RHSA-2026:37238
RHSA-2026:37238 · Red Hat Security Advisory: ruby:3.3 security update
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This page shows selected source facts. See the linked advisories for the complete description and affected versions.
Red Hat Security Advisory: ruby:3.3 security update
CVSS 8.1 · High · Fix available
- Published
- Updated
Stack: system
Affected products and versions
ruby Red Hat:rhel_eus:9.6::appstream
- Affected ranges
- ECOSYSTEM: < 0:3.3.10-6.module+el9.6.0+24475+76cce029
Update to 0:3.3.10-6.module+el9.6.0+24475+76cce029
ruby-bundled-gems Red Hat:rhel_eus:9.6::appstream
- Affected ranges
- ECOSYSTEM: < 0:3.3.10-6.module+el9.6.0+24475+76cce029
Update to 0:3.3.10-6.module+el9.6.0+24475+76cce029
ruby-bundled-gems-debuginfo Red Hat:rhel_eus:9.6::appstream
- Affected ranges
- ECOSYSTEM: < 0:3.3.10-6.module+el9.6.0+24475+76cce029
Update to 0:3.3.10-6.module+el9.6.0+24475+76cce029
ruby-debuginfo Red Hat:rhel_eus:9.6::appstream
- Affected ranges
- ECOSYSTEM: < 0:3.3.10-6.module+el9.6.0+24475+76cce029
Update to 0:3.3.10-6.module+el9.6.0+24475+76cce029
ruby-debugsource Red Hat:rhel_eus:9.6::appstream
- Affected ranges
- ECOSYSTEM: < 0:3.3.10-6.module+el9.6.0+24475+76cce029
Update to 0:3.3.10-6.module+el9.6.0+24475+76cce029
ruby-default-gems Red Hat:rhel_eus:9.6::appstream
- Affected ranges
- ECOSYSTEM: < 0:3.3.10-6.module+el9.6.0+24475+76cce029
Update to 0:3.3.10-6.module+el9.6.0+24475+76cce029
ruby-devel Red Hat:rhel_eus:9.6::appstream
- Affected ranges
- ECOSYSTEM: < 0:3.3.10-6.module+el9.6.0+24475+76cce029
Update to 0:3.3.10-6.module+el9.6.0+24475+76cce029
ruby-doc Red Hat:rhel_eus:9.6::appstream
- Affected ranges
- ECOSYSTEM: < 0:3.3.10-6.module+el9.6.0+24475+76cce029
Update to 0:3.3.10-6.module+el9.6.0+24475+76cce029
ruby-libs Red Hat:rhel_eus:9.6::appstream
- Affected ranges
- ECOSYSTEM: < 0:3.3.10-6.module+el9.6.0+24475+76cce029
Update to 0:3.3.10-6.module+el9.6.0+24475+76cce029
ruby-libs-debuginfo Red Hat:rhel_eus:9.6::appstream
- Affected ranges
- ECOSYSTEM: < 0:3.3.10-6.module+el9.6.0+24475+76cce029
Update to 0:3.3.10-6.module+el9.6.0+24475+76cce029
rubygem-bigdecimal Red Hat:rhel_eus:9.6::appstream
- Affected ranges
- ECOSYSTEM: < 0:3.1.5-6.module+el9.6.0+24475+76cce029
Update to 0:3.1.5-6.module+el9.6.0+24475+76cce029
rubygem-bigdecimal-debuginfo Red Hat:rhel_eus:9.6::appstream
- Affected ranges
- ECOSYSTEM: < 0:3.1.5-6.module+el9.6.0+24475+76cce029
Update to 0:3.1.5-6.module+el9.6.0+24475+76cce029
rubygem-bundler Red Hat:rhel_eus:9.6::appstream
- Affected ranges
- ECOSYSTEM: < 0:2.5.22-6.module+el9.6.0+24475+76cce029
Update to 0:2.5.22-6.module+el9.6.0+24475+76cce029
rubygem-io-console Red Hat:rhel_eus:9.6::appstream
- Affected ranges
- ECOSYSTEM: < 0:0.7.1-6.module+el9.6.0+24475+76cce029
Update to 0:0.7.1-6.module+el9.6.0+24475+76cce029
rubygem-io-console-debuginfo Red Hat:rhel_eus:9.6::appstream
- Affected ranges
- ECOSYSTEM: < 0:0.7.1-6.module+el9.6.0+24475+76cce029
Update to 0:0.7.1-6.module+el9.6.0+24475+76cce029
