Packages / Debian 12 (Bookworm) / Source / libdevel / mruby

Source Package: mruby (3.1.0-3)

lightweight implementation of the Ruby language (development files)

The following binary packages are built from this source package:

libmruby-dev
lightweight implementation of the Ruby language (development files)

Known vulnerabilities

Matching against OpenFactory catalog package versions is in progress.

CVE	Severity	Version impact
[CVE-2026-79590] Published: Sep 10, 2026, 10:17:00 PM UTC A NULL pointer dereference vulnerability exists in the Prism parser component of mruby 4.0.0. An attacker can provide a specially crafted Ruby source file that triggers the parser to pass a NULL point	Medium(6.5)	Affected Details (2) `3.1.0-3` · amd64 · bookworm Affected nvd · mruby · debian · bookworm; nvd · mruby · debian · 12 `3.1.0-3` · arm64 · bookworm Affected nvd · mruby · debian · bookworm; nvd · mruby · debian · 12
[CVE-2026-1979] Published: Feb 6, 2026, 5:16:12 AM UTC mruby: CVE-2026-1979	Medium	Affected Details (2) `3.1.0-3` · amd64 · bookworm Affected dsa · mruby · debian · bookworm; dsa · mruby · debian · 12 `3.1.0-3` · arm64 · bookworm Affected dsa · mruby · debian · bookworm; dsa · mruby · debian · 12
[CVE-2025-13120] Published: Nov 13, 2025, 4:15:51 PM UTC mruby: CVE-2025-13120	Low(1.9)	Affected Details (2) `3.1.0-3` · amd64 · bookworm Affected dsa · mruby · debian · bookworm; dsa · mruby · debian · 12 `3.1.0-3` · arm64 · bookworm Affected dsa · mruby · debian · bookworm; dsa · mruby · debian · 12
[CVE-2025-7207] Published: Jul 9, 2025, 12:00:00 AM UTC mruby: CVE-2025-7207	Medium(5.5)	Affected Details (2) `3.1.0-3` · amd64 · bookworm Affected dsa · mruby · debian · bookworm; dsa · mruby · debian · 12 `3.1.0-3` · arm64 · bookworm Affected dsa · mruby · debian · bookworm; dsa · mruby · debian · 12

Fixed and unaffected versions (16)

CVE	Severity	Version impact
[CVE-2025-12875] Published: Nov 7, 2025, 9:15:40 PM UTC mruby: CVE-2025-12875	Low(1.9)	Not affected Details (2) `3.1.0-3` · amd64 · bookworm Not affected dsa · mruby · debian · bookworm `3.1.0-3` · arm64 · bookworm Not affected dsa · mruby · debian · bookworm
[CVE-2022-0623] Published: Jul 9, 2025, 12:00:00 AM UTC mruby: CVE-2022-0623	Critical(9.1)	Not affected Details (2) `3.1.0-3` · amd64 · bookworm Not affected dsa · mruby · debian · bookworm `3.1.0-3` · arm64 · bookworm Not affected dsa · mruby · debian · bookworm
[CVE-2022-0717] Published: Jul 9, 2025, 12:00:00 AM UTC mruby: CVE-2022-0717	Critical(9.1)	Not affected Details (2) `3.1.0-3` · amd64 · bookworm Not affected dsa · mruby · debian · bookworm `3.1.0-3` · arm64 · bookworm Not affected dsa · mruby · debian · bookworm
[CVE-2022-1276] Published: Jul 9, 2025, 12:00:00 AM UTC mruby: CVE-2022-1276	Critical(9.8)	Not affected Details (2) `3.1.0-3` · amd64 · bookworm Not affected dsa · mruby · debian · bookworm `3.1.0-3` · arm64 · bookworm Not affected dsa · mruby · debian · bookworm
[CVE-2022-0080] Published: Jun 15, 2024, 12:00:00 AM UTC mruby: CVE-2022-0080	Critical(9.8)	Fixed Details (2) `3.1.0-3` · amd64 · bookworm Fixed · Fixed: `3.0.0-3` dsa · mruby · debian · bookworm `3.1.0-3` · arm64 · bookworm Fixed · Fixed: `3.0.0-3` dsa · mruby · debian · bookworm
[CVE-2022-0240] Published: Jun 15, 2024, 12:00:00 AM UTC mruby: CVE-2022-0240	High(7.5)	Fixed Details (2) `3.1.0-3` · amd64 · bookworm Fixed · Fixed: `3.1.0-1` dsa · mruby · debian · bookworm `3.1.0-3` · arm64 · bookworm Fixed · Fixed: `3.1.0-1` dsa · mruby · debian · bookworm
[CVE-2022-0326] Published: Jun 15, 2024, 12:00:00 AM UTC mruby: CVE-2022-0326	Medium(5.5)	Not affected Details (2) `3.1.0-3` · amd64 · bookworm Not affected dsa · mruby · debian · bookworm `3.1.0-3` · arm64 · bookworm Not affected dsa · mruby · debian · bookworm
[CVE-2022-0481] Published: Jun 15, 2024, 12:00:00 AM UTC mruby: CVE-2022-0481	High(7.5)	Fixed Details (2) `3.1.0-3` · amd64 · bookworm Fixed · Fixed: `3.1.0-1` dsa · mruby · debian · bookworm `3.1.0-3` · arm64 · bookworm Fixed · Fixed: `3.1.0-1` dsa · mruby · debian · bookworm
[CVE-2022-0890] Published: Jun 15, 2024, 12:00:00 AM UTC mruby: CVE-2022-0890	Medium(5.5)	Fixed Details (2) `3.1.0-3` · amd64 · bookworm Fixed · Fixed: `3.1.0-1` dsa · mruby · debian · bookworm `3.1.0-3` · arm64 · bookworm Fixed · Fixed: `3.1.0-1` dsa · mruby · debian · bookworm
[CVE-2022-1212] Published: Jun 15, 2024, 12:00:00 AM UTC mruby: CVE-2022-1212	Critical(9.8)	Fixed Details (2) `3.1.0-3` · amd64 · bookworm Fixed · Fixed: `3.0.0-4` dsa · mruby · debian · bookworm `3.1.0-3` · arm64 · bookworm Fixed · Fixed: `3.0.0-4` dsa · mruby · debian · bookworm
[CVE-2022-1286] Published: Jun 15, 2024, 12:00:00 AM UTC mruby: CVE-2022-1286	Critical(9.8)	Fixed Details (2) `3.1.0-3` · amd64 · bookworm Fixed · Fixed: `3.0.0-4` dsa · mruby · debian · bookworm `3.1.0-3` · arm64 · bookworm Fixed · Fixed: `3.0.0-4` dsa · mruby · debian · bookworm
[CVE-2022-1427] Published: Jun 15, 2024, 12:00:00 AM UTC mruby: CVE-2022-1427	High(7.8)	Fixed Details (2) `3.1.0-3` · amd64 · bookworm Fixed · Fixed: `3.1.0-1` dsa · mruby · debian · bookworm `3.1.0-3` · arm64 · bookworm Fixed · Fixed: `3.1.0-1` dsa · mruby · debian · bookworm
[CVE-2021-46023] Published: Feb 14, 2023, 4:15:11 PM UTC mruby: CVE-2021-46023	Medium	Fixed Details (2) `3.1.0-3` · amd64 · bookworm Fixed · Fixed: `3.1.0-1` dsa · mruby · debian · bookworm; dsa · mruby · debian · 12 `3.1.0-3` · arm64 · bookworm Fixed · Fixed: `3.1.0-1` dsa · mruby · debian · bookworm; dsa · mruby · debian · 12
[CVE-2021-46020] Published: Jan 14, 2022, 8:15:15 PM UTC mruby: CVE-2021-46020	Medium	Fixed Details (2) `3.1.0-3` · amd64 · bookworm Fixed · Fixed: `3.1.0-1` dsa · mruby · debian · bookworm; dsa · mruby · debian · 12 `3.1.0-3` · arm64 · bookworm Fixed · Fixed: `3.1.0-1` dsa · mruby · debian · bookworm; dsa · mruby · debian · 12
[CVE-2021-4110] Published: Dec 15, 2021, 5:15:08 AM UTC mruby: CVE-2021-4110	High(7.5)	Fixed Details (2) `3.1.0-3` · amd64 · bookworm Fixed · Fixed: `3.0.0-2` dsa · mruby · debian · bookworm; dsa · mruby · debian · 12 `3.1.0-3` · arm64 · bookworm Fixed · Fixed: `3.0.0-2` dsa · mruby · debian · bookworm; dsa · mruby · debian · 12
[CVE-2020-36401] Published: Jul 1, 2021, 3:15:00 AM UTC mruby: CVE-2020-36401	Medium	Fixed Details (2) `3.1.0-3` · amd64 · bookworm Fixed · Fixed: `2.1.2-3` dsa · mruby · debian · bookworm; dsa · mruby · debian · 12 `3.1.0-3` · arm64 · bookworm Fixed · Fixed: `2.1.2-3` dsa · mruby · debian · bookworm; dsa · mruby · debian · 12

