{"id":"CVE-2017-0901","aliases":["ALPINE-CVE-2017-0901","BELL-CVE-2017-0901","DEBIAN-CVE-2017-0901","DLA-1112-1","DLA-1114-1","DLA-1421-1","DSA-3966-1","EUVD-2022-4796","GHSA-pm9x-4392-2c2p","MGASA-2017-0482","RHSA-2017:3485","RHSA-2018:0378","RHSA-2018:0583","RHSA-2018:0585","SUSE-SU-2020:1570-1","UBUNTU-CVE-2017-0901","USN-3439-1","USN-3553-1","USN-3685-1"],"status":"published","title":"RubyGems may allow a maliciously crafted gem to overwrite files","description":"RubyGems version 2.6.12 and earlier fails to validate specification names, allowing a maliciously crafted gem to potentially overwrite any file on the filesystem.","severity":{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.29442,"percentile":0.98195,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-20","CWE-22"],"published":"2017-08-31T00:00:00Z","modified":"2026-10-20T10:47:35Z","exploits":[{"source":"exploitdb","id":"EDB-42611","title":"RubyGems \u003c 2.6.13 - Arbitrary File Overwrite","type":"local","platform":"linux","date":"2017-09-04","verified":true,"url":"https://www.exploit-db.com/exploits/42611"}],"fixes":[{"ecosystem":"RubyGems","package":"rubygems-update","fixed_in":["2.6.13"],"sources":["ghsa","osv"]},{"ecosystem":"Alpine:v3.10","package":"ruby","fixed_in":["2.4.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.11","package":"ruby","fixed_in":["2.4.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"ruby","fixed_in":["2.4.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"ruby","fixed_in":["2.4.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"ruby","fixed_in":["2.4.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"ruby","fixed_in":["2.4.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"ruby","fixed_in":["2.4.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"ruby","fixed_in":["2.4.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"ruby","fixed_in":["2.4.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"ruby","fixed_in":["2.4.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"ruby","fixed_in":["2.4.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"ruby","fixed_in":["2.4.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"ruby","fixed_in":["2.4.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"ruby","fixed_in":["2.4.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"ruby","fixed_in":["2.4.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.3","package":"ruby","fixed_in":["2.2.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.4","package":"ruby","fixed_in":["2.3.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.5","package":"ruby","fixed_in":["2.3.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.6","package":"ruby","fixed_in":["2.4.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.7","package":"ruby","fixed_in":["2.4.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.8","package":"ruby","fixed_in":["2.4.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.9","package":"ruby","fixed_in":["2.4.2-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"rubygems","fixed_in":["3.2.0~rc.1-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"rubygems","fixed_in":["3.2.0~rc.1-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"rubygems","fixed_in":["3.2.0~rc.1-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"ruby1.9.1","fixed_in":["1.9.3.484-2ubuntu1.5"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"ruby2.0","fixed_in":["2.0.0.484-1ubuntu2.10"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"ruby2.3","fixed_in":["2.3.1-2~16.04.6"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"RubyGems","package":"rubygems-update","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.13"}]}]},{"source":"osv","ecosystem":"Alpine:v3.10","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.11","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.3","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.4","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.5","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.6","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.7","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.8","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.9","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.2-r0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"rubygems","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.0~rc.1-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"rubygems","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.0~rc.1-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"rubygems","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.0~rc.1-1"}]}]},{"source":"osv","ecosystem":"Debian:7","package":"rubygems","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.24-1+deb7u1"}]}],"versions":["1.8.24-1"],"bundled":2},{"source":"osv","ecosystem":"Debian:7","package":"ruby1.9.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.3.194-8.1+deb7u6"}]}],"versions":["1.9.3.194-8.1","1.9.3.194-8.1+deb7u1","1.9.3.194-8.1+deb7u2","1.9.3.194-8.1+deb7u3","1.9.3.194-8.1+deb7u5"],"bundled":7},{"source":"osv","ecosystem":"Debian:8","package":"ruby2.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.5-2+deb8u4"}]}],"versions":["2.1.5-2","2.1.5-2+deb8u1","2.1.5-2+deb8u2","2.1.5-2+deb8u3"],"bundled":25},{"source":"osv","ecosystem":"Debian:9","package":"ruby2.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.3-1+deb9u1"}]}],"versions":["2.3.3-1"],"bundled":7},{"source":"osv","ecosystem":"RubyGems","package":"rubygems-update","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.13"}]}],"versions":["0.8.10","0.8.11","0.8.3","0.8.4","0.8.5","0.8.6","0.8.8","0.9.0","0.9.1","0.9.2","0.9.3","0.9.4","0.9.5","1.0.0","1.0.1","1.1.0","1.1.1","1.2.0","1.3.0","1.3.1","1.3.2","1.3.3","1.3.4","1.3.5","1.3.6","1.3.7","1.4.0","1.4.1","1.4.2","1.5.0","1.5.2","1.5.3","1.6.0","1.6.1","1.6.2","1.7.0","1.7.1","1.7.2","1.8.0","1.8.1","1.8.10","1.8.11","1.8.12","1.8.13","1.8.14","1.8.15","1.8.16","1.8.17","1.8.18","1.8.19","1.8.2","1.8.20","1.8.21","1.8.22","1.8.23","1.8.23.2","1.8.24","1.8.25","1.8.26","1.8.27","1.8.28","1.8.29","1.8.3","1.8.30","1.8.4","1.8.5","1.8.6","1.8.7","1.8.8","1.8.9","2.0.0","2.0.0.preview2","2.0.0.preview2.1","2.0.0.preview2.2","2.0.0.rc.1","2.0.0.rc.2","2.0.10","2.0.11","2.0.12","2.0.13","2.0.14","2.0.15","2.0.16","2.0.17","2.0.2","2.0.3","2.0.4","2.0.5","2.0.6","2.0.7","2.0.8","2.0.9","2.1.0","2.1.0.rc.1","2.1.0.rc.2","2.1.1","2.1.10","2.1.11","2.1.2","2.1.3","2.1.4","2.1.5","2.1.6","2.1.7","2.1.8","2.1.9","2.2.0","2.2.0.rc.1","2.2.1","2.2.2","2.2.3","2.2.4","2.2.5","2.3.0","2.4.0","2.4.1","2.4.2","2.4.3","2.4.4","2.4.5","2.4.6","2.4.7","2.4.8","2.5.0","2.5.1","2.5.2","2.6.0","2.6.1","2.6.10","2.6.11","2.6.12","2.6.2","2.6.3","2.6.4","2.6.5","2.6.6","2.6.7","2.6.8","2.6.9"]},{"source":"osv","ecosystem":"Mageia:5","package":"ruby-RubyGems","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.11-5.2.mga5"}]}],"bundled":5},{"source":"osv","ecosystem":"Mageia:6","package":"ruby-RubyGems","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.8-7.1.mga6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-ruby24-ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.2-86.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-ruby24-ruby-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.2-86.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-ruby24-ruby-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.2-86.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-ruby24-ruby-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.2-86.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-ruby24-ruby-irb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.2-86.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-ruby24-ruby-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.2-86.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-ruby24-rubygem-bigdecimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.0-86.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-ruby24-rubygem-did_you_mean","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.0-86.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-ruby24-rubygem-io-console","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.6-86.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-ruby24-rubygem-json","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.4-86.