TI-2026-55453 CVE-2026-80212 · GHSA-x2vh-ff4w-v64c
Resource allocation without limits in ruby resolv
Priority LOW 39
An issue was discovered in the resolv gem before 0.7.2 for Ruby.
RHSA-2026:95513
ruby:2.5 security update
Released 2026-11-05 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream AUS (v.8.6) ruby-2.5.9-113.module+el8.6.0+25038+e1ee8198.i686::ruby:2.5, ruby-2.5.9-113.module+el8.6.0+25038+e1ee8198.src::ruby:2.5, ruby-2.5.9-113.module+el8.6.0+25038+e1ee8198.x86_64::ruby:2.5 +44
- Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) ruby-2.5.9-113.module+el8.6.0+25038+e1ee8198.i686::ruby:2.5, ruby-2.5.9-113.module+el8.6.0+25038+e1ee8198.src::ruby:2.5, ruby-2.5.9-113.module+el8.6.0+25038+e1ee8198.x86_64::ruby:2.5 +44
Fixes 2 records
TI-2026-60055 CVE-2026-88030 · GHSA-4ww7-gqv6-mffc
GridFS data disclosure and deletion via query-operator injection in file IDs in the MongoDB Ruby Driver
Priority LOW 27
Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Ruby Driver can cause a caller-supplied structured file identifier to be interpreted as a query condition rather than…