "architecture", "name": "x86_64" } ], "category": "vendor", "name": "TuxCare" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "alt-ruby30-rubygem-rdoc-6.3.4.1-rr171.aarch64 as a component of Alpine Linux 3.22", "product_id": "Alpine-Linux-3.22:alt-ruby30-rubygem-rdoc-6.3.4.1-rr171.aarch64" }, "product_reference": "alt-ruby30-rubygem-rdoc-6.3.4.1-rr171.aarch64", "relates_to_product_reference": "Alpine-Linux-3.22" }, { "category": "default_component_of", "full_product_name": { "name": "alt-ruby30-rubygem-rdoc-6.3.4.1-rr171.x86_64 as a component of Alpine Linux 3.22", "product_id": "Alpine-Linux-3.22:alt-ruby30-rubygem-rdoc-6.3.4.1-rr171.x86_64" }, "product_reference": "alt-ruby30-rubygem-rdoc-6.3.4.1-rr171.x86_64", "relates_to_product_reference": "Alpine-Linux-3.22" }, { "category": "default_component_of", "full_product_name": { "name": "alt-ruby30-rubygem-irb-1.3.5-rr171.x86_64 as a component of Alpine Linux 3.22", "product_id": "Alpine-Linux-3.22:alt-ruby30-rubygem-irb-1.3.5-rr171.x86_64" }, "product_reference": "alt-ruby30-rubygem-irb-1.3.5-rr171.x86_64", "relates_to_product_reference": "Alpine-Linux-3.22" }, { "category": "default_component_of", "full_product_name": { "name": "alt-ruby30-rubygem-irb-1.3.5-rr171.aarch64 as a component of Alpine Linux 3.22", "product_id": "Alpine-Linux-3.22:alt-ruby30-rubygem-irb-1.3.5-rr171.aarch64" }, "product_reference": "alt-ruby30-rubygem-irb-1.3.5-rr171.aarch64", "relates_to_product_reference": "Alpine-Linux-3.22" }, { "category": "default_component_of", "full_product_name": { "name": "alt-ruby30-rubygem-rss-0.2.9-rr171.x86_64 as a component of Alpine Linux 3.22", "product_id": "Alpine-Linux-3.22:alt-ruby30-rubygem-rss-0.2.9-rr171.x86_64" }, "product_reference": "alt-ruby30-rubygem-rss-0.2.9-rr171.x86_64", "relates_to_product_reference": "Alpine-Linux-3.22" }, { "category": "default_component_of", "full_product_name": { "name": "alt-ruby30-rubygem-rss-0.2.9-rr171.aarch64 as a component of Alpine Linux 3.22", "product_id": "Alpine-Linux-3.22:alt-ruby30-rubygem-rss-0.2.9-rr171.aarch64" }, "product_reference": "alt-ruby30-rubygem-rss-0.2.9-rr171.aarch64", "relates_to_product_reference": "Alpine-Linux-3.22" }, { "category": "default_component_of", "full_product_name": { "name": "alt-ruby30-dev-3.0.7-rr171.x86_64 as a component of Alpine Linux 3.22", "product_id": "Alpine-Linux-3.22:alt-ruby30-dev-3.0.7-rr171.x86_64" }, "product_reference": "alt-ruby30-dev-3.0.7-rr171.x86_64", "relates_to_product_reference": "Alpine-Linux-3.22" }, { "category": "default_component_of", "full_product_name": { "name": "alt-ruby30-dev-3.0.7-rr171.aarch64 as a component of Alpine Linux 3.22", "product_id": "Alpine-Linux-3.22:alt-ruby30-dev-3.0.7-rr171.aarch64" }, "product_reference": "alt-ruby30-dev-3.0.7-rr171.aarch64", "relates_to_product_reference": "Alpine-Linux-3.22" }, { "category": "default_component_of", "full_product_name": { "name": "alt-ruby30-rubygem-power-assert-1.2.1-rr171.aarch64 as a component of Alpine Linux 3.22", "product_id": "Alpine-Linux-3.22:alt-ruby30-rubygem-power-assert-1.2.1-rr171.aarch64" }, "product_reference": "alt-ruby30-rubygem-power-assert-1.2.1-rr171.aarch64", "relates_to_product_reference": "Alpine-Linux-3.22" }, { "category": "default_component_of", "full_product_name": { "name": "alt-ruby30-rubygem-power-assert-1.2.1-rr171.x86_64 as