RLSA-2026:20614 Important: ruby:3.3 security update

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. Security Fixes: erb: ERB: Arbitrary code execution via deserialization bypass CVE-2026-41316 For more details about the security issues, including...

RHEL 8 : ruby:3.3 (RHSA-2026:20614)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:20614 advisory. Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management task...

Oracle Linux 9 : ruby:3.3 (ELSA-2026-18030)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-18030 advisory. - Fix arbitrary code execution via deserialization bypass in ERB. CVE-2026-41316 Resolves: RHEL-171255 - Fix possible denial of service in resolv gem...

Important: ruby3.4

Issue Overview: ERB is a templating system for Ruby. Ruby 2.7.0 before ERB 2.2.0 was published on rubygems.org introduced an @init instance variable guard in ERBresult and ERBrun to prevent code execution when an ERB object is reconstructed via Marshal.load deserialization. However, three other...

CVE-2026-42258 vulnerabilities

Vulnerabilities for packages: ruby3.4-net-imap, ruby3.3-net-imap, ruby4.0-rails, ruby4.0-net-imap, ruby3.4-rails, ruby3.2-net-imap, ruby3.2-rails, logstash, ruby3.3-rails, gitlab-rails-ce-fips, gitlab-rails-ce, kube-logging-operator, logstash-fips...

CVE-2026-42257 vulnerabilities

Vulnerabilities for packages: ruby3.4-net-imap, ruby3.3-net-imap, ruby4.0-rails, ruby4.0-net-imap, ruby3.4-rails, ruby3.2-net-imap, ruby3.2-rails, logstash, ruby3.3-rails, gitlab-rails-ce-fips, gitlab-rails-ce, kube-logging-operator, logstash-fips...

CVE-2026-42246 vulnerabilities

Vulnerabilities for packages: ruby3.4-net-imap, ruby3.3-net-imap, ruby4.0-rails, ruby4.0-net-imap, ruby3.4-rails, ruby3.2-net-imap, ruby3.2-rails, logstash, ruby3.3-rails, gitlab-rails-ce-fips, logstash-fips, gitlab-rails-ce, kube-fluentd-operator, kube-logging-operator...

Astra Linux - уязвимость в ruby2.5

REXML is an XML toolkit for Ruby. The REXML gem prior to version 3.3.9 has a ReDoS vulnerability when it parses an XML document containing many digits between “&” and “x…” in a hexadecimal character reference &x…. This issue does not occur in Ruby 3.2 or later versions. Ruby 3.1 is the only...

GHSA-Q2WW-5357-X388 vulnerabilities

Vulnerabilities for packages: logstash, ruby3.4-rails, ruby3.2-rails...

GHSA-8VQR-QJWX-82MW vulnerabilities

Vulnerabilities for packages: logstash, ruby3.4-rails, ruby3.2-rails...

CVE-2026-34829 vulnerabilities

Vulnerabilities for packages: logstash, ruby3.4-rails, ruby3.2-rails...

CVE-2026-34230 vulnerabilities

Vulnerabilities for packages: logstash, ruby3.4-rails, ruby3.2-rails...

CVE-2026-26962 vulnerabilities

Vulnerabilities for packages: ruby3.4-rails, ruby3.2-rails...

GHSA-VGPV-F759-9WX3 vulnerabilities

Vulnerabilities for packages: ruby3.4-rails, ruby3.2-rails, gitlab-cng, logstash, pact-broker-docker-fips, gitlab-rails-ce-fips, gitlab-rails-ce, pact-broker-docker...

GHSA-Q2WW-5357-X388 vulnerabilities

Vulnerabilities for packages: ruby3.4-rails, ruby3.2-rails, gitlab-cng, logstash, pact-broker-docker-fips, gitlab-rails-ce-fips, gitlab-rails-ce, pact-broker-docker...

GHSA-QFGR-CRR9-7R49 vulnerabilities

Vulnerabilities for packages: ruby3.4-rails, ruby3.2-rails, logstash, pact-broker-docker-fips, pact-broker-docker...

CVE-2026-32762 vulnerabilities

Vulnerabilities for packages: ruby3.4-rails, ruby3.2-rails, logstash, pact-broker-docker-fips, pact-broker-docker...

GHSA-V6X5-CG8R-VV6X vulnerabilities

Vulnerabilities for packages: ruby3.4-rails, ruby3.2-rails, logstash, pact-broker-docker-fips, pact-broker-docker...

GHSA-625H-95R8-8XPM vulnerabilities

Vulnerabilities for packages: ruby3.3-rack...

GHSA-53P3-C7VP-4MCC vulnerabilities

Vulnerabilities for packages: ruby3.4-rails, ruby3.3-rails, ruby3.2-rails, ruby4.0-rails...