RHSA-2025:23648
RHSA-2025:23648 · Red Hat Security Advisory: ruby:3.3 security update
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This page shows selected source facts. See the linked advisories for the complete description and affected versions.
Red Hat Security Advisory: ruby:3.3 security update
CVSS 8.1 · High · Fix available
- Published
- Updated
Stack: system
Affected products and versions
ruby Red Hat:rhel_eus:9.6::appstream
- Affected ranges
- ECOSYSTEM: < 0:3.3.10-5.module+el9.6.0+23780+e40d2335
Update to 0:3.3.10-5.module+el9.6.0+23780+e40d2335
ruby-bundled-gems Red Hat:rhel_eus:9.6::appstream
- Affected ranges
- ECOSYSTEM: < 0:3.3.10-5.module+el9.6.0+23780+e40d2335
Update to 0:3.3.10-5.module+el9.6.0+23780+e40d2335
ruby-bundled-gems-debuginfo Red Hat:rhel_eus:9.6::appstream
- Affected ranges
- ECOSYSTEM: < 0:3.3.10-5.module+el9.6.0+23780+e40d2335
Update to 0:3.3.10-5.module+el9.6.0+23780+e40d2335
ruby-debuginfo Red Hat:rhel_eus:9.6::appstream
- Affected ranges
- ECOSYSTEM: < 0:3.3.10-5.module+el9.6.0+23780+e40d2335
Update to 0:3.3.10-5.module+el9.6.0+23780+e40d2335
ruby-debugsource Red Hat:rhel_eus:9.6::appstream
- Affected ranges
- ECOSYSTEM: < 0:3.3.10-5.module+el9.6.0+23780+e40d2335
Update to 0:3.3.10-5.module+el9.6.0+23780+e40d2335
ruby-default-gems Red Hat:rhel_eus:9.6::appstream
- Affected ranges
- ECOSYSTEM: < 0:3.3.10-5.module+el9.6.0+23780+e40d2335
Update to 0:3.3.10-5.module+el9.6.0+23780+e40d2335
ruby-devel Red Hat:rhel_eus:9.6::appstream
- Affected ranges
- ECOSYSTEM: < 0:3.3.10-5.module+el9.6.0+23780+e40d2335
Update to 0:3.3.10-5.module+el9.6.0+23780+e40d2335
ruby-doc Red Hat:rhel_eus:9.6::appstream
- Affected ranges
- ECOSYSTEM: < 0:3.3.10-5.module+el9.6.0+23780+e40d2335
Update to 0:3.3.10-5.module+el9.6.0+23780+e40d2335
ruby-libs Red Hat:rhel_eus:9.6::appstream
- Affected ranges
- ECOSYSTEM: < 0:3.3.10-5.module+el9.6.0+23780+e40d2335
Update to 0:3.3.10-5.module+el9.6.0+23780+e40d2335
ruby-libs-debuginfo Red Hat:rhel_eus:9.6::appstream
- Affected ranges
- ECOSYSTEM: < 0:3.3.10-5.module+el9.6.0+23780+e40d2335
Update to 0:3.3.10-5.module+el9.6.0+23780+e40d2335
rubygem-bigdecimal Red Hat:rhel_eus:9.6::appstream
- Affected ranges
- ECOSYSTEM: < 0:3.1.5-5.module+el9.6.0+23780+e40d2335
Update to 0:3.1.5-5.module+el9.6.0+23780+e40d2335
rubygem-bigdecimal-debuginfo Red Hat:rhel_eus:9.6::appstream
- Affected ranges
- ECOSYSTEM: < 0:3.1.5-5.module+el9.6.0+23780+e40d2335
Update to 0:3.1.5-5.module+el9.6.0+23780+e40d2335
rubygem-bundler Red Hat:rhel_eus:9.6::appstream
- Affected ranges
- ECOSYSTEM: < 0:2.5.22-5.module+el9.6.0+23780+e40d2335
Update to 0:2.5.22-5.module+el9.6.0+23780+e40d2335
rubygem-io-console Red Hat:rhel_eus:9.6::appstream
- Affected ranges
- ECOSYSTEM: < 0:0.7.1-5.module+el9.6.0+23780+e40d2335
Update to 0:0.7.1-5.module+el9.6.0+23780+e40d2335
rubygem-io-console-debuginfo Red Hat:rhel_eus:9.6::appstream
- Affected ranges
- ECOSYSTEM: < 0:0.7.1-5.module+el9.6.0+23780+e40d2335
Update to 0:0.7.1-5.module+el9.6.0+23780+e40d2335
rubygem-irb Red Hat:rhel_eus:9.6::appstream