a component of Alpine Linux 3.22", "product_id": "Alpine-Linux-3.22:alt-ruby30-rubygem-power-assert-1.2.1-rr171.x86_64" }, "product_reference": "alt-ruby30-rubygem-power-assert-1.2.1-rr171.x86_64", "relates_to_product_reference": "Alpine-Linux-3.22" }, { "category": "default_component_of", "full_product_name": { "name": "alt-ruby30-rubygem-rbs-1.4.0-rr171.aarch64 as a component of Alpine Linux 3.22", "product_id": "Alpine-Linux-3.22:alt-ruby30-rubygem-rbs-1.4.0-rr171.aarch64" }, "product_reference": "alt-ruby30-rubygem-rbs-1.4.0-rr171.aarch64", "relates_to_product_reference": "Alpine-Linux-3.22" }, { "category": "default_component_of", "full_product_name": { "name": "alt-ruby30-rubygem-rbs-1.4.0-rr171.x86_64 as a component of Alpine Linux 3.22", "product_id": "Alpine-Linux-3.22:alt-ruby30-rubygem-rbs-1.4.0-rr171.x86_64" }, "product_reference": "alt-ruby30-rubygem-rbs-1.4.0-rr171.x86_64", "relates_to_product_reference": "Alpine-Linux-3.22" }, { "category": "default_component_of", "full_product_name": { "name": "alt-ruby30-default-gems-3.0.7-rr171.x86_64 as a component of Alpine Linux 3.22", "product_id": "Alpine-Linux-3.22:alt-ruby30-default-gems-3.0.7-rr171.x86_64" }, "product_reference": "alt-ruby30-default-gems-3.0.7-rr171.x86_64", "relates_to_product_reference": "Alpine-Linux-3.22" }, { "category": "default_component_of", "full_product_name": { "name": "alt-ruby30-default-gems-3.0.7-rr171.aarch64 as a component of Alpine Linux 3.22", "product_id": "Alpine-Linux-3.22:alt-ruby30-default-gems-3.0.7-rr171.aarch64" }, "product_reference": "alt-ruby30-default-gems-3.0.7-rr171.aarch64", "relates_to_product_reference": "Alpine-Linux-3.22" }, { "category": "default_component_of", "full_product_name": { "name": "alt-ruby30-doc-3.0.7-rr171.x86_64 as a component of Alpine Linux 3.22", "product_id": "Alpine-Linux-3.22:alt-ruby30-doc-3.0.7-rr171.x86_64" }, "product_reference": "alt-ruby30-doc-3.0.7-rr171.x86_64", "relates_to_product_reference": "Alpine-Linux-3.22" }, { "category": "default_component_of", "full_product_name": { "name": "alt-ruby30-doc-3.0.7-rr171.aarch64 as a component of Alpine Linux 3.22", "product_id": "Alpine-Linux-3.22:alt-ruby30-doc-3.0.7-rr171.aarch64" }, "product_reference": "alt-ruby30-doc-3.0.7-rr171.aarch64", "relates_to_product_reference": "Alpine-Linux-3.22" }, { "category": "default_component_of", "full_product_name": { "name": "alt-ruby30-rubygems-3.2.33-rr171.aarch64 as a component of Alpine Linux 3.22", "product_id": "Alpine-Linux-3.22:alt-ruby30-rubygems-3.2.33-rr171.aarch64" }, "product_reference": "alt-ruby30-rubygems-3.2.33-rr171.aarch64", "relates_to_product_reference": "Alpine-Linux-3.22" }, { "category": "default_component_of", "full_product_name": { "name": "alt-ruby30-rubygems-3.2.33-rr171.x86_64 as a component of Alpine Linux 3.22", "product_id": "Alpine-Linux-3.22:alt-ruby30-rubygems-3.2.33-rr171.x86_64" }, "product_reference": "alt-ruby30-rubygems-3.2.33-rr171.x86_64", "relates_to_product_reference": "Alpine-Linux-3.22" }, { "category": "default_component_of", "full_product_name": { "name": "alt-ruby30-rubygem-bundler-2.2.33-rr171.x86_64 as a component of Alpine Linux 3.22", "product_id": "Alpine-Linux-3.22:alt-ruby30-rubygem-bundler-2.2.33-rr171.x86_64" }, "product_reference": "alt-ruby30-rubygem-bundler-2.2.33-rr171.x86_64", "relates_to_product_reference": "Alpine-Linux-3.22" }, { "category": "default_component_of", "full_product_name": { "name": "alt-ruby30-rubygem-bundler-2.2.33-rr171.aarch64 