There is a buffer over-read in Ruby before 2.6.10, 2.7.x before 2.7.6, 3.x before 3.0.4, and 3.1.x before 3.1.2. It occurs in String-to-Float conversion, including Kernel#Float and String#to_f.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade ruby-irbUpgrade ruby-libsUpgrade rubygem-power_assertUpgrade rubygem-pg-docUpgrade rubygem-mysql2Upgrade rubygem-rakeUpgrade ruby-default-gemsUpgrade rubygem-rbsUpgrade rubygem-jsonUpgrade rubygem-typeprofUpgrade rubyUpgrade rubygem-irbUpgrade rubygem-io-consoleUpgrade rubygem-bundlerUpgrade rubygem-minitestUpgrade rubygem-abrtUpgrade rubygem-mongoUpgrade rubygem-net-telnetUpgrade ruby-develUpgrade rubygem-bigdecimalUpgrade rubygem-bson-docUpgrade rubygem-rssUpgrade rubygem-pgUpgrade rubygem-test-unitUpgrade rubygem-did_you_meanUpgrade rubygem-mongo-docUpgrade rubygem-opensslUpgrade rubygem-rexmlUpgrade rubygemsUpgrade rubygem-bsonUpgrade rubygem-bundler-docUpgrade rubygem-abrt-docUpgrade rubygem-mysql2-docUpgrade rubygems-develUpgrade rubygem-rdocUpgrade rubygem-psychUpgrade ruby-docUpgrade rubygem-xmlrpc | Oct 11, 2022 | May 9, 2022 |
| Alpine Linux | — | Upgrade ruby | Mar 26, 2024 | May 9, 2022 |
| Amazon Linux Ami 2 | — | Upgrade rubygem-rssUpgrade rubygem-psychUpgrade rubyUpgrade rubygemsUpgrade ruby-develUpgrade rubygem-rbsUpgrade rubygem-bundlerUpgrade ruby-libsUpgrade rubygem-rdocUpgrade rubygem-irbUpgrade rubygem-jsonUpgrade rubygem-typeprofUpgrade rubygem-opensslUpgrade rubygem-power_assertUpgrade ruby-default-gemsUpgrade ruby-tcltkUpgrade rubygem-minitestUpgrade rubygem-net-telnetUpgrade rubygem-rakeUpgrade rubygem-rexmlUpgrade ruby-irbUpgrade rubygem-test-unitUpgrade rubygems-develUpgrade rubygem-io-consoleUpgrade rubygem-bigdecimalUpgrade ruby-docUpgrade rubygem-xmlrpcUpgrade ruby-debuginfoUpgrade rubygem-did_you_mean | Oct 11, 2022 | May 9, 2022 |
| Amazon_linux | — | Upgrade ruby20 | Oct 11, 2022 | May 4, 2022 |
| Apple Osx Accelerateframework | — | — | Oct 14, 2024 | May 9, 2022 |
| Apple Osx Apfs | — | — | Oct 14, 2024 | May 9, 2022 |
| Apple Osx Appleavd | — | — | Oct 14, 2024 | May 9, 2022 |
| Apple Osx Applemobilefileintegrity | — | — | Oct 14, 2024 | May 9, 2022 |
| Apple Osx Appleneuralengine | — | — | Oct 14, 2024 | May 9, 2022 |
| Apple Osx Assets | — | — | Oct 14, 2024 | May 9, 2022 |
| Apple Osx Ats | — | — | Oct 14, 2024 | May 9, 2022 |
| Apple Osx Audio | — | — | Oct 14, 2024 | May 9, 2022 |
| Apple Osx Avevideoencoder | — | — | Oct 14, 2024 | May 9, 2022 |
| Apple Osx Betaaccessutility | — | — | Oct 14, 2024 | May 9, 2022 |
| Apple Osx Bom | — | — | Oct 14, 2024 | May 9, 2022 |
| Apple Osx Bootcamp | — | — | Oct 14, 2024 | May 9, 2022 |
| Apple Osx Calendar | — | — | Oct 14, 2024 | May 9, 2022 |
| Apple Osx Cfnetwork | — | — | Oct 14, 2024 | May 9, 2022 |
| Apple Osx Colorsync | — | — | Oct 14, 2024 | May 9, 2022 |
| Apple Osx Corebluetooth | — | — | Oct 14, 2024 | May 9, 2022 |
| Apple Osx Coremedia | — | — | Oct 14, 2024 | May 9, 2022 |
| Apple Osx Coreservices | — | — | Oct 14, 2024 | May 9, 2022 |
| Apple Osx Coretypes | — | — | Oct 14, 2024 | May 9, 2022 |
| Apple Osx Crashreporter | — | — | Oct 14, 2024 | May 9, 2022 |
| Apple Osx Curl | — | — | Oct 14, 2024 | May 9, 2022 |
| Apple Osx Directoryutility | — | — | Oct 14, 2024 | May 9, 2022 |
| Apple Osx Driverkit | — | — | Oct 14, 2024 | May 9, 2022 |
| Apple Osx Exchange | — | — | Oct 14, 2024 | May 9, 2022 |
| Apple Osx Facetime | — | — | Oct 14, 2024 | May 9, 2022 |
| Apple Osx Finder | — | — | Oct 14, 2024 | May 9, 2022 |
