Packages / Debian 13 (Trixie) / Source / ruby / mruby

Source Package: mruby (3.3.0-1+b1)

lightweight implementation of the Ruby language

The following binary packages are built from this source package:

mruby
lightweight implementation of the Ruby language
libmruby-dev
lightweight implementation of the Ruby language (development files)

Known vulnerabilities

Matching against OpenFactory catalog package versions is in progress.

CVE	Severity	Version impact
[CVE-2026-79590] Published: Sep 10, 2026, 10:17:00 PM UTC A NULL pointer dereference vulnerability exists in the Prism parser component of mruby 4.0.0. An attacker can provide a specially crafted Ruby source file that triggers the parser to pass a NULL point	Medium(6.5)	Affected Details (4) `3.3.0-1` · amd64 · trixie Affected nvd · mruby · debian · 13 `3.3.0-1+b1` · arm64 · trixie Affected nvd · mruby · debian · 13 `3.3.0-1` · amd64 · trixie Affected nvd · mruby · debian · 13 `3.3.0-1+b1` · arm64 · trixie Affected nvd · mruby · debian · 13
[CVE-2026-1979] Published: Feb 6, 2026, 5:16:12 AM UTC mruby: CVE-2026-1979	Medium	Affected Details (4) `3.3.0-1` · amd64 · trixie Affected dsa · mruby · debian · 13 `3.3.0-1+b1` · arm64 · trixie Affected dsa · mruby · debian · 13 `3.3.0-1` · amd64 · trixie Affected dsa · mruby · debian · 13 `3.3.0-1+b1` · arm64 · trixie Affected dsa · mruby · debian · 13
[CVE-2025-13120] Published: Nov 13, 2025, 4:15:51 PM UTC mruby: CVE-2025-13120	Low(1.9)	Affected Details (4) `3.3.0-1` · amd64 · trixie Affected dsa · mruby · debian · 13 `3.3.0-1+b1` · arm64 · trixie Affected dsa · mruby · debian · 13 `3.3.0-1` · amd64 · trixie Affected dsa · mruby · debian · 13 `3.3.0-1+b1` · arm64 · trixie Affected dsa · mruby · debian · 13
[CVE-2025-7207] Published: Jul 9, 2025, 12:00:00 AM UTC mruby: CVE-2025-7207	Medium(5.5)	Affected Details (4) `3.3.0-1` · amd64 · trixie Affected dsa · mruby · debian · 13 `3.3.0-1+b1` · arm64 · trixie Affected dsa · mruby · debian · 13 `3.3.0-1` · amd64 · trixie Affected dsa · mruby · debian · 13 `3.3.0-1+b1` · arm64 · trixie Affected dsa · mruby · debian · 13

Fixed and unaffected versions (12)