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-ruby24-rubygem-minitest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.10.1-86.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-ruby24-rubygem-net-telnet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.1-86.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-ruby24-rubygem-openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.5-86.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-ruby24-rubygem-power_assert","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.1-86.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-ruby24-rubygem-psych","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.2-86.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-ruby24-rubygem-rake","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.0.0-86.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-ruby24-rubygem-rdoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.0-86.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-ruby24-rubygem-test-unit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.3-86.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-ruby24-rubygem-xmlrpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.1-86.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-ruby24-rubygems","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.14-86.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-ruby24-rubygems-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.14-86.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby24-ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.2-86.el7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby24-ruby-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.2-86.el7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby24-ruby-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.2-86.el7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby24-ruby-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.2-86.el7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby24-ruby-irb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.2-86.el7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby24-ruby-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.2-86.el7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby24-rubygem-bigdecimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.0-86.el7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby24-rubygem-did_you_mean","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.0-86.el7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby24-rubygem-io-console","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.6-86.el7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby24-rubygem-json","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.4-86.el7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby24-rubygem-minitest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.10.1-86.el7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby24-rubygem-net-telnet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.1-86.el7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby24-rubygem-openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.5-86.el7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby24-rubygem-power_assert","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.1-86.el7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby24-rubygem-psych","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.2-86.el7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby24-rubygem-rake","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.0.0-86.el7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby24-rubygem-rdoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.0-86.el7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby24-rubygem-test-unit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.3-86.el7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby24-rubygem-xmlrpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.1-86.el7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby24-rubygems","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.14-86.el7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby24-rubygems-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.14-86.el7"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0.648-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"ruby-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0.648-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"ruby-irb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0.648-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"ruby-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0.648-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"rubygem-bigdecimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.0-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"rubygem-io-console","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.2-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"rubygem-json","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.7-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"rubygem-psych","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"rubygem-rdoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.0-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"rubygems","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.14.1-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"ruby-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0.648-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"ruby-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0.648-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"ruby-tcltk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0.648-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"rubygem-minitest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.2-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"rubygem-rake","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.6-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"rubygems-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.14.1-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0.648-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"ruby-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0.648-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"ruby-irb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0.648-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"ruby-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0.648-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"rubygem-bigdecimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.0-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"rubygem-io-console","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.2-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"rubygem-json","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.7-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"rubygem-psych","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"rubygem-rdoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.0-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"rubygems","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.14.1-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"ruby-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0.648-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"ruby-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0.648-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"ruby-tcltk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0.648-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"rubygem-minitest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.2-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"rubygem-rake","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.6-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"rubygems-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.14.1-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0.648-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"ruby-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0.648-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"ruby-irb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0.648-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