{"id":"CLSA-2026-1777444043","summary":"ruby: Fix of 2 CVEs","details":"- CVE-2021-28965: fix REXML XML round-trip vulnerability\n- CVE-2022-28739: fix buffer over-read in String-to-Float conversion","modified":"2026-05-27T11:18:24.731380377Z","published":"2026-04-29T06:53:28Z","upstream":["CVE-2021-28965","CVE-2022-28739"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/centos7els/CLSA-2026-1777444043.html"}],"affected":[{"package":{"name":"ruby","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/ruby?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0.648-39.el7_9.tuxcare.els12"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1777444043.json"}},{"package":{"name":"ruby-devel","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/ruby-devel?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0.648-39.el7_9.tuxcare.els12"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1777444043.json"}},{"package":{"name":"ruby-doc","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/ruby-doc?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0.648-39.el7_9.tuxcare.els12"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1777444043.json"}},{"package":{"name":"ruby-irb","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/ruby-irb?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0.648-39.el7_9.tuxcare.els12"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1777444043.json"}},{"package":{"name":"ruby-libs","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/ruby-libs?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0.648-39.el7_9.tuxcare.els12"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1777444043.json"}},{"package":{"name":"ruby-tcltk","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/ruby-tcltk?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0.648-39.el7_9.tuxcare.els12"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1777444043.json"}},{"package":{"name":"rubygem-bigdecimal","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/rubygem-bigdecimal?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.0-39.el7_9.tuxcare.els12"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1777444043.json"}},{"package":{"name":"rubygem-io-console","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/rubygem-io-console?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.2-39.el7_9.tuxcare.els12"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1777444043.json"}},{"package":{"name":"rubygem-json","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/rubygem-json?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.7-39.el7_9.tuxcare.els12"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1777444043.json"}},{"package":{"name":"rubygem-minitest","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/rubygem-minitest?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.2-39.el7_9.tuxcare.els12"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1777444043.json"}},{"package":{"name":"rubygem-psych","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/rubygem-psych?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0-39.el7_9.tuxcare.els12"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1777444043.json"}},{"package":{"name":"rubygem-rake","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/rubygem-rake?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.6-39.el7_9.tuxcare.els12"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1777444043.json"}},{"package":{"name":"rubygem-rdoc","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/rubygem-rdoc?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.0-39.el7_9.tuxcare.els12"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1777444043.json"}},{"package":{"name":"rubygems","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/rubygems?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.14.1-39.el7_9.tuxcare.els12"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1777444043.json"}},{"package":{"name":"rubygems-devel","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/rubygems-devel?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.14.1-39.el7_9.tuxcare.els12"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1777444043.json"}}],"schema_version":"1.7.5"}