CVE	Severity	Version impact
[CVE-2021-46023] Published: Feb 14, 2023, 4:15:11 PM UTC mruby: CVE-2021-46023	Medium	Fixed Details (4) `3.3.0-1` · amd64 · trixie Fixed · Fixed: `3.1.0-1` dsa · mruby · debian · 13 `3.3.0-1+b1` · arm64 · trixie Fixed · Fixed: `3.1.0-1` dsa · mruby · debian · 13 `3.3.0-1` · amd64 · trixie Fixed · Fixed: `3.1.0-1` dsa · mruby · debian · 13 `3.3.0-1+b1` · arm64 · trixie Fixed · Fixed: `3.1.0-1` dsa · mruby · debian · 13
[CVE-2021-46020] Published: Jan 14, 2022, 8:15:15 PM UTC mruby: CVE-2021-46020	Medium	Fixed Details (4) `3.3.0-1` · amd64 · trixie Fixed · Fixed: `3.1.0-1` dsa · mruby · debian · 13 `3.3.0-1+b1` · arm64 · trixie Fixed · Fixed: `3.1.0-1` dsa · mruby · debian · 13 `3.3.0-1` · amd64 · trixie Fixed · Fixed: `3.1.0-1` dsa · mruby · debian · 13 `3.3.0-1+b1` · arm64 · trixie Fixed · Fixed: `3.1.0-1` dsa · mruby · debian · 13
[CVE-2021-4110] Published: Dec 15, 2021, 5:15:08 AM UTC mruby: CVE-2021-4110	High(7.5)	Fixed Details (4) `3.3.0-1` · amd64 · trixie Fixed · Fixed: `3.0.0-2` dsa · mruby · debian · 13 `3.3.0-1+b1` · arm64 · trixie Fixed · Fixed: `3.0.0-2` dsa · mruby · debian · 13 `3.3.0-1` · amd64 · trixie Fixed · Fixed: `3.0.0-2` dsa · mruby · debian · 13 `3.3.0-1+b1` · arm64 · trixie Fixed · Fixed: `3.0.0-2` dsa · mruby · debian · 13
[CVE-2020-36401] Published: Jul 1, 2021, 3:15:00 AM UTC mruby: CVE-2020-36401	Medium	Fixed Details (4) `3.3.0-1` · amd64 · trixie Fixed · Fixed: `2.1.2-3` dsa · mruby · debian · 13 `3.3.0-1+b1` · arm64 · trixie Fixed · Fixed: `2.1.2-3` dsa · mruby · debian · 13 `3.3.0-1` · amd64 · trixie Fixed · Fixed: `2.1.2-3` dsa · mruby · debian · 13 `3.3.0-1+b1` · arm64 · trixie Fixed · Fixed: `2.1.2-3` dsa · mruby · debian · 13
[CVE-2020-15866] Published: Jul 21, 2020, 3:15:14 PM UTC mruby: CVE-2020-15866	Medium	Fixed Details (4) `3.3.0-1` · amd64 · trixie Fixed · Fixed: `2.1.2-1` dsa · mruby · debian · 13 `3.3.0-1+b1` · arm64 · trixie Fixed · Fixed: `2.1.2-1` dsa · mruby · debian · 13 `3.3.0-1` · amd64 · trixie Fixed · Fixed: `2.1.2-1` dsa · mruby · debian · 13 `3.3.0-1+b1` · arm64 · trixie Fixed · Fixed: `2.1.2-1` dsa · mruby · debian · 13
[CVE-2018-14337] Published: Jul 17, 2018, 3:29:00 AM UTC mruby: CVE-2018-14337	Medium	Fixed Details (4) `3.3.0-1` · amd64 · trixie Fixed · Fixed: `2.0.0-1` dsa · mruby · debian · 13 `3.3.0-1+b1` · arm64 · trixie Fixed · Fixed: `2.0.0-1` dsa · mruby · debian · 13 `3.3.0-1` · amd64 · trixie Fixed · Fixed: `2.0.0-1` dsa · mruby · debian · 13 `3.3.0-1+b1` · arm64 · trixie Fixed · Fixed: `2.0.0-1` dsa · mruby · debian · 13
[CVE-2018-12249] Published: Jun 12, 2018, 2:29:00 PM UTC mruby: CVE-2018-12249	Medium	Fixed Details (4) `3.3.0-1` · amd64 · trixie Fixed · Fixed: `1.4.1+20180622+git640fca32-1` dsa · mruby · debian · 13 `3.3.0-1+b1` · arm64 · trixie Fixed · Fixed: `1.4.1+20180622+git640fca32-1` dsa · mruby · debian · 13 `3.3.0-1` · amd64 · trixie Fixed · Fixed: `1.4.1+20180622+git640fca32-1` dsa · mruby · debian · 13 `3.3.0-1+b1` · arm64 · trixie Fixed · Fixed: `1.4.1+20180622+git640fca32-1` dsa · mruby · debian · 13
[CVE-2018-12248] Published: Jun 12, 2018, 2:29:00 PM UTC mruby: CVE-2018-12248	Medium	Fixed Details (4) `3.3.0-1` · amd64 · trixie Fixed · Fixed: `1.4.1+20180622+git640fca32-1` dsa · mruby · debian · 13 `3.3.0-1+b1` · arm64 · trixie Fixed · Fixed: `1.4.1+20180622+git640fca32-1` dsa · mruby · debian · 13 `3.3.0-1` · amd64 · trixie Fixed · Fixed: `1.4.1+20180622+git640fca32-1` dsa · mruby · debian · 13 `3.3.0-1+b1` · arm64 · trixie Fixed · Fixed: `1.4.1+20180622+git640fca32-1` dsa · mruby · debian · 13
[CVE-2018-11743] Published: Jun 5, 2018, 1:29:00 PM UTC mruby: CVE-2018-11743	Medium	Fixed Details (4) `3.3.0-1` · amd64 · trixie Fixed · Fixed: `1.4.1+20180622+git640fca32-1` dsa · mruby · debian · 13 `3.3.0-1+b1` · arm64 · trixie Fixed · Fixed: `1.4.1+20180622+git640fca32-1` dsa · mruby · debian · 13 `3.3.0-1` · amd64 · trixie Fixed · Fixed: `1.4.1+20180622+git640fca32-1` dsa · mruby · debian · 13 `3.3.0-1+b1` · arm64 · trixie Fixed · Fixed: `1.4.1+20180622+git640fca32-1` dsa · mruby · debian · 13
[CVE-2018-10199] Published: Apr 18, 2018, 3:29:00 PM UTC mruby: CVE-2018-10199	Medium	Fixed Details (4) `3.3.0-1` · amd64 · trixie Fixed · Fixed: `1.4.0+20180418+git54905e98-1` dsa · mruby · debian · 13 `3.3.0-1+b1` · arm64 · trixie Fixed · Fixed: `1.4.0+20180418+git54905e98-1` dsa · mruby · debian · 13 `3.3.0-1` · amd64 · trixie Fixed · Fixed: `1.4.0+20180418+git54905e98-1` dsa · mruby · debian · 13 `3.3.0-1+b1` · arm64 · trixie Fixed · Fixed: `1.4.0+20180418+git54905e98-1` dsa · mruby · debian · 13
[CVE-2018-10191] Published: Apr 17, 2018, 9:29:00 PM UTC mruby: CVE-2018-10191	Medium	Fixed Details (4) `3.3.0-1` · amd64 · trixie Fixed · Fixed: `1.4.0+20180418+git54905e98-1` dsa · mruby · debian · 13 `3.3.0-1+b1` · arm64 · trixie Fixed · Fixed: `1.4.0+20180418+git54905e98-1` dsa · mruby · debian · 13 `3.3.0-1` · amd64 · trixie Fixed · Fixed: `1.4.0+20180418+git54905e98-1` dsa · mruby · debian · 13 `3.3.0-1+b1` · arm64 · trixie Fixed · Fixed: `1.4.0+20180418+git54905e98-1` dsa · mruby · debian · 13
[CVE-2017-9527] Published: Jun 11, 2017, 5:29:00 PM UTC mruby: CVE-2017-9527	Medium	Fixed Details (4) `3.3.0-1` · amd64 · trixie Fixed · Fixed: `1.3.0-1` dsa · mruby · debian · 13 `3.3.0-1+b1` · arm64 · trixie Fixed · Fixed: `1.3.0-1` dsa · mruby · debian · 13 `3.3.0-1` · amd64 · trixie Fixed · Fixed: `1.3.0-1` dsa · mruby · debian · 13 `3.3.0-1+b1` · arm64 · trixie Fixed · Fixed: `1.3.0-1` dsa · mruby · debian · 13