"ruby-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0.648-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"rubygem-bigdecimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.0-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"rubygem-io-console","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.2-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"rubygem-json","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.7-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"rubygem-psych","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"rubygem-rdoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.0-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"rubygems","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.14.1-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"ruby-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0.648-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"ruby-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0.648-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"ruby-tcltk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0.648-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"rubygem-minitest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.2-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"rubygem-rake","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.6-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"rubygems-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.14.1-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0.648-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"ruby-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0.648-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"ruby-irb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0.648-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"ruby-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0.648-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"rubygem-bigdecimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.0-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"rubygem-io-console","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.2-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"rubygem-json","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.7-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"rubygem-psych","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"rubygem-rdoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.0-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"rubygems","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.14.1-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"ruby-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0.648-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"ruby-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0.648-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"ruby-tcltk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0.648-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"rubygem-minitest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.2-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"rubygem-rake","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.6-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"rubygems-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.14.1-33.el7_4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-ruby22-ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.9-19.el6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-ruby22-ruby-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.9-19.el6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-ruby22-ruby-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.9-19.el6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-ruby22-ruby-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.9-19.el6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-ruby22-ruby-irb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.9-19.el6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-ruby22-ruby-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.9-19.el6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-ruby22-ruby-tcltk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.9-19.el6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-ruby22-rubygem-bigdecimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.6-19.el6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-ruby22-rubygem-io-console","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.3-19.el6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-ruby22-rubygem-json","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.1.1-19.el6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-ruby22-rubygem-minitest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.3-19.el6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-ruby22-rubygem-power_assert","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.2-19.el6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-ruby22-rubygem-psych","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.8.1-19.el6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-ruby22-rubygem-rake","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.4.2-19.el6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-ruby22-rubygem-rdoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.0-19.el6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-ruby22-rubygem-test-unit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.8-19.el6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-ruby22-rubygems","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.5.4-19.el6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-ruby22-rubygems-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.5.4-19.el6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby22-ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.9-19.el7"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby22-ruby-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.9-19.el7"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby22-ruby-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.9-19.el7"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby22-ruby-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.9-19.el7"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby22-ruby-irb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.9-19.el7"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby22-ruby-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.9-19.el7"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby22-ruby-tcltk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.9-19.el7"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby22-rubygem-bigdecimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.6-19.el7"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby22-rubygem-io-console","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.3-19.el7"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby22-rubygem-json","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.1.1-19.el7"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby22-rubygem-minitest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.3-19.el7"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby22-rubygem-power_assert","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.2-19.el7"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby22-rubygem-psych","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.8.1-19.el7"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby22-rubygem-rake","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.4.2-19.el7"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby22-rubygem-rdoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.0-19.el7"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby22-rubygem-test-unit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.8-19.el7"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby22-rubygems","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.5.4-19.el7"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby22-rubygems-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.5.4-19.el7"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-ruby23-ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.6-67.