as a component of Alpine Linux 3.22", "product_id": "Alpine-Linux-3.22:alt-ruby30-rubygem-bundler-2.2.33-rr171.aarch64" }, "product_reference": "alt-ruby30-rubygem-bundler-2.2.33-rr171.aarch64", "relates_to_product_reference": "Alpine-Linux-3.22" }, { "category": "default_component_of", "full_product_name": { "name": "alt-ruby30-3.0.7-rr171.aarch64 as a component of Alpine Linux 3.22", "product_id": "Alpine-Linux-3.22:alt-ruby30-3.0.7-rr171.aarch64" }, "product_reference": "alt-ruby30-3.0.7-rr171.aarch64", "relates_to_product_reference": "Alpine-Linux-3.22" }, { "category": "default_component_of", "full_product_name": { "name": "alt-ruby30-3.0.7-rr171.x86_64 as a component of Alpine Linux 3.22", "product_id": "Alpine-Linux-3.22:alt-ruby30-3.0.7-rr171.x86_64" }, "product_reference": "alt-ruby30-3.0.7-rr171.x86_64", "relates_to_product_reference": "Alpine-Linux-3.22" }, { "category": "default_component_of", "full_product_name": { "name": "alt-ruby30-rubygem-typeprof-0.15.2-rr171.aarch64 as a component of Alpine Linux 3.22", "product_id": "Alpine-Linux-3.22:alt-ruby30-rubygem-typeprof-0.15.2-rr171.aarch64" }, "product_reference": "alt-ruby30-rubygem-typeprof-0.15.2-rr171.aarch64", "relates_to_product_reference": "Alpine-Linux-3.22" }, { "category": "default_component_of", "full_product_name": { "name": "alt-ruby30-rubygem-typeprof-0.15.2-rr171.x86_64 as a component of Alpine Linux 3.22", "product_id": "Alpine-Linux-3.22:alt-ruby30-rubygem-typeprof-0.15.2-rr171.x86_64" }, "product_reference": "alt-ruby30-rubygem-typeprof-0.15.2-rr171.x86_64", "relates_to_product_reference": "Alpine-Linux-3.22" }, { "category": "default_component_of", "full_product_name": { "name": "alt-ruby30-rubygem-bigdecimal-3.0.0-rr171.aarch64 as a component of Alpine Linux 3.22", "product_id": "Alpine-Linux-3.22:alt-ruby30-rubygem-bigdecimal-3.0.0-rr171.aarch64" }, "product_reference": "alt-ruby30-rubygem-bigdecimal-3.0.0-rr171.aarch64", "relates_to_product_reference": "Alpine-Linux-3.22" }, { "category": "default_component_of", "full_product_name": { "name": "alt-ruby30-rubygem-bigdecimal-3.0.0-rr171.x86_64 as a component of Alpine Linux 3.22", "product_id": "Alpine-Linux-3.22:alt-ruby30-rubygem-bigdecimal-3.0.0-rr171.x86_64" }, "product_reference": "alt-ruby30-rubygem-bigdecimal-3.0.0-rr171.x86_64", "relates_to_product_reference": "Alpine-Linux-3.22" }, { "category": "default_component_of", "full_product_name": { "name": "alt-ruby30-rubygem-minitest-5.14.2-rr171.x86_64 as a component of Alpine Linux 3.22", "product_id": "Alpine-Linux-3.22:alt-ruby30-rubygem-minitest-5.14.2-rr171.x86_64" }, "product_reference": "alt-ruby30-rubygem-minitest-5.14.2-rr171.x86_64", "relates_to_product_reference": "Alpine-Linux-3.22" }, { "category": "default_component_of", "full_product_name": { "name": "alt-ruby30-rubygem-minitest-5.14.2-rr171.aarch64 as a component of Alpine Linux 3.22", "product_id": "Alpine-Linux-3.22:alt-ruby30-rubygem-minitest-5.14.2-rr171.aarch64" }, "product_reference": "alt-ruby30-rubygem-minitest-5.14.2-rr171.aarch64", "relates_to_product_reference": "Alpine-Linux-3.22" }, { "category": "default_component_of", "full_product_name": { "name": "alt-ruby30-rubygem-json-2.5.1-rr171.aarch64 