From 66cb24559b2fe9b56fff8427efc54deb2f80d67e Mon Sep 17 00:00:00 2001
From: Al Snow <43523+jasnow@users.noreply.github.com>
Date: Sat, 28 Feb 2026 07:44:43 -0500
Subject: [PATCH 1/2] GHSA SYNC: 1 brand new advisory; Added .rvmrc to
 .gitignore file

---
 .gitignore                      |  1 +
 gems/rubyipmi/CVE-2026-0980.yml | 24 ++++++++++++++++++++++++
 2 files changed, 25 insertions(+)
 create mode 100644 gems/rubyipmi/CVE-2026-0980.yml

diff --git a/.gitignore b/.gitignore
index 5ef2c9e2db..5b59f3f5a0 100644
--- a/.gitignore
+++ b/.gitignore
@@ -2,3 +2,4 @@
 .bundle
 .DS_Store
 /vendor
+.rvmrc
diff --git a/gems/rubyipmi/CVE-2026-0980.yml b/gems/rubyipmi/CVE-2026-0980.yml
new file mode 100644
index 0000000000..6fb3d72a40
--- /dev/null
+++ b/gems/rubyipmi/CVE-2026-0980.yml
@@ -0,0 +1,24 @@
+---
+gem: rubyipmi
+cve: 2026-0980
+ghsa: hfcp-477w-3wjw
+url: https://access.redhat.com/security/cve/CVE-2026-0980
+title: rubyipmi is vulnerable to OS Command Injection through
+  malicious usernames
+date: 2026-02-27
+description: |
+  A flaw was found in rubyipmi, a gem used in the Baseboard Management
+  Controller (BMC) component of Red Hat Satellite. An authenticated
+  attacker with host creation or update permissions could exploit this
+  vulnerability by crafting a malicious username for the BMC interface.
+  This could lead to remote code execution (RCE) on the system.
+cvss_v3: 8.3
+patched_versions:
+  - ">= 0.13.0"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2026-0980
+    - https://access.redhat.com/security/cve/CVE-2026-0980
+    - https://bugzilla.redhat.com/show_bug.cgi?id=2429874
+    - https://github.com/logicminds/rubyipmi/commit/252503a7b4dca68388165883b0322024e344a215
+    - https://github.com/advisories/GHSA-hfcp-477w-3wjw

From 4a07dbead32a40a372c9bfa5765d4d6748839b62 Mon Sep 17 00:00:00 2001
From: Al Snow <43523+jasnow@users.noreply.github.com>
Date: Sat, 28 Feb 2026 13:23:47 -0500
Subject: [PATCH 2/2] Update .gitignore - removed .rvmrc line

---
 .gitignore | 1 -
 1 file changed, 1 deletion(-)

diff --git a/.gitignore b/.gitignore
index 5b59f3f5a0..5ef2c9e2db 100644
--- a/.gitignore
+++ b/.gitignore
@@ -2,4 +2,3 @@
 .bundle
 .DS_Store
 /vendor
-.rvmrc