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-ruby23-ruby-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.6-67.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-ruby23-ruby-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.6-67.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-ruby23-ruby-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.6-67.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-ruby23-ruby-irb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.6-67.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-ruby23-ruby-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.6-67.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-ruby23-ruby-tcltk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.6-67.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-ruby23-rubygem-bigdecimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.8-67.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-ruby23-rubygem-did_you_mean","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-67.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-ruby23-rubygem-io-console","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.5-67.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-ruby23-rubygem-json","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.3.1-67.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-ruby23-rubygem-minitest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.8.5-67.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-ruby23-rubygem-net-telnet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.1-67.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-ruby23-rubygem-power_assert","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.6-67.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-ruby23-rubygem-psych","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.0.1-67.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-ruby23-rubygem-rake","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.4.2-67.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-ruby23-rubygem-rdoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.1-67.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-ruby23-rubygem-test-unit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.5-67.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-ruby23-rubygems","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.2.2-67.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-ruby23-rubygems-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.2.2-67.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby23-ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.6-67.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby23-ruby-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.6-67.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby23-ruby-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.6-67.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby23-ruby-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.6-67.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby23-ruby-irb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.6-67.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby23-ruby-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.6-67.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby23-ruby-tcltk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.6-67.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby23-rubygem-bigdecimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.8-67.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby23-rubygem-did_you_mean","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-67.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby23-rubygem-io-console","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.5-67.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby23-rubygem-json","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.3.1-67.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby23-rubygem-minitest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.8.5-67.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby23-rubygem-net-telnet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.1-67.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby23-rubygem-power_assert","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.6-67.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby23-rubygem-psych","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.0.1-67.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby23-rubygem-rake","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.4.2-67.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby23-rubygem-rdoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.1-67.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby23-rubygem-test-unit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.5-67.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby23-rubygems","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.2.2-67.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-ruby23-rubygems-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.2.2-67.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"ruby2.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.9-19.3.2"}]}],"bundled":42},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"ruby2.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.9-19.3.2"}]}],"bundled":42},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"yast2-ruby-bindings","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.53-9.8.1"}]}],"bundled":42},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"ruby2.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.9-19.3.2"}]}],"bundled":42},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"ruby2.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.9-19.3.2"}]}],"bundled":42},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"ruby2.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.9-19.3.2"}]}],"bundled":42},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"yast2-ruby-bindings","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.53-9.8.1"}]}],"bundled":42},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"ruby2.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.9-19.3.2"}]}],"bundled":42},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP4","package":"ruby2.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.9-19.3.2"}]}],"bundled":42},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"ruby2.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.9-19.3.2"}]}],"bundled":42},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"ruby2.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.9-19.3.2"}]}],"bundled":42},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"yast2-ruby-bindings","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.53-9.8.1"}]}],"bundled":42},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"ruby2.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.9-19.3.2"}]}],"bundled":42},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"yast2-ruby-bindings","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.53-9.8.1"}]}],"bundled":42},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"ruby2.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.9-19.3.2"}]}],"bundled":42},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"ruby2.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.9-19.3.2"}]}],"bundled":42},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4","package":"ruby2.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.9-19.3.2"}]}],"bundled":42},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"ruby2.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.9-19.3.2"}]}],"bundled":42},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"ruby2.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.9-19.3.2"}]}],"bundled":42},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"ruby2.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.9-19.3.2"}]}],"bundled":42},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 5","package":"ruby2.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.9-19.3.2"}]}],"bundled":42},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"ruby1.9.