Red Hat Enterprise Linux 9/ruby

Red Hat · Package

7 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
REXML denial of service vulnerabilityCVE-2024-43398 · GHSA-VMWR-MC7X-5VC3	Red Hat 3scale API Management Platform 2/3scale-amp2/backend-rhel8 Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel7	Red HatRubyGems	High	Fix reported	2026-09-10
Buffer Overflow in Zlib::GzipReader ungetc via large input leads to memory corruptionCVE-2026-27820 · GHSA-G857-HHFV-J68W	Red Hat Enterprise Linux 6/ruby Red Hat Enterprise Linux 7/ruby	Red HatRubyGems	Medium	Fix reported	2026-09-10
resolv vulnerable to DoS via insufficient DNS domain name length validationCVE-2025-24294 · GHSA-XH69-987W-HRP8	Red Hat Enterprise Linux 6/ruby Red Hat Enterprise Linux 7/ruby	Red HatRubyGems	Medium	Fix reported	2026-09-10
REXML contains a denial of service vulnerabilityCVE-2024-35176 · GHSA-VG3R-RM7W-2XGH	Red Hat Enterprise Linux 10/ruby Red Hat Enterprise Linux 6/ruby	Red HatRubyGems	Medium	Fix reported	2026-09-10
URI gem has ReDoS vulnerabilityCVE-2023-36617 · GHSA-HWW2-5G85-429M	Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel7 Red Hat Enterprise Linux 8/ruby:3.0/ruby	Red HatRubyGems	Medium	Fix reported	2026-09-10
openssl: openssl: AEAD forgeries possible with empty ciphertext in EVP_Cipher()CVE-2026-75803	Ansible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9 Confidential Cluster Operator/confidential-clusters-beta/attestation-key-register-rhel9	Red Hat	Low	No fix reported	Not recorded
resolv: Resolv gem: DNS allowlist and egress bypass, and cache poisoning via crafted hostnamesCVE-2026-80213	Lightspeed Core/lightspeed-core/rag-tool-cpu-rhel9 Lightspeed Core/lightspeed-core/rag-tool-cuda-12.9-rhel9	Red Hat	Medium	No fix reported	Not recorded