as a component of Alpine Linux 3.22", "product_id": "Alpine-Linux-3.22:alt-ruby30-rubygem-json-2.5.1-rr171.aarch64" }, "product_reference": "alt-ruby30-rubygem-json-2.5.1-rr171.aarch64", "relates_to_product_reference": "Alpine-Linux-3.22" }, { "category": "default_component_of", "full_product_name": { "name": "alt-ruby30-rubygem-json-2.5.1-rr171.x86_64 as a component of Alpine Linux 3.22", "product_id": "Alpine-Linux-3.22:alt-ruby30-rubygem-json-2.5.1-rr171.x86_64" }, "product_reference": "alt-ruby30-rubygem-json-2.5.1-rr171.x86_64", "relates_to_product_reference": "Alpine-Linux-3.22" }, { "category": "default_component_of", "full_product_name": { "name": "alt-ruby30-rubygem-psych-3.3.2-rr171.x86_64 as a component of Alpine Linux 3.22", "product_id": "Alpine-Linux-3.22:alt-ruby30-rubygem-psych-3.3.2-rr171.x86_64" }, "product_reference": "alt-ruby30-rubygem-psych-3.3.2-rr171.x86_64", "relates_to_product_reference": "Alpine-Linux-3.22" }, { "category": "default_component_of", "full_product_name": { "name": "alt-ruby30-rubygem-psych-3.3.2-rr171.aarch64 as a component of Alpine Linux 3.22", "product_id": "Alpine-Linux-3.22:alt-ruby30-rubygem-psych-3.3.2-rr171.aarch64" }, "product_reference": "alt-ruby30-rubygem-psych-3.3.2-rr171.aarch64", "relates_to_product_reference": "Alpine-Linux-3.22" }, { "category": "default_component_of", "full_product_name": { "name": "alt-ruby30-libs-3.0.7-rr171.aarch64 as a component of Alpine Linux 3.22", "product_id": "Alpine-Linux-3.22:alt-ruby30-libs-3.0.7-rr171.aarch64" }, "product_reference": "alt-ruby30-libs-3.0.7-rr171.aarch64", "relates_to_product_reference": "Alpine-Linux-3.22" }, { "category": "default_component_of", "full_product_name": { "name": "alt-ruby30-libs-3.0.7-rr171.x86_64 as a component of Alpine Linux 3.22", "product_id": "Alpine-Linux-3.22:alt-ruby30-libs-3.0.7-rr171.x86_64" }, "product_reference": "alt-ruby30-libs-3.0.7-rr171.x86_64", "relates_to_product_reference": "Alpine-Linux-3.22" }, { "category": "default_component_of", "full_product_name": { "name": "alt-ruby30-rubygem-io-console-0.5.7-rr171.x86_64 as a component of Alpine Linux 3.22", "product_id": "Alpine-Linux-3.22:alt-ruby30-rubygem-io-console-0.5.7-rr171.x86_64" }, "product_reference": "alt-ruby30-rubygem-io-console-0.5.7-rr171.x86_64", "relates_to_product_reference": "Alpine-Linux-3.22" }, { "category": "default_component_of", "full_product_name": { "name": "alt-ruby30-rubygem-io-console-0.5.7-rr171.aarch64 as a component of Alpine Linux 3.22", "product_id": "Alpine-Linux-3.22:alt-ruby30-rubygem-io-console-0.5.7-rr171.aarch64" }, "product_reference": "alt-ruby30-rubygem-io-console-0.5.7-rr171.aarch64", "relates_to_product_reference": "Alpine-Linux-3.22" }, { "category": "default_component_of", "full_product_name": { "name": "alt-ruby30-rubygem-test-unit-3.3.7-rr171.aarch64 as a component of Alpine Linux 3.22", "product_id": "Alpine-Linux-3.22:alt-ruby30-rubygem-test-unit-3.3.7-rr171.aarch64" }, "product_reference": "alt-ruby30-rubygem-test-unit-3.3.7-rr171.aarch64", "relates_to_product_reference": "Alpine-Linux-3.22" }, { "category": "default_component_of", "full_product_name": { "name": "alt-ruby30-rubygem-test-unit-3.3.7-rr171.x86_64 as a component of Alpine Linux 