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.3.484-2ubuntu1.5"}]}],"versions":["1.9.3.194-8.1ubuntu2","1.9.3.448-1ubuntu1","1.9.3.448-1ubuntu2","1.9.3.484-1ubuntu1","1.9.3.484-1ubuntu2","1.9.3.484-2ubuntu1","1.9.3.484-2ubuntu1.1","1.9.3.484-2ubuntu1.2","1.9.3.484-2ubuntu1.3"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"ruby2.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0.484-1ubuntu2.10"}]}],"versions":["2.0.0.299-2","2.0.0.343-1","2.0.0.343-1ubuntu1","2.0.0.353-1","2.0.0.353-1ubuntu1","2.0.0.484-1ubuntu1","2.0.0.484-1ubuntu2","2.0.0.484-1ubuntu2.1","2.0.0.484-1ubuntu2.2","2.0.0.484-1ubuntu2.4","2.0.0.484-1ubuntu2.5","2.0.0.484-1ubuntu2.6","2.0.0.484-1ubuntu2.8","2.0.0.484-1ubuntu2.9"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"jruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.5.6-5ubuntu1","1.5.6-6","1.5.6-7","1.5.6-9+deb8u2build0.14.04.1~esm2"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"ruby2.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.1-2~16.04.6"}]}],"versions":["2.3.0-1","2.3.0-2","2.3.0-4ubuntu2","2.3.0-4ubuntu3","2.3.0-5ubuntu1","2.3.1-2~16.04","2.3.1-2~16.04.2","2.3.1-2~16.04.4","2.3.1-2~16.04.5"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"jruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.7.21-2ubuntu4","1.7.22-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"jruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["9.1.13.0-1","9.1.17.0-1~18.04"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"jruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["9.1.17.0-3","9.1.17.0-3build5","9.1.17.0-3build6"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"jruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["9.3.9.0+ds-1","9.4.5.0+ds-1","9.4.5.0+ds-1ubuntu1","9.4.6.0+ds-1ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"jruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["9.4.8.0+ds-2ubuntu1","9.4.8.0+ds-3ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"jruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["9.4.8.0+ds-3ubuntu1","9.4.14.0+ds-1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"jruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["9.4.8.0+ds-3ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"ruby1.9.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.3.484-2ubuntu1.5"}]}],"versions":["1.9.3.194-8.1ubuntu2","1.9.3.448-1ubuntu1","1.9.3.448-1ubuntu2","1.9.3.484-1ubuntu1","1.9.3.484-1ubuntu2","1.9.3.484-2ubuntu1","1.9.3.484-2ubuntu1.1","1.9.3.484-2ubuntu1.2","1.9.3.484-2ubuntu1.3"],"bundled":7},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"ruby2.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.1-2~16.04.6"}]}],"versions":["2.3.0-1","2.3.0-2","2.3.0-4ubuntu2","2.3.0-4ubuntu3","2.3.0-5ubuntu1","2.3.1-2~16.04","2.3.1-2~16.04.2","2.3.1-2~16.04.4","2.3.1-2~16.04.5"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"ruby1.9.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.3.484-2ubuntu1.12"}]}],"versions":["1.9.3.194-8.1ubuntu2","1.9.3.448-1ubuntu1","1.9.3.448-1ubuntu2","1.9.3.484-1ubuntu1","1.9.3.484-1ubuntu2","1.9.3.484-2ubuntu1","1.9.3.484-2ubuntu1.1","1.9.3.484-2ubuntu1.2","1.9.3.484-2ubuntu1.3","1.9.3.484-2ubuntu1.5","1.9.3.484-2ubuntu1.6","1.9.3.484-2ubuntu1.7","1.9.3.484-2ubuntu1.8","1.9.3.484-2ubuntu1.10","1.9.3.484-2ubuntu1.11"],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"ruby2.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0.484-1ubuntu2.10"}]}],"versions":["2.0.0.299-2","2.0.0.343-1","2.0.0.343-1ubuntu1","2.0.0.353-1","2.0.0.353-1ubuntu1","2.0.0.484-1ubuntu1","2.0.0.484-1ubuntu2","2.0.0.484-1ubuntu2.1","2.0.0.484-1ubuntu2.2","2.0.0.484-1ubuntu2.4","2.0.0.484-1ubuntu2.5","2.0.0.484-1ubuntu2.6","2.0.0.484-1ubuntu2.8","2.0.0.484-1ubuntu2.9"],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"ruby2.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.1-2~16.04.10"}]}],"versions":["2.3.0-1","2.3.0-2","2.3.0-4ubuntu2","2.3.0-4ubuntu3","2.3.0-5ubuntu1","2.3.1-2~16.04","2.3.1-2~16.04.2","2.3.1-2~16.04.4","2.3.1-2~16.04.5","2.3.1-2~16.04.6","2.3.1-2~16.04.7","2.3.1-2~16.04.9"],"bundled":9}],"products":[{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"debian","product":"debian_linux"},{"vendor":"hackerone","product":"rubygems"},{"vendor":"redhat","product":"enterprise_linux_desktop"},{"vendor":"redhat","product":"enterprise_linux_server"},{"vendor":"redhat","product":"enterprise_linux_server_aus"},{"vendor":"redhat","product":"enterprise_linux_server_eus"},{"vendor":"redhat","product":"enterprise_linux_server_tus"},{"vendor":"redhat","product":"enterprise_linux_workstation"},{"vendor":"rubygems","product":"rubygems"}],"references":[{"url":"https://usn.ubuntu.com/3685-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"https://usn.ubuntu.com/3553-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:0585","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://www.debian.org/security/2017/dsa-3966","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://access.redhat.com/errata/RHSA-2018:0378","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://www.exploit-db.com/exploits/42611/","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred","Exploit","Third Party Advisory","VDB Entry","evidence"]},{"url":"http://www.securitytracker.com/id/1039249","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://hackerone.com/reports/243156","tags":["x_refsource_MISC","x_transferred","Exploit","Patch","Third Party Advisory","fix","web","report"]},{"url":"https://access.redhat.com/errata/RHSA-2017:3485","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://github.com/rubygems/rubygems/commit/ad5c0a53a86ca5b218c7976765c0365b91d22cb2","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2018/07/msg00012.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory","web"]},{"url":"https://access.redhat.com/errata/RHSA-2018:0583","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://security.gentoo.org/glsa/201710-01","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Third Party Advisory","advisory","web"]},{"url":"http://www.securityfocus.com/bid/100580","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"http://blog.rubygems.org/2017/08/27/2.6.13-released.html","tags":["x_refsource_MISC","x_transferred","Patch","Vendor Advisory","fix","web","article","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-0901","tags":["advisory"]},{"url":"https://web.archive.org/web/20170907215801/http://www.securitytracker.com/id/1039249","tags":["web"]},{"url":"https://web.archive.org/web/20170915000000*/http://www.securityfocus.com/bid/100580#:~:text=1%20snapshot-,16%3A05%3A26,-Note","tags":["web"]},{"url":"https://github.com/advisories/GHSA-pm9x-4392-2c2p"},{"url":"https://security.alpinelinux.org/vuln/CVE-2017-0901","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2017-0901","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2017-0901","tags":["advisory"]},{"url":"https://github.com/rubygems/rubygems","tags":["package"]},{"url":"https://usn.ubuntu.com/3553-1","tags":["web"]},{"url":"https://usn.ubuntu.com/3685-1","tags":["web"]},{"url":"https://www.exploit-db.com/exploits/42611","tags":["web"]},{"url":"https://advisories.mageia.org/MGASA-2017-0482.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=21639","tags":["report"]},{"url":"https://www.ruby-lang.org/en/news/2017/08/29/multiple-vulnerabilities-in-rubygems/","tags":["web","report"]},{"url":"http://blog.rubygems.org/2017/10/09/unsafe-object-deserialization-vulnerability.html","tags":["web"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1487552","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1487587","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1487588","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1487589","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1487590","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1492012","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1492015","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1500488","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1506785","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_3485.