Support Content Notification - Support Portal

Product Release Advisory - Ruby Buildpack 1.10.46 - ruby-buildpack-offline-cflinuxfs4

Product/Component

Tanzu Kubernetes Runtime

7 more products

Notification Id

36367

Last Updated

05 November 2025

Initial Publication Date

05 November 2025

Status

CLOSED

Severity

CRITICAL

CVSS Base Score

9.8

WorkAround

N/A

Affected CVE

See CVE list in advisory

Product Release Advisory - Ruby Buildpack 1.10.46

	Highest Score CVE from list below advisory details
Severity	Critical
CVSS V4 Vector	Unavailable
CVSS V4 Score	Unavailable (Sev: Unavailable)
CVSS V3.1 Vector	Unavailable
CVSS V3.1 Score	Unavailable (Sev: Unavailable)
CVSS V2 Vector	AV:N/AC:L/Au:N/C:P/I:P/A:P
CVSS V2 Score	7.5 (Sev: Unavailable)

Note: if cvss scores are "Unavailable" is is most likely due to the vulnerability being GHSA or BDSA without a matching CVE for nvd lookup.

Product Version Release Advisory

Security Fixes This release has the following security fixes, listed by component.

Component	Vulnerabilities Resolved
ruby-buildpack-offline-cflinuxfs4	CVE-2018-1000076 (Critical) CVE-2019-8324 (High) CVE-2018-3779 - BDSA-2018-2785 (High) CVE-2018-1000074 (High) CVE-2019-8325 (High) CVE-2019-8323 (High) CVE-2019-8322 (High) CVE-2019-8321 (High) CVE-2018-1000075 (High) CVE-2018-1000073 (High) CVE-2025-46551 - BDSA-2025-3923 (Medium) No known CVE - BDSA-2018-4527 (Medium) CVE-2021-43809 - BDSA-2021-3711 (Medium) CVE-2018-1000078 (Medium) No known CVE - BDSA-2018-4355 (Medium) CVE-2018-1000079 (Medium) CVE-2018-1000077 (Medium)

Component

Vulnerabilities Resolved

ruby-buildpack-offline-cflinuxfs4