3.22", "product_id": "Alpine-Linux-3.22:alt-ruby30-rubygem-test-unit-3.3.7-rr171.x86_64" }, "product_reference": "alt-ruby30-rubygem-test-unit-3.3.7-rr171.x86_64", "relates_to_product_reference": "Alpine-Linux-3.22" }, { "category": "default_component_of", "full_product_name": { "name": "alt-ruby30-rubygem-rake-13.0.3-rr171.aarch64 as a component of Alpine Linux 3.22", "product_id": "Alpine-Linux-3.22:alt-ruby30-rubygem-rake-13.0.3-rr171.aarch64" }, "product_reference": "alt-ruby30-rubygem-rake-13.0.3-rr171.aarch64", "relates_to_product_reference": "Alpine-Linux-3.22" }, { "category": "default_component_of", "full_product_name": { "name": "alt-ruby30-rubygem-rake-13.0.3-rr171.x86_64 as a component of Alpine Linux 3.22", "product_id": "Alpine-Linux-3.22:alt-ruby30-rubygem-rake-13.0.3-rr171.x86_64" }, "product_reference": "alt-ruby30-rubygem-rake-13.0.3-rr171.x86_64", "relates_to_product_reference": "Alpine-Linux-3.22" }, { "category": "default_component_of", "full_product_name": { "name": "alt-ruby30-rubygem-rexml-3.2.5-rr171.aarch64 as a component of Alpine Linux 3.22", "product_id": "Alpine-Linux-3.22:alt-ruby30-rubygem-rexml-3.2.5-rr171.aarch64" }, "product_reference": "alt-ruby30-rubygem-rexml-3.2.5-rr171.aarch64", "relates_to_product_reference": "Alpine-Linux-3.22" }, { "category": "default_component_of", "full_product_name": { "name": "alt-ruby30-rubygem-rexml-3.2.5-rr171.x86_64 as a component of Alpine Linux 3.22", "product_id": "Alpine-Linux-3.22:alt-ruby30-rubygem-rexml-3.2.5-rr171.x86_64" }, "product_reference": "alt-ruby30-rubygem-rexml-3.2.5-rr171.x86_64", "relates_to_product_reference": "Alpine-Linux-3.22" } ] }, "vulnerabilities": [ { "cve": "CVE-2022-28739", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "notes": [ { "category": "description", "text": "There is a buffer over-read in Ruby before 2.6.10, 2.7.x before 2.7.6, 3.x before 3.0.4, and 3.1.x before 3.1.2. It occurs in String-to-Float conversion, including Kernel#Float and String#to_f.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" }, { "category": "other", "text": "TuxCare has assessed that this vulnerability does not impact any currently supported TuxCare products. This evaluation may change as new information becomes available. For additional details regarding this vulnerability and affected products, refer to the provided references.", "title": "Statement" } ], "product_status": { "known_not_affected": [ "Alpine-Linux-3.22:alt-ruby30-3.0.7-rr171.aarch64", "Alpine-Linux-3.22:alt-ruby30-3.0.7-rr171.x86_64", "Alpine-Linux-3.22:alt-ruby30-default-gems-3.0.7-rr171.aarch64", "Alpine-Linux-3.22:alt-ruby30-default-gems-3.0.7-rr171.x86_64", "Alpine-Linux-3.22:alt-ruby30-dev-3.0.7-rr171.aarch64", "Alpine-Linux-3.22:alt-ruby30-dev-3.0.7-rr171.x86_64", "Alpine-Linux-3.22:alt-ruby30-doc-3.0.7-rr171.aarch64", "Alpine-Linux-3.22:alt-ruby30-doc-3.0.7-rr171.x86_64", "Alpine-Linux-3.22:alt-ruby30-libs-3.0.7-rr171.aarch64", "Alpine-Linux-3.22:alt-ruby30-libs-3.0.7-rr171.x86_64", "Alpine-Linux-3.22:alt-ruby30-rubygem-bigdecimal-3.0.0-rr171.aarch64", "Alpine-Linux-3.22:alt-ruby30-rubygem-bigdecimal-3.0.0-rr171.x86_64", "Alpine-Linux-3.22:alt-ruby30-rubygem-bundler-2.2.33-rr171.aarch64", "Alpine-Linux-3.22:alt-ruby30-rubygem-bundler-2.2.33-rr171.x86_64", "Alpine-Linux-3.22:alt-ruby30-rubygem-io-console-0.5.7-rr171.aarch64", "Alpine-Linux-3.22:alt-ruby30-rubygem-io-console-0.5.7-rr171.x86_64", "Alpine-Linux-3.22:alt-ruby30-rubygem-irb-1.3.5-rr171.aarch64", "Alpine-Linux-3.22:alt-ruby30-rubygem-irb-1.3.5-rr171.x86_64", "Alpine-Linux-3.22:alt-ruby30-rubygem-json-2.5.1-rr171.aarch64", "Alpine-Linux-3.22:alt-ruby30-rubygem-json-2.5.1-rr171.x86_64", "Alpine-Linux-3.22:alt-ruby30-rubygem-minitest-5.14.2-rr171.aarch64", "Alpine-Linux-3.22:alt-ruby30-rubygem-minitest-5.14.2-rr171.x86_64", "Alpine-Linux-3.22:alt-ruby30-rubygem-power-assert-1.2.1-rr171.aarch64", "Alpine-Linux-3.22:alt-ruby30-rubygem-power-assert-1.2.1-rr171.x86_64", "Alpine-Linux-3.22:alt-ruby30-rubygem-psych-3.3.2-rr171.aarch64", "Alpine-Linux-3.22:alt-ruby30-rubygem-psych-3.3.2-rr171.x86_64", "Alpine-Linux-3.22:alt-ruby30-rubygem-rake-13.0.3-rr171.aarch64", "Alpine-Linux-3.22:alt-ruby30-rubygem-rake-13.0.3-rr171.x86_64", "Alpine-Linux-3.22:alt-ruby30-rubygem-rbs-1.4.0-rr171.aarch64", "Alpine-Linux-3.22:alt-ruby30-rubygem-rbs-1.4.0-rr171.x86_64", "Alpine-Linux-3.22:alt-ruby30-rubygem-rdoc-6.3.4.1-rr171.aarch64", "Alpine-Linux-3.22:alt-ruby30-rubygem-rdoc-6.3.4.1-rr171.x86_64", "Alpine-Linux-3.22:alt-ruby30-rubygem-rexml-3.2.5-rr171.aarch64", "Alpine-Linux-3.22:alt-ruby30-rubygem-rexml-3.2.5-rr171.x86_64", "Alpine-Linux-3.22:alt-ruby30-rubygem-rss-0.2.9-rr171.aarch64", "Alpine-Linux-3.22:alt-ruby30-rubygem-rss-0.2.9-rr171.x86_64", "Alpine-Linux-3.22:alt-ruby30-rubygem-test-unit-3.3.7-rr171.aarch64", "Alpine-Linux-3.22:alt-ruby30-rubygem-test-unit-3.3.7-rr171.x86_64", "Alpine-Linux-3.22:alt-ruby30-rubygem-typeprof-0.15.2-rr171.aarch64", "Alpine-Linux-3.22:alt-ruby30-rubygem-typeprof-0.15.2-rr171.x86_64", "Alpine-Linux-3.22:alt-ruby30-rubygems-3.2.33-rr171.aarch64", "Alpine-Linux-3.22:alt-ruby30-rubygems-3.2.33-rr171.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-lang/cve/CVE-2022-28739" }, { "category": "external", "summary": "http://seclists.org/fulldisclosure/2022/Oct/28", "url": "http://seclists.org/fulldisclosure/2022/Oct/28" }, { "category": "external", "summary": "http://seclists.org/fulldisclosure/2022/Oct/29", "url": "http://seclists.org/fulldisclosure/2022/Oct/29" }, { "category": "external", "summary": "http://seclists.org/fulldisclosure/2022/Oct/30", "url": "http://seclists.org/fulldisclosure/2022/Oct/30" }, { "category": "external", "summary": "http://seclists.org/fulldisclosure/2022/Oct/41", "url": "http://seclists.org/fulldisclosure/2022/Oct/41" }, { "category": "external", "summary": "http://seclists.org/fulldisclosure/2022/Oct/42", "url": "http://seclists.org/fulldisclosure/2022/Oct/42" }, { "category": "external", "summary": "https://hackerone.com/reports/1248108", "url": "https://hackerone.com/reports/1248108" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2023/06/msg00012.html", "url": "https://lists.debian.org/debian-lts-announce/2023/06/msg00012.html" }, { "category": "external", "summary": "https://security-tracker.debian.org/tracker/CVE-2022-28739", "url": "https://security-tracker.debian.org/tracker/CVE-2022-28739" }, { "category": "external", "summary": "https://security.gentoo.org/glsa/202401-27", "url": "https://security.gentoo.org/glsa/202401-27" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20220624-0002/", "url": "https://security.netapp.com/advisory/ntap-20220624-0002/" }, { "category": "external", "summary": "https://support.apple.com/kb/HT213488", "url": "https://support.apple.com/kb/HT213488" }