| Apple Osx Findmy | — | — | Oct 14, 2024 | May 9, 2022 |
| Apple Osx Gpudrivers | — | — | Oct 14, 2024 | May 9, 2022 |
| Apple Osx Grapher | — | — | Oct 14, 2024 | May 9, 2022 |
| Apple Osx Heimdal | — | — | Oct 14, 2024 | May 9, 2022 |
| Apple Osx Icloudphotolibrary | — | — | Oct 14, 2024 | May 9, 2022 |
| Apple Osx Imageio | — | — | Oct 14, 2024 | May 9, 2022 |
| Apple Osx Imageprocessing | — | — | Oct 14, 2024 | May 9, 2022 |
| Apple Osx Intelgraphicsdriver | — | — | Oct 14, 2024 | May 9, 2022 |
| Apple Osx Iohidfamily | — | — | Oct 14, 2024 | May 9, 2022 |
| Apple Osx Iokit | — | — | Oct 14, 2024 | May 9, 2022 |
| Apple Osx Kernel | — | — | Oct 14, 2024 | May 9, 2022 |
| Apple Osx Mail | — | — | Oct 14, 2024 | May 9, 2022 |
| Apple Osx Maps | — | — | Oct 14, 2024 | May 9, 2022 |
| Apple Osx Medialibrary | — | — | Oct 14, 2024 | May 9, 2022 |
| Apple Osx Modelio | — | — | Oct 14, 2024 | May 9, 2022 |
| Apple Osx Ncurses | — | — | Oct 14, 2024 | May 9, 2022 |
| Apple Osx Notes | — | — | Oct 14, 2024 | May 9, 2022 |
| Apple Osx Notifications | — | — | Oct 14, 2024 | May 9, 2022 |
| Apple Osx Packagekit | — | — | Oct 14, 2024 | May 9, 2022 |
| Apple Osx Photos | — | — | Oct 14, 2024 | May 9, 2022 |
| Apple Osx Ppp | — | — | Oct 14, 2024 | May 9, 2022 |
| Apple Osx Ruby | — | Upgrade macOS to the latest version | Oct 25, 2022 | Oct 24, 2022 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | May 9, 2022 |
| Centos_linux | — | Upgrade ruby-develUpgrade rubygem-bundler-docUpgrade rubygem-mysql2-docUpgrade rubygems-develUpgrade ruby-default-gemsUpgrade rubygem-irbUpgrade rubygem-bundlerUpgrade rubygem-bson-docUpgrade rubygem-xmlrpcUpgrade rubygem-test-unitUpgrade ruby-debuginfoUpgrade rubygem-json-debuginfoUpgrade rubygem-pgUpgrade rubygemsUpgrade rubygem-opensslUpgrade rubygem-rdocUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-typeprofUpgrade rubygem-io-console-debuginfoUpgrade ruby-libs-debuginfoUpgrade rubygem-rexmlUpgrade rubygem-psych-debuginfoUpgrade ruby-irbUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-io-consoleUpgrade rubygem-bsonUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-bson-debugsourceUpgrade rubygem-mongo-docUpgrade rubygem-rakeUpgrade rubygem-pg-docUpgrade rubygem-abrtUpgrade rubygem-openssl-debuginfoUpgrade rubygem-did_you_meanUpgrade rubygem-abrt-docUpgrade rubygem-power_assertUpgrade rubygem-net-telnetUpgrade rubygem-rbsUpgrade rubygem-bigdecimalUpgrade rubygem-jsonUpgrade rubygem-rssUpgrade rubygem-mongoUpgrade ruby-docUpgrade ruby-debugsourceUpgrade ruby-libsUpgrade rubygem-mysql2Upgrade rubyUpgrade rubygem-minitestUpgrade rubygem-bson-debuginfoUpgrade rubygem-pg-debugsourceUpgrade rubygem-pg-debuginfoUpgrade rubygem-psych | Jul 5, 2022 | May 9, 2022 |
| Debian | — | Upgrade ruby2.7 | Jun 12, 2023 | May 9, 2022 |
| Freebsd | — | Upgrade ruby31Upgrade ruby27Upgrade rubyUpgrade ruby32Upgrade ruby30 | Nov 4, 2022 | Apr 13, 2022 |
| Gentoo Linux | — | Upgrade dev-lang/ruby. | Jan 25, 2024 | May 9, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade rubyUpgrade ruby-irbUpgrade ruby-help | Aug 18, 2022 | May 9, 2022 |
| Huawei Euleros 2_0_sp3 | — | Upgrade rubygems | Oct 28, 2022 | May 9, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade ruby-irbUpgrade ruby-libsUpgrade ruby | Jun 17, 2022 | May 9, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade rubyUpgrade ruby-libsUpgrade ruby-irb | Jun 22, 2022 | May 9, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade ruby-irbUpgrade rubyUpgrade ruby-help | Jul 11, 2022 | May 9, 2022 |