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-0898","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-0898","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-0898","tags":["advisory"]},{"url":"https://www.ruby-lang.org/en/news/2017/09/14/sprintf-buffer-underrun-cve-2017-0898/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-0899","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-0899","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-0899","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-0900","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-0900","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-0900","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-0901","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-0901","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-0902","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-0902","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-0902","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-0903","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-0903","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-0903","tags":["advisory"]},{"url":"http://blog.rubygems.org/2017/10/09/2.6.14-released.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-10784","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-10784","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-10784","tags":["advisory"]},{"url":"https://www.ruby-lang.org/en/news/2017/09/14/webrick-basic-auth-escape-sequence-injection-cve-2017-10784/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-14064","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-14064","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-14064","tags":["advisory"]},{"url":"https://www.ruby-lang.org/en/news/2017/09/14/json-heap-exposure-cve-2017-14064/","tags":["article"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1491866","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1526189","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1528218","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_0378.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-14033","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-14033","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-14033","tags":["advisory"]},{"url":"https://www.ruby-lang.org/en/news/2017/09/14/openssl-asn1-buffer-underrun-cve-2017-14033/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-17405","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-17405","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-17405","tags":["advisory"]},{"url":"https://www.ruby-lang.org/en/news/2017/12/14/net-ftp-command-injection-cve-2017-17405/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-17790","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-17790","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-17790","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1248935","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1549646","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_0583.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2009-5147","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-5147","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-5147","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-7551","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-7551","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-7551","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1549649","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_0585.json","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20201570-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1043983","tags":["report"]},{"url":"https://bugzilla.suse.com/1048072","tags":["report"]},{"url":"https://bugzilla.suse.com/1055265","tags":["report"]},{"url":"https://bugzilla.suse.com/1056286","tags":["report"]},{"url":"https://bugzilla.suse.com/1056782","tags":["report"]},{"url":"https://bugzilla.suse.com/1058754","tags":["report"]},{"url":"https://bugzilla.suse.com/1058755","tags":["report"]},{"url":"https://bugzilla.suse.com/1058757","tags":["report"]},{"url":"https://bugzilla.suse.com/1062452","tags":["report"]},{"url":"https://bugzilla.suse.com/1069607","tags":["report"]},{"url":"https://bugzilla.suse.com/1069632","tags":["report"]},{"url":"https://bugzilla.suse.com/1073002","tags":["report"]},{"url":"https://bugzilla.suse.com/1078782","tags":["report"]},{"url":"https://bugzilla.suse.com/1082007","tags":["report"]},{"url":"https://bugzilla.suse.com/1082008","tags":["report"]},{"url":"https://bugzilla.suse.com/1082009","tags":["report"]},{"url":"https://bugzilla.suse.com/1082010","tags":["report"]},{"url":"https://bugzilla.suse.com/1082011","tags":["report"]},{"url":"https://bugzilla.suse.com/1082014","tags":["report"]},{"url":"https://bugzilla.suse.com/1082058","tags":["report"]},{"url":"https://bugzilla.suse.com/1087433","tags":["report"]},{"url":"https://bugzilla.suse.com/1087434","tags":["report"]},{"url":"https://bugzilla.suse.com/1087436","tags":["report"]},{"url":"https://bugzilla.suse.com/1087437","tags":["report"]},{"url":"https://bugzilla.suse.com/1087440","tags":["report"]},{"url":"https://bugzilla.suse.com/1087441","tags":["report"]},{"url":"https://bugzilla.suse.com/1112530","tags":["report"]},{"url":"https://bugzilla.suse.com/1112532","tags":["report"]},{"url":"https://bugzilla.suse.com/1130611","tags":["report"]},{"url":"https://bugzilla.suse.com/1130617","tags":["report"]},{"url":"https://bugzilla.suse.com/1130620","tags":["report"]},{"url":"https://bugzilla.suse.com/1130622","tags":["report"]},{"url":"https://bugzilla.suse.com/1130623","tags":["report"]},{"url":"https://bugzilla.suse.com/1130627","tags":["report"]},{"url":"https://bugzilla.suse.com/1152990","tags":["report"]},{"url":"https://bugzilla.suse.com/1152992","tags":["report"]},{"url":"https://bugzilla.suse.com/1152994","tags":["report"]},{"url":"https://bugzilla.suse.com/1152995","tags":["report"]},{"url":"https://bugzilla.suse.com/1171517","tags":["report"]},{"url":"https://bugzilla.suse.com/1172275","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2015-9096","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2339","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7798","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-0898","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-0899","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-0900","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-0901","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-0902","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-0903","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10784","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-14033","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-14064","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-17405","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-17742","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-17790","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9228","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9229","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1000073","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1000074","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1000075","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1000076","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1000077","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1000078","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1000079","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16395","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16396","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-6914","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-8777","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-8778","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-8779","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-8780","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-15845","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-16201","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-16254","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-16255","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8320","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8321","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8322","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8323","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8324","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8325","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-10663","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2017-0901","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3439-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-3553-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-3685-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2017-0898","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-0899","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-0900","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-10784","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-14033","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-14064","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-0902","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-0903","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-17742","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-8777","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-1000074","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2017-0901","description":"RubyGems