, { "category": "external", "summary": "https://support.apple.com/kb/HT213493", "url": "https://support.apple.com/kb/HT213493" }, { "category": "external", "summary": "https://support.apple.com/kb/HT213494", "url": "https://support.apple.com/kb/HT213494" }, { "category": "external", "summary": "https://www.ruby-lang.org/en/news/2022/04/12/buffer-overrun-in-string-to-float-cve-2022-28739/", "url": "https://www.ruby-lang.org/en/news/2022/04/12/buffer-overrun-in-string-to-float-cve-2022-28739/" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2024/09/msg00000.html", "url": "https://lists.debian.org/debian-lts-announce/2024/09/msg00000.html" } ], "release_date": "2022-05-09T18:15:00Z", "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N", "version": "2.0" }, "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1" }, "products": [ "Alpine-Linux-3.22:alt-ruby30-3.0.7-rr171.aarch64", "Alpine-Linux-3.22:alt-ruby30-3.0.7-rr171.x86_64", "Alpine-Linux-3.22:alt-ruby30-default-gems-3.0.7-rr171.aarch64", "Alpine-Linux-3.22:alt-ruby30-default-gems-3.0.7-rr171.x86_64", "Alpine-Linux-3.22:alt-ruby30-dev-3.0.7-rr171.aarch64", "Alpine-Linux-3.22:alt-ruby30-dev-3.0.7-rr171.x86_64", "Alpine-Linux-3.22:alt-ruby30-doc-3.0.7-rr171.aarch64", "Alpine-Linux-3.22:alt-ruby30-doc-3.0.7-rr171.x86_64", "Alpine-Linux-3.22:alt-ruby30-libs-3.0.7-rr171.aarch64", "Alpine-Linux-3.22:alt-ruby30-libs-3.0.7-rr171.x86_64", "Alpine-Linux-3.22:alt-ruby30-rubygem-bigdecimal-3.0.0-rr171.aarch64", "Alpine-Linux-3.22:alt-ruby30-rubygem-bigdecimal-3.0.0-rr171.x86_64", "Alpine-Linux-3.22:alt-ruby30-rubygem-bundler-2.2.33-rr171.aarch64", "Alpine-Linux-3.22:alt-ruby30-rubygem-bundler-2.2.33-rr171.x86_64", "Alpine-Linux-3.22:alt-ruby30-rubygem-io-console-0.5.7-rr171.aarch64", "Alpine-Linux-3.22:alt-ruby30-rubygem-io-console-0.5.7-rr171.x86_64", "Alpine-Linux-3.22:alt-ruby30-rubygem-irb-1.3.5-rr171.aarch64", "Alpine-Linux-3.22:alt-ruby30-rubygem-irb-1.3.5-rr171.x86_64", "Alpine-Linux-3.22:alt-ruby30-rubygem-json-2.5.1-rr171.aarch64", "Alpine-Linux-3.22:alt-ruby30-rubygem-json-2.5.1-rr171.x86_64", "Alpine-Linux-3.22:alt-ruby30-rubygem-minitest-5.14.2-rr171.aarch64", "Alpine-Linux-3.22:alt-ruby30-rubygem-minitest-5.14.2-rr171.x86_64", "Alpine-Linux-3.22:alt-ruby30-rubygem-power-assert-1.2.1-rr171.aarch64", "Alpine-Linux-3.22:alt-ruby30-rubygem-power-assert-1.2.1-rr171.x86_64", "Alpine-Linux-3.22:alt-ruby30-rubygem-psych-3.3.2-rr171.aarch64", "Alpine-Linux-3.22:alt-ruby30-rubygem-psych-3.3.2-rr171.x86_64", "Alpine-Linux-3.22:alt-ruby30-rubygem-rake-13.0.3-rr171.aarch64", "Alpine-Linux-3.22:alt-ruby30-rubygem-rake-13.0.3-rr171.x86_64", "Alpine-Linux-3.22:alt-ruby30-rubygem-rbs-1.4.0-rr171.aarch64", "Alpine-Linux-3.22:alt-ruby30-rubygem-rbs-1.4.0-rr171.x86_64", "Alpine-Linux-3.22:alt-ruby30-rubygem-rdoc-6.3.4.1-rr171.aarch64", "Alpine-Linux-3.22:alt-ruby30-rubygem-rdoc-6.3.4.1-rr171.x86_64", "Alpine-Linux-3.22:alt-ruby30-rubygem-rexml-3.2.5-rr171.aarch64", "Alpine-Linux-3.22:alt-ruby30-rubygem-rexml-3.2.5-rr171.x86_64", "Alpine-Linux-3.22:alt-ruby30-rubygem-rss-0.2.9-rr171.aarch64", "Alpine-Linux-3.22:alt-ruby30-rubygem-rss-0.2.9-rr171.x86_64", "Alpine-Linux-3.22:alt-ruby30-rubygem-test-unit-3.3.7-rr171.aarch64", "Alpine-Linux-3.22:alt-ruby30-rubygem-test-unit-3.3.7-rr171.x86_64", "Alpine-Linux-3.22:alt-ruby30-rubygem-typeprof-0.15.2-rr171.aarch64", "Alpine-Linux-3.22:alt-ruby30-rubygem-typeprof-0.15.2-rr171.x86_64", "Alpine-Linux-3.22:alt-ruby30-rubygems-3.2.33-rr171.aarch64", "Alpine-Linux-3.22:alt-ruby30-rubygems-3.2.33-rr171.