Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

Ruby 3.3 Security Update for Red Hat Systems

published 4 months ago

Summary

A security update is available for Ruby 3.3 on Red Hat systems. This update fixes several security issues that could allow an attacker to execute malicious code or access sensitive data. It is recommended that all affected systems be updated as soon as possible to ensure the latest security patches are applied.

What to do

Update redhat ruby to version 0:3.3.10-7.module+el9.4.0+24474+8fc4d0bd.
Update redhat ruby-bundled-gems to version 0:3.3.10-7.module+el9.4.0+24474+8fc4d0bd.
Update redhat ruby-bundled-gems-debuginfo to version 0:3.3.10-7.module+el9.4.0+24474+8fc4d0bd.
Update redhat ruby-debuginfo to version 0:3.3.10-7.module+el9.4.0+24474+8fc4d0bd.
Update redhat ruby-debugsource to version 0:3.3.10-7.module+el9.4.0+24474+8fc4d0bd.
Update redhat ruby-default-gems to version 0:3.3.10-7.module+el9.4.0+24474+8fc4d0bd.
Update redhat ruby-devel to version 0:3.3.10-7.module+el9.4.0+24474+8fc4d0bd.
Update redhat ruby-doc to version 0:3.3.10-7.module+el9.4.0+24474+8fc4d0bd.
Update redhat ruby-libs to version 0:3.3.10-7.module+el9.4.0+24474+8fc4d0bd.
Update redhat ruby-libs-debuginfo to version 0:3.3.10-7.module+el9.4.0+24474+8fc4d0bd.
Update redhat rubygem-bigdecimal to version 0:3.1.5-7.module+el9.4.0+24474+8fc4d0bd.
Update redhat rubygem-bigdecimal-debuginfo to version 0:3.1.5-7.module+el9.4.0+24474+8fc4d0bd.
Update redhat rubygem-bundler to version 0:2.5.22-7.module+el9.4.0+24474+8fc4d0bd.
Update redhat rubygem-io-console to version 0:0.7.1-7.module+el9.4.0+24474+8fc4d0bd.
Update redhat rubygem-io-console-debuginfo to version 0:0.7.1-7.module+el9.4.0+24474+8fc4d0bd.
Update redhat rubygem-irb to version 0:1.13.1-7.module+el9.4.0+24474+8fc4d0bd.
Update redhat rubygem-json to version 0:2.7.2-7.module+el9.4.0+24474+8fc4d0bd.
Update redhat rubygem-json-debuginfo to version 0:2.7.2-7.module+el9.4.0+24474+8fc4d0bd.
Update redhat rubygem-minitest to version 0:5.20.0-7.module+el9.4.0+24474+8fc4d0bd.
Update redhat rubygem-mysql2 to version 0:0.5.5-1.module+el9.4.0+21222+faeeed2f.
Update redhat rubygem-mysql2-debuginfo to version 0:0.5.5-1.module+el9.4.0+21222+faeeed2f.
Update redhat rubygem-mysql2-debugsource to version 0:0.5.5-1.module+el9.4.0+21222+faeeed2f.
Update redhat rubygem-mysql2-doc to version 0:0.5.5-1.module+el9.4.0+21222+faeeed2f.
Update redhat rubygem-pg to version 0:1.5.4-1.module+el9.4.0+21222+faeeed2f.
Update redhat rubygem-pg-debuginfo to version 0:1.5.4-1.module+el9.4.0+21222+faeeed2f.
Update redhat rubygem-pg-debugsource to version 0:1.5.4-1.module+el9.4.0+21222+faeeed2f.
Update redhat rubygem-pg-doc to version 0:1.5.4-1.module+el9.4.0+21222+faeeed2f.
Update redhat rubygem-power_assert to version 0:2.0.3-7.module+el9.4.0+24474+8fc4d0bd.
Update redhat rubygem-psych to version 0:5.1.2-7.module+el9.4.0+24474+8fc4d0bd.
Update redhat rubygem-psych-debuginfo to version 0:5.1.2-7.module+el9.4.0+24474+8fc4d0bd.
Update redhat rubygem-racc to version 0:1.7.3-7.module+el9.4.0+24474+8fc4d0bd.
Update redhat rubygem-racc-debuginfo to version 0:1.7.3-7.module+el9.4.0+24474+8fc4d0bd.
Update redhat rubygem-rake to version 0:13.1.0-7.module+el9.4.0+24474+8fc4d0bd.
Update redhat rubygem-rbs to version 0:3.4.0-7.module+el9.4.0+24474+8fc4d0bd.
Update redhat rubygem-rbs-debuginfo to version 0:3.4.0-7.module+el9.4.0+24474+8fc4d0bd.
Update redhat rubygem-rdoc to version 0:6.6.3.1-7.module+el9.4.0+24474+8fc4d0bd.
Update redhat rubygem-rexml to version 0:3.4.4-7.module+el9.4.0+24474+8fc4d0bd.
Update redhat rubygem-rss to version 0:0.3.1-7.module+el9.4.0+24474+8fc4d0bd.
Update redhat rubygem-test-unit to version 0:3.6.1-7.module+el9.4.0+24474+8fc4d0bd.
Update redhat rubygem-typeprof to version 0:0.21.9-7.module+el9.4.0+24474+8fc4d0bd.
Update redhat rubygems to version 0:3.5.22-7.module+el9.4.0+24474+8fc4d0bd.
Update redhat rubygems-devel to version 0:3.5.22-7.module+el9.4.0+24474+8fc4d0bd.

