Threats Tagged 'cve-2025-24294'

This advisory addresses multiple denial of service vulnerabilities in Ruby components, specifically in the resolv gem (CVE-2025-24294) and the REXML library (CVE-2025-58767). The vulnerabilities could allow an attacker to cause a denial of service condition. Red Hat has issued an update for Ruby in Red Hat Enterprise Linux 10 to address these issues. The update is rated with a moderate security impact. No CVSS scores are provided in the advisory. The vulnerabilities affect Ruby packages distributed with Red Hat Enterprise Linux 10 and related builder and extended support variants.

This Red Hat security advisory addresses multiple vulnerabilities in Ruby and related components, including a denial of service in the resolv gem (CVE-2025-24294), a denial of service in REXML (CVE-2025-58767), and an arbitrary file write issue via crafted symlinks in Git LFS (CVE-2025-26625). The update is rated as having a moderate security impact. The advisory applies to Red Hat Enterprise Linux 10.0 Extended Update Support and related builder products. A security update is available to remediate these issues.