version 2.6.12 and earlier fails to validate specification names, allowing a maliciously crafted gem to potentially overwrite any file on the filesystem.","status":"published","published":"2017-08-31T20:00:00Z","modified":"2024-09-16T20:22:06.483Z","cwes":["CWE-22"],"updated_at":"2026-11-02T14:33:22.381225Z"}],"euvd":[{"id":"EUVD-2022-4796","description":"RubyGems version 2.6.12 and earlier fails to validate specification names, allowing a maliciously crafted gem to potentially overwrite any file on the filesystem.","status":"published","published":"2017-08-31T20:00:00Z","modified":"2024-09-16T20:22:06Z","updated_at":"2026-11-03T00:55:14.527578Z"}],"ghsa":[{"id":"GHSA-pm9x-4392-2c2p","title":"RubyGems may allow a maliciously crafted gem to overwrite files","description":"RubyGems versions 2.6.12 and earlier fail to validate specification names, allowing a maliciously crafted gem to potentially overwrite any file on the filesystem.","status":"published","published":"2022-05-13T01:38:26Z","modified":"2023-03-09T00:38:36Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"cwes":["CWE-20","CWE-22"],"updated_at":"2026-11-02T14:36:47.279442Z"}],"nvd":[{"id":"CVE-2017-0901","description":"RubyGems version 2.6.12 and earlier fails to validate specification names, allowing a maliciously crafted gem to potentially overwrite any file on the filesystem.","status":"published","published":"2017-08-31T20:29:00.557Z","modified":"2026-06-17T00:58:29.607Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high","assessor":"primary"},{"version":"2.0","score":6.4,"vector":"AV:N/AC:L/Au:N/C:N/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-22","CWE-20"],"updated_at":"2026-11-02T14:03:58.85945Z"}],"osv":[{"id":"ALPINE-CVE-2017-0901","description":"RubyGems version 2.6.12 and earlier fails to validate specification names, allowing a maliciously crafted gem to potentially overwrite any file on the filesystem.","status":"published","published":"2017-08-31T20:29:00.557Z","modified":"2026-06-15T18:18:06.71929055Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:27:46.716249Z"},{"id":"BELL-CVE-2017-0901","title":"CVE-2017-0901 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:13:40.652795Z","modified":"2026-01-26T09:45:50.861776Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:28:14.137943Z"},{"id":"CVE-2017-0901","description":"RubyGems version 2.6.12 and earlier fails to validate specification names, allowing a maliciously crafted gem to potentially overwrite any file on the filesystem.","status":"published","published":"2017-08-31T20:29:00.557Z","modified":"2026-10-20T10:47:35.186721108Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:44:03.472693Z"},{"id":"DEBIAN-CVE-2017-0901","description":"RubyGems version 2.6.12 and earlier fails to validate specification names, allowing a maliciously crafted gem to potentially overwrite any file on the filesystem.","status":"published","published":"2017-08-31T20:29:00.557Z","modified":"2026-09-01T20:02:40.434685159Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:45:28.207321Z"},{"id":"GHSA-pm9x-4392-2c2p","title":"RubyGems may allow a maliciously crafted gem to overwrite files","description":"RubyGems versions 2.6.12 and earlier fail to validate specification names, allowing a maliciously crafted gem to potentially overwrite any file on the filesystem.","status":"published","published":"2022-05-13T01:38:26Z","modified":"2024-02-22T05:34:28.892562Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"cwes":["CWE-20","CWE-22"],"updated_at":"2026-11-02T15:46:53.244788Z"},{"id":"RHSA-2017:3485","title":"Red Hat Security Advisory: rh-ruby24-ruby security, bug fix, and enhancement update","status":"published","published":"2024-09-13T14:43:10Z","modified":"2026-06-29T10:18:41Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:04.822845Z"},{"id":"RHSA-2018:0378","title":"Red Hat Security Advisory: ruby security update","status":"published","published":"2024-09-13T14:43:33Z","modified":"2026-06-29T10:19:18Z","cvss":[{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:04.822845Z"},{"id":"RHSA-2018:0583","title":"Red Hat Security Advisory: rh-ruby22-ruby security, bug fix, and enhancement update","status":"published","published":"2024-09-13T14:43:49Z","modified":"2026-06-29T10:19:32Z","cvss":[{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:04.822845Z"},{"id":"RHSA-2018:0585","title":"Red Hat Security Advisory: rh-ruby23-ruby security, bug fix, and enhancement update","status":"published","published":"2024-09-13T14:43:40Z","modified":"2026-06-29T10:19:33Z","cvss":[{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:04.822845Z"},{"id":"UBUNTU-CVE-2017-0901","description":"RubyGems version 2.6.12 and earlier fails to validate specification names, allowing a maliciously crafted gem to potentially overwrite any file on the filesystem.","status":"published","published":"2017-08-31T00:00:00Z","modified":"2026-10-17T12:52:56.268385161Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:54:13.356796Z"},{"id":"DLA-1112-1","title":"rubygems - security update","status":"published","published":"2017-09-26T00:00:00Z","modified":"2026-03-09T01:01:58.693545Z","updated_at":"2026-11-02T15:46:09.336894Z"},{"id":"DLA-1114-1","title":"ruby1.9.1 - security update","status":"published","published":"2017-09-26T00:00:00Z","modified":"2026-03-09T01:01:16.473444Z","updated_at":"2026-11-02T15:46:09.336894Z"},{"id":"DLA-1421-1","title":"ruby2.1 - security update","status":"published","published":"2018-07-13T00:00:00Z","modified":"2026-03-09T01:00:51.935861Z","updated_at":"2026-11-02T15:46:09.336894Z"},{"id":"DSA-3966-1","title":"ruby2.3 - security update","status":"published","published":"2017-09-05T00:00:00Z","modified":"2026-03-09T01:22:36.98079Z","updated_at":"2026-11-02T15:46:16.523846Z"},{"id":"MGASA-2017-0482","title":"Updated ruby-RubyGems packages fix security vulnerabilities","description":"An ANSI escape sequence vulnerability (CVE-2017-0899).\n\nA DoS vulnerability in the query command (CVE-2017-0900).\n\nA vulnerability in the gem installer that allowed a malicious gem to\noverwrite arbitrary files (CVE-2017-0901).\n\nA DNS request hijacking vulnerability (CVE-2017-0902).\n\nAn unsafe object deserialization vulnerability that allows an attacker\nto inject an instance of an object of their choosing in the target\nsystem. A clever attacker can inject an object that is able to interact\nwith the system in such a way that will allow the attacker to execute\narbitrary code (CVE-2017-0903).\n","status":"published","published":"2017-12-31T15:14:43Z","modified":"2026-04-16T06:25:00.447915344Z","updated_at":"2026-11-02T15:49:40.442238Z"},{"id":"SUSE-SU-2020:1570-1","title":"Security update for ruby2.1","description":"This update for ruby2.1 fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2015-9096: Fixed an SMTP command injection via CRLFsequences in a RCPT TO or MAIL FROM command (bsc#1043983).\n- CVE-2016-7798: Fixed an IV Reuse in GCM Mode (bsc#1055265).\n- CVE-2017-0898: Fixed a buffer underrun vulnerability in Kernel.sprintf (bsc#1058755).\n- CVE-2017-0899: Fixed an issue with malicious gem specifications, insufficient sanitation when printing gem specifications could have included terminal characters (bsc#1056286).