Detections
Analytics

Alpine: multiple ruby packages: security update to 3.4.9-r0

medium Tenable Cloud Security Plugin ID 438901

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

 - zlib is a Ruby interface for the zlib compression/decompression library. Versions 3.0.0 and below, 3.1.0,
 3.1.1, 3.2.0 and 3.2.1 contain a buffer overflow vulnerability in the Zlib::GzipReader. The
 zstream_buffer_ungets function prepends caller-provided bytes ahead of previously produced output but
 fails to guarantee the backing Ruby string has enough capacity before the memmove shifts the existing
 data. This can lead to memory corruption when the buffer length exceeds capacity. This issue has been
 fixed in versions 3.0.1, 3.1.2 and 3.2.3. (CVE-2026-27820)

Solution

Update the ruby library and its related packages to version 3.4.9-r0 or later.

See Also

https://security.alpinelinux.org/vuln/CVE-2026-27820

Plugin Details

Severity: Medium

ID: 438901

Version: Revision 1.8

Type: Local

Published: 3/18/2026

Updated: 7/2/2026

Supported Sensors: Agentless Assessment, Tenable Cloud Security, Tenable Self-Hosted Container Security

Risk Information

VPR

Risk Factor: Medium

Score: 4.9

Percentile: 57.97

CVSS v2

Risk Factor: Critical

Base Score: 10

Temporal Score: 7.4

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS Score Source: CVE-2026-27820

CVSS v3

Risk Factor: Critical

Base Score: 9.8

Temporal Score: 8.5

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

CVSS v4

Risk Factor: Medium

Base Score: 6.3

Threat Score: 1.7

Threat Vector: CVSS:4.0/E:U

Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

Vulnerability Information

Exploit Ease: No known exploits are available

Reference Information

CVE: CVE-2026-27820