Security update for ruby2.5

This update for ruby2.5 fixes the following issues: CVE-2024-49761: ReDoS vulnerability in REXML gem bsc1232440 bsc1232441. CVE-2025-58767: denial of service when parsing XML containing multiple XML declarations bsc1250016. CVE-2026-27820: insufficient checks in zstreambufferungets can lead to a...

SUSE-SU-2026:1066-1 Security update for ruby2.5

This update for ruby2.5 fixes the following issues: - CVE-2024-49761: ReDoS vulnerability in REXML gem bsc1232440 bsc1232441. - CVE-2025-58767: denial of service when parsing XML containing multiple XML declarations bsc1250016. - CVE-2026-27820: insufficient checks in zstreambufferungets can lead...

DSA-6180-1 ruby-rack - security update

Bulletin has no description...

iCalendar 注入漏洞

iCalendar is an open-source Ruby library for processing iCalendar format files. Versions 2.0.0 to 2.12.2 of iCalendar contain a vulnerability due to improper cleanup of URI attribute values during .ics serialization, which may lead to ICS injection attacks...

Debian dsa-6180 : ruby-rack - security update

The remote Debian 12 / 13 host has a package installed that is affected by multiple vulnerabilities as referenced in the dsa-6180 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6180-1 [email protected]...

GHSA-R46P-8F7G-VVVG vulnerabilities

Vulnerabilities for packages: ruby3.4-rails, gitlab-rails-ce-fips, gitlab-rails-ce, ruby3.2-rails...

GHSA-73F9-JHHH-HR5M vulnerabilities

Vulnerabilities for packages: ruby3.4-rails, gitlab-rails-ce-fips, gitlab-rails-ce, ruby3.2-rails...

CVE-2026-33170 vulnerabilities

Vulnerabilities for packages: ruby3.4-rails, cinc-auditor, gitlab-rails-ce-fips, gitlab-rails-ce, kube-fluentd-operator, ruby3.2-rails, kube-logging-operator...

GHSA-89VF-4333-QX8V vulnerabilities

Vulnerabilities for packages: ruby3.4-rails, cinc-auditor, gitlab-rails-ce-fips, gitlab-rails-ce, kube-fluentd-operator, ruby3.2-rails, kube-logging-operator...

CVE-2026-33169 vulnerabilities

Vulnerabilities for packages: ruby3.4-rails, cinc-auditor, gitlab-rails-ce-fips, gitlab-rails-ce, kube-fluentd-operator, ruby3.2-rails, kube-logging-operator...

GHSA-V55J-83PF-R9CQ vulnerabilities

Vulnerabilities for packages: ruby3.4-rails, gitlab-rails-ce-fips, gitlab-rails-ce, ruby3.2-rails...

CVE-2026-33168 vulnerabilities

Vulnerabilities for packages: ruby3.4-rails, gitlab-rails-ce-fips, gitlab-rails-ce, ruby3.2-rails...

CVE-2026-33173 vulnerabilities

Vulnerabilities for packages: ruby3.4-rails, gitlab-rails-ce-fips, gitlab-rails-ce, ruby3.2-rails...

GHSA-2J26-FRM8-CMJ9 vulnerabilities

Vulnerabilities for packages: ruby3.4-rails, cinc-auditor, gitlab-rails-ce-fips, gitlab-rails-ce, kube-fluentd-operator, ruby3.2-rails, kube-logging-operator...

GHSA-CG4J-Q9V8-6V38 vulnerabilities

Vulnerabilities for packages: ruby3.4-rails, cinc-auditor, gitlab-rails-ce-fips, gitlab-rails-ce, kube-fluentd-operator, ruby3.2-rails, kube-logging-operator...

GHSA-2J26-FRM8-CMJ9 vulnerabilities

Vulnerabilities for packages: ruby3.2-rails, ruby3.4-rails, cinc-auditor, kube-logging-operator, kube-fluentd-operator...

GHSA-QCFX-2MFW-W4CG vulnerabilities

Vulnerabilities for packages: ruby3.2-rails, ruby3.4-rails...

CVE-2026-33173 vulnerabilities

Vulnerabilities for packages: ruby3.2-rails, ruby3.4-rails...

CVE-2026-33174 vulnerabilities

Vulnerabilities for packages: ruby3.2-rails, ruby3.4-rails...

GHSA-PGM4-439C-5JP6 vulnerabilities

Vulnerabilities for packages: ruby3.2-rails...