\n- CVE-2017-0900: Fixed an issue with malicious gem specifications, the query command could have led to a denial of service attack against clients (bsc#1056286).\n- CVE-2017-0901: Fixed an issue with malicious gem specifications, potentially overwriting arbitrary files on the client system (bsc#1056286).\n- CVE-2017-0902: Fixed an issue with malicious gem specifications, that could have enabled MITM attacks against clients (bsc#1056286).\n- CVE-2017-0903: Fixed an unsafe object deserialization vulnerability (bsc#1062452).\n- CVE-2017-9228: Fixed a heap out-of-bounds write in bitset_set_range() during regex compilation (bsc#1069607).\n- CVE-2017-9229: Fixed an invalid pointer dereference in left_adjust_char_head() in oniguruma (bsc#1069632).\n- CVE-2017-10784: Fixed an escape sequence injection vulnerability in the Basic authentication of WEBrick (bsc#1058754).\n- CVE-2017-14033: Fixed a buffer underrun vulnerability in OpenSSL ASN1 decode (bsc#1058757).\n- CVE-2017-14064: Fixed an arbitrary memory exposure during a JSON.generate call (bsc#1056782).\n- CVE-2017-17405: Fixed a command injection vulnerability in Net::FTP (bsc#1073002).\n- CVE-2017-17742: Fixed an HTTP response splitting issue in WEBrick (bsc#1087434).\n- CVE-2017-17790: Fixed a command injection in lib/resolv.rb:lazy_initialize() (bsc#1078782).\n- CVE-2018-6914: Fixed an unintentional file and directory creation with directory traversal in tempfile and tmpdir (bsc#1087441).\n- CVE-2018-8777: Fixed a potential DoS caused by large requests in WEBrick (bsc#1087436).\n- CVE-2018-8778: Fixed a buffer under-read in String#unpack (bsc#1087433).\n- CVE-2018-8779: Fixed an unintentional socket creation by poisoned NUL byte in UNIXServer and UNIXSocket (bsc#1087440).\n- CVE-2018-8780: Fixed an unintentional directory traversal by poisoned NUL byte in Dir (bsc#1087437).\n- CVE-2018-16395: Fixed an issue with OpenSSL::X509::Name equality checking (bsc#1112530).\n- CVE-2018-16396: Fixed an issue with tainted string handling, where the flag was not propagated in Array#pack and String#unpack with some directives (bsc#1112532).\n- CVE-2018-1000073: Fixed a path traversal issue (bsc#1082007).\n- CVE-2018-1000074: Fixed an unsafe object deserialization vulnerability in gem owner, allowing arbitrary code execution with specially crafted YAML (bsc#1082008).\n- CVE-2018-1000075: Fixed an infinite loop vulnerability due to negative size in tar header causes Denial of Service (bsc#1082014).\n- CVE-2018-1000076: Fixed an improper verification of signatures in tarballs (bsc#1082009).\n- CVE-2018-1000077: Fixed an improper URL validation in the homepage attribute of ruby gems (bsc#1082010).\n- CVE-2018-1000078: Fixed a XSS vulnerability in the homepage attribute when displayed via gem server (bsc#1082011).\n- CVE-2018-1000079: Fixed a path traversal issue during gem installation allows to write to arbitrary filesystem locations (bsc#1082058).\n- CVE-2019-8320: Fixed a directory traversal issue when decompressing tar files (bsc#1130627).\n- CVE-2019-8321: Fixed an escape sequence injection vulnerability in verbose (bsc#1130623).\n- CVE-2019-8322: Fixed an escape sequence injection vulnerability in gem owner (bsc#1130622).\n- CVE-2019-8323: Fixed an escape sequence injection vulnerability in API response handling (bsc#1130620).\n- CVE-2019-8324: Fixed an issue with malicious gems that may have led to arbitrary code execution (bsc#1130617).\n- CVE-2019-8325: Fixed an escape sequence injection vulnerability in errors (bsc#1130611).\n- CVE-2019-15845: Fixed a NUL injection vulnerability in File.fnmatch and File.fnmatch? (bsc#1152994).\n- CVE-2019-16201: Fixed a regular expression denial of service vulnerability in WEBrick's digest access authentication (bsc#1152995).\n- CVE-2019-16254: Fixed an HTTP response splitting vulnerability in WEBrick (bsc#1152992).\n- CVE-2019-16255: Fixed a code injection vulnerability in Shell#[] and Shell#test (bsc#1152990).\n- CVE-2020-10663: Fixed an unsafe object creation vulnerability in JSON (bsc#1171517).\n\nNon-security issue fixed:\n\n- Add conflicts to libruby to make sure ruby and ruby-stdlib are also updated when libruby is updated (bsc#1048072).\n\nAlso yast2-ruby-bindings on SLES 12 SP2 LTSS was updated to handle the updated ruby interpreter. (bsc#1172275)\n","status":"published","published":"2020-06-09T09:16:12Z","modified":"2026-02-04T03:07:34.074987Z","updated_at":"2026-11-02T15:53:47.634847Z"},{"id":"USN-3439-1","title":"ruby1.9.1 vulnerabilities","description":"It was discovered that Ruby incorrectly handled certain inputs.\nAn attacker could use this to cause a buffer overrun.\n(CVE-2017-0898)\n\nYusuke Endoh discovered that Ruby incorrectly handled certain files.\nAn attacker could use this to execute terminal escape sequences.\n(CVE-2017-0899)\n\nYusuke Endoh discovered that Ruby incorrectly handled certain inputs.\nAn attacker could use this to cause a denial of service.\n(CVE-2017-0900)\n\nIt was discovered that Ruby incorrectly handled certain files.\nAn attacker could use this to overwrite any file on the filesystem.\n(CVE-2017-0901)\n\nIt was discovered that Ruby incorrectly handled certain inputs.\nAn attacker could use this to execute arbitrary code.\n(CVE-2017-10784)\n\nIt was discovered that Ruby incorrectly handled certain inputs.\nAn attacker could use this to cause a denial of service.\n(CVE-2017-14033)\n\nIt was discovered that Ruby incorrectly handled certain files.\nAn attacker could use this to expose sensitive information.\n(CVE-2017-14064)\n","status":"published","published":"2017-10-05T16:05:42Z","modified":"2026-04-27T15:33:05.315182179Z","updated_at":"2026-11-02T16:58:13.496563Z"},{"id":"USN-3553-1","title":"ruby2.3 vulnerabilities","description":"It was discovered that Ruby failed to validate specification names.\nAn attacker could possibly use a maliciously crafted gem to potentially\noverwrite any file on the filesystem. (CVE-2017-0901)\n\nIt was discovered that Ruby was vulnerable to a DNS hijacking vulnerability.\nAn attacker could use this to possibly force the RubyGems client to download\nand install gems from a server that the attacker controls. (CVE-2017-0902)\n\nIt was discovered that Ruby incorrectly handled certain YAML files. An attacker could\nuse this to possibly execute arbitrary code. (CVE-2017-0903)\n","status":"published","published":"2018-01-31T14:11:10Z","modified":"2026-04-27T15:19:06.47141Z","updated_at":"2026-11-02T16:58:13.496563Z"},{"id":"USN-3685-1","title":"ruby1.9.1, ruby2.0, ruby2.3 vulnerabilities","description":"Some of these CVE were already addressed in previous\nUSN: 3439-1, 3553-1, 3528-1. Here we address for\nthe remain releases.\n\nIt was discovered that Ruby incorrectly handled certain inputs.\nAn attacker could use this to cause a buffer overrun. (CVE-2017-0898)\n\nIt was discovered that Ruby incorrectly handled certain files.\nAn attacker could use this to overwrite any file on the filesystem.\n(CVE-2017-0901)\n\nIt was discovered that Ruby was vulnerable to a DNS hijacking vulnerability.\nAn attacker could use this to possibly force the RubyGems client to download\nand install gems from a server that the attacker controls. (CVE-2017-0902)\n\nIt was discovered that Ruby incorrectly handled certain YAML files.\nAn attacker could use this to possibly execute arbitrary code. (CVE-2017-0903)\n\nIt was discovered that Ruby incorrectly handled certain files.\nAn attacker could use this to expose sensitive information.\n(CVE-2017-14064)\n\nIt was discovered that Ruby incorrectly handled certain inputs.\nAn attacker could use this to execute arbitrary code. (CVE-2017-10784)\n\nIt was discovered that Ruby incorrectly handled certain network requests.\nAn attacker could possibly use this to inject a crafted key into a HTTP\nresponse. (CVE-2017-17742)\n\nIt was discovered that Ruby incorrectly handled certain files.\nAn attacker could possibly use this to execute arbitrary code.\nThis update is only addressed to ruby2.0. (CVE-2018-1000074)\n\nIt was discovered that Ruby incorrectly handled certain network requests.\nAn attacker could possibly use this to cause a denial of service.\n(CVE-2018-8777)\n","status":"published","published":"2018-06-13T19:56:22Z","modified":"2026-04-27T15:33:05.254977134Z","updated_at":"2026-11-02T16:58:13.496563Z"}]}}