2181 matches found
Critical Photon OS Security Update - PHSA-2026-5.0-0929
Updates of 'libmicrohttpd', 'rubygem-concurrent-ruby' packages of Photon OS have been released...
Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: ruby3.4: ruby3.4-3.4.10-31.hum1 aarch64, x8664 ruby3.4-bundled-gems-3.4.10-31.hum1 aarch64, x8664 ruby3.4-default-gems-3.4.10-31.hum1 noarch ruby3.4-devel-3.4.10-31.hum1 aarch64, x8664...
Important Photon OS Security Update - PHSA-2026-4.0-1052
Updates of 'rubygem-nokogiri', 'python3-pyOpenSSL', 'rubygem-oj', 'rubygem-concurrent-ruby', 'python3-lxml' packages of Photon OS have been released...
Malicious code in sprox-c160-3hg (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in sprox-c160-2bzr (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in dlxlast (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
ruby:3.3 security update
ruby 3.3.10-7 - Fix DoS via crafted IMAP responses in net-imap. CVE-2026-42245 Resolves: RHEL-181682 - Fix information disclosure via MITM attack bypassing TLS in net-imap. CVE-2026-42246 Resolves: RHEL-181759 - Fix command injection via Symbol arguments in net-imap. CVE-2026-42258 Resolves:...
Important Photon OS Security Update - PHSA-2026-5.0-0911
Updates of 'rubygem-nokogiri', 'python3-mistune', 'rubygem-faraday', 'python3-urllib3' packages of Photon OS have been released...
Photon OS 5.0: Rubygem PHSA-2026-5.0-0909
An update of the rubygem package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-0909. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Critical Photon OS Security Update - PHSA-2026-5.0-0909
Updates of 'rubygem-concurrent-ruby' packages of Photon OS have been released...
MiracleLinux 8 : ruby:3.3 (AXSA:2026-769:01)
The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-769:01 advisory. erb: ERB: Arbitrary code execution via deserialization bypass CVE-2026-41316 Tenable has extracted the preceding description block directly from the...
[SECURITY] Fedora 43 Update: rubygem-yard-0.9.37-5.fc43
YARD is a documentation generation tool for the Ruby programming language. It enables the user to generate consistent, usable documentation that can be exported to a number of formats very easily, and also supports extending for custom Ruby constructs such as custom class level definitions...
Fedora 43 : rubygem-yard (2026-2d0a32ddc0)
The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-2d0a32ddc0 advisory. Backport 0.9.41 / 0.9.44 fixes for possible path traversal issues Tenable has extracted the preceding description block directly from the Fedora security...
Fedora 44 : rubygem-yard (2026-acefc1fe48)
The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-acefc1fe48 advisory. Backport 0.9.41 / 0.9.44 fixes for possible path traversal issues Tenable has extracted the preceding description block directly from the Fedora security...
ruby:3.3 security update
ruby 3.3.10-6 - Fix arbitrary code execution via deserialization bypass in ERB. CVE-2026-41316 Resolves: RHEL-171247 rubygem-abrt 0.4.0-1 - Update to abrt 0.4.0. Resolves: rhbz1842476 rubygem-mysql2 0.5.5-1 - Upgrade to mysql2 0.5.5. Related: RHEL-17090 rubygem-pg 1.5.4-1 - Upgrade to pg 1.5.4...
Unity Linux 20.1060e / 20.1070e Security Update: rubygem-kramdown (UTSA-2026-016633)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-016633 advisory. Kramdown before 2.3.1 does not restrict Rouge formatters to the Rouge::Formatters namespace, and thus arbitrary classes can be instantiated. Tenable has extracted th...
Unity Linux 20.1060e / 20.1070e Security Update: rubygem-excon (UTSA-2026-016618)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-016618 advisory. In RubyGem excon before 0.71.0, there was a race condition around persistent connections, where a connection which is interrupted such as by a timeout would leave da...
Unity Linux 20.1060e / 20.1070e Security Update: rubygem-kramdown (UTSA-2026-016646)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-016646 advisory. The kramdown gem before 2.3.0 for Ruby processes the template option inside Kramdown documents by default, which allows unintended read access such as...
Unity Linux 20.1060e / 20.1070e Security Update: rubygem-rails (UTSA-2026-016644)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-016644 advisory. A client side enforcement of server side security vulnerability exists in rails 5.2.4.2 and rails 6.0.3.1 ActiveStorage's S3 adapter that allows the Content-Length o...