| Oracle_linux | — | Upgrade rubygem-typeprofUpgrade rubygem-xmlrpcUpgrade rubygem-abrt-docUpgrade rubygem-bson-docUpgrade rubygem-pg-docUpgrade rubygem-test-unitUpgrade rubygem-bundler-docUpgrade rubygem-bigdecimalUpgrade ruby-libsUpgrade rubygems-develUpgrade rubygem-mongoUpgrade rubygem-minitestUpgrade rubygem-power_assertUpgrade rubygem-pgUpgrade rubygem-net-telnetUpgrade rubygemsUpgrade rubygem-psychUpgrade rubygem-abrtUpgrade rubygem-rdocUpgrade rubygem-did_you_meanUpgrade ruby-develUpgrade rubygem-mysql2-docUpgrade rubygem-jsonUpgrade rubygem-rakeUpgrade rubygem-bsonUpgrade rubyUpgrade rubygem-opensslUpgrade rubygem-mysql2Upgrade rubygem-rexmlUpgrade ruby-irbUpgrade rubygem-rbsUpgrade ruby-default-gemsUpgrade rubygem-mongo-docUpgrade rubygem-rssUpgrade rubygem-irbUpgrade rubygem-io-consoleUpgrade ruby-docUpgrade rubygem-bundler | Jul 2, 2022 | Apr 14, 2022 |
| Redhat_linux | — | Upgrade rubygem-rakeUpgrade rubygem-rssUpgrade rubygem-mysql2Upgrade ruby-default-gemsUpgrade rubygem-rbsUpgrade rubygem-opensslUpgrade rubygem-abrtUpgrade ruby-develUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-pg-debugsourceUpgrade rubygem-bundlerUpgrade ruby-debuginfoUpgrade rubygem-io-console-debuginfoUpgrade rubygem-mysql2-docUpgrade rubyNo solution existsUpgrade rubygem-bundler-docUpgrade rubygem-bsonUpgrade rubygem-mongo-docUpgrade rubygem-jsonUpgrade rubygem-did_you_meanUpgrade rubygem-rexmlUpgrade ruby-docUpgrade rubygem-pg-debuginfoUpgrade rubygem-rdocUpgrade rubygem-irbUpgrade ruby-irbUpgrade rubygem-test-unitUpgrade rubygem-json-debuginfoUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-io-consoleUpgrade rubygems-develUpgrade ruby-debugsourceUpgrade rubygem-net-telnetUpgrade rubygem-openssl-debuginfoUpgrade rubygem-minitestUpgrade rubygem-mongoUpgrade rubygem-psychUpgrade rubygem-bigdecimalUpgrade rubygem-bson-docUpgrade rubygem-typeprofUpgrade rubygem-power_assertUpgrade rubygem-pgUpgrade ruby-libsUpgrade rubygem-bson-debugsourceUpgrade rubygem-xmlrpcUpgrade rubygem-abrt-docUpgrade rubygem-pg-docUpgrade ruby-libs-debuginfoUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-bson-debuginfoUpgrade rubygemsUpgrade rubygem-psych-debuginfo | Jul 5, 2022 | May 9, 2022 |
| Rocky_linux | — | Upgrade rubygem-json-debuginfoUpgrade rubygem-bsonUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-io-console-debuginfoUpgrade rubygem-psych-debuginfoUpgrade rubygem-bigdecimalUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-psychUpgrade ruby-debuginfoUpgrade ruby-develUpgrade rubygem-bson-debuginfoUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-opensslUpgrade rubyUpgrade ruby-libsUpgrade rubygem-jsonUpgrade rubygem-pgUpgrade rubygem-pg-debuginfoUpgrade ruby-libs-debuginfoUpgrade rubygem-mysql2Upgrade rubygem-io-consoleUpgrade rubygem-openssl-debuginfoUpgrade ruby-debugsourceUpgrade rubygem-pg-debugsourceUpgrade rubygem-bson-debugsource | Mar 12, 2024 | May 9, 2022 |
| Suse | — | Upgrade ruby2.5-devel-extraUpgrade ruby2.5-docUpgrade ruby2.5Upgrade libruby2_5-2_5Upgrade ruby2.5-stdlibUpgrade ruby2.5-develUpgrade ruby2.5-doc-ri | Oct 26, 2022 | May 9, 2022 |
| Ubuntu | — | Upgrade libruby3.0Upgrade libruby2.3 (Ubuntu Pro)Upgrade ruby3.0Upgrade ruby2.5Upgrade ruby2.7Upgrade libruby2.5Upgrade ruby2.3 (Ubuntu Pro)Upgrade libruby2.7 | Jun 7, 2022 | May 4, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 9, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub