Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
8.1
Ruby 3.3 on Red Hat Systems: Unpatched Security Risk
published 4 months ago
Summary
An unpatched security risk exists in Ruby 3.3 on Red Hat systems. This could allow an attacker to execute arbitrary code on vulnerable systems. To mitigate this risk, update to the latest Ruby 3.3 version as soon as possible.
What to do
- Update redhat ruby to version 0:3.3.10-6.module+el9.4.0+24333+ed4ca411.
- Update redhat ruby-bundled-gems to version 0:3.3.10-6.module+el9.4.0+24333+ed4ca411.
- Update redhat ruby-bundled-gems-debuginfo to version 0:3.3.10-6.module+el9.4.0+24333+ed4ca411.
- Update redhat ruby-debuginfo to version 0:3.3.10-6.module+el9.4.0+24333+ed4ca411.
- Update redhat ruby-debugsource to version 0:3.3.10-6.module+el9.4.0+24333+ed4ca411.
- Update redhat ruby-default-gems to version 0:3.3.10-6.module+el9.4.0+24333+ed4ca411.
- Update redhat ruby-devel to version 0:3.3.10-6.module+el9.4.0+24333+ed4ca411.
- Update redhat ruby-doc to version 0:3.3.10-6.module+el9.4.0+24333+ed4ca411.
- Update redhat ruby-libs to version 0:3.3.10-6.module+el9.4.0+24333+ed4ca411.
- Update redhat ruby-libs-debuginfo to version 0:3.3.10-6.module+el9.4.0+24333+ed4ca411.
- Update redhat rubygem-bigdecimal to version 0:3.1.5-6.module+el9.4.0+24333+ed4ca411.
- Update redhat rubygem-bigdecimal-debuginfo to version 0:3.1.5-6.module+el9.4.0+24333+ed4ca411.
- Update redhat rubygem-bundler to version 0:2.5.22-6.module+el9.4.0+24333+ed4ca411.
- Update redhat rubygem-io-console to version 0:0.7.1-6.module+el9.4.0+24333+ed4ca411.
- Update redhat rubygem-io-console-debuginfo to version 0:0.7.1-6.module+el9.4.0+24333+ed4ca411.
- Update redhat rubygem-irb to version 0:1.13.1-6.module+el9.4.0+24333+ed4ca411.
- Update redhat rubygem-json to version 0:2.7.2-6.module+el9.4.0+24333+ed4ca411.
- Update redhat rubygem-json-debuginfo to version 0:2.7.2-6.module+el9.4.0+24333+ed4ca411.
- Update redhat rubygem-minitest to version 0:5.20.0-6.module+el9.4.0+24333+ed4ca411.
- Update redhat rubygem-mysql2 to version 0:0.5.5-1.module+el9.4.0+21222+faeeed2f.
- Update redhat rubygem-mysql2-debuginfo to version 0:0.5.5-1.module+el9.4.0+21222+faeeed2f.
- Update redhat rubygem-mysql2-debugsource to version 0:0.5.5-1.module+el9.4.0+21222+faeeed2f.
- Update redhat rubygem-mysql2-doc to version 0:0.5.5-1.module+el9.4.0+21222+faeeed2f.
- Update redhat rubygem-pg to version 0:1.5.4-1.module+el9.4.0+21222+faeeed2f.
- Update redhat rubygem-pg-debuginfo to version 0:1.5.4-1.module+el9.4.0+21222+faeeed2f.
- Update redhat rubygem-pg-debugsource to version 0:1.5.4-1.module+el9.4.0+21222+faeeed2f.
- Update redhat rubygem-pg-doc to version 0:1.5.4-1.module+el9.4.0+21222+faeeed2f.
- Update redhat rubygem-power_assert to version 0:2.0.3-6.module+el9.4.0+24333+ed4ca411.
- Update redhat rubygem-psych to version 0:5.1.2-6.module+el9.4.0+24333+ed4ca411.
- Update redhat rubygem-psych-debuginfo to version 0:5.1.2-6.module+el9.4.0+24333+ed4ca411.
- Update redhat rubygem-racc to version 0:1.7.3-6.module+el9.4.0+24333+ed4ca411.
- Update redhat rubygem-racc-debuginfo to version 0:1.7.3-6.module+el9.4.0+24333+ed4ca411.
- Update redhat rubygem-rake to version 0:13.1.0-6.module+el9.4.0+24333+ed4ca411.
- Update redhat rubygem-rbs to version 0:3.4.0-6.module+el9.4.0+24333+ed4ca411.
- Update redhat rubygem-rbs-debuginfo to version 0:3.4.0-6.module+el9.4.0+24333+ed4ca411.
- Update redhat rubygem-rdoc to version 0:6.6.3.1-6.module+el9.4.0+24333+ed4ca411.
- Update redhat rubygem-rexml to version 0:3.4.4-6.module+el9.4.0+24333+ed4ca411.
- Update redhat rubygem-rss to version 0:0.3.1-6.module+el9.4.0+24333+ed4ca411.
- Update redhat rubygem-test-unit to version 0:3.6.1-6.module+el9.4.0+24333+ed4ca411.
- Update redhat rubygem-typeprof to version 0:0.21.9-6.module+el9.4.0+24333+ed4ca411.
- Update redhat rubygems to version 0:3.5.22-6.module+el9.4.0+24333+ed4ca411.
- Update redhat rubygems-devel to version 0:3.5.22-6.module+el9.4.0+24333+ed4ca411.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Red Hat:rhel_e4s:9.4::appstream | redhat | ruby |
< 0:3.3.10-6.module+el9.4.0+24333+ed4ca411 Fix: upgrade to 0:3.3.10-6.module+el9.4.0+24333+ed4ca411
|
| Red Hat:rhel_e4s:9.4::appstream | redhat | ruby-bundled-gems |
< 0:3.3.10-6.module+el9.4.0+24333+ed4ca411 Fix: upgrade to 0:3.3.10-6.module+el9.4.0+24333+ed4ca411
|
| Red Hat:rhel_e4s:9.4::appstream | redhat | ruby-bundled-gems-debuginfo |
< 0:3.3.10-6.module+el9.4.0+24333+ed4ca411 Fix: upgrade to 0:3.3.10-6.module+el9.4.0+24333+ed4ca411
|
| Red Hat:rhel_e4s:9.4::appstream | redhat | ruby-debuginfo |
< 0:3.3.10-6.module+el9.4.0+24333+ed4ca411 Fix: upgrade to 0:3.3.10-6.module+el9.4.0+24333+ed4ca411
|
| Red Hat:rhel_e4s:9.4::appstream | redhat | ruby-debugsource |
< 0:3.3.10-6.module+el9.4.0+24333+ed4ca411 Fix: upgrade to 0:3.3.10-6.module+el9.4.0+24333+ed4ca411
|
| Red Hat:rhel_e4s:9.4::appstream | redhat | ruby-default-gems |
< 0:3.3.10-6.module+el9.4.0+24333+ed4ca411 Fix: upgrade to 0:3.3.10-6.module+el9.4.0+24333+ed4ca411
|
| Red Hat:rhel_e4s:9.4::appstream | redhat | ruby-devel |
< 0:3.3.10-6.module+el9.4.0+24333+ed4ca411 Fix: upgrade to 0:3.3.10-6.module+el9.4.0+24333+ed4ca411
|
| Red Hat:rhel_e4s:9.4::appstream | redhat | ruby-doc |
< 0:3.3.10-6.module+el9.4.0+24333+ed4ca411 Fix: upgrade to 0:3.3.10-6.module+el9.4.0+24333+ed4ca411
|
| Red Hat:rhel_e4s:9.4::appstream | redhat | ruby-libs |
< 0:3.3.10-6.module+el9.4.0+24333+ed4ca411 Fix: upgrade to 0:3.3.10-6.module+el9.4.0+24333+ed4ca411
|
| Red Hat:rhel_e4s:9.4::appstream | redhat | ruby-libs-debuginfo |
< 0:3.3.10-6.module+el9.4.0+24333+ed4ca411 Fix: upgrade to 0:3.3.10-6.module+el9.4.0+24333+ed4ca411
|
| Red Hat:rhel_e4s:9.4::appstream | redhat | rubygem-bigdecimal |
< 0:3.1.5-6.module+el9.4.0+24333+ed4ca411 Fix: upgrade to 0:3.1.5-6.module+el9.4.0+24333+ed4ca411
|
| Red Hat:rhel_e4s:9.4::appstream | redhat | rubygem-bigdecimal-debuginfo |
< 0:3.1.5-6.module+el9.4.0+24333+ed4ca411 Fix: upgrade to 0:3.1.5-6.module+el9.4.0+24333+ed4ca411
|
| Red Hat:rhel_e4s:9.4::appstream | redhat | rubygem-bundler |
