{"action":"Upgrade util-linux to 2.37.4-r0 or later.","affected":[{"fixed":"2.37.4-r0","introduced":"0"}],"component":"util-linux","cve_ids":[],"ecosystem":"Alpine","ecosystem_qualifier":"Alpine:v3.13","exploited":false,"fixed_versions":["2.37.4-r0"],"id":"tcs_01M5NDN6P3SP7DNECJW8JGZEQ1","modified_at":"2026-10-15T07:17:54.144412138Z","published_at":"2022-02-21T19:15:08.393Z","references":["https://osv.dev/vulnerability/ALPINE-CVE-2022-0563","https://security.alpinelinux.org/vuln/CVE-2022-0563"],"severity":{"label":"medium","score":5.5},"sources":[{"source":"osv","source_id":"ALPINE-CVE-2022-0563#Alpine:v3.13/util-linux","url":"https://osv.dev/vulnerability/ALPINE-CVE-2022-0563"}],"summary":"A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support. The Readline library uses an \"INPUTRC\" environment variable to get a path to the library config file. Wh"}