Important Photon OS Security Update - PHSA-2026-4.0-0995

Updates of 'python3-PyJWT', 'libtiff', 'nodejs', 'rubygem-activesupport', 'python3-pyasn1', 'rubygem-rdiscount' packages of Photon OS have been released...

Photon OS 5.0: Rubygem PHSA-2026-5.0-0802

An update of the rubygem package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-0802. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Fedora: Security Advisory (FEDORA-2026-8c07fcde49)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 43 : rubygem-json (2026-8c07fcde49)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-8c07fcde49 advisory. This new updates backports a fix for a format string injection vulnerability in JSON.parse, which is now assigned as CVE-2026-33210 Tenable has extracted the...

ruby4.0-rubygem-puma-6.4.3-1.5 on GA media (moderate)

ruby4.0-rubygem-puma-6.4.3-1.5 on GA media Announcement ID: openSUSE-SU-2026:10357-1 Rating: moderate Cross-References: CVE-2019-16770 CVE-2020-11076 CVE-2022-23634 CVE-2024-45614 CVSS scores: CVE-2019-16770 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2020-11076 SUSE : 6.8...

ruby4.0-rubygem-globalid-1.2.1-1.9 on GA media (moderate)

ruby4.0-rubygem-globalid-1.2.1-1.9 on GA media Announcement ID: openSUSE-SU-2026:10347-1 Rating: moderate Cross-References: CVE-2023-22799 CVSS scores: CVE-2023-22799 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Tumbleweed An update that solves one...

OPENSUSE-SU-2026:10364-1 ruby4.0-rubygem-sprockets-4.2.1-1.9 on GA media

These are all security issues fixed in the ruby4.0-rubygem-sprockets-4.2.1-1.9 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10355-1 ruby4.0-rubygem-multi_xml-0.6.0-1.31 on GA media

These are all security issues fixed in the ruby4.0-rubygem-multixml-0.6.0-1.31 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10346-1 ruby4.0-rubygem-fluentd-1.17.1-1.5 on GA media

These are all security issues fixed in the ruby4.0-rubygem-fluentd-1.17.1-1.5 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10351-1 ruby4.0-rubygem-json_pure-2.7.6-1.5 on GA media

These are all security issues fixed in the ruby4.0-rubygem-jsonpure-2.7.6-1.5 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10360-1 ruby4.0-rubygem-rails-8.0-8.0.3-1.3 on GA media

These are all security issues fixed in the ruby4.0-rubygem-rails-8.0-8.0.3-1.3 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10344-1 ruby4.0-rubygem-activestorage-8.0-8.0.3-1.3 on GA media

These are all security issues fixed in the ruby4.0-rubygem-activestorage-8.0-8.0.3-1.3 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10358-1 ruby4.0-rubygem-rack-3.1.18-1.3 on GA media

These are all security issues fixed in the ruby4.0-rubygem-rack-3.1.18-1.3 package on the GA media of openSUSE Tumbleweed...

AZL-79469 CVE-2026-3381 affecting package rubygem-mini_portile2 2.8.4-1

Compress::Raw::Zlib versions through 2.219 for Perl use potentially insecure versions of zlib. Compress::Raw::Zlib includes a copy of the zlib library. Compress::Raw::Zlib version 2.220 includes zlib 1.3.2, which addresses findings fron the 7ASecurity audit of zlib. The includes fixs for...

AZL-79437 CVE-2026-3381 affecting package rubygem-mini_portile2 2.8.0-1

Compress::Raw::Zlib versions through 2.219 for Perl use potentially insecure versions of zlib. Compress::Raw::Zlib includes a copy of the zlib library. Compress::Raw::Zlib version 2.220 includes zlib 1.3.2, which addresses findings fron the 7ASecurity audit of zlib. The includes fixs for...

ruby4.0-rubygem-rack-2.2-2.2.22-1.1 on GA media (moderate)

ruby4.0-rubygem-rack-2.2-2.2.22-1.1 on GA media Announcement ID: openSUSE-SU-2026:10286-1 Rating: moderate Cross-References: CVE-2013-0262 CVE-2013-0263 CVE-2015-3225 CVE-2018-16471 CVE-2019-16782 CVE-2020-8184 CVE-2022-30122 CVE-2022-30123 CVE-2022-44570 CVE-2022-44571 CVE-2022-44572...

OPENSUSE-SU-2026:10286-1 ruby4.0-rubygem-rack-2.2-2.2.22-1.1 on GA media

These are all security issues fixed in the ruby4.0-rubygem-rack-2.2-2.2.22-1.1 package on the GA media of openSUSE Tumbleweed...

Photon OS 5.0: Rubygem PHSA-2026-5.0-0762

An update of the rubygem package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-0762. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Important Photon OS Security Update - PHSA-2026-5.0-0762

Updates of 'postgresql14', 'postgresql15', 'rubygem-faraday' packages of Photon OS have been released...

MiracleLinux 7 : pcs-0.9.169-3.el7.3 (AXSA:2022-4104:06)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2022-4104:06 advisory. rubygem-rack: crafted requests can cause shell escape sequences CVE-2022-30123 jquery: Prototype pollution in object's prototype leading to denial o...