Affected software

Ecosystem	Vendor	Product	Affected versions
Red Hat:rhel_e4s:9.4::appstream	redhat	ruby	< 0:3.3.10-7.module+el9.4.0+24474+8fc4d0bd Fix: upgrade to 0:3.3.10-7.module+el9.4.0+24474+8fc4d0bd
Red Hat:rhel_e4s:9.4::appstream	redhat	ruby-bundled-gems	< 0:3.3.10-7.module+el9.4.0+24474+8fc4d0bd Fix: upgrade to 0:3.3.10-7.module+el9.4.0+24474+8fc4d0bd
Red Hat:rhel_e4s:9.4::appstream	redhat	ruby-bundled-gems-debuginfo	< 0:3.3.10-7.module+el9.4.0+24474+8fc4d0bd Fix: upgrade to 0:3.3.10-7.module+el9.4.0+24474+8fc4d0bd
Red Hat:rhel_e4s:9.4::appstream	redhat	ruby-debuginfo	< 0:3.3.10-7.module+el9.4.0+24474+8fc4d0bd Fix: upgrade to 0:3.3.10-7.module+el9.4.0+24474+8fc4d0bd
Red Hat:rhel_e4s:9.4::appstream	redhat	ruby-debugsource	< 0:3.3.10-7.module+el9.4.0+24474+8fc4d0bd Fix: upgrade to 0:3.3.10-7.module+el9.4.0+24474+8fc4d0bd
Red Hat:rhel_e4s:9.4::appstream	redhat	ruby-default-gems	< 0:3.3.10-7.module+el9.4.0+24474+8fc4d0bd Fix: upgrade to 0:3.3.10-7.module+el9.4.0+24474+8fc4d0bd
Red Hat:rhel_e4s:9.4::appstream	redhat	ruby-devel	< 0:3.3.10-7.module+el9.4.0+24474+8fc4d0bd Fix: upgrade to 0:3.3.10-7.module+el9.4.0+24474+8fc4d0bd
Red Hat:rhel_e4s:9.4::appstream	redhat	ruby-doc	< 0:3.3.10-7.module+el9.4.0+24474+8fc4d0bd Fix: upgrade to 0:3.3.10-7.module+el9.4.0+24474+8fc4d0bd
Red Hat:rhel_e4s:9.4::appstream	redhat	ruby-libs	< 0:3.3.10-7.module+el9.4.0+24474+8fc4d0bd Fix: upgrade to 0:3.3.10-7.module+el9.4.0+24474+8fc4d0bd
Red Hat:rhel_e4s:9.4::appstream	redhat	ruby-libs-debuginfo	< 0:3.3.10-7.module+el9.4.0+24474+8fc4d0bd Fix: upgrade to 0:3.3.10-7.module+el9.4.0+24474+8fc4d0bd
Red Hat:rhel_e4s:9.4::appstream	redhat	rubygem-bigdecimal	< 0:3.1.5-7.module+el9.4.0+24474+8fc4d0bd Fix: upgrade to 0:3.1.5-7.module+el9.4.0+24474+8fc4d0bd
Red Hat:rhel_e4s:9.4::appstream	redhat	rubygem-bigdecimal-debuginfo	< 0:3.1.5-7.module+el9.4.0+24474+8fc4d0bd Fix: upgrade to 0:3.1.5-7.module+el9.4.0+24474+8fc4d0bd
Red Hat:rhel_e4s:9.4::appstream	redhat	rubygem-bundler	< 0:2.5.22-7.module+el9.4.0+24474+8fc4d0bd Fix: upgrade to 0:2.5.22-7.module+el9.4.0+24474+8fc4d0bd
Red Hat:rhel_e4s:9.4::appstream	redhat	rubygem-io-console	< 0:0.7.1-7.module+el9.4.0+24474+8fc4d0bd Fix: upgrade to 0:0.7.1-7.module+el9.4.0+24474+8fc4d0bd
