Every CVE Search/ Get API key

CVE-2022-31163

TZInfo relative path traversal vulnerability allows loading of arbitrary files

7.5 HighFix available

TZInfo is a Ruby library that provides access to time zone data and allows times to be converted using time zone rules. Versions prior to 0.36.1, as well as those prior to 1.2.10 when used with the Ruby data source tzinfo-data, are vulnerable to relative path traversal. With the Ruby data source, time zones are defined in Ruby files. There is one file per time zone. Time zone files are loaded with require on demand. In the affected versions, TZInfo::Timezone.get fails to validate time zone identifiers correctly, allowing a new line character within the identifier. With Ruby version 1.9.3 and later, TZInfo::Timezone.get can be made to load unintended files with require, executing them within the Ruby process. Versions 0.3.61 and 1.2.10 include fixes to correctly validate time zone identifiers. Versions 2.0.0 and later are not vulnerable. Version 0.3.61 can still load arbitrary files from the Ruby load path if their name follows the rules for a valid time zone identifier and the file has a prefix of tzinfo/definition within a directory in the load path. Applications should ensure that untrusted files are not placed in a directory on the load path. As a workaround, the time zone identifier can be validated before passing to TZInfo::Timezone.get by ensuring it matches the regular expression \A[A-Za-z0-9+\-_]+(?:\/[A-Za-z0-9+\-_]+)*\z.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
High
Privileges needed
None
User interaction
Required

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

2.45%Up 1.5 points since Jul 22, 2022
90%50%10%1%

What each source reports

CVE List Score used 7.5

TZInfo relative path traversal vulnerability allows loading of arbitrary files

TZInfo is a Ruby library that provides access to time zone data and allows times to be converted using time zone rules. Versions prior to 0.36.1, as well as those prior to 1.2.10 when used with the Ruby data source tzinfo-data, are vulnerable to relative path traversal. With the Ruby data source, time zones are defined in Ruby files. There is one file per time zone. Time zone files are loaded with require on demand. In the affected versions, TZInfo::Timezone.get fails to validate time zone identifiers correctly, allowing a new line character within the identifier. With Ruby version 1.9.3 and later, TZInfo::Timezone.get can be made to load unintended files with require, executing them within the Ruby process. Versions 0.3.61 and 1.2.10 include fixes to correctly validate time zone identifiers. Versions 2.0.0 and later are not vulnerable. Version 0.3.61 can still load arbitrary files from the Ruby load path if their name follows the rules for a valid time zone identifier and the file has a prefix of tzinfo/definition within a directory in the load path. Applications should ensure that untrusted files are not placed in a directory on the load path. As a workaround, the time zone identifier can be validated before passing to TZInfo::Timezone.get by ensuring it matches the regular expression \A[A-Za-z0-9+\-_]+(?:\/[A-Za-z0-9+\-_]+)*\z.

Record
CVE-2022-31163
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness
CWE-22, CWE-23
Updated
2026-11-02
EUVDEUVD-2022-6242 7.5

TZInfo is a Ruby library that provides access to time zone data and allows times to be converted using time zone rules. Versions prior to 0.36.1, as well as those prior to 1.2.10 when used with the Ruby data source tzinfo-data, are vulnerable to relative path traversal. With the Ruby data source, time zones are defined in Ruby files. There is one file per time zone. Time zone files are loaded with require on demand. In the affected versions, TZInfo::Timezone.get fails to validate time zone identifiers correctly, allowing a new line character within the identifier. With Ruby version 1.9.3 and later, TZInfo::Timezone.get can be made to load unintended files with require, executing them within the Ruby process. Versions 0.3.61 and 1.2.10 include fixes to correctly validate time zone identifiers. Versions 2.0.0 and later are not vulnerable. Version 0.3.61 can still load arbitrary files from the Ruby load path if their name follows the rules for a valid time zone identifier and the file has a prefix of tzinfo/definition within a directory in the load path. Applications should ensure that untrusted files are not placed in a directory on the load path. As a workaround, the time zone identifier can be validated before passing to TZInfo::Timezone.get by ensuring it matches the regular expression \A[A-Za-z0-9+\-_]+(?:\/[A-Za-z0-9+\-_]+)*\z.

Record
EUVD-2022-6242
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-03
GitHub AdvisoriesGHSA-5cm2-9h8c-rvfx 7.5

TZInfo relative path traversal vulnerability allows loading of arbitrary files

Impact

Affected versions

  • 0.3.60 and earlier.
  • 1.0.0 to 1.2.9 when used with the Ruby data source (tzinfo-data).

Vulnerability

With the Ruby data source (the tzinfo-data gem for tzinfo version 1.0.0 and later and built-in to earlier versions), time zones are defined in Ruby files. There is one file per time zone. Time zone files are loaded with require on demand. In the affected versions, TZInfo::Timezone.get fails to validate time zone identifiers correctly, allowing a new line character within the identifier. With Ruby version 1.9.3 and later, TZInfo::Timezone.get can be made to load unintended files with require, executing them within the Ruby process.

For example, with version 1.2.9, you can run the following to load a file with path /tmp/payload.rb:

TZInfo::Timezone.get("foo\n/../../../../../../../../../../../../../../../../tmp/payload")

The exact number of parent directory traversals needed will vary depending on the location of the tzinfo-data gem.

TZInfo versions 1.2.6 to 1.2.9 can be made to load files from outside of the Ruby load path. Versions up to and including 1.2.5 can only be made to load files from directories within the load path.

This could be exploited in, for example, a Ruby on Rails application using tzinfo version 1.2.9, that allows file uploads and has a time zone selector that accepts arbitrary time zone identifiers. The CVSS score and severity have been set on this basis.

Versions 2.0.0 and later are not vulnerable.

Patches

Versions 0.3.61 and 1.2.10 include fixes to correctly validate time zone identifiers (commit 9eddbb5c0e682736f61d0dd803b6031a5db9eadf for 0.3.x and commit 9905ca93abf7bf3e387bd592406e403cd18334c7 for 1.2.x).

Note that version 0.3.61 can still load arbitrary files from the Ruby load path if their name follows the rules for a valid time zone identifier and the file has a prefix of tzinfo/definition within a directory in the load path. For example if /tmp/upload was in the load path, then TZInfo::Timezone.get('foo') could load a file with path /tmp/upload/tzinfo/definition/foo.rb. Applications should ensure that untrusted files are not placed in a directory on the load path.

Workarounds

As a workaround, the time zone identifier can be validated before passing to TZInfo::Timezone.get by ensuring it matches the regular expression \A[A-Za-z0-9+\-_]+(?:\/[A-Za-z0-9+\-_]+)*\z.

For more information

If you have any questions or comments about this advisory:

Record
GHSA-5cm2-9h8c-rvfx
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness
CWE-22, CWE-23
Updated
2026-11-02
NVD 7.5

TZInfo is a Ruby library that provides access to time zone data and allows times to be converted using time zone rules. Versions prior to 0.36.1, as well as those prior to 1.2.10 when used with the Ruby data source tzinfo-data, are vulnerable to relative path traversal. With the Ruby data source, time zones are defined in Ruby files. There is one file per time zone. Time zone files are loaded with require on demand. In the affected versions, TZInfo::Timezone.get fails to validate time zone identifiers correctly, allowing a new line character within the identifier. With Ruby version 1.9.3 and later, TZInfo::Timezone.get can be made to load unintended files with require, executing them within the Ruby process. Versions 0.3.61 and 1.2.10 include fixes to correctly validate time zone identifiers. Versions 2.0.0 and later are not vulnerable. Version 0.3.61 can still load arbitrary files from the Ruby load path if their name follows the rules for a valid time zone identifier and the file has a prefix of tzinfo/definition within a directory in the load path. Applications should ensure that untrusted files are not placed in a directory on the load path. As a workaround, the time zone identifier can be validated before passing to TZInfo::Timezone.get by ensuring it matches the regular expression \A[A-Za-z0-9+\-_]+(?:\/[A-Za-z0-9+\-_]+)*\z.

