41 matches found
Oracle Linux 8 : ruby:3.3 (ELSA-2026-20614)
The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-20614 advisory. - Fix arbitrary code execution via deserialization bypass in ERB. CVE-2026-41316 Resolves: RHEL-171247 rubygem-abrt Tenable has extracted the preceding...
RHSA-2026:20614 Red Hat Security Advisory: ruby:3.3 security update
Bulletin has no description...
RockyLinux 8 : ruby:3.3 (RLSA-2026:20614)
The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:20614 advisory. erb: ERB: Arbitrary code execution via deserialization bypass CVE-2026-41316 Tenable has extracted the preceding description block directly from the RockyLinux...
MiracleLinux 9 : ruby:3.3 (AXSA:2026-706:01)
The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-706:01 advisory. erb: ERB: Arbitrary code execution via deserialization bypass CVE-2026-41316 Tenable has extracted the preceding description block directly from the...
RHSA-2026:18030 Red Hat Security Advisory: ruby:3.3 security update
Bulletin has no description...
ruby:3.3 security update
ruby 3.3.10-6 - Fix arbitrary code execution via deserialization bypass in ERB. CVE-2026-41316 Resolves: RHEL-171255 3.3.10-5 - Upgrade to Ruby 3.3.10. Resolves: RHEL-127912 - Fix possible denial of service in resolv gem CVE-2025-24294 - Fix URI Credential Leakage Bypass previous fixes...
AlmaLinux 9 : ruby:3.3 (ALSA-2026:18030)
The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:18030 advisory. erb: ERB: Arbitrary code execution via deserialization bypass CVE-2026-41316 Tenable has extracted the preceding description block directly from the AlmaLinux...
RLSA-2026:18030 Important: ruby:3.3 security update
Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. Security Fixes: erb: ERB: Arbitrary code execution via deserialization bypass CVE-2026-41316 For more details about the security issues, including...
Important: Red Hat Security Advisory: ruby:3.3 security update
An update for the ruby:3.3 module is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
Important: ruby:3.3 security update
Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. Security Fixes: erb: ERB: Arbitrary code execution via deserialization bypass CVE-2026-41316 For more details about the security issues, including...
RockyLinux 9 : ruby:3.3 (RLSA-2026:18030)
The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:18030 advisory. erb: ERB: Arbitrary code execution via deserialization bypass CVE-2026-41316 Tenable has extracted the preceding description block directly from the RockyLinux...
RHEL 9 : ruby:3.3 (RHSA-2026:18030)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:18030 advisory. Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management task...
GHSA-75XQ-5H9V-W6PX vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce, ruby4.0-rails, logstash-fips, ruby3.3-net-imap, ruby4.0-net-imap, ruby3.4-net-imap, kube-logging-operator, gitlab-rails-ce-fips, ruby3.3-rails, logstash, ruby3.2-rails, ruby3.2-net-imap, ruby3.4-rails...
CVE-2026-42245 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce, ruby4.0-rails, logstash-fips, ruby3.3-net-imap, ruby4.0-net-imap, ruby3.4-net-imap, kube-logging-operator, gitlab-rails-ce-fips, ruby3.3-rails, logstash, ruby3.2-rails, ruby3.2-net-imap, ruby3.4-rails...
MiracleLinux 9 : ruby:3.3 (AXSA:2025-9954:01)
The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2025-9954:01 advisory. net-imap: Net::IMAP vulnerable to possible DoS by memory exhaustion CVE-2025-25186 CGI: Denial of Service in CGI::Cookie.parse CVE-2025-27219 uri:...
MiracleLinux 8 : ruby:3.3 (AXSA:2025-10474:01)
The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2025-10474:01 advisory. net-imap: Net::IMAP vulnerable to possible DoS by memory exhaustion CVE-2025-25186 CGI: Denial of Service in CGI::Cookie.parse CVE-2025-27219 uri:...
RHSA-2025:23062 Red Hat Security Advisory: ruby:3.3 security update
Bulletin has no description...
RHSA-2025:23063 Red Hat Security Advisory: ruby:3.3 security update
Bulletin has no description...
RLSA-2025:23063 Moderate: ruby:3.3 security update
Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. Security Fixes: resolv: Denial of Service in resolv gem CVE-2025-24294 rexml: REXML denial of service CVE-2025-58767 For more details about the...
RockyLinux 9 : ruby:3.3 (RLSA-2025:23063)
The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:23063 advisory. resolv: Denial of Service in resolv gem CVE-2025-24294 rexml: REXML denial of service CVE-2025-58767 Tenable has extracted the preceding description blo...