rubygem-irb Red Hat:rhel_eus:9.6::appstream
- Affected ranges
- ECOSYSTEM: < 0:1.13.1-6.module+el9.6.0+24475+76cce029
Update to 0:1.13.1-6.module+el9.6.0+24475+76cce029
rubygem-json Red Hat:rhel_eus:9.6::appstream
- Affected ranges
- ECOSYSTEM: < 0:2.7.2-6.module+el9.6.0+24475+76cce029
Update to 0:2.7.2-6.module+el9.6.0+24475+76cce029
rubygem-json-debuginfo Red Hat:rhel_eus:9.6::appstream
- Affected ranges
- ECOSYSTEM: < 0:2.7.2-6.module+el9.6.0+24475+76cce029
Update to 0:2.7.2-6.module+el9.6.0+24475+76cce029
rubygem-minitest Red Hat:rhel_eus:9.6::appstream
- Affected ranges
- ECOSYSTEM: < 0:5.20.0-6.module+el9.6.0+24475+76cce029
Update to 0:5.20.0-6.module+el9.6.0+24475+76cce029
rubygem-mysql2 Red Hat:rhel_eus:9.6::appstream
- Affected ranges
- ECOSYSTEM: < 0:0.5.5-1.module+el9.4.0+21222+faeeed2f
Update to 0:0.5.5-1.module+el9.4.0+21222+faeeed2f
rubygem-mysql2-debuginfo Red Hat:rhel_eus:9.6::appstream
- Affected ranges
- ECOSYSTEM: < 0:0.5.5-1.module+el9.4.0+21222+faeeed2f
Update to 0:0.5.5-1.module+el9.4.0+21222+faeeed2f
rubygem-mysql2-debugsource Red Hat:rhel_eus:9.6::appstream
- Affected ranges
- ECOSYSTEM: < 0:0.5.5-1.module+el9.4.0+21222+faeeed2f
Update to 0:0.5.5-1.module+el9.4.0+21222+faeeed2f
rubygem-mysql2-doc Red Hat:rhel_eus:9.6::appstream
- Affected ranges
- ECOSYSTEM: < 0:0.5.5-1.module+el9.4.0+21222+faeeed2f
Update to 0:0.5.5-1.module+el9.4.0+21222+faeeed2f
rubygem-pg Red Hat:rhel_eus:9.6::appstream
- Affected ranges
- ECOSYSTEM: < 0:1.5.4-1.module+el9.4.0+21222+faeeed2f
Update to 0:1.5.4-1.module+el9.4.0+21222+faeeed2f
Original sources
- https://access.redhat.com/errata/RHSA-2026:37238
- https://access.redhat.com/security/updates/classification/#important
- https://bugzilla.redhat.com/show_bug.cgi?id=2461369
- https://bugzilla.redhat.com/show_bug.cgi?id=2468495
- https://bugzilla.redhat.com/show_bug.cgi?id=2468498
- https://bugzilla.redhat.com/show_bug.cgi?id=2468499
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_37238.json
- https://access.redhat.com/security/cve/CVE-2026-41316
- https://www.cve.org/CVERecord?id=CVE-2026-41316
- https://nvd.nist.gov/vuln/detail/CVE-2026-41316
- https://github.com/ruby/erb/security/advisories/GHSA-q339-8rmv-2mhv
- https://access.redhat.com/security/cve/CVE-2026-42245
- https://www.cve.org/CVERecord?id=CVE-2026-42245
- https://nvd.nist.gov/vuln/detail/CVE-2026-42245
- https://github.com/ruby/net-imap/commit/6091f7d6b1f3514cafbfe39c76f2b5d73de3ca96
- https://github.com/ruby/net-imap/commit/88d95231fc8afef11c1f074453f7d75b68c9dfda
- https://github.com/ruby/net-imap/commit/de685f91a4a4cc75eb80da898c2bf8af08d34819
- https://github.com/ruby/net-imap/releases/tag/v0.4.24
- https://github.com/ruby/net-imap/releases/tag/v0.5.14
- https://github.com/ruby/net-imap/releases/tag/v0.6.4
- https://github.com/ruby/net-imap/security/advisories/GHSA-q2mw-fvj9-vvcw
- https://access.redhat.com/security/cve/CVE-2026-42246
- https://www.cve.org/CVERecord?id=CVE-2026-42246
- https://osv.dev/vulnerability/RHSA-2026:37238