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" }, { "category": "impact", "details": "Not affected: This issue impacts Ruby 3.0.3 and earlier; the upstream fix for the String-to-Float buffer over‑read (in dtoa.c affecting Kernel#Float/String#to_f) was released in Ruby 3.0.4 and is included in Ruby 3.0.7. Because the deployed version is 3.0.7, the vulnerable code path is already patched and not reachable.", "product_ids": [ "Alpine-Linux-3.22:alt-ruby30-3.0.7-rr171.aarch64", "Alpine-Linux-3.22:alt-ruby30-3.0.7-rr171.x86_64", "Alpine-Linux-3.22:alt-ruby30-default-gems-3.0.7-rr171.aarch64", "Alpine-Linux-3.22:alt-ruby30-default-gems-3.0.7-rr171.x86_64", "Alpine-Linux-3.22:alt-ruby30-dev-3.0.7-rr171.aarch64", "Alpine-Linux-3.22:alt-ruby30-dev-3.0.7-rr171.x86_64", "Alpine-Linux-3.22:alt-ruby30-doc-3.0.7-rr171.aarch64", "Alpine-Linux-3.22:alt-ruby30-doc-3.0.7-rr171.x86_64", "Alpine-Linux-3.22:alt-ruby30-libs-3.0.7-rr171.aarch64", "Alpine-Linux-3.22:alt-ruby30-libs-3.0.7-rr171.x86_64", "Alpine-Linux-3.22:alt-ruby30-rubygem-bigdecimal-3.0.0-rr171.aarch64", "Alpine-Linux-3.22:alt-ruby30-rubygem-bigdecimal-3.0.0-rr171.x86_64", "Alpine-Linux-3.22:alt-ruby30-rubygem-bundler-2.2.33-rr171.aarch64", "Alpine-Linux-3.22:alt-ruby30-rubygem-bundler-2.2.33-rr171.x86_64", "Alpine-Linux-3.22:alt-ruby30-rubygem-io-console-0.5.7-rr171.aarch64", "Alpine-Linux-3.22:alt-ruby30-rubygem-io-console-0.5.7-rr171.x86_64", "Alpine-Linux-3.22:alt-ruby30-rubygem-irb-1.3.5-rr171.aarch64", "Alpine-Linux-3.22:alt-ruby30-rubygem-irb-1.3.5-rr171.x86_64", "Alpine-Linux-3.22:alt-ruby30-rubygem-json-2.5.1-rr171.aarch64", "Alpine-Linux-3.22:alt-ruby30-rubygem-json-2.5.1-rr171.x86_64", "Alpine-Linux-3.22:alt-ruby30-rubygem-minitest-5.14.2-rr171.aarch64", "Alpine-Linux-3.22:alt-ruby30-rubygem-minitest-5.14.2-rr171.x86_64", "Alpine-Linux-3.22:alt-ruby30-rubygem-power-assert-1.2.1-rr171.aarch64", "Alpine-Linux-3.22:alt-ruby30-rubygem-power-assert-1.2.1-rr171.x86_64", "Alpine-Linux-3.22:alt-ruby30-rubygem-psych-3.3.2-rr171.aarch64", "Alpine-Linux-3.22:alt-ruby30-rubygem-psych-3.3.2-rr171.x86_64", "Alpine-Linux-3.22:alt-ruby30-rubygem-rake-13.0.3-rr171.aarch64", "Alpine-Linux-3.22:alt-ruby30-rubygem-rake-13.0.3-rr171.x86_64", "Alpine-Linux-3.22:alt-ruby30-rubygem-rbs-1.4.0-rr171.aarch64", "Alpine-Linux-3.22:alt-ruby30-rubygem-rbs-1.4.0-rr171.x86_64", "Alpine-Linux-3.22:alt-ruby30-rubygem-rdoc-6.3.4.1-rr171.aarch64", "Alpine-Linux-3.22:alt-ruby30-rubygem-rdoc-6.3.4.1-rr171.x86_64", "Alpine-Linux-3.22:alt-ruby30-rubygem-rexml-3.2.5-rr171.aarch64", "Alpine-Linux-3.22:alt-ruby30-rubygem-rexml-3.2.5-rr171.x86_64", "Alpine-Linux-3.22:alt-ruby30-rubygem-rss-0.2.9-rr171.aarch64", "Alpine-Linux-3.22:alt-ruby30-rubygem-rss-0.2.9-rr171.x86_64", "Alpine-Linux-3.22:alt-ruby30-rubygem-test-unit-3.3.7-rr171.aarch64", "Alpine-Linux-3.22:alt-ruby30-rubygem-test-unit-3.3.7-rr171.x86_64", "Alpine-Linux-3.22:alt-ruby30-rubygem-typeprof-0.15.2-rr171.aarch64", "Alpine-Linux-3.22:alt-ruby30-rubygem-typeprof-0.15.2-rr171.x86_64", "Alpine-Linux-3.22:alt-ruby30-rubygems-3.2.33-rr171.aarch64", "Alpine-Linux-3.22:alt-ruby30-rubygems-3.2.33-rr171.x86_64" ] } ] } ] }