RHSA-2026:36099
RHSA-2026:36099 · Red Hat Security Advisory: ruby:3.3 security update
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This page shows selected source facts. See the linked advisories for the complete description and affected versions.
Red Hat Security Advisory: ruby:3.3 security update
CVSS 7.4 · High · Fix available
- Published
- Updated
Stack: system
Affected products and versions
ruby Red Hat:rhel_e4s:9.4::appstream
- Affected ranges
- ECOSYSTEM: < 0:3.3.10-7.module+el9.4.0+24474+8fc4d0bd
Update to 0:3.3.10-7.module+el9.4.0+24474+8fc4d0bd
ruby-bundled-gems Red Hat:rhel_e4s:9.4::appstream
- Affected ranges
- ECOSYSTEM: < 0:3.3.10-7.module+el9.4.0+24474+8fc4d0bd
Update to 0:3.3.10-7.module+el9.4.0+24474+8fc4d0bd
ruby-bundled-gems-debuginfo Red Hat:rhel_e4s:9.4::appstream
- Affected ranges
- ECOSYSTEM: < 0:3.3.10-7.module+el9.4.0+24474+8fc4d0bd
Update to 0:3.3.10-7.module+el9.4.0+24474+8fc4d0bd
ruby-debuginfo Red Hat:rhel_e4s:9.4::appstream
- Affected ranges
- ECOSYSTEM: < 0:3.3.10-7.module+el9.4.0+24474+8fc4d0bd
Update to 0:3.3.10-7.module+el9.4.0+24474+8fc4d0bd
ruby-debugsource Red Hat:rhel_e4s:9.4::appstream
- Affected ranges
- ECOSYSTEM: < 0:3.3.10-7.module+el9.4.0+24474+8fc4d0bd
Update to 0:3.3.10-7.module+el9.4.0+24474+8fc4d0bd
ruby-default-gems Red Hat:rhel_e4s:9.4::appstream
- Affected ranges
- ECOSYSTEM: < 0:3.3.10-7.module+el9.4.0+24474+8fc4d0bd
Update to 0:3.3.10-7.module+el9.4.0+24474+8fc4d0bd
ruby-devel Red Hat:rhel_e4s:9.4::appstream
- Affected ranges
- ECOSYSTEM: < 0:3.3.10-7.module+el9.4.0+24474+8fc4d0bd
Update to 0:3.3.10-7.module+el9.4.0+24474+8fc4d0bd
ruby-doc Red Hat:rhel_e4s:9.4::appstream
- Affected ranges
- ECOSYSTEM: < 0:3.3.10-7.module+el9.4.0+24474+8fc4d0bd
Update to 0:3.3.10-7.module+el9.4.0+24474+8fc4d0bd
ruby-libs Red Hat:rhel_e4s:9.4::appstream
- Affected ranges
- ECOSYSTEM: < 0:3.3.10-7.module+el9.4.0+24474+8fc4d0bd
Update to 0:3.3.10-7.module+el9.4.0+24474+8fc4d0bd
ruby-libs-debuginfo Red Hat:rhel_e4s:9.4::appstream
- Affected ranges
- ECOSYSTEM: < 0:3.3.10-7.module+el9.4.0+24474+8fc4d0bd
Update to 0:3.3.10-7.module+el9.4.0+24474+8fc4d0bd
rubygem-bigdecimal Red Hat:rhel_e4s:9.4::appstream
- Affected ranges
- ECOSYSTEM: < 0:3.1.5-7.module+el9.4.0+24474+8fc4d0bd
Update to 0:3.1.5-7.module+el9.4.0+24474+8fc4d0bd
rubygem-bigdecimal-debuginfo Red Hat:rhel_e4s:9.4::appstream
- Affected ranges
- ECOSYSTEM: < 0:3.1.5-7.module+el9.4.0+24474+8fc4d0bd
Update to 0:3.1.5-7.module+el9.4.0+24474+8fc4d0bd
rubygem-bundler Red Hat:rhel_e4s:9.4::appstream
- Affected ranges
- ECOSYSTEM: < 0:2.5.22-7.module+el9.4.0+24474+8fc4d0bd
Update to 0:2.5.22-7.module+el9.4.0+24474+8fc4d0bd
rubygem-io-console Red Hat:rhel_e4s:9.4::appstream
- Affected ranges
- ECOSYSTEM: < 0:0.7.1-7.module+el9.4.0+24474+8fc4d0bd
Update to 0:0.7.1-7.module+el9.4.0+24474+8fc4d0bd
rubygem-io-console-debuginfo Red Hat:rhel_e4s:9.4::appstream
- Affected ranges
- ECOSYSTEM: < 0:0.7.1-7.module+el9.4.0+24474+8fc4d0bd
Update to 0:0.7.1-7.module+el9.4.0+24474+8fc4d0bd
rubygem-irb Red Hat:rhel_e4s:9.4::appstream
