Astra Linux – Vulnerability in Ruby 2.5

REXML is an XML toolkit for Ruby. The REXML gem prior to version 3.3.9 has a ReDoS vulnerability when it parses an XML document containing many digits between “&” and “x…” in a hexadecimal character reference &x…. This issue does not occur in Ruby 3.2 or later versions. Ruby 3.1 is the only...

GHSA-4MRV-5P47-P938 vulnerabilities

Vulnerabilities for packages: ruby3.2-fluentd-kubernetes-daemonset, kube-logging-operator...

CVE-2026-63263 vulnerabilities

Vulnerabilities for packages: ruby3.3-elasticsearch, ruby3.4-elasticsearch, ruby4.0-elasticsearch, ruby3.2-elasticsearch...

GHSA-5V5G-HVW6-X2X7 vulnerabilities

Vulnerabilities for packages: ruby3.3-elasticsearch, ruby3.2-elasticsearch, ruby4.0-elasticsearch, ruby3.4-elasticsearch...

GHSA-9FHM-53XW-H9C3 vulnerabilities

Vulnerabilities for packages: ruby3.3-elasticsearch, ruby3.2-elasticsearch, ruby4.0-elasticsearch, ruby3.4-elasticsearch...

GHSA-4MRV-5P47-P938 vulnerabilities

Vulnerabilities for packages: ruby3.2-fluentd-kubernetes-daemonset, kube-logging-operator...

GHSA-CJ75-F6XR-R4G7 vulnerabilities

Vulnerabilities for packages: ruby3.4-rails, gitlab-rails-ce, ruby4.0-rails, ruby3.3-rails, gitlab-rails-ce-fips, ruby3.2-rails, pghero-fips, pghero...

SUSE SLED15: libruby3_4-3_4 / ruby3.4 / ruby3.4-devel / ruby3.4-devel-extra / etc (SUSE-SU-2026:3090-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3090-1 advisory. This update for ruby3.4 fixes the following issues - CVE-2026-42258: Net:IMAP: Command Injection via Symbol...

Security update for ruby3.4

This update for ruby3.4 fixes the following issues CVE-2026-42258: Net:IMAP: Command Injection via Symbol Arguments bsc1268011. CVE-2026-47240: Net:IMAP: Command Injection via non-synchronizing literal in "raw" argument bsc1268337. CVE-2026-47241: Net:IMAP: Denial of Service via incomplete raw...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: ruby3.4: ruby3.4-3.4.10-31.hum1 aarch64, x8664 ruby3.4-bundled-gems-3.4.10-31.hum1 aarch64, x8664 ruby3.4-default-gems-3.4.10-31.hum1 noarch ruby3.4-devel-3.4.10-31.hum1 aarch64, x8664...

Important: Red Hat Security Advisory: ruby:3.3 security update

An update for the ruby:3.3 module is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: ruby3.4: ruby3.4-3.4.9-31.4.hum1 aarch64, x8664 ruby3.4-bundled-gems-3.4.9-31.4.hum1 aarch64, x8664 ruby3.4-default-gems-3.4.9-31.4.hum1 noarch ruby3.4-devel-3.4.9-31.4.hum1 aarch64, x8664...

AlmaLinux 8 : ruby:3.3 (ALSA-2026:33515)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:33515 advisory. ruby: net-imap: Net::IMAP: Denial of Service via crafted IMAP responses CVE-2026-42245 ruby/net-imap: ruby: Net::IMAP: IMAP Command Injection via Symbol...

CVE-2026-44160 vulnerabilities

Vulnerabilities for packages: kube-fluentd-operator, kube-logging-operator, ruby4.0-fluentd-kubernetes-daemonset, ruby3.3-fluentd-kubernetes-daemonset, ruby3.4-fluentd-kubernetes-daemonset, ruby3.2-fluentd-kubernetes-daemonset...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: ruby3.3: ruby3.3-3.3.10-23.2.hum1 aarch64, x8664 ruby3.3-bundled-gems-3.3.10-23.2.hum1 aarch64, x8664 ruby3.3-default-gems-3.3.10-23.2.hum1 noarch ruby3.3-devel-3.3.10-23.2.hum1 aarch64, x8664...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: ruby3.4: ruby3.4-3.4.8-31.2.hum1 aarch64, x8664 ruby3.4-bundled-gems-3.4.8-31.2.hum1 aarch64, x8664 ruby3.4-default-gems-3.4.8-31.2.hum1 noarch ruby3.4-devel-3.4.8-31.2.hum1 aarch64, x8664...

GHSA-VWM4-62GF-X745 vulnerabilities

Vulnerabilities for packages: kube-logging-operator, ruby4.0-fluentd-kubernetes-daemonset, ruby3.3-fluentd-kubernetes-daemonset, ruby3.4-fluentd-kubernetes-daemonset, ruby3.2-fluentd-kubernetes-daemonset...

CVE-2026-54898 vulnerabilities

Vulnerabilities for packages: kube-logging-operator, ruby4.0-fluentd-kubernetes-daemonset, ruby3.3-fluentd-kubernetes-daemonset, ruby3.4-fluentd-kubernetes-daemonset, ruby3.2-fluentd-kubernetes-daemonset...

CVE-2026-54899 vulnerabilities

Vulnerabilities for packages: kube-logging-operator, ruby4.0-fluentd-kubernetes-daemonset, ruby3.3-fluentd-kubernetes-daemonset, ruby3.4-fluentd-kubernetes-daemonset, ruby3.2-fluentd-kubernetes-daemonset...

GHSA-FM7P-MPRW-WJM9 vulnerabilities

Vulnerabilities for packages: kube-logging-operator, ruby4.0-fluentd-kubernetes-daemonset, ruby3.3-fluentd-kubernetes-daemonset, ruby3.4-fluentd-kubernetes-daemonset, ruby3.2-fluentd-kubernetes-daemonset...