Cybersecurity News

Oracle Linux 9 Ruby Important Memory Fixes ELSA-2026-72485 CVE-2026-80212

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

Linux

openSUSE Ruby3.4 Important Vulnerabilities Addressed Advisory 2026-21878-1

An update that solves 8 vulnerabilities and has 8 bug fixes can now be installed.

Linux

Fedora 43 Ruby Denial of Service Vulnerability Fix CVE-2026-80212 Advisory

This rpm updates included resolv gem to 0.7.2 to resolve CVE security issues.

Linux

Fedora 45 Ruby Denial of Service Updates CVE-2026-80212 CVE-2026-80213

This rpm updates included resolv gem to 0.7.2 to resolve CVE security issues.

Linux

Oracle Linux 8 Ruby Important Code Execution Fix ELSA-2026-33514

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

Linux

Fedora 43 ruby-Puma Severe Web Request Manipulation 2026-5dcb750495

Starman versions before 0.4018 for Perl allows HTTP Request Smuggling via Improper Header Precedence. Starman incorrectly prioritizes "Content-Length" over "Tr…

Linux

Fedora 43 rubygem-json Critical Format String Injection CVE-2026-33210

This new updates backports a fix for a format string injection vulnerability in JSON.parse, which is now assigned as CVE-2026-33210

Linux

openSUSE Tumbleweed Ruby4 Fluentd Moderate Vuln 2026-10346-1

An update that solves one vulnerability can now be installed.

Linux

openSUSE Tumbleweed Ruby 4.0 ActiveStorage Security Update CVE-2024-54133

An update that solves one vulnerability can now be installed.

Linux

CentOS 8 ruby-gems Critical Security Flaw 2030-abc789xyz12

hex_core ver. 0.12.2

Linux

CentOS 9 ruby-GraphQL-Processor Flawed Memory Leak 2024-2c7dbb48e2

Upgrade to upstream. Eliminates distributing harfbuzz sources. Upgrade to upstream 0.032.

Linux

openSUSE: libruby3 Moderate Update DoS Vulnerability 2025:15828-1

An update that solves one vulnerability can now be installed.

Linux

Ubuntu 25.04: ruby-rack Critical Denial of Service Vulnerability USN-7784-1

Rack could be made to crash if it received specially crafted network traffic.

Linux

openSUSE: 2025:15582-1 moderate: tree-sitter-ruby-0.23.1-2.1

An update that solves 2 vulnerabilities can now be installed.

Linux

SUSE: ruby2.5 Moderate Read Header & Userinfo Leakage 2025:02739-2

* bsc#1237805 * bsc#1245254 Cross-References: * CVE-2025-27221

Linux

Serious Remote Code Execution Flaws in Ruby Sinatra for Ubuntu 22.04

Several security issues were fixed in Sinatra.

Linux

SUSE Linux: 2025:01586-1 important: rubygem-rack session management flaw

* bsc#1242894 * bsc#1242899 Cross-References: * CVE-2025-32441

Linux

Oracle Linux 8 ELSA-2025-4063 moderate: ruby DoS vulnerability

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

Linux

openSUSE: 2025:0004-1 moderate: rubygem-json-jwt Advisory Security Update

An update that fixes two vulnerabilities is now available.

Linux

Mageia 2025-0001: ruby Security Advisory Updates

The REXML gem before 3.2.6 has a denial of service vulnerability when it parses an XML that has many ` `. (CVE-2024-39908)

SUSE: 2024:3939-1 important: ruby2.1 Security Advisory Updates

* bsc#1230930 Cross-References: * CVE-2024-47220

Linux

SUSE: 2024:3644-1 moderate: rubygem-puma Security Advisory Updates

* bsc#1218638 * bsc#1230848 Cross-References: * CVE-2024-21647

Linux

Mageia 2024-0160: ruby Security Advisory Updates

Buffer overread vulnerability in StringIO. (CVE-2024-27280) RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Arbitrary memory address read vulner…

Mageia 2024-0123: ruby-rack Security Advisory Updates

Carefully crafted content type headers can cause Rack¢''s media type parser to take much longer than expected, leading to a possible denial of service vulnerab…