[Next results]

Last synced: Oct 28, 2026, 1:40:02 AM UTC

[CVE catalog]

Sources

Debian 12 (Bookworm) main amd64Sep 1, 2026
Authoritative source; repository metadata signature verified
Signature evidence
bookworm-main-amd64:9e0b5aabb2465b3d2e7a7fe27f9913846277833f7a2826e7767acccff5b588c5
Repository-signature verification record
Signed object
https://deb.debian.org/debian/dists/bookworm/InRelease
Signed-object SHA-256
77737fa4b34f2693e982cc9ee35736816c35a7778fc2d326cc1bbf5b301fe1aa
Signer fingerprint
4CB50190207B4758A3F73A796ED0E7B82643E131
Keyring revision
debian-archive-keyring.gpg
SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
Tool and policy
gpgv (GnuPG) 2.4.9
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Repository metadata hash linkage
Path
main/binary-amd64/Packages.xz
Expected SHA-256
9e0b5aabb2465b3d2e7a7fe27f9913846277833f7a2826e7767acccff5b588c5
Observed SHA-256
9e0b5aabb2465b3d2e7a7fe27f9913846277833f7a2826e7767acccff5b588c5
Result
match verified
Debian 12 (Bookworm) main arm64Sep 1, 2026
Authoritative source; repository metadata signature verified
Signature evidence
bookworm-main-arm64:2ddb1737692e8c45c53e8d57c0ce4cd21c78c5703b830c3226b1423566a06c00
Repository-signature verification record
Signed object
https://deb.debian.org/debian/dists/bookworm/InRelease
Signed-object SHA-256
77737fa4b34f2693e982cc9ee35736816c35a7778fc2d326cc1bbf5b301fe1aa
Signer fingerprint
4CB50190207B4758A3F73A796ED0E7B82643E131
Keyring revision
debian-archive-keyring.gpg
SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
Tool and policy
gpgv (GnuPG) 2.4.9
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Repository metadata hash linkage
Path
main/binary-arm64/Packages.xz
Expected SHA-256
2ddb1737692e8c45c53e8d57c0ce4cd21c78c5703b830c3226b1423566a06c00
Observed SHA-256
2ddb1737692e8c45c53e8d57c0ce4cd21c78c5703b830c3226b1423566a06c00
Result
match verified