RHSA-2026:35895
RHSA-2026:35895 · Red Hat Security Advisory: ruby security update
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This page shows selected source facts. See the linked advisories for the complete description and affected versions.
Red Hat Security Advisory: ruby security update
CVSS 7.4 · High · Fix available
- Published
- Updated
Stack: system
Affected products and versions
ruby Red Hat:enterprise_linux_eus:10.0
- Affected ranges
- ECOSYSTEM: < 0:3.3.10-11.el10_0.2
Update to 0:3.3.10-11.el10_0.2
ruby-bundled-gems Red Hat:enterprise_linux_eus:10.0
- Affected ranges
- ECOSYSTEM: < 0:3.3.10-11.el10_0.2
Update to 0:3.3.10-11.el10_0.2
ruby-bundled-gems-debuginfo Red Hat:enterprise_linux_eus:10.0
- Affected ranges
- ECOSYSTEM: < 0:3.3.10-11.el10_0.2
Update to 0:3.3.10-11.el10_0.2
ruby-debuginfo Red Hat:enterprise_linux_eus:10.0
- Affected ranges
- ECOSYSTEM: < 0:3.3.10-11.el10_0.2
Update to 0:3.3.10-11.el10_0.2
ruby-debugsource Red Hat:enterprise_linux_eus:10.0
- Affected ranges
- ECOSYSTEM: < 0:3.3.10-11.el10_0.2
Update to 0:3.3.10-11.el10_0.2
ruby-default-gems Red Hat:enterprise_linux_eus:10.0
- Affected ranges
- ECOSYSTEM: < 0:3.3.10-11.el10_0.2
Update to 0:3.3.10-11.el10_0.2
ruby-devel Red Hat:enterprise_linux_eus:10.0
- Affected ranges
- ECOSYSTEM: < 0:3.3.10-11.el10_0.2
Update to 0:3.3.10-11.el10_0.2
ruby-libs Red Hat:enterprise_linux_eus:10.0
- Affected ranges
- ECOSYSTEM: < 0:3.3.10-11.el10_0.2
Update to 0:3.3.10-11.el10_0.2
ruby-libs-debuginfo Red Hat:enterprise_linux_eus:10.0
- Affected ranges
- ECOSYSTEM: < 0:3.3.10-11.el10_0.2
Update to 0:3.3.10-11.el10_0.2
rubygem-bigdecimal Red Hat:enterprise_linux_eus:10.0
- Affected ranges
- ECOSYSTEM: < 0:3.1.5-11.el10_0.2
Update to 0:3.1.5-11.el10_0.2
rubygem-bigdecimal-debuginfo Red Hat:enterprise_linux_eus:10.0
- Affected ranges
- ECOSYSTEM: < 0:3.1.5-11.el10_0.2
Update to 0:3.1.5-11.el10_0.2
rubygem-bundler Red Hat:enterprise_linux_eus:10.0
- Affected ranges
- ECOSYSTEM: < 0:2.5.22-11.el10_0.2
Update to 0:2.5.22-11.el10_0.2
rubygem-io-console Red Hat:enterprise_linux_eus:10.0
- Affected ranges
- ECOSYSTEM: < 0:0.7.1-11.el10_0.2
Update to 0:0.7.1-11.el10_0.2
rubygem-io-console-debuginfo Red Hat:enterprise_linux_eus:10.0
- Affected ranges
- ECOSYSTEM: < 0:0.7.1-11.el10_0.2
Update to 0:0.7.1-11.el10_0.2
rubygem-irb Red Hat:enterprise_linux_eus:10.0
- Affected ranges
- ECOSYSTEM: < 0:1.13.1-11.el10_0.2
Update to 0:1.13.1-11.el10_0.2
rubygem-json Red Hat:enterprise_linux_eus:10.0
- Affected ranges
- ECOSYSTEM: < 0:2.7.2-11.el10_0.2
Update to 0:2.7.2-11.el10_0.2
rubygem-json-debuginfo Red Hat:enterprise_linux_eus:10.0
- Affected ranges
- ECOSYSTEM: < 0:2.7.2-11.el10_0.2
Update to 0:2.7.2-11.el10_0.2
rubygem-minitest Red Hat:enterprise_linux_eus:10.0
- Affected ranges
- ECOSYSTEM: < 0:5.20.0-11.el10_0.2
Update to 0:5.20.0-11.el10_0.2
rubygem-power_assert Red Hat:enterprise_linux_eus:10.0
- Affected ranges
- ECOSYSTEM: < 0:2.0.3-11.el10_0.2
Update to 0:2.0.3-11.el10_0.2
rubygem-psych Red Hat:enterprise_linux_eus:10.0
- Affected ranges
- ECOSYSTEM: < 0:5.1.2-11.el10_0.2
Update to 0:5.1.2-11.el10_0.2
rubygem-psych-debuginfo Red Hat:enterprise_linux_eus:10.0
- Affected ranges
- ECOSYSTEM: < 0:5.1.2-11.el10_0.2
Update to 0:5.1.2-11.el10_0.2
rubygem-racc Red Hat:enterprise_linux_eus:10.0
- Affected ranges
- ECOSYSTEM: < 0:1.7.3-11.el10_0.2
Update to 0:1.7.3-11.el10_0.2
rubygem-racc-debuginfo Red Hat:enterprise_linux_eus:10.0
- Affected ranges
- ECOSYSTEM: < 0:1.7.3-11.el10_0.2
Update to 0:1.7.3-11.el10_0.2
rubygem-rake Red Hat:enterprise_linux_eus:10.0
- Affected ranges
- ECOSYSTEM: < 0:13.1.0-11.el10_0.2
Update to 0:13.1.0-11.el10_0.2
Original sources
- https://access.redhat.com/errata/RHSA-2026:35895
- https://access.redhat.com/security/updates/classification/#important
- https://bugzilla.redhat.com/show_bug.cgi?id=2468495
- https://bugzilla.redhat.com/show_bug.cgi?id=2468498
- https://bugzilla.redhat.com/show_bug.cgi?id=2468499
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_35895.json
- https://access.redhat.com/security/cve/CVE-2026-42245
- https://www.cve.org/CVERecord?id=CVE-2026-42245
- https://nvd.nist.gov/vuln/detail/CVE-2026-42245
- https://github.com/ruby/net-imap/commit/6091f7d6b1f3514cafbfe39c76f2b5d73de3ca96
- https://github.com/ruby/net-imap/commit/88d95231fc8afef11c1f074453f7d75b68c9dfda
- https://github.com/ruby/net-imap/commit/de685f91a4a4cc75eb80da898c2bf8af08d34819
- https://github.com/ruby/net-imap/releases/tag/v0.4.24
- https://github.com/ruby/net-imap/releases/tag/v0.5.14
- https://github.com/ruby/net-imap/releases/tag/v0.6.4
- https://github.com/ruby/net-imap/security/advisories/GHSA-q2mw-fvj9-vvcw
- https://access.redhat.com/security/cve/CVE-2026-42246
- https://www.cve.org/CVERecord?id=CVE-2026-42246
- https://nvd.nist.gov/vuln/detail/CVE-2026-42246
- https://github.com/ruby/net-imap/commit/0ede4c40b1523dfeaf95777b2678e54cc0fd9618
- https://github.com/ruby/net-imap/commit/24a4e770b43230286a05aa2a9746cdbb3eb8485e
- https://github.com/ruby/net-imap/commit/97e2488fb5401a1783bddd959dde007d9fbce42c
- https://github.com/ruby/net-imap/commit/f79d35bf5833f186e81044c57c843eda30c873da
- https://osv.dev/vulnerability/RHSA-2026:35895