Red Hat:rhel_e4s:9.4::appstream	redhat	rubygem-io-console-debuginfo	< 0:0.7.1-7.module+el9.4.0+24474+8fc4d0bd Fix: upgrade to 0:0.7.1-7.module+el9.4.0+24474+8fc4d0bd
Red Hat:rhel_e4s:9.4::appstream	redhat	rubygem-irb	< 0:1.13.1-7.module+el9.4.0+24474+8fc4d0bd Fix: upgrade to 0:1.13.1-7.module+el9.4.0+24474+8fc4d0bd
Red Hat:rhel_e4s:9.4::appstream	redhat	rubygem-json	< 0:2.7.2-7.module+el9.4.0+24474+8fc4d0bd Fix: upgrade to 0:2.7.2-7.module+el9.4.0+24474+8fc4d0bd
Red Hat:rhel_e4s:9.4::appstream	redhat	rubygem-json-debuginfo	< 0:2.7.2-7.module+el9.4.0+24474+8fc4d0bd Fix: upgrade to 0:2.7.2-7.module+el9.4.0+24474+8fc4d0bd
Red Hat:rhel_e4s:9.4::appstream	redhat	rubygem-minitest	< 0:5.20.0-7.module+el9.4.0+24474+8fc4d0bd Fix: upgrade to 0:5.20.0-7.module+el9.4.0+24474+8fc4d0bd
Red Hat:rhel_e4s:9.4::appstream	redhat	rubygem-mysql2	< 0:0.5.5-1.module+el9.4.0+21222+faeeed2f Fix: upgrade to 0:0.5.5-1.module+el9.4.0+21222+faeeed2f
Red Hat:rhel_e4s:9.4::appstream	redhat	rubygem-mysql2-debuginfo	< 0:0.5.5-1.module+el9.4.0+21222+faeeed2f Fix: upgrade to 0:0.5.5-1.module+el9.4.0+21222+faeeed2f
Red Hat:rhel_e4s:9.4::appstream	redhat	rubygem-mysql2-debugsource	< 0:0.5.5-1.module+el9.4.0+21222+faeeed2f Fix: upgrade to 0:0.5.5-1.module+el9.4.0+21222+faeeed2f
Red Hat:rhel_e4s:9.4::appstream	redhat	rubygem-mysql2-doc	< 0:0.5.5-1.module+el9.4.0+21222+faeeed2f Fix: upgrade to 0:0.5.5-1.module+el9.4.0+21222+faeeed2f
Red Hat:rhel_e4s:9.4::appstream	redhat	rubygem-pg	< 0:1.5.4-1.module+el9.4.0+21222+faeeed2f Fix: upgrade to 0:1.5.4-1.module+el9.4.0+21222+faeeed2f
Red Hat:rhel_e4s:9.4::appstream	redhat	rubygem-pg-debuginfo	< 0:1.5.4-1.module+el9.4.0+21222+faeeed2f Fix: upgrade to 0:1.5.4-1.module+el9.4.0+21222+faeeed2f
Red Hat:rhel_e4s:9.4::appstream	redhat	rubygem-pg-debugsource	< 0:1.5.4-1.module+el9.4.0+21222+faeeed2f Fix: upgrade to 0:1.5.4-1.module+el9.4.0+21222+faeeed2f
Red Hat:rhel_e4s:9.4::appstream	redhat	rubygem-pg-doc	< 0:1.5.4-1.module+el9.4.0+21222+faeeed2f Fix: upgrade to 0:1.5.4-1.module+el9.4.0+21222+faeeed2f
Red Hat:rhel_e4s:9.4::appstream	redhat	rubygem-power_assert	< 0:2.0.3-7.module+el9.4.0+24474+8fc4d0bd Fix: upgrade to 0:2.0.3-7.module+el9.4.0+24474+8fc4d0bd