- Affected ranges
- ECOSYSTEM: < 0:1.13.1-5.module+el9.6.0+23780+e40d2335
Update to 0:1.13.1-5.module+el9.6.0+23780+e40d2335
rubygem-json Red Hat:rhel_eus:9.6::appstream
- Affected ranges
- ECOSYSTEM: < 0:2.7.2-5.module+el9.6.0+23780+e40d2335
Update to 0:2.7.2-5.module+el9.6.0+23780+e40d2335
rubygem-json-debuginfo Red Hat:rhel_eus:9.6::appstream
- Affected ranges
- ECOSYSTEM: < 0:2.7.2-5.module+el9.6.0+23780+e40d2335
Update to 0:2.7.2-5.module+el9.6.0+23780+e40d2335
rubygem-minitest Red Hat:rhel_eus:9.6::appstream
- Affected ranges
- ECOSYSTEM: < 0:5.20.0-5.module+el9.6.0+23780+e40d2335
Update to 0:5.20.0-5.module+el9.6.0+23780+e40d2335
rubygem-mysql2 Red Hat:rhel_eus:9.6::appstream
- Affected ranges
- ECOSYSTEM: < 0:0.5.5-1.module+el9.4.0+21222+faeeed2f
Update to 0:0.5.5-1.module+el9.4.0+21222+faeeed2f
rubygem-mysql2-debuginfo Red Hat:rhel_eus:9.6::appstream
- Affected ranges
- ECOSYSTEM: < 0:0.5.5-1.module+el9.4.0+21222+faeeed2f
Update to 0:0.5.5-1.module+el9.4.0+21222+faeeed2f
rubygem-mysql2-debugsource Red Hat:rhel_eus:9.6::appstream
- Affected ranges
- ECOSYSTEM: < 0:0.5.5-1.module+el9.4.0+21222+faeeed2f
Update to 0:0.5.5-1.module+el9.4.0+21222+faeeed2f
rubygem-mysql2-doc Red Hat:rhel_eus:9.6::appstream
- Affected ranges
- ECOSYSTEM: < 0:0.5.5-1.module+el9.4.0+21222+faeeed2f
Update to 0:0.5.5-1.module+el9.4.0+21222+faeeed2f
rubygem-pg Red Hat:rhel_eus:9.6::appstream
- Affected ranges
- ECOSYSTEM: < 0:1.5.4-1.module+el9.4.0+21222+faeeed2f
Update to 0:1.5.4-1.module+el9.4.0+21222+faeeed2f
Original sources
- https://access.redhat.com/errata/RHSA-2025:23648
- https://access.redhat.com/security/updates/classification/#moderate
- https://bugzilla.redhat.com/show_bug.cgi?id=2379684
- https://bugzilla.redhat.com/show_bug.cgi?id=2396186
- https://bugzilla.redhat.com/show_bug.cgi?id=2404720
- https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_23648.json
- https://access.redhat.com/security/cve/CVE-2025-24294
- https://www.cve.org/CVERecord?id=CVE-2025-24294
- https://nvd.nist.gov/vuln/detail/CVE-2025-24294
- https://www.ruby-lang.org/en/news/2025/07/08/dos-resolv-cve-2025-24294/
- https://access.redhat.com/security/cve/CVE-2025-26625
- https://www.cve.org/CVERecord?id=CVE-2025-26625
- https://nvd.nist.gov/vuln/detail/CVE-2025-26625
- https://github.com/git-lfs/git-lfs/commit/0cffe93176b870055c9dadbb3cc9a4a440e98396
- https://github.com/git-lfs/git-lfs/commit/5c11ffce9a4f095ff356bc781e2a031abb46c1a8
- https://github.com/git-lfs/git-lfs/commit/d02bd13f02ef76f6807581cd6b34709069cb3615
- https://github.com/git-lfs/git-lfs/releases/tag/v3.7.1
- https://github.com/git-lfs/git-lfs/security/advisories/GHSA-6pvw-g552-53c5
- https://access.redhat.com/security/cve/CVE-2025-58767
- https://www.cve.org/CVERecord?id=CVE-2025-58767
- https://nvd.nist.gov/vuln/detail/CVE-2025-58767
- https://github.com/ruby/rexml/commit/5859bdeac792687eaf93d8e8f0b7e3c1e2ed5c23
- https://github.com/ruby/rexml/security/advisories/GHSA-c2f4-jgmc-q2r5
- https://osv.dev/vulnerability/RHSA-2025:23648