ELSA-2026-33577

ELSA-2026-33577 - ruby:4.0 security update

Type:SECURITY
Impact:IMPORTANT
Release Date:2026-07-01

Description


ruby
[4.0.3-33]
- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
Resolves: RHEL-181690
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
Resolves: RHEL-181771
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
Resolves: RHEL-181803

[4.0.3-32]
- Upgrade to Ruby 4.0.3.
Resolves: RHEL-171933
- Fix ERB: Arbitrary code execution via deserialization bypass
(CVE-2026-41316)
Resolves: RHEL-171258
- Fix JSON: Denial of Service or Information Disclosure via format string injection
(CVE-2026-33210)
Resolves: RHEL-173458

rubygem-mysql2
[0.5.7-1]
- Upgrade to mysql2 0.5.7.
Related: RHEL-142278

rubygem-pg
[1.6.3-1]
- Upgrade to pg 1.6.3
Related: RHEL-142278


Related CVEs


CVE-2026-42245
CVE-2026-42246
CVE-2026-42258

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 9 (aarch64) ruby-4.0.3-33.module+el9.8.0+90938+383082f5.src.rpm1cea650888a01e831313a2a88e5aef5e5b4fd39cb6811e8b10069d3dea582200-ol9_aarch64_appstream
rubygem-mysql2-0.5.7-1.module+el9.8.0+90938+383082f5.src.rpmd0cf5dce452693e87f0e170b28b012b60ce259fe3e884f3eaf21c9a8d1c58d1a-ol9_aarch64_appstream
rubygem-pg-1.6.3-1.module+el9.