Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098995)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098995 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/gem: Acquire references on GEM handles for framebuffers A GEM handle can be released while th...

NULL Pointer Dereference

Amendment This was deemed not a vulnerability. Overview nokogiri is a gem for parsing HTML, XML, SAX, and Reader. Affected versions of this package are vulnerable to NULL Pointer Dereference via the XML parsing process. An attacker can cause denial of service or memory corruption by submitting...

NULL Pointer Dereference

Amendment This was deemed not a vulnerability. Overview nokogiri is a gem for parsing HTML, XML, SAX, and Reader. Affected versions of this package are vulnerable to NULL Pointer Dereference via the XML Schema processing in the packaged libxml2 library. An attacker can cause a segmentation fault...

Out-of-bounds Read

Amendment This was deemed not a vulnerability. Overview nokogiri is a gem for parsing HTML, XML, SAX, and Reader. Affected versions of this package are vulnerable to Out-of-bounds Read via the xmlSchemaIDCFillNodeTables function. An attacker can cause a denial of service by submitting specially...

MAL-2026-15726 Malicious code in micro-clean-gem (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in micro-clean-gem (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in mega-pure-tool (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in mega-pure-gem (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-15717 Malicious code in mega-pure-gem (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in mega-lite-kit (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-15710 Malicious code in hyper-sharp-lib (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-15703 Malicious code in giga-sharp-tool (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in giga-max-kit (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-15694 Malicious code in circle-w3s (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Astra Linux – Vulnerability in ruby-redcloth

A Regular Expression Denial of Service ReDoS issue was discovered in the sanitizehtml function of the redcloth gem v4.0.0. This vulnerability allows attackers to cause a Denial of Service DoS by providing a crafted payload...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: drm/nouveau: fixed a use-after-free in nouveaugemprimeimportsgtable nouveauboinit is backed by ttmboinit and passes its return code to the caller. In case of failures, ttm will call nouveaubodelttm and free the memory. Thus,...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel before version 6.0.3, the file drivers/gpu/drm/virtio/virtgpuobject.c misinterprets the return value of drmgemshmemgetsgtable. It expects the value to be NULL in the error case, but in reality, it is an error pointer...

Astra Linux – Vulnerability in Ruby 2.5

In the CGI gem before version 0.4.2 for Ruby, there is a Regular Expression Denial of Service ReDoS vulnerability in the UtilescapeElement method...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Fixed a page fault in ivpubounbindallbosfromcontext...

Astra Linux – Vulnerability in Ruby 2.5

In the date gem for Ruby, from version 3.2.0 onwards, Date.parse can cause ReDoS Regular Expression Denial of Service attacks due to the use of a long string. The fixed versions are 3.2.1, 3.1.2, 3.0.2, and 2.0.1...