Red Hat:rhel_e4s:9.4::appstream	redhat	rubygem-psych	< 0:5.1.2-7.module+el9.4.0+24474+8fc4d0bd Fix: upgrade to 0:5.1.2-7.module+el9.4.0+24474+8fc4d0bd
Red Hat:rhel_e4s:9.4::appstream	redhat	rubygem-psych-debuginfo	< 0:5.1.2-7.module+el9.4.0+24474+8fc4d0bd Fix: upgrade to 0:5.1.2-7.module+el9.4.0+24474+8fc4d0bd
Red Hat:rhel_e4s:9.4::appstream	redhat	rubygem-racc	< 0:1.7.3-7.module+el9.4.0+24474+8fc4d0bd Fix: upgrade to 0:1.7.3-7.module+el9.4.0+24474+8fc4d0bd
Red Hat:rhel_e4s:9.4::appstream	redhat	rubygem-racc-debuginfo	< 0:1.7.3-7.module+el9.4.0+24474+8fc4d0bd Fix: upgrade to 0:1.7.3-7.module+el9.4.0+24474+8fc4d0bd
Red Hat:rhel_e4s:9.4::appstream	redhat	rubygem-rake	< 0:13.1.0-7.module+el9.4.0+24474+8fc4d0bd Fix: upgrade to 0:13.1.0-7.module+el9.4.0+24474+8fc4d0bd
Red Hat:rhel_e4s:9.4::appstream	redhat	rubygem-rbs	< 0:3.4.0-7.module+el9.4.0+24474+8fc4d0bd Fix: upgrade to 0:3.4.0-7.module+el9.4.0+24474+8fc4d0bd
Red Hat:rhel_e4s:9.4::appstream	redhat	rubygem-rbs-debuginfo	< 0:3.4.0-7.module+el9.4.0+24474+8fc4d0bd Fix: upgrade to 0:3.4.0-7.module+el9.4.0+24474+8fc4d0bd
Red Hat:rhel_e4s:9.4::appstream	redhat	rubygem-rdoc	< 0:6.6.3.1-7.module+el9.4.0+24474+8fc4d0bd Fix: upgrade to 0:6.6.3.1-7.module+el9.4.0+24474+8fc4d0bd
Red Hat:rhel_e4s:9.4::appstream	redhat	rubygem-rexml	< 0:3.4.4-7.module+el9.4.0+24474+8fc4d0bd Fix: upgrade to 0:3.4.4-7.module+el9.4.0+24474+8fc4d0bd
Red Hat:rhel_e4s:9.4::appstream	redhat	rubygem-rss	< 0:0.3.1-7.module+el9.4.0+24474+8fc4d0bd Fix: upgrade to 0:0.3.1-7.module+el9.4.0+24474+8fc4d0bd
Red Hat:rhel_e4s:9.4::appstream	redhat	rubygem-test-unit	< 0:3.6.1-7.module+el9.4.0+24474+8fc4d0bd Fix: upgrade to 0:3.6.1-7.module+el9.4.0+24474+8fc4d0bd
Red Hat:rhel_e4s:9.4::appstream	redhat	rubygem-typeprof	< 0:0.21.9-7.module+el9.4.0+24474+8fc4d0bd Fix: upgrade to 0:0.21.9-7.module+el9.4.0+24474+8fc4d0bd
Red Hat:rhel_e4s:9.4::appstream	redhat	rubygems	< 0:3.5.22-7.module+el9.4.0+24474+8fc4d0bd Fix: upgrade to 0:3.5.22-7.module+el9.4.0+24474+8fc4d0bd
Red Hat:rhel_e4s:9.4::appstream	redhat	rubygems-devel	< 0:3.5.22-7.module+el9.4.0+24474+8fc4d0bd Fix: upgrade to 0:3.5.22-7.module+el9.4.0+24474+8fc4d0bd