Last synced: Oct 28, 2026, 12:07:57 AM UTC

[CVE catalog]

Sources

Debian 13 (Trixie) main amd64Sep 1, 2026
Authoritative source; repository metadata signature verified
Signature evidence
trixie-main-amd64:3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3
Repository-signature verification record
Signed object
https://deb.debian.org/debian/dists/trixie/InRelease
Signed-object SHA-256
98b25b5cd185c59d34aa6e4c3e9b5b8f01bbe9d104fe2dcfbcd30dc0a14a59ed
Signer fingerprint
4CB50190207B4758A3F73A796ED0E7B82643E131
Keyring revision
debian-archive-keyring.gpg
SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
Tool and policy
gpgv (GnuPG) 2.4.9
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Repository metadata hash linkage
Path
main/binary-amd64/Packages.xz
Expected SHA-256
3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3
Observed SHA-256
3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3
Result
match verified
Debian 13 (Trixie) main arm64Sep 1, 2026
Authoritative source; repository metadata signature verified
Signature evidence
trixie-main-arm64:753da751bbc7a679f48bd1b623ffd4479cb6861c426118284c76eb82909e4908
Repository-signature verification record
Signed object
https://deb.debian.org/debian/dists/trixie/InRelease
Signed-object SHA-256
98b25b5cd185c59d34aa6e4c3e9b5b8f01bbe9d104fe2dcfbcd30dc0a14a59ed
Signer fingerprint
4CB50190207B4758A3F73A796ED0E7B82643E131
Keyring revision
debian-archive-keyring.gpg
SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
Tool and policy
gpgv (GnuPG) 2.4.9
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Repository metadata hash linkage
Path
main/binary-arm64/Packages.xz
Expected SHA-256
753da751bbc7a679f48bd1b623ffd4479cb6861c426118284c76eb82909e4908
Observed SHA-256
753da751bbc7a679f48bd1b623ffd4479cb6861c426118284c76eb82909e4908
Result
match verified