< 0:2.5.22-6.module+el9.4.0+24333+ed4ca411 Fix: upgrade to 0:2.5.22-6.module+el9.4.0+24333+ed4ca411
|
| Red Hat:rhel_e4s:9.4::appstream | redhat | rubygem-io-console |
< 0:0.7.1-6.module+el9.4.0+24333+ed4ca411 Fix: upgrade to 0:0.7.1-6.module+el9.4.0+24333+ed4ca411
|
| Red Hat:rhel_e4s:9.4::appstream | redhat | rubygem-io-console-debuginfo |
< 0:0.7.1-6.module+el9.4.0+24333+ed4ca411 Fix: upgrade to 0:0.7.1-6.module+el9.4.0+24333+ed4ca411
|
| Red Hat:rhel_e4s:9.4::appstream | redhat | rubygem-irb |
< 0:1.13.1-6.module+el9.4.0+24333+ed4ca411 Fix: upgrade to 0:1.13.1-6.module+el9.4.0+24333+ed4ca411
|
| Red Hat:rhel_e4s:9.4::appstream | redhat | rubygem-json |
< 0:2.7.2-6.module+el9.4.0+24333+ed4ca411 Fix: upgrade to 0:2.7.2-6.module+el9.4.0+24333+ed4ca411
|
| Red Hat:rhel_e4s:9.4::appstream | redhat | rubygem-json-debuginfo |
< 0:2.7.2-6.module+el9.4.0+24333+ed4ca411 Fix: upgrade to 0:2.7.2-6.module+el9.4.0+24333+ed4ca411
|
| Red Hat:rhel_e4s:9.4::appstream | redhat | rubygem-minitest |
< 0:5.20.0-6.module+el9.4.0+24333+ed4ca411 Fix: upgrade to 0:5.20.0-6.module+el9.4.0+24333+ed4ca411
|
| Red Hat:rhel_e4s:9.4::appstream | redhat | rubygem-mysql2 |
< 0:0.5.5-1.module+el9.4.0+21222+faeeed2f Fix: upgrade to 0:0.5.5-1.module+el9.4.0+21222+faeeed2f
|
| Red Hat:rhel_e4s:9.4::appstream | redhat | rubygem-mysql2-debuginfo |
< 0:0.5.5-1.module+el9.4.0+21222+faeeed2f Fix: upgrade to 0:0.5.5-1.module+el9.4.0+21222+faeeed2f
|
| Red Hat:rhel_e4s:9.4::appstream | redhat | rubygem-mysql2-debugsource |
< 0:0.5.5-1.module+el9.4.0+21222+faeeed2f Fix: upgrade to 0:0.5.5-1.module+el9.4.0+21222+faeeed2f
|
| Red Hat:rhel_e4s:9.4::appstream | redhat | rubygem-mysql2-doc |
< 0:0.5.5-1.module+el9.4.0+21222+faeeed2f Fix: upgrade to 0:0.5.5-1.module+el9.4.0+21222+faeeed2f
|
| Red Hat:rhel_e4s:9.4::appstream | redhat | rubygem-pg |
< 0:1.5.4-1.module+el9.4.0+21222+faeeed2f Fix: upgrade to 0:1.5.4-1.module+el9.4.0+21222+faeeed2f
|
| Red Hat:rhel_e4s:9.4::appstream | redhat | rubygem-pg-debuginfo |
< 0:1.5.4-1.module+el9.4.0+21222+faeeed2f Fix: upgrade to 0:1.5.4-1.module+el9.4.0+21222+faeeed2f
|
| Red Hat:rhel_e4s:9.4::appstream | redhat | rubygem-pg-debugsource |
< 0:1.5.4-1.module+el9.4.0+21222+faeeed2f Fix: upgrade to 0:1.5.4-1.module+el9.4.0+21222+faeeed2f
|
| Red Hat:rhel_e4s:9.4::appstream | redhat | rubygem-pg-doc |
< 0:1.5.4-1.module+el9.4.0+21222+faeeed2f Fix: upgrade to 0:1.5.4-1.module+el9.4.0+21222+faeeed2f
|
| Red Hat:rhel_e4s:9.4::appstream | redhat | rubygem-power_assert |
< 0:2.0.3-6.module+el9.4.0+24333+ed4ca411 Fix: upgrade to 0:2.0.3-6.module+el9.4.0+24333+ed4ca411
|
| Red Hat:rhel_e4s:9.4::appstream | redhat | rubygem-psych |
< 0:5.1.2-6.module+el9.4.0+24333+ed4ca411 Fix: upgrade to 0:5.1.2-6.module+el9.4.0+24333+ed4ca411
|
| Red Hat:rhel_e4s:9.4::appstream | redhat | rubygem-psych-debuginfo |
< 0:5.1.2-6.module+el9.4.0+24333+ed4ca411 Fix: upgrade to 0:5.1.2-6.module+el9.4.0+24333+ed4ca411
