Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
3.7
Ruby 3.4 packages may miss security updates
published 27 days ago
Summary
The Ruby 3.4 packages provided in Red Hat hardened images (including the main runtime, bundled gems, default gems, development files, and documentation) had a bug that could stop security fixes from being applied. This could leave the software exposed to known risks. Apply the latest Red Hat update to ensure all Ruby components receive current security patches.
What to do
- Update redhat ruby3.4 to version 0:3.4.10-31.7.hum1.
- Update redhat ruby3.4-bundled-gems to version 0:3.4.10-31.7.hum1.
- Update redhat ruby3.4-default-gems to version 0:3.4.10-31.7.hum1.
- Update redhat ruby3.4-devel to version 0:3.4.10-31.7.hum1.
- Update redhat ruby3.4-doc to version 0:3.4.10-31.7.hum1.
- Update redhat ruby3.4-libs to version 0:3.4.10-31.7.hum1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Red Hat:hummingbird:1 | redhat | ruby3.4 |
< 0:3.4.10-31.7.hum1 Fix: upgrade to 0:3.4.10-31.7.hum1
|
| Red Hat:hummingbird:1 | redhat | ruby3.4-bundled-gems |
< 0:3.4.10-31.7.hum1 Fix: upgrade to 0:3.4.10-31.7.hum1
|
| Red Hat:hummingbird:1 | redhat | ruby3.4-default-gems |
< 0:3.4.10-31.7.hum1 Fix: upgrade to 0:3.4.10-31.7.hum1
|
| Red Hat:hummingbird:1 | redhat | ruby3.4-devel |
< 0:3.4.10-31.7.hum1 Fix: upgrade to 0:3.4.10-31.7.hum1
|
| Red Hat:hummingbird:1 | redhat | ruby3.4-doc |
< 0:3.4.10-31.7.hum1 Fix: upgrade to 0:3.4.10-31.7.hum1
|
| Red Hat:hummingbird:1 | redhat | ruby3.4-libs |
< 0:3.4.10-31.7.hum1 Fix: upgrade to 0:3.4.10-31.7.hum1
|
Original advisory text
Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
References
- https://access.redhat.com/errata/RHSA-2026:62786 Vendor Advisory
- https://images.redhat.com/ Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2026-75803 Third Party Advisory
- https://access.redhat.com/security/updates/classification/ Third Party Advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_62786.... Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2523425 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-75803 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-75803 Vendor Advisory
- https://github.com/openssl/openssl/commit/119ab9555dc62275bbd71f6f49529b1a44feba... Third Party Advisory
- https://github.com/openssl/openssl/commit/3621257986e27e540bf96a11570929a6e5a9e0... Third Party Advisory
- https://github.com/openssl/openssl/commit/6c7aa6f8f6449b7fe0137ee8be65fcd239bd7d... Third Party Advisory
- https://github.com/openssl/openssl/commit/bdeb0cd994d915342787f117ee75044f0dc36f... Third Party Advisory
- https://github.com/openssl/openssl/commit/bf95f5f772e9362f87b25cfa2f8cb15d984865... Third Party Advisory
- https://openssl-library.org/news/secadv/20260825.txt Third Party Advisory
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published22 Sep 2026
Updated23 Sep 2026
First seen23 Sep 2026
Sources
RHSA-2026:62786 · OSV
Track software like this
Free during beta