Record
CVE-2022-31163
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-22, CWE-23
Updated
2026-11-02
OSV 7.5

TZInfo relative path traversal vulnerability allows loading of arbitrary files

TZInfo is a Ruby library that provides access to time zone data and allows times to be converted using time zone rules. Versions prior to 0.36.1, as well as those prior to 1.2.10 when used with the Ruby data source tzinfo-data, are vulnerable to relative path traversal. With the Ruby data source, time zones are defined in Ruby files. There is one file per time zone. Time zone files are loaded with require on demand. In the affected versions, TZInfo::Timezone.get fails to validate time zone identifiers correctly, allowing a new line character within the identifier. With Ruby version 1.9.3 and later, TZInfo::Timezone.get can be made to load unintended files with require, executing them within the Ruby process. Versions 0.3.61 and 1.2.10 include fixes to correctly validate time zone identifiers. Versions 2.0.0 and later are not vulnerable. Version 0.3.61 can still load arbitrary files from the Ruby load path if their name follows the rules for a valid time zone identifier and the file has a prefix of tzinfo/definition within a directory in the load path. Applications should ensure that untrusted files are not placed in a directory on the load path. As a workaround, the time zone identifier can be validated before passing to TZInfo::Timezone.get by ensuring it matches the regular expression \A[A-Za-z0-9+\-_]+(?:\/[A-Za-z0-9+\-_]+)*\z.

Record
CVE-2022-31163
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness
CWE-22, CWE-23
Updated
2026-11-02
OSVDEBIAN-CVE-2022-31163 8.1

TZInfo is a Ruby library that provides access to time zone data and allows times to be converted using time zone rules. Versions prior to 0.36.1, as well as those prior to 1.2.10 when used with the Ruby data source tzinfo-data, are vulnerable to relative path traversal. With the Ruby data source, time zones are defined in Ruby files. There is one file per time zone. Time zone files are loaded with require on demand. In the affected versions, TZInfo::Timezone.get fails to validate time zone identifiers correctly, allowing a new line character within the identifier. With Ruby version 1.9.3 and later, TZInfo::Timezone.get can be made to load unintended files with require, executing them within the Ruby process. Versions 0.3.61 and 1.2.10 include fixes to correctly validate time zone identifiers. Versions 2.0.0 and later are not vulnerable. Version 0.3.61 can still load arbitrary files from the Ruby load path if their name follows the rules for a valid time zone identifier and the file has a prefix of tzinfo/definition within a directory in the load path. Applications should ensure that untrusted files are not placed in a directory on the load path. As a workaround, the time zone identifier can be validated before passing to TZInfo::Timezone.get by ensuring it matches the regular expression \A[A-Za-z0-9+\-_]+(?:\/[A-Za-z0-9+\-_]+)*\z.

Record
DEBIAN-CVE-2022-31163
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-03
Show 13 moreShow less
OSVGHSA-5cm2-9h8c-rvfx 7.5

TZInfo relative path traversal vulnerability allows loading of arbitrary files

Impact

Affected versions

  • 0.3.60 and earlier.
  • 1.0.0 to 1.2.9 when used with the Ruby data source (tzinfo-data).

Vulnerability

With the Ruby data source (the tzinfo-data gem for tzinfo version 1.0.0 and later and built-in to earlier versions), time zones are defined in Ruby files. There is one file per time zone. Time zone files are loaded with require on demand. In the affected versions, TZInfo::Timezone.get fails to validate time zone identifiers correctly, allowing a new line character within the identifier. With Ruby version 1.9.3 and later, TZInfo::Timezone.get can be made to load unintended files with require, executing them within the Ruby process.

For example, with version 1.2.9, you can run the following to load a file with path /tmp/payload.rb:

TZInfo::Timezone.get("foo\n/../../../../../../../../../../../../../../../../tmp/payload")

The exact number of parent directory traversals needed will vary depending on the location of the tzinfo-data gem.

TZInfo versions 1.2.6 to 1.2.9 can be made to load files from outside of the Ruby load path. Versions up to and including 1.2.5 can only be made to load files from directories within the load path.

This could be exploited in, for example, a Ruby on Rails application using tzinfo version 1.2.9, that allows file uploads and has a time zone selector that accepts arbitrary time zone identifiers. The CVSS score and severity have been set on this basis.

Versions 2.0.0 and later are not vulnerable.

Patches

Versions 0.3.61 and 1.2.10 include fixes to correctly validate time zone identifiers (commit 9eddbb5c0e682736f61d0dd803b6031a5db9eadf for 0.3.x and commit 9905ca93abf7bf3e387bd592406e403cd18334c7 for 1.2.x).

Note that version 0.3.61 can still load arbitrary files from the Ruby load path if their name follows the rules for a valid time zone identifier and the file has a prefix of tzinfo/definition within a directory in the load path. For example if /tmp/upload was in the load path, then TZInfo::Timezone.get('foo') could load a file with path /tmp/upload/tzinfo/definition/foo.rb. Applications should ensure that untrusted files are not placed in a directory on the load path.

Workarounds

As a workaround, the time zone identifier can be validated before passing to TZInfo::Timezone.get by ensuring it matches the regular expression \A[A-Za-z0-9+\-_]+(?:\/[A-Za-z0-9+\-_]+)*\z.

For more information

If you have any questions or comments about this advisory:

Record
GHSA-5cm2-9h8c-rvfx
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness
CWE-22, CWE-23
Updated
2026-11-02
OSVOESA-2024-1398 8.1

rubygem-tzinfo security update

TZInfo provides daylight savings aware transformations between times in different time zones.

Security Fix(es):

TZInfo is a Ruby library that provides access to time zone data and allows times to be converted using time zone rules. Versions prior to 0.36.1, as well as those prior to 1.2.10 when used with the Ruby data source tzinfo-data, are vulnerable to relative path traversal. With the Ruby data source, time zones are defined in Ruby files. There is one file per time zone. Time zone files are loaded with require on demand. In the affected versions, TZInfo::Timezone.get fails to validate time zone identifiers correctly, allowing a new line character within the identifier. With Ruby version 1.9.3 and later, TZInfo::Timezone.get can be made to load unintended files with require, executing them within the Ruby process. Versions 0.3.61 and 1.2.10 include fixes to correctly validate time zone identifiers. Versions 2.0.0 and later are not vulnerable. Version 0.3.61 can still load arbitrary files from the Ruby load path if their name follows the rules for a valid time zone identifier and the file has a prefix of tzinfo/definition within a directory in the load path. Applications should ensure that untrusted files are not placed in a directory on the load path. As a workaround, the time zone identifier can be validated before passing to TZInfo::Timezone.get by ensuring it matches the regular expression \A[A-Za-z0-9+\-_]+(?:\/[A-Za-z0-9+\-_]+)*\z.(CVE-2022-31163)

Record
OESA-2024-1398
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2024-1399 8.1

rubygem-tzinfo security update

TZInfo provides daylight savings aware transformations between times in different time zones.

