ALSA-2025:15447 Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: drm/vkms: Fix use after free and double free on init error CVE-2025-22097 kernel: udmabuf: fix a buf size overflow issue during udmabuf creation CVE-2025-37803 kernel: net/sched: Always...

ruby-advisory-db

This is a database of security advisories for Ruby libraries, maintained by the ruby-advisory-db project. The database contains a list of directories that match the names of Ruby libraries on rubygems.org, with each directory containing one or more advisory files for the library. Each advisory fi...

drm/msm/gem: prevent integer overflow in msm_ioctl_gem_submit()

...

Linux Distros Unpatched Vulnerability : CVE-2013-0162

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The diffpp function in lib/gauntletrubyparser.rb in the rubyparser gem 3.1.1 and earlier for Ruby allows local users to overwrite arbitrary files via a symlink...

Linux Distros Unpatched Vulnerability : CVE-2023-51774

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The json-jwt aka JSON::JWT gem 1.16.3 for Ruby sometimes allows bypass of identity checks via a sign/encryption confusion attack. For example, JWE can sometimes...

Linux Distros Unpatched Vulnerability : CVE-2025-38669

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Revert drm/gem-shmem: Use dmabuf from GEM object instance This reverts commit 1a148af06000e545e714fe3210af3d77ff903c11. The dmabuf field in struct drmgemobject ...

Linux Distros Unpatched Vulnerability : CVE-2025-38674

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Revert drm/prime: Use dmabuf from GEM object instance This reverts commit f83a9b8c7fd0557b0c50784bfdc1bbe9140c9bf8. The dmabuf field in struct drmgemobject is n...

Linux Distros Unpatched Vulnerability : CVE-2025-38673

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Revert drm/gem-framebuffer: Use dmabuf from GEM object instance This reverts commit cce16fcd7446dcff7480cd9d2b6417075ed81065. The dmabuf field in struct...

Linux Distros Unpatched Vulnerability : CVE-2025-38672

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Revert drm/gem-dma: Use dmabuf from GEM object instance This reverts commit e8afa1557f4f963c9a511bd2c6074a941c308685. The dmabuf field in struct drmgemobject is...

Malicious code in monolith-twirp-merge-queue-go-mergequeuemonolith (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 58e829a595050f4922bb0937c2d6c0d2759059af987ceb38f0c33712345eadc2 The OpenSSF Package Analysis project identified 'monolith-twirp-merge-queue-go-mergequeuemonolith' @ 1.0.2 rubygems as malicious. It is consider...

MAL-2025-46938 Malicious code in monolith-twirp-webhooksubscriptions-subscriptions (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis df56bfac6f56194f6dc4db74f8761484bd20d2a46e61558f757a3179e3e249e8 The OpenSSF Package Analysis project identified 'monolith-twirp-webhooksubscriptions-subscriptions' @ 1.5.0 rubygems as malicious. It is...

MAL-2025-46958 Malicious code in monolith-twirp-webhooks-core (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2ce839cee3a269944cf305057d6746895eb15dec90dbbe6dd48210569287082d The OpenSSF Package Analysis project identified 'monolith-twirp-webhooks-core' @ 1.7.0 rubygems as malicious. It is considered malicious because...

Malicious code in monolith-twirp-kredz-core (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2350ce89ed9fa54fd9b4769812f9fd66b03f8d0252fb066f4e001e24e86cdad1 The OpenSSF Package Analysis project identified 'monolith-twirp-kredz-core' @ 1.0.3 rubygems as malicious. It is considered malicious because: -...

MAL-2025-46921 Malicious code in sarif (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5fa2b10f84e5b81ecdaf78fe9fa765da27b2d8946e98e58b4a1b25dfacd3c62f The OpenSSF Package Analysis project identified 'sarif' @ 0.1.3 rubygems as malicious. It is considered malicious because: - The package execute...

Malicious code in sarif (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5fa2b10f84e5b81ecdaf78fe9fa765da27b2d8946e98e58b4a1b25dfacd3c62f The OpenSSF Package Analysis project identified 'sarif' @ 0.1.3 rubygems as malicious. It is considered malicious because: - The package execute...

MAL-2025-46914 Malicious code in monolith-twirp-octoshift-migrations (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8c8938887f6cff7780099f00ec00251da4904659f59fb9c197583288fc8951c4 The OpenSSF Package Analysis project identified 'monolith-twirp-octoshift-migrations' @ 1.8.0 rubygems as malicious. It is considered malicious...

Linux Distros Unpatched Vulnerability : CVE-2019-16779

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In RubyGem excon before 0.71.0, there was a race condition around persistent connections, where a connection which is interrupted such as by a timeout would lea...

Linux Distros Unpatched Vulnerability : CVE-2017-16229

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Ox gem 2.8.1 for Ruby, the process crashes with a stack-based buffer over-read in the readfromstr function in saxbuf.c when a crafted input is supplied t...

Linux Distros Unpatched Vulnerability : CVE-2020-25739

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the gon gem before gon-6.4.0 for Ruby. MultiJson does not honor the escapemode parameter to escape fields as an XSS protection...

CVE-2025-58067

CVE-2025-58067 affects Basecamp’s google_sign_in gem for Rails before 1.3.1. The issue allows a redirect to another origin when the session key proceed_to is a protocol-relative URL, potentially set by a malicious site via form submission and then used in an OAuth2 request. The vulnerability reli...