- Affected ranges
- ECOSYSTEM: < 0:1.13.1-7.module+el9.4.0+24474+8fc4d0bd
Update to 0:1.13.1-7.module+el9.4.0+24474+8fc4d0bd
rubygem-json Red Hat:rhel_e4s:9.4::appstream
- Affected ranges
- ECOSYSTEM: < 0:2.7.2-7.module+el9.4.0+24474+8fc4d0bd
Update to 0:2.7.2-7.module+el9.4.0+24474+8fc4d0bd
rubygem-json-debuginfo Red Hat:rhel_e4s:9.4::appstream
- Affected ranges
- ECOSYSTEM: < 0:2.7.2-7.module+el9.4.0+24474+8fc4d0bd
Update to 0:2.7.2-7.module+el9.4.0+24474+8fc4d0bd
rubygem-minitest Red Hat:rhel_e4s:9.4::appstream
- Affected ranges
- ECOSYSTEM: < 0:5.20.0-7.module+el9.4.0+24474+8fc4d0bd
Update to 0:5.20.0-7.module+el9.4.0+24474+8fc4d0bd
rubygem-mysql2 Red Hat:rhel_e4s:9.4::appstream
- Affected ranges
- ECOSYSTEM: < 0:0.5.5-1.module+el9.4.0+21222+faeeed2f
Update to 0:0.5.5-1.module+el9.4.0+21222+faeeed2f
rubygem-mysql2-debuginfo Red Hat:rhel_e4s:9.4::appstream
- Affected ranges
- ECOSYSTEM: < 0:0.5.5-1.module+el9.4.0+21222+faeeed2f
Update to 0:0.5.5-1.module+el9.4.0+21222+faeeed2f
rubygem-mysql2-debugsource Red Hat:rhel_e4s:9.4::appstream
- Affected ranges
- ECOSYSTEM: < 0:0.5.5-1.module+el9.4.0+21222+faeeed2f
Update to 0:0.5.5-1.module+el9.4.0+21222+faeeed2f
rubygem-mysql2-doc Red Hat:rhel_e4s:9.4::appstream
- Affected ranges
- ECOSYSTEM: < 0:0.5.5-1.module+el9.4.0+21222+faeeed2f
Update to 0:0.5.5-1.module+el9.4.0+21222+faeeed2f
rubygem-pg Red Hat:rhel_e4s:9.4::appstream
- Affected ranges
- ECOSYSTEM: < 0:1.5.4-1.module+el9.4.0+21222+faeeed2f
Update to 0:1.5.4-1.module+el9.4.0+21222+faeeed2f
Original sources
- https://access.redhat.com/errata/RHSA-2026:36099
- https://access.redhat.com/security/updates/classification/#important
- https://bugzilla.redhat.com/show_bug.cgi?id=2468495
- https://bugzilla.redhat.com/show_bug.cgi?id=2468498
- https://bugzilla.redhat.com/show_bug.cgi?id=2468499
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_36099.json
- https://access.redhat.com/security/cve/CVE-2026-42245
- https://www.cve.org/CVERecord?id=CVE-2026-42245
- https://nvd.nist.gov/vuln/detail/CVE-2026-42245
- https://github.com/ruby/net-imap/commit/6091f7d6b1f3514cafbfe39c76f2b5d73de3ca96
- https://github.com/ruby/net-imap/commit/88d95231fc8afef11c1f074453f7d75b68c9dfda
- https://github.com/ruby/net-imap/commit/de685f91a4a4cc75eb80da898c2bf8af08d34819
- https://github.com/ruby/net-imap/releases/tag/v0.4.24
- https://github.com/ruby/net-imap/releases/tag/v0.5.14
- https://github.com/ruby/net-imap/releases/tag/v0.6.4
- https://github.com/ruby/net-imap/security/advisories/GHSA-q2mw-fvj9-vvcw
- https://access.redhat.com/security/cve/CVE-2026-42246
- https://www.cve.org/CVERecord?id=CVE-2026-42246
- https://nvd.nist.gov/vuln/detail/CVE-2026-42246
- https://github.com/ruby/net-imap/commit/0ede4c40b1523dfeaf95777b2678e54cc0fd9618
- https://github.com/ruby/net-imap/commit/24a4e770b43230286a05aa2a9746cdbb3eb8485e
- https://github.com/ruby/net-imap/commit/97e2488fb5401a1783bddd959dde007d9fbce42c
- https://github.com/ruby/net-imap/commit/f79d35bf5833f186e81044c57c843eda30c873da
- https://osv.dev/vulnerability/RHSA-2026:36099