Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
openSUSE Tumbleweed Advisory 10353-1 ruby4.0-rubygem-loofah Moderate Issues
An update that solves 6 vulnerabilities can now be installed.
openSUSE Tumbleweed security advisory for ruby3.4-rubygem-rack
An update that solves 3 vulnerabilities can now be installed.
openSUSE: ruby3.4-rubygem-rails High CVE-2025-54315 Notice
openSUSE Tumbleweed: 2025:15129-1 moderate: ruby3.4-rubygem-web-console
openSUSE Tumbleweed: 2025:15128-1 moderate: ruby3.4-rubygem-sprockets
openSUSE Tumbleweed: 2025:15127-1 moderate: ruby3.4-rubygem-sprockets fix
openSUSE: 2025:14821-1 moderate: ruby3.4-rubygem-grpc-1.70.1-1.1 Advisory Security Update
openSUSE: 2025:14811-1 moderate: ruby3.4-rubygem-rack-2.2-2.2.11-1.1 Advisory Security Update
openSUSE: 2025:14697-1 moderate: ruby3.4-rubygem-nokogiri-1.18.2-1.1 Advisory Security Update
openSUSE: 2025:14677-1 moderate: ruby3.4-rubygem-activestorage-8.0-8.0.1-1.1 Advisory Security Update
openSUSE: 2025:14679-1 moderate: ruby3.4-rubygem-rails-8.0-8.0.1-1.1 Advisory Security Update
openSUSE: 2025:14680-1 moderate: ruby3.4-rubygem-railties-8.0-8.0.1-1.1 Advisory Security Update
Fix for Test Failure in Debian LTS ruby-grape DLA-4706-2 Update
Debian LTS Advisory DLA-4706-2 addresses a test failure in the ruby-grape package caused by a security fix in ruby-rack, recommending an upgrade for Debian 11 …
Oracle Linux Ruby Important Bug Fix Advisory ELSA-2026-50778
Oracle Linux 10 has released updates for various Ruby packages, addressing multiple security vulnerabilities related to CVEs, and improving overall functionali…
Fedora 41 Ruby Update 3.3.10 CVE-2025-58767 Denial of Service Advisory
Upgrade to Ruby 3.3.10. CVE-2025-58767 ruby: REXML denial of service (rhbz#2396203)
Debian LTS: DLA-3902-1: ruby-rails-html-sanitizer Security Advisory Updates
Multiple vulnerabilities have been fixed in ruby-rails-html-sanitizer, a Ruby library for sanitizing HTML fragments in Rails applications. CVE-2022-23517
Debian LTS: DLA-3901-1: ruby-loofah Security Advisory Updates
Multiple vulnerabilities have been fixed in ruby-loofah, a Ruby library for manipulating and transforming HTML/XML documents and fragments. CVE-2022-23514
Debian LTS: DLA-3900-1: ruby-httparty Security Advisory Updates
multipart/form-data request tampering has been fixed in ruby-httparty, a Ruby library for using Web-based APIs and related services. For Debian 11 bullseye, th…
Debian: DSA-5774-1: ruby-saml Security Advisory Updates
It was discovered that ruby-saml, a SAML library implementing the client side of a SAML authorization, does not properly verify the signature of the SAML Respo…
Debian LTS: DLA-3866-1: ruby-tzinfo Security Advisory Updates
Path traversal that allowed TZInfo::Timezone.get to load arbitrary files has been fixed in ruby-tzinfo, a Ruby library for working with time zone information.
Debian LTS: DLA-3800-1: ruby-rack Security Advisory Updates
Multiple vulnerabilities were fixed in ruby-rack, an interface for developing web applications in Ruby. CVE-2024-25126
Rocky Linux Ruby Advisory RLSA-2026-73519 CVE-2026-80212 on DOS Risks
Important: ruby:2.5 security update
Rocky Linux ruby Important Denial of Service Advisory RLSA-2026-72484
Important: ruby:4.0 security update
Gentoo Ruby Remote Code Execution Advisory GLSA-202609-03 CVE-2026-41316
A vulnerability has been discovered in Ruby, possibly allowing remote code execution.