Security Fix(es):

TZInfo is a Ruby library that provides access to time zone data and allows times to be converted using time zone rules. Versions prior to 0.36.1, as well as those prior to 1.2.10 when used with the Ruby data source tzinfo-data, are vulnerable to relative path traversal. With the Ruby data source, time zones are defined in Ruby files. There is one file per time zone. Time zone files are loaded with require on demand. In the affected versions, TZInfo::Timezone.get fails to validate time zone identifiers correctly, allowing a new line character within the identifier. With Ruby version 1.9.3 and later, TZInfo::Timezone.get can be made to load unintended files with require, executing them within the Ruby process. Versions 0.3.61 and 1.2.10 include fixes to correctly validate time zone identifiers. Versions 2.0.0 and later are not vulnerable. Version 0.3.61 can still load arbitrary files from the Ruby load path if their name follows the rules for a valid time zone identifier and the file has a prefix of tzinfo/definition within a directory in the load path. Applications should ensure that untrusted files are not placed in a directory on the load path. As a workaround, the time zone identifier can be validated before passing to TZInfo::Timezone.get by ensuring it matches the regular expression \A[A-Za-z0-9+\-_]+(?:\/[A-Za-z0-9+\-_]+)*\z.(CVE-2022-31163)

Record
OESA-2024-1399
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2022:7242 7.5

Red Hat Security Advisory: Satellite 6.11.4 Async Security Update

Record
RHSA-2022:7242
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:1486 10.0

Red Hat Security Advisory: Red Hat Gluster Storage web-admin-build security update

Record
RHSA-2023:1486
CVSS 3.1
10.0 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:2097 9.8

Red Hat Security Advisory: Satellite 6.13 Release

Record
RHSA-2023:2097
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2022-31163 7.5

TZInfo is a Ruby library that provides access to time zone data and allows times to be converted using time zone rules. Versions prior to 0.36.1, as well as those prior to 1.2.10 when used with the Ruby data source tzinfo-data, are vulnerable to relative path traversal. With the Ruby data source, time zones are defined in Ruby files. There is one file per time zone. Time zone files are loaded with require on demand. In the affected versions, TZInfo::Timezone.get fails to validate time zone identifiers correctly, allowing a new line character within the identifier. With Ruby version 1.9.3 and later, TZInfo::Timezone.get can be made to load unintended files with require, executing them within the Ruby process. Versions 0.3.61 and 1.2.10 include fixes to correctly validate time zone identifiers. Versions 2.0.0 and later are not vulnerable. Version 0.3.61 can still load arbitrary files from the Ruby load path if their name follows the rules for a valid time zone identifier and the file has a prefix of tzinfo/definition within a directory in the load path. Applications should ensure that untrusted files are not placed in a directory on the load path. As a workaround, the time zone identifier can be validated before passing to TZInfo::Timezone.get by ensuring it matches the regular expression \A[A-Za-z0-9+\-_]+(?:\/[A-Za-z0-9+\-_]+)*\z.

Record
UBUNTU-CVE-2022-31163
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVopenSUSE-SU-2024:12249-1 No score

ruby3.1-rubygem-tzinfo-1.2-1.2.10-1.1 on GA media

These are all security issues fixed in the ruby3.1-rubygem-tzinfo-1.2-1.2.10-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:12249-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:13171-1 No score

ruby3.2-rubygem-tzinfo-1.2-1.2.10-1.4 on GA media

These are all security issues fixed in the ruby3.2-rubygem-tzinfo-1.2-1.2.10-1.4 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:13171-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:14178-1 No score

ruby3.3-rubygem-tzinfo-1.2-1.2.11-1.5 on GA media

These are all security issues fixed in the ruby3.3-rubygem-tzinfo-1.2-1.2.11-1.5 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:14178-1
Updated
2026-11-02
OSVRLSA-2023:2097 No score

Important: Satellite 6.13 Release

Rocky Enterprise Software Foundation Satellite is a systems management tool for Linux-based infrastructure. It allows for provisioning, remote management, and monitoring of multiple Linux deployments with a single centralized tool.

Security Fix(es):

  • CVE-2022-1471 CVE-2022-25857 CVE-2022-38749 CVE-2022-38750 CVE-2022-38751 CVE-2022-38752 candlepin and puppetserver: various flaws
  • CVE-2022-22577 tfm-rubygem-actionpack: rubygem-actionpack: Possible cross-site scripting vulnerability in Action Pack
  • CVE-2022-23514 rubygem-loofah: inefficient regular expression leading to denial of service
  • CVE-2022-23515 rubygem-loofah: rubygem-loofah: Improper neutralization of data URIs leading to Cross Site Scripting
  • CVE-2022-23516 rubygem-loofah: Uncontrolled Recursion leading to denial of service
  • CVE-2022-23517 tfm-rubygem-rails-html-sanitizer: rubygem-rails-html-sanitizer: Inefficient Regular Expression leading to denial of service
  • CVE-2022-23518 tfm-rubygem-rails-html-sanitizer: rubygem-rails-html-sanitizer: Improper neutralization of data URIs leading to Cross site scripting
  • CVE-2022-23519 tfm-rubygem-rails-html-sanitizer: rubygem-rails-html-sanitizer: Cross site scripting vulnerability with certain configurations
  • CVE-2022-23520 tfm-rubygem-rails-html-sanitizer: rubygem-rails-html-sanitizer: Cross site scripting vulnerability with certain configurations
  • CVE-2022-27777 tfm-rubygem-actionview: Possible cross-site scripting vulnerability in Action View tag helpers
  • CVE-2022-31163 rubygem-tzinfo: rubygem-tzinfo: arbitrary code execution
  • CVE-2022-32224 tfm-rubygem-activerecord: activerecord: Possible RCE escalation bug with Serialized Columns in Active Record
  • CVE-2022-33980 candlepin: apache-commons-configuration2: Apache Commons Configuration insecure interpolation defaults
  • CVE-2022-41323 satellite-capsule:el8/python-django: Potential denial-of-service vulnerability in internationalized URLs
  • CVE-2022-41946 candlepin: postgresql-jdbc: Information leak of prepared statement data due to insecure temporary file permissions
  • CVE-2022-42003 CVE-2022-42004 candlepin: various flaws
  • CVE-2022-42889 candlepin: apache-commons-text: variable interpolation RCE
  • CVE-2022-23514 rubygem-loofah: inefficient regular expression leading to denial of service
  • CVE-2023-23969 python-django: Potential denial-of-service via Accept-Language headers
  • CVE-2023-24580 python-django: Potential denial-of-service vulnerability in file uploads

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

The items above are not a complete list of changes. This update also fixes several bugs and adds various enhancements. Documentation for these changes is available from the Release Notes document.

