RHSA-2025:23927
RHSA-2025:23927 · Red Hat Security Advisory: ruby security update
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This page shows selected source facts. See the linked advisories for the complete description and affected versions.
Red Hat Security Advisory: ruby security update
CVSS 8.1 · High · Fix available
- Published
- Updated
Stack: system
Affected products and versions
ruby Red Hat:enterprise_linux_eus:10.0
- Affected ranges
- ECOSYSTEM: < 0:3.3.10-11.el10_0
Update to 0:3.3.10-11.el10_0
ruby-bundled-gems Red Hat:enterprise_linux_eus:10.0
- Affected ranges
- ECOSYSTEM: < 0:3.3.10-11.el10_0
Update to 0:3.3.10-11.el10_0
ruby-bundled-gems-debuginfo Red Hat:enterprise_linux_eus:10.0
- Affected ranges
- ECOSYSTEM: < 0:3.3.10-11.el10_0
Update to 0:3.3.10-11.el10_0
ruby-debuginfo Red Hat:enterprise_linux_eus:10.0
- Affected ranges
- ECOSYSTEM: < 0:3.3.10-11.el10_0
Update to 0:3.3.10-11.el10_0
ruby-debugsource Red Hat:enterprise_linux_eus:10.0
- Affected ranges
- ECOSYSTEM: < 0:3.3.10-11.el10_0
Update to 0:3.3.10-11.el10_0
ruby-default-gems Red Hat:enterprise_linux_eus:10.0
- Affected ranges
- ECOSYSTEM: < 0:3.3.10-11.el10_0
Update to 0:3.3.10-11.el10_0
ruby-devel Red Hat:enterprise_linux_eus:10.0
- Affected ranges
- ECOSYSTEM: < 0:3.3.10-11.el10_0
Update to 0:3.3.10-11.el10_0
ruby-libs Red Hat:enterprise_linux_eus:10.0
- Affected ranges
- ECOSYSTEM: < 0:3.3.10-11.el10_0
Update to 0:3.3.10-11.el10_0
ruby-libs-debuginfo Red Hat:enterprise_linux_eus:10.0
- Affected ranges
- ECOSYSTEM: < 0:3.3.10-11.el10_0
Update to 0:3.3.10-11.el10_0
rubygem-bigdecimal Red Hat:enterprise_linux_eus:10.0
- Affected ranges
- ECOSYSTEM: < 0:3.1.5-11.el10_0
Update to 0:3.1.5-11.el10_0
rubygem-bigdecimal-debuginfo Red Hat:enterprise_linux_eus:10.0
- Affected ranges
- ECOSYSTEM: < 0:3.1.5-11.el10_0
Update to 0:3.1.5-11.el10_0
rubygem-bundler Red Hat:enterprise_linux_eus:10.0
- Affected ranges
- ECOSYSTEM: < 0:2.5.22-11.el10_0
Update to 0:2.5.22-11.el10_0
rubygem-io-console Red Hat:enterprise_linux_eus:10.0
- Affected ranges
- ECOSYSTEM: < 0:0.7.1-11.el10_0
Update to 0:0.7.1-11.el10_0
rubygem-io-console-debuginfo Red Hat:enterprise_linux_eus:10.0
- Affected ranges
- ECOSYSTEM: < 0:0.7.1-11.el10_0
Update to 0:0.7.1-11.el10_0
rubygem-irb Red Hat:enterprise_linux_eus:10.0
- Affected ranges
- ECOSYSTEM: < 0:1.13.1-11.el10_0
Update to 0:1.13.1-11.el10_0
rubygem-json Red Hat:enterprise_linux_eus:10.0
- Affected ranges
- ECOSYSTEM: < 0:2.7.2-11.el10_0
Update to 0:2.7.2-11.el10_0
rubygem-json-debuginfo Red Hat:enterprise_linux_eus:10.0
- Affected ranges
- ECOSYSTEM: < 0:2.7.2-11.el10_0
Update to 0:2.7.2-11.el10_0
rubygem-minitest Red Hat:enterprise_linux_eus:10.0
- Affected ranges
- ECOSYSTEM: < 0:5.20.0-11.el10_0
Update to 0:5.20.0-11.el10_0
rubygem-power_assert Red Hat:enterprise_linux_eus:10.0
- Affected ranges
- ECOSYSTEM: < 0:2.0.3-11.el10_0
Update to 0:2.0.3-11.el10_0
rubygem-psych Red Hat:enterprise_linux_eus:10.0
- Affected ranges
- ECOSYSTEM: < 0:5.1.2-11.el10_0
Update to 0:5.1.2-11.el10_0
rubygem-psych-debuginfo Red Hat:enterprise_linux_eus:10.0
- Affected ranges
- ECOSYSTEM: < 0:5.1.2-11.el10_0
Update to 0:5.1.2-11.el10_0
rubygem-racc Red Hat:enterprise_linux_eus:10.0
- Affected ranges
- ECOSYSTEM: < 0:1.7.3-11.el10_0
Update to 0:1.7.3-11.el10_0
rubygem-racc-debuginfo Red Hat:enterprise_linux_eus:10.0
- Affected ranges
- ECOSYSTEM: < 0:1.7.3-11.el10_0
Update to 0:1.7.3-11.el10_0
rubygem-rake Red Hat:enterprise_linux_eus:10.0
- Affected ranges
- ECOSYSTEM: < 0:13.1.0-11.el10_0
Update to 0:13.1.0-11.el10_0
Original sources
- https://access.redhat.com/errata/RHSA-2025:23927
- https://access.redhat.com/security/updates/classification/#moderate
- https://bugzilla.redhat.com/show_bug.cgi?id=2379684
- https://bugzilla.redhat.com/show_bug.cgi?id=2396186
- https://bugzilla.redhat.com/show_bug.cgi?id=2404720
- https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_23927.json
- https://access.redhat.com/security/cve/CVE-2025-24294
- https://www.cve.org/CVERecord?id=CVE-2025-24294
- https://nvd.nist.gov/vuln/detail/CVE-2025-24294
- https://www.ruby-lang.org/en/news/2025/07/08/dos-resolv-cve-2025-24294/
- https://access.redhat.com/security/cve/CVE-2025-26625
- https://www.cve.org/CVERecord?id=CVE-2025-26625
- https://nvd.nist.gov/vuln/detail/CVE-2025-26625
- https://github.com/git-lfs/git-lfs/commit/0cffe93176b870055c9dadbb3cc9a4a440e98396
- https://github.com/git-lfs/git-lfs/commit/5c11ffce9a4f095ff356bc781e2a031abb46c1a8
- https://github.com/git-lfs/git-lfs/commit/d02bd13f02ef76f6807581cd6b34709069cb3615
- https://github.com/git-lfs/git-lfs/releases/tag/v3.7.1
- https://github.com/git-lfs/git-lfs/security/advisories/GHSA-6pvw-g552-53c5
- https://access.redhat.com/security/cve/CVE-2025-58767
- https://www.cve.org/CVERecord?id=CVE-2025-58767
- https://nvd.nist.gov/vuln/detail/CVE-2025-58767
- https://github.com/ruby/rexml/commit/5859bdeac792687eaf93d8e8f0b7e3c1e2ed5c23
- https://github.com/ruby/rexml/security/advisories/GHSA-c2f4-jgmc-q2r5
- https://osv.dev/vulnerability/RHSA-2025:23927