Original advisory text

Red Hat Security Advisory: ruby:3.3 security update

References

https://access.redhat.com/errata/RHSA-2026:36099 Vendor Advisory
https://access.redhat.com/security/updates/classification/#important Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2468495 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2468498 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2468499 Third Party Advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_36099.... Vendor Advisory
https://access.redhat.com/security/cve/CVE-2026-42245 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-42245 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-42245 Vendor Advisory
https://github.com/ruby/net-imap/commit/6091f7d6b1f3514cafbfe39c76f2b5d73de3ca96 Third Party Advisory
https://github.com/ruby/net-imap/commit/88d95231fc8afef11c1f074453f7d75b68c9dfda Third Party Advisory
https://github.com/ruby/net-imap/commit/de685f91a4a4cc75eb80da898c2bf8af08d34819 Third Party Advisory
https://github.com/ruby/net-imap/releases/tag/v0.4.24 Third Party Advisory
https://github.com/ruby/net-imap/releases/tag/v0.5.14 Third Party Advisory
https://github.com/ruby/net-imap/releases/tag/v0.6.4 Third Party Advisory
https://github.com/ruby/net-imap/security/advisories/GHSA-q2mw-fvj9-vvcw Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-42246 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-42246 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-42246 Vendor Advisory
https://github.com/ruby/net-imap/commit/0ede4c40b1523dfeaf95777b2678e54cc0fd9618 Third Party Advisory
https://github.com/ruby/net-imap/commit/24a4e770b43230286a05aa2a9746cdbb3eb8485e Third Party Advisory
https://github.com/ruby/net-imap/commit/97e2488fb5401a1783bddd959dde007d9fbce42c Third Party Advisory
https://github.com/ruby/net-imap/commit/f79d35bf5833f186e81044c57c843eda30c873da Third Party Advisory
https://github.com/ruby/net-imap/releases/tag/v0.3.10 Third Party Advisory
https://github.com/ruby/net-imap/security/advisories/GHSA-vcgp-9326-pqcp Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-42258 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-42258 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-42258 Vendor Advisory
https://github.com/ruby/net-imap/security/advisories/GHSA-75xq-5h9v-w6px Third Party Advisory

Fix within

Internet-facing 3 days

Internal 60 days

Not known to be exploited
Can be exploited automatically (estimated)
Gives an attacker full control (estimated)

Severity

7.4 High

Timeline

Published7 Jul 2026

Updated8 Jul 2026

First seen8 Jul 2026

Sources

RHSA-2026:36099 · OSV

Track software like this

Free during beta