Record
RLSA-2023:2097
Updated
2026-11-02
OSVSUSE-SU-2022:2592-1 No score

Security update for rubygem-tzinfo

This update for rubygem-tzinfo fixes the following issues:

  • CVE-2022-31163: Fixed relative path traversal vulnerability that allows TZInfo::Timezone.get to load arbitrary files (bsc#1201835).
Record
SUSE-SU-2022:2592-1
Updated
2026-11-02
OSVSUSE-SU-2022:2765-1 No score

Security update for rubygem-tzinfo

This update for rubygem-tzinfo fixes the following issues:

  • CVE-2022-31163: Fixed relative path traversal vulnerability that allows TZInfo::Timezone.get to load arbitrary files (bsc#1201835).
Record
SUSE-SU-2022:2765-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
tzinfo
RubyGems
 before 0.3.61
0.3.61
tzinfo
RubyGems
 1.0.0 up to 1.2.10
1.2.10
ruby-tzinfo
Debian:12
 before 2.0.4-2
2.0.4-2
ruby-tzinfo
Debian:13
 before 2.0.4-2
2.0.4-2
ruby-tzinfo
Debian:14
 before 2.0.4-2
2.0.4-2
ruby-tzinfo
Debian:10
 before 1.2.5-1+deb10u1, plus listed versions
1.2.5-1
1.2.5-1+deb10u1
ruby-tzinfo
Debian:11
 before 1.2.6-1+deb11u1, plus listed versions
1.2.6-1
1.2.6-1+deb11u1
tzinfo
RubyGems
 before 0.3.61, plus listed versions
0.0.10.0.20.0.30.0.40.1.0
Show 45 moreShow less
0.1.10.1.20.2.00.2.10.2.20.3.00.3.10.3.100.3.110.3.120.3.130.3.140.3.150.3.160.3.170.3.180.3.190.3.20.3.200.3.210.3.220.3.230.3.240.3.250.3.260.3.270.3.280.3.290.3.30.3.300.3.310.3.320.3.330.3.340.3.350.3.360.3.370.3.380.3.390.3.40.3.400.3.410.3.420.3.430.3.44
0.3.61
tzinfo
RubyGems
 1.0.0 up to 1.2.10, plus listed versions
1.0.11.1.01.2.01.2.11.2.2
Show 7 moreShow less
1.2.31.2.41.2.51.2.61.2.71.2.81.2.9
1.2.10
rubygem-tzinfo
openEuler:20.03-LTS-SP1
 before 1.2.5-3.oe1
1.2.5-3.oe1
Show 290 moreShow less
Affected packages
PackageAffectedFixed
rubygem-tzinfo
openEuler:20.03-LTS-SP4
 before 1.2.5-3.oe2003sp4
1.2.5-3.oe2003sp4
tfm-rubygem-rack
Red Hat:satellite_capsule:6.11::el7
From an advisory covering 2 CVEs
 before 0:2.2.3.1-1.el7sat
0:2.2.3.1-1.el7sat
tfm-rubygem-rack
Red Hat:satellite:6.11::el7
From an advisory covering 2 CVEs
 before 0:2.2.3.1-1.el7sat
0:2.2.3.1-1.el7sat
rubygem-rack
Red Hat:satellite_capsule:6.11::el8
From an advisory covering 2 CVEs
 before 0:2.2.3.1-1.el8sat
0:2.2.3.1-1.el8sat
rubygem-rack
Red Hat:satellite:6.11::el8
From an advisory covering 2 CVEs
 before 0:2.2.3.1-1.el8sat
0:2.2.3.1-1.el8sat
tfm-rubygem-tzinfo
Red Hat:satellite:6.11::el7
From an advisory covering 2 CVEs
 before 0:1.2.10-1.el7sat
0:1.2.10-1.el7sat
rubygem-tzinfo
Red Hat:satellite:6.11::el8
From an advisory covering 2 CVEs
 before 0:1.2.10-1.el8sat
0:1.2.10-1.el8sat
rubygem-puma
Red Hat:storage:3.5:wa:el7
From an advisory covering 5 CVEs
 before 0:4.3.12-1.el7rhgs
0:4.3.12-1.el7rhgs
rubygem-puma-debuginfo
Red Hat:storage:3.5:wa:el7
From an advisory covering 5 CVEs
 before 0:4.3.12-1.el7rhgs
0:4.3.12-1.el7rhgs
rubygem-puma-doc
Red Hat:storage:3.5:wa:el7
From an advisory covering 5 CVEs
 before 0:4.3.12-1.el7rhgs
0:4.3.12-1.el7rhgs
rubygem-rack
Red Hat:storage:3.5:wa:el7
From an advisory covering 5 CVEs
 before 0:2.2.4-1.el7rhgs
0:2.2.4-1.el7rhgs
rubygem-rack-doc
Red Hat:storage:3.5:wa:el7
From an advisory covering 5 CVEs
 before 0:2.2.4-1.el7rhgs
0:2.2.4-1.el7rhgs
grafana
Red Hat:storage:3.5:wa:el7
From an advisory covering 5 CVEs
 before 0:5.2.4-6.el7rhgs
0:5.2.4-6.el7rhgs
rubygem-tzinfo
Red Hat:storage:3.5:wa:el7
From an advisory covering 5 CVEs
 before 0:1.2.10-1.el7rhgs
0:1.2.10-1.el7rhgs
rubygem-tzinfo-doc
Red Hat:storage:3.5:wa:el7
From an advisory covering 5 CVEs
 before 0:1.2.10-1.el7rhgs
0:1.2.10-1.el7rhgs
ansible-collection-redhat-satellite
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:3.9.0-2.el8sat
0:3.9.0-2.el8sat
ansible-collection-redhat-satellite_operations
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.3.0-2.el8sat
0:1.3.0-2.el8sat
ansible-lint
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:5.0.8-4.el8pc
0:5.0.8-4.el8pc
ansible-runner
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:2.2.1-3.el8sat
0:2.2.1-3.el8sat
ansiblerole-foreman_scap_client
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:0.2.0-2.el8sat
0:0.2.0-2.el8sat
ansiblerole-insights-client
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.7.1-2.el8sat
0:1.7.1-2.el8sat
cjson
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.7.14-5.el8sat
0:1.7.14-5.el8sat
cjson-debuginfo
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.7.14-5.el8sat
0:1.7.14-5.el8sat
cjson-debugsource
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.7.14-5.el8sat
0:1.7.14-5.el8sat
createrepo_c
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:0.20.1-1.el8pc
0:0.20.1-1.el8pc
createrepo_c-debuginfo
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:0.20.1-1.el8pc
0:0.20.1-1.el8pc
createrepo_c-debugsource
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:0.20.1-1.el8pc
0:0.20.1-1.el8pc
createrepo_c-libs
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:0.20.1-1.el8pc
0:0.20.1-1.el8pc
createrepo_c-libs-debuginfo
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:0.20.1-1.el8pc
0:0.20.1-1.el8pc
dynflow-utils
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.6.3-1.el8sat
0:1.6.3-1.el8sat
foreman
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:3.5.1.14-1.el8sat
0:3.5.1.14-1.el8sat
foreman-bootloaders-redhat
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:202102220000-1.el8sat
0:202102220000-1.el8sat
foreman-bootloaders-redhat-tftpboot
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:202102220000-1.el8sat
0:202102220000-1.el8sat
foreman-debug
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:3.5.1.14-1.el8sat
0:3.5.1.14-1.el8sat
foreman-discovery-image
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 1:4.1.0-10.el8sat
1:4.1.0-10.el8sat
foreman-discovery-image-service
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.0.0-4.1.el8sat
0:1.0.0-4.1.el8sat
foreman-discovery-image-service-tui
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.0.0-4.1.el8sat
0:1.0.0-4.1.el8sat
foreman-installer
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 1:3.5.2.1-1.el8sat
1:3.5.2.1-1.el8sat
foreman-installer-katello
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 1:3.5.2.1-1.el8sat
1:3.5.2.1-1.el8sat
foreman-proxy
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:3.5.1-1.el8sat
0:3.5.1-1.el8sat
foreman-proxy-content
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:4.7.0-1.el8sat
0:4.7.0-1.el8sat
foreman-proxy-journald
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:3.5.1-1.el8sat
0:3.5.1-1.el8sat
katello
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:4.7.0-1.el8sat
0:4.7.0-1.el8sat
katello-certs-tools
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:2.9.0-1.el8sat
0:2.9.0-1.el8sat
katello-client-bootstrap
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.7.9-1.el8sat