|
| Red Hat:rhel_e4s:9.4::appstream | redhat | rubygem-racc |
< 0:1.7.3-6.module+el9.4.0+24333+ed4ca411 Fix: upgrade to 0:1.7.3-6.module+el9.4.0+24333+ed4ca411
|
| Red Hat:rhel_e4s:9.4::appstream | redhat | rubygem-racc-debuginfo |
< 0:1.7.3-6.module+el9.4.0+24333+ed4ca411 Fix: upgrade to 0:1.7.3-6.module+el9.4.0+24333+ed4ca411
|
| Red Hat:rhel_e4s:9.4::appstream | redhat | rubygem-rake |
< 0:13.1.0-6.module+el9.4.0+24333+ed4ca411 Fix: upgrade to 0:13.1.0-6.module+el9.4.0+24333+ed4ca411
|
| Red Hat:rhel_e4s:9.4::appstream | redhat | rubygem-rbs |
< 0:3.4.0-6.module+el9.4.0+24333+ed4ca411 Fix: upgrade to 0:3.4.0-6.module+el9.4.0+24333+ed4ca411
|
| Red Hat:rhel_e4s:9.4::appstream | redhat | rubygem-rbs-debuginfo |
< 0:3.4.0-6.module+el9.4.0+24333+ed4ca411 Fix: upgrade to 0:3.4.0-6.module+el9.4.0+24333+ed4ca411
|
| Red Hat:rhel_e4s:9.4::appstream | redhat | rubygem-rdoc |
< 0:6.6.3.1-6.module+el9.4.0+24333+ed4ca411 Fix: upgrade to 0:6.6.3.1-6.module+el9.4.0+24333+ed4ca411
|
| Red Hat:rhel_e4s:9.4::appstream | redhat | rubygem-rexml |
< 0:3.4.4-6.module+el9.4.0+24333+ed4ca411 Fix: upgrade to 0:3.4.4-6.module+el9.4.0+24333+ed4ca411
|
| Red Hat:rhel_e4s:9.4::appstream | redhat | rubygem-rss |
< 0:0.3.1-6.module+el9.4.0+24333+ed4ca411 Fix: upgrade to 0:0.3.1-6.module+el9.4.0+24333+ed4ca411
|
| Red Hat:rhel_e4s:9.4::appstream | redhat | rubygem-test-unit |
< 0:3.6.1-6.module+el9.4.0+24333+ed4ca411 Fix: upgrade to 0:3.6.1-6.module+el9.4.0+24333+ed4ca411
|
| Red Hat:rhel_e4s:9.4::appstream | redhat | rubygem-typeprof |
< 0:0.21.9-6.module+el9.4.0+24333+ed4ca411 Fix: upgrade to 0:0.21.9-6.module+el9.4.0+24333+ed4ca411
|
| Red Hat:rhel_e4s:9.4::appstream | redhat | rubygems |
< 0:3.5.22-6.module+el9.4.0+24333+ed4ca411 Fix: upgrade to 0:3.5.22-6.module+el9.4.0+24333+ed4ca411
|
| Red Hat:rhel_e4s:9.4::appstream | redhat | rubygems-devel |
< 0:3.5.22-6.module+el9.4.0+24333+ed4ca411 Fix: upgrade to 0:3.5.22-6.module+el9.4.0+24333+ed4ca411
|
Original advisory text
Red Hat Security Advisory: ruby:3.3 security update
References
- https://access.redhat.com/errata/RHSA-2026:26655 Vendor Advisory
- https://access.redhat.com/security/updates/classification/#important Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2461369 Third Party Advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_26655.... Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2026-41316 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-41316 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-41316 Vendor Advisory
- https://github.com/ruby/erb/security/advisories/GHSA-q339-8rmv-2mhv Third Party Advisory
Internet-facing
3 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker full control (estimated)
Timeline
Published18 Jun 2026
Updated18 Jun 2026
First seen18 Jun 2026
Sources
RHSA-2026:26655 · OSV
Track software like this
Free during beta