0:1.7.9-1.el8sat
katello-common
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:4.7.0-1.el8sat
0:4.7.0-1.el8sat
katello-debug
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:4.7.0-1.el8sat
0:4.7.0-1.el8sat
libcomps
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:0.1.18-4.el8pc
0:0.1.18-4.el8pc
libcomps-debuginfo
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:0.1.18-4.el8pc
0:0.1.18-4.el8pc
libcomps-debugsource
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:0.1.18-4.el8pc
0:0.1.18-4.el8pc
libdb-cxx
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:5.3.28-42.el8_4
0:5.3.28-42.el8_4
libdb-cxx-debuginfo
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:5.3.28-42.el8_4
0:5.3.28-42.el8_4
libdb-debuginfo
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:5.3.28-42.el8_4
0:5.3.28-42.el8_4
libdb-debugsource
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:5.3.28-42.el8_4
0:5.3.28-42.el8_4
libdb-java-debuginfo
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:5.3.28-42.el8_4
0:5.3.28-42.el8_4
libdb-sql-debuginfo
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:5.3.28-42.el8_4
0:5.3.28-42.el8_4
libdb-sql-devel-debuginfo
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:5.3.28-42.el8_4
0:5.3.28-42.el8_4
libdb-tcl-debuginfo
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:5.3.28-42.el8_4
0:5.3.28-42.el8_4
libdb-utils-debuginfo
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:5.3.28-42.el8_4
0:5.3.28-42.el8_4
libsodium
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.0.17-3.el8sat
0:1.0.17-3.el8sat
libsodium-debuginfo
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.0.17-3.el8sat
0:1.0.17-3.el8sat
libsodium-debugsource
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.0.17-3.el8sat
0:1.0.17-3.el8sat
libsolv
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:0.7.22-4.el8pc
0:0.7.22-4.el8pc
libsolv-debuginfo
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:0.7.22-4.el8pc
0:0.7.22-4.el8pc
libsolv-debugsource
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:0.7.22-4.el8pc
0:0.7.22-4.el8pc
libsolv-demo-debuginfo
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:0.7.22-4.el8pc
0:0.7.22-4.el8pc
libsolv-tools-debuginfo
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:0.7.22-4.el8pc
0:0.7.22-4.el8pc
libwebsockets
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:2.4.2-2.el8
0:2.4.2-2.el8
libwebsockets-debuginfo
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:2.4.2-2.el8
0:2.4.2-2.el8
libwebsockets-debugsource
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:2.4.2-2.el8
0:2.4.2-2.el8
libwebsockets-tests-debuginfo
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:2.4.2-2.el8
0:2.4.2-2.el8
mosquitto
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:2.0.14-1.el8sat
0:2.0.14-1.el8sat
mosquitto-debuginfo
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:2.0.14-1.el8sat
0:2.0.14-1.el8sat
mosquitto-debugsource
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:2.0.14-1.el8sat
0:2.0.14-1.el8sat
pulpcore-selinux
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.3.2-1.el8pc
0:1.3.2-1.el8pc
puppet-agent
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:7.12.1-1.el8sat
0:7.12.1-1.el8sat
puppet-agent-oauth
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:0.5.10-1.el8sat
0:0.5.10-1.el8sat
puppet-foreman_scap_client
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:0.4.0-1.el8sat
0:0.4.0-1.el8sat
puppetlabs-stdlib
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:5.2.0-1.el8sat
0:5.2.0-1.el8sat
puppetserver
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:7.9.3-1.el8sat
0:7.9.3-1.el8sat
python-aiodns
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:3.0.0-3.el8pc
0:3.0.0-3.el8pc
python-aiofiles
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:22.1.0-1.el8pc
0:22.1.0-1.el8pc
python-aiohttp
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:3.8.1-3.el8pc
0:3.8.1-3.el8pc
python-aiohttp-debugsource
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:3.8.1-3.el8pc
0:3.8.1-3.el8pc
python-aiohttp-xmlrpc
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.5.0-2.el8pc
0:1.5.0-2.el8pc
python-aioredis
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:2.0.1-2.el8pc
0:2.0.1-2.el8pc
python-aiosignal
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.2.0-2.el8pc
0:1.2.0-2.el8pc
python-ansible-builder
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.0.1-4.el8pc
0:1.0.1-4.el8pc
python-asgiref
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:3.5.2-1.el8pc
0:3.5.2-1.el8pc
python-async-lru
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.0.3-1.el8pc
0:1.0.3-1.el8pc
python-async-timeout
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:4.0.2-2.el8pc
0:4.0.2-2.el8pc
python-asyncio-throttle
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.0.2-3.el8pc
0:1.0.2-3.el8pc
python-attrs
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:21.4.0-2.el8pc
0:21.4.0-2.el8pc
python-backoff
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:2.1.2-1.el8pc
0:2.1.2-1.el8pc
python-bindep
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:2.11.0-2.el8pc
0:2.11.0-2.el8pc
python-bleach
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:3.3.1-2.el8pc
0:3.3.1-2.el8pc
python-bleach-allowlist
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.0.3-3.el8pc
0:1.0.3-3.el8pc
python-bracex
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:2.2.1-2.el8pc
0:2.2.1-2.el8pc
python-brotli
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.0.9-2.el8pc
0:1.0.9-2.el8pc
python-brotli-debugsource
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.0.9-2.el8pc
0:1.0.9-2.el8pc
python-cchardet
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:2.1.7-4.el8pc
0:2.1.7-4.el8pc
python-cchardet-debugsource
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:2.1.7-4.el8pc
0:2.1.7-4.el8pc
python-certifi
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:2020.6.20-3.el8pc
0:2020.6.20-3.el8pc
python-cffi
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.15.1-1.el8pc
0:1.15.1-1.el8pc
python-cffi-debugsource
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.15.1-1.el8pc
0:1.15.1-1.el8pc
python-chardet
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:5.0.0-1.el8pc
0:5.0.0-1.el8pc
python-charset-normalizer
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:2.1.1-1.el8pc
0:2.1.1-1.el8pc
python-click
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:8.1.3-1.el8pc
0:8.1.3-1.el8pc
python-click-shell
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:2.1-3.el8pc
0:2.1-3.el8pc
python-colorama
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:0.4.4-3.el8pc
0:0.4.4-3.el8pc
python-commonmark
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:0.9.1-5.el8pc
0:0.9.1-5.el8pc
python-contextlib2
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:21.6.0-3.el8pc
0:21.6.0-3.el8pc
python-cryptography
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:3.4.8-1.el8pc
0:3.4.8-1.el8pc
python-cryptography-debugsource
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:3.4.8-1.el8pc
0:3.4.8-1.el8pc
python-daemon
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:2.3.1-1.1.el8sat
0:2.3.1-1.1.el8sat
python-dataclasses
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:0.8-3.el8pc
0:0.8-3.el8pc
python-dateutil
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:2.8.2-2.el8pc
0:2.8.2-2.el8pc
python-debian
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:0.1.43-2.el8pc
0:0.1.43-2.el8pc
python-defusedxml
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:0.7.1-3.el8pc
0:0.7.1-3.el8pc
python-deprecated
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.2.13-1.el8pc
0:1.2.13-1.el8pc
python-diff-match-patch
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:20200713-3.el8pc
0:20200713-3.el8pc
python-distro
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.7.0-1.el8pc
0:1.7.0-1.el8pc
python-django
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:3.2.18-1.el8pc
0:3.2.18-1.el8pc
python-django-currentuser
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:0.5.3-5.el8pc
0:0.5.3-5.el8pc
python-django-filter
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:22.1-2.el8pc
0:22.1-2.el8pc
python-django-guid
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:3.3.0-1.el8pc
0:3.3.0-1.el8pc
python-django-import-export
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:2.8.0-1.el8pc
0:2.8.0-1.el8pc
python-django-lifecycle
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.0.0-1.el8pc
0:1.0.0-1.el8pc
python-django-readonly-field
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.1.1-3.el8pc
0:1.1.1-3.el8pc
python-djangorestframework
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:3.13.1-2.el8pc
0:3.13.1-2.el8pc
python-djangorestframework-queryfields
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.0.0-5.el8pc
0:1.0.0-5.el8pc
python-docutils
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:0.19-1.1.el8sat
0:0.19-1.1.el8sat
python-drf-access-policy
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.1.2-1.el8pc
0:1.1.2-1.el8pc
python-drf-nested-routers
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:0.93.4-3.el8pc
0:0.93.4-3.el8pc
python-drf-spectacular
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:0.23.1-1.el8pc
0:0.23.1-1.el8pc
python-dynaconf
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:3.1.9-1.el8pc
0:3.1.9-1.el8pc
python-ecdsa
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:0.14.1-2.el8pc
0:0.14.1-2.el8pc
python-enrich
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.2.6-5.el8pc
0:1.2.6-5.el8pc
python-et-xmlfile
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.1.0-2.el8pc
0:1.1.0-2.el8pc
python-flake8
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:3.9.2-5.el8pc
0:3.9.2-5.el8pc
python-frozenlist
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.3.0-2.el8pc
0:1.3.0-2.el8pc
python-frozenlist-debugsource
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.3.0-2.el8pc
0:1.3.0-2.el8pc
python-future
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:0.18.2-5.el8pc
0:0.18.2-5.el8pc
python-galaxy-importer
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:0.4.5-1.el8pc
0:0.4.5-1.el8pc
python-gitdb
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:4.0.9-2.el8pc
0:4.0.9-2.el8pc
python-gitpython
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:3.1.26-3.el8pc
0:3.1.26-3.el8pc
python-gnupg
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:0.5.0-1.el8pc
0:0.5.0-1.el8pc
python-gunicorn
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:20.1.0-5.el8pc
0:20.1.0-5.el8pc
python-idna
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:3.3-2.el8pc
0:3.3-2.el8pc
python-idna-ssl
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.1.0-5.el8pc
0:1.1.0-5.el8pc
python-importlib-metadata
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:4.10.1-2.el8pc
0:4.10.1-2.el8pc
python-inflection
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:0.5.1-3.el8pc
0:0.5.1-3.el8pc
python-iniparse
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:0.4-35.el8pc
0:0.4-35.el8pc
python-jinja2
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:3.1.2-1.el8pc
0:3.1.2-1.el8pc
python-jsonschema
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:4.9.1-1.el8pc
0:4.9.1-1.el8pc
python-lockfile
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:0.12.2-1.el8sat
0:0.12.2-1.el8sat
python-lxml
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:4.7.1-2.el8pc
0:4.7.1-2.el8pc
python-lxml-debugsource
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:4.7.1-2.el8pc
0:4.7.1-2.el8pc
python-markdown
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:3.3.6-3.el8pc
0:3.3.6-3.el8pc
python-markuppy
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.14-3.el8pc
0:1.14-3.el8pc
python-markupsafe
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:2.0.1-3.el8pc
0:2.0.1-3.el8pc
python-markupsafe-debugsource
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:2.0.1-3.el8pc
0:2.0.1-3.el8pc
python-mccabe
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:0.6.1-3.el8pc
0:0.6.1-3.el8pc
python-multidict
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:6.0.2-2.el8pc
0:6.0.2-2.el8pc
python-multidict-debugsource
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:6.0.2-2.el8pc
0:6.0.2-2.el8pc
python-naya
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.1.1-3.el8pc
0:1.1.1-3.el8pc
python-odfpy
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.4.1-6.el8pc
0:1.4.1-6.el8pc
python-openpyxl
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:3.0.9-2.el8pc
0:3.0.9-2.el8pc
python-packaging
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:21.3-1.1.el8sat
0:21.3-1.1.el8sat
python-parsley
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.3-2.el8pc
0:1.3-2.el8pc
python-pbr
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:5.8.0-4.el8pc
0:5.8.0-4.el8pc
python-pexpect
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:4.8.0-2.el8sat
0:4.8.0-2.el8sat
python-productmd
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.33-3.el8pc
0:1.33-3.el8pc
python-protobuf
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:4.21.6-1.el8pc
0:4.21.6-1.el8pc
python-psycopg2
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:2.9.3-2.el8pc
0:2.9.3-2.el8pc
python-psycopg2-debugsource
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:2.9.3-2.el8pc
0:2.9.3-2.el8pc
python-ptyprocess
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:0.7.0-1.el8sat
0:0.7.0-1.el8sat
python-pulp-ansible
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 1:0.15.0-1.el8pc
1:0.15.0-1.el8pc
python-pulp-certguard
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.5.5-1.el8pc
0:1.5.5-1.el8pc
python-pulp-cli
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:0.14.0-4.el8pc
0:0.14.0-4.el8pc
python-pulp-container
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:2.14.3-1.el8pc
0:2.14.3-1.el8pc
python-pulp-deb
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:2.20.0-1.el8pc
0:2.20.0-1.el8pc
python-pulp-file
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.11.1-1.el8pc
0:1.11.1-1.el8pc
python-pulp-rpm
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:3.18.11-1.el8pc
0:3.18.11-1.el8pc
python-pulpcore
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:3.21.6-1.el8pc
0:3.21.6-1.el8pc
python-pyOpenSSL
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:19.1.0-3.el8pc
0:19.1.0-3.el8pc
python-pycairo
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.20.1-3.el8pc
0:1.20.1-3.el8pc
python-pycairo-debugsource
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.20.1-3.el8pc
0:1.20.1-3.el8pc
python-pycares
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:4.1.2-2.el8pc
0:4.1.2-2.el8pc
python-pycares-debugsource
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:4.1.2-2.el8pc
0:4.1.2-2.el8pc
python-pycodestyle
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:2.7.0-5.el8pc
0:2.7.0-5.el8pc
python-pycparser
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:2.21-2.el8pc
0:2.21-2.el8pc
python-pycryptodomex
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:3.14.1-2.el8pc
0:3.14.1-2.el8pc
python-pycryptodomex-debugsource
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:3.14.1-2.el8pc
0:3.14.1-2.el8pc
python-pyflakes
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:2.3.1-5.el8pc
0:2.3.1-5.el8pc
python-pygments
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:2.11.2-2.el8pc
0:2.11.2-2.el8pc
python-pygobject
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 1:3.40.1-4.el8pc
1:3.40.1-4.el8pc
python-pygobject-debugsource
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 1:3.40.1-4.el8pc
1:3.40.1-4.el8pc
python-pygtrie
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:2.5.0-1.el8pc
0:2.5.0-1.el8pc
python-pyjwkest
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.4.2-6.el8pc
0:1.4.2-6.el8pc
python-pyjwt
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:2.5.0-2.el8pc
0:2.5.0-2.el8pc
python-pyparsing
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:2.4.7-3.el8pc
0:2.4.7-3.el8pc
python-pyrsistent
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:0.18.1-2.el8pc
0:0.18.1-2.el8pc
python-pyrsistent-debugsource
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:0.18.1-2.el8pc
0:0.18.1-2.el8pc
python-pytz
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:2022.2.1-1.el8pc
0:2022.2.1-1.el8pc
python-pyyaml
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:5.4.1-4.el8pc
0:5.4.1-4.el8pc
python-qpid
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.37.0-1.el8
0:1.37.0-1.el8
python-redis
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:4.3.4-1.el8pc
0:4.3.4-1.el8pc
python-requests
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:2.28.1-1.el8pc
0:2.28.1-1.el8pc
python-requirements-parser
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:0.2.0-3.el8pc
0:0.2.0-3.el8pc
python-rhsm
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.19.2-3.el8pc
0:1.19.2-3.el8pc
python-rhsm-debugsource
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.19.2-3.el8pc
0:1.19.2-3.el8pc
python-rich
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:10.12.0-3.el8pc
0:10.12.0-3.el8pc
python-ruamel-yaml
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:0.17.20-2.el8pc
0:0.17.20-2.el8pc
python-ruamel-yaml-clib
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:0.2.6-2.el8pc
0:0.2.6-2.el8pc
rubygem-clamp
Red Hat:satellite_maintenance:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.1.2-7.el8sat
0:1.1.2-7.el8sat
rubygem-foreman_maintain
Red Hat:satellite_maintenance:6.13::el8
From an advisory covering 26 CVEs
 before 1:1.2.8-1.el8sat
1:1.2.8-1.el8sat
rubygem-highline
Red Hat:satellite_maintenance:6.13::el8
From an advisory covering 26 CVEs
 before 0:2.0.3-2.el8sat
0:2.0.3-2.el8sat
satellite-clone
Red Hat:satellite_maintenance:6.13::el8
From an advisory covering 26 CVEs
 before 0:3.3.0-1.el8sat
0:3.3.0-1.el8sat
satellite-maintain
Red Hat:satellite_maintenance:6.13::el8
From an advisory covering 26 CVEs
 before 0:0.0.1-1.el8sat
0:0.0.1-1.el8sat
foreman
Red Hat:satellite_utils:6.13::el8
From an advisory covering 26 CVEs
 before 0:3.5.1.14-1.el8sat
0:3.5.1.14-1.el8sat
foreman-cli
Red Hat:satellite_utils:6.13::el8
From an advisory covering 26 CVEs
 before 0:3.5.1.14-1.el8sat
0:3.5.1.14-1.el8sat
python-pulp_manifest
Red Hat:satellite_utils:6.13::el8
From an advisory covering 26 CVEs
 before 0:3.0.0-3.el8pc
0:3.0.0-3.el8pc
python39-pulp_manifest
Red Hat:satellite_utils:6.13::el8
From an advisory covering 26 CVEs
 before 0:3.0.0-3.el8pc
0:3.0.0-3.el8pc
rubygem-amazing_print
Red Hat:satellite_utils:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.4.0-1.el8sat
0:1.4.0-1.el8sat
rubygem-apipie-bindings
Red Hat:satellite_utils:6.13::el8
From an advisory covering 26 CVEs
 before 0:0.6.0-1.el8sat
0:0.6.0-1.el8sat
rubygem-clamp
Red Hat:satellite_utils:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.1.2-7.el8sat
0:1.1.2-7.el8sat
rubygem-domain_name
Red Hat:satellite_utils:6.13::el8
From an advisory covering 26 CVEs
 before 0:0.5.20190701-1.el8sat
0:0.5.20190701-1.el8sat
rubygem-fast_gettext
Red Hat:satellite_utils:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.8.0-1.el8sat
0:1.8.0-1.el8sat
rubygem-ffi
Red Hat:satellite_utils:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.15.5-1.el8sat
0:1.15.5-1.el8sat
rubygem-ffi-debuginfo
Red Hat:satellite_utils:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.15.5-1.el8sat
0:1.15.5-1.el8sat
rubygem-ffi-debugsource
Red Hat:satellite_utils:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.15.5-1.el8sat
0:1.15.5-1.el8sat
rubygem-gssapi
Red Hat:satellite_utils:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.3.1-1.el8sat
0:1.3.1-1.el8sat
rubygem-hammer_cli
Red Hat:satellite_utils:6.13::el8
From an advisory covering 26 CVEs
 before 0:3.5.1-1.el8sat
0:3.5.1-1.el8sat
rubygem-hammer_cli_foreman
Red Hat:satellite_utils:6.13::el8
From an advisory covering 26 CVEs
 before 0:3.5.1-1.el8sat
0:3.5.1-1.el8sat
rubygem-hammer_cli_foreman_admin
Red Hat:satellite_utils:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.1.0-1.el8sat
0:1.1.0-1.el8sat
rubygem-hammer_cli_foreman_ansible
Red Hat:satellite_utils:6.13::el8
From an advisory covering 26 CVEs
 before 0:0.4.0-2.el8sat
0:0.4.0-2.el8sat
rubygem-hammer_cli_foreman_azure_rm
Red Hat:satellite_utils:6.13::el8
From an advisory covering 26 CVEs
 before 0:0.2.2-1.el8sat
0:0.2.2-1.el8sat
rubygem-hammer_cli_foreman_bootdisk
Red Hat:satellite_utils:6.13::el8
From an advisory covering 26 CVEs
 before 0:0.3.0-3.el8sat
0:0.3.0-3.el8sat
rubygem-hammer_cli_foreman_discovery
Red Hat:satellite_utils:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.1.0-1.el8sat
0:1.1.0-1.el8sat
rubygem-hammer_cli_foreman_google
Red Hat:satellite_utils:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.0.0-1.el8sat
0:1.0.0-1.el8sat
rubygem-hammer_cli_foreman_openscap
Red Hat:satellite_utils:6.13::el8
From an advisory covering 26 CVEs
 before 0:0.1.13-2.el8sat
0:0.1.13-2.el8sat
rubygem-hammer_cli_foreman_remote_execution
Red Hat:satellite_utils:6.13::el8
From an advisory covering 26 CVEs
 before 0:0.2.2-1.el8sat
0:0.2.2-1.el8sat
rubygem-hammer_cli_foreman_tasks
Red Hat:satellite_utils:6.13::el8
From an advisory covering 26 CVEs
 before 0:0.0.18-1.el8sat
0:0.0.18-1.el8sat
rubygem-hammer_cli_foreman_templates
Red Hat:satellite_utils:6.13::el8
From an advisory covering 26 CVEs
 before 0:0.2.0-3.el8sat
0:0.2.0-3.el8sat
rubygem-hammer_cli_foreman_virt_who_configure
Red Hat:satellite_utils:6.13::el8
From an advisory covering 26 CVEs
 before 0:0.0.9-2.el8sat
0:0.0.9-2.el8sat
rubygem-hammer_cli_foreman_webhooks
Red Hat:satellite_utils:6.13::el8
From an advisory covering 26 CVEs
 before 0:0.0.4-1.el8sat
0:0.0.4-1.el8sat
rubygem-hammer_cli_katello
Red Hat:satellite_utils:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.7.3-1.el8sat
0:1.7.3-1.el8sat
rubygem-hashie
Red Hat:satellite_utils:6.13::el8
From an advisory covering 26 CVEs
 before 0:5.0.0-1.el8sat
0:5.0.0-1.el8sat
rubygem-highline
Red Hat:satellite_utils:6.13::el8
From an advisory covering 26 CVEs
 before 0:2.0.3-2.el8sat
0:2.0.3-2.el8sat
rubygem-http-accept
Red Hat:satellite_utils:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.7.0-1.el8sat
0:1.7.0-1.el8sat
rubygem-http-cookie
Red Hat:satellite_utils:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.0.5-1.el8sat
0:1.0.5-1.el8sat
rubygem-jwt
Red Hat:satellite_utils:6.13::el8
From an advisory covering 26 CVEs
 before 0:2.5.0-1.el8sat
0:2.5.0-1.el8sat
rubygem-little-plugger
Red Hat:satellite_utils:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.1.4-3.el8sat
0:1.1.4-3.el8sat
rubygem-locale
Red Hat:satellite_utils:6.13::el8
From an advisory covering 26 CVEs
 before 0:2.1.3-1.el8sat
0:2.1.3-1.el8sat
rubygem-logging
Red Hat:satellite_utils:6.13::el8
From an advisory covering 26 CVEs
 before 0:2.3.1-1.el8sat
0:2.3.1-1.el8sat
rubygem-mime-types
Red Hat:satellite_utils:6.13::el8
From an advisory covering 26 CVEs
 before 0:3.4.1-1.el8sat
0:3.4.1-1.el8sat
rubygem-mime-types-data
Red Hat:satellite_utils:6.13::el8
From an advisory covering 26 CVEs
 before 0:3.2022.0105-1.el8sat
0:3.2022.0105-1.el8sat
rubygem-multi_json
Red Hat:satellite_utils:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.15.0-1.el8sat
0:1.15.0-1.el8sat
rubygem-netrc
Red Hat:satellite_utils:6.13::el8
From an advisory covering 26 CVEs
 before 0:0.11.0-6.el8sat
0:0.11.0-6.el8sat
rubygem-oauth
Red Hat:satellite_utils:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.1.0-1.el8sat
0:1.1.0-1.el8sat
rubygem-oauth-tty
Red Hat:satellite_utils:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.0.5-1.el8sat
0:1.0.5-1.el8sat
rubygem-powerbar
Red Hat:satellite_utils:6.13::el8
From an advisory covering 26 CVEs
 before 0:2.0.1-3.el8sat
0:2.0.1-3.el8sat
rubygem-rest-client
Red Hat:satellite_utils:6.13::el8
From an advisory covering 26 CVEs
 before 0:2.1.0-1.el8sat
0:2.1.0-1.el8sat
rubygem-snaky_hash
Red Hat:satellite_utils:6.13::el8
From an advisory covering 26 CVEs
 before 0:2.0.1-1.el8sat
0:2.0.1-1.el8sat
rubygem-unf
Red Hat:satellite_utils:6.13::el8
From an advisory covering 26 CVEs
 before 0:0.1.4-1.el8sat
0:0.1.4-1.el8sat
rubygem-unf_ext
Red Hat:satellite_utils:6.13::el8
From an advisory covering 26 CVEs
 before 0:0.0.8.2-1.el8sat
0:0.0.8.2-1.el8sat
rubygem-unf_ext-debuginfo
Red Hat:satellite_utils:6.13::el8
From an advisory covering 26 CVEs
 before 0:0.0.8.2-1.el8sat
0:0.0.8.2-1.el8sat
rubygem-unf_ext-debugsource
Red Hat:satellite_utils:6.13::el8
From an advisory covering 26 CVEs
 before 0:0.0.8.2-1.el8sat
0:0.0.8.2-1.el8sat
rubygem-unicode
Red Hat:satellite_utils:6.13::el8
From an advisory covering 26 CVEs
 before 0:0.4.4.4-4.1.el8sat
0:0.4.4.4-4.1.el8sat
rubygem-tzinfo
SUSE:Linux Enterprise High Availability Extension 15
 before 1.2.4-150000.3.3.1
1.2.4-150000.3.3.1
rubygem-tzinfo
SUSE:Linux Enterprise High Availability Extension 15 SP1
 before 1.2.4-150000.3.3.1
1.2.4-150000.3.3.1
rubygem-tzinfo
SUSE:Linux Enterprise High Availability Extension 15 SP2
 before 1.2.4-150000.3.3.1
1.2.4-150000.3.3.1
rubygem-tzinfo
SUSE:Linux Enterprise High Availability Extension 15 SP3
 before 1.2.4-150000.3.3.1
1.2.4-150000.3.3.1
rubygem-tzinfo
SUSE:Linux Enterprise High Availability Extension 15 SP4
 before 1.2.4-150000.3.3.1
1.2.4-150000.3.3.1
rubygem-tzinfo
openSUSE:Leap 15.3
 before 1.2.4-150000.3.3.1
1.2.4-150000.3.3.1
rubygem-tzinfo
openSUSE:Leap 15.4
 before 1.2.4-150000.3.3.1
1.2.4-150000.3.3.1
rubygem-tzinfo
SUSE:OpenStack Cloud Crowbar 8
 before 1.2.2-3.3.1
1.2.2-3.3.1
rubygem-tzinfo
SUSE:OpenStack Cloud Crowbar 9
 before 1.2.2-3.3.1
1.2.2-3.3.1
ruby-tzinfo
Ubuntu:16.04:LTS
 All versions, plus listed versions
1.2.2-1
 None known
ruby-tzinfo
Ubuntu:18.04:LTS
 All versions, plus listed versions
1.2.2-21.2.3-11.2.5-1
 None known
ruby-tzinfo
Ubuntu:20.04:LTS
 All versions, plus listed versions
1.2.5-11.2.6-1
 None known
ruby-tzinfo
Ubuntu:22.04:LTS
 All versions, plus listed versions
1.2.6-12.0.4-3
 None known
ruby-tzinfo
Ubuntu:24.04:LTS
 All versions, plus listed versions
2.0.5-12.0.6-1
 None known
ruby-tzinfo
Ubuntu:25.10
 All versions, plus listed versions
2.0.6-1
 None known
ruby-tzinfo
Ubuntu:26.10
 All versions, plus listed versions
2.0.6-12.0.6-2
 None known
ruby-tzinfo
Ubuntu:26.04:LTS
 All versions, plus listed versions
2.0.6-1
 None known
rubygem-tzinfo-1.2
openSUSE:Tumbleweed
 before 1.2.10-1.1
1.2.10-1.1
ruby3.2-rubygem-tzinfo-1.2
openSUSE:Tumbleweed
 before 1.2.10-1.4
1.2.10-1.4
rubygem-tzinfo-1.2
openSUSE:Tumbleweed
 before 1.2.11-1.5
1.2.11-1.5

History

History
RecordedChangedSources
affected, factsOSV
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2022-31163 is a high vulnerability (CVSS 7.5) in Tzinfo, published July 21, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.45%, the 84th percentile. Fixed in tzinfo 0.3.61.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 206 package rows, 21 versions and 225 references. The JSON record has them. Also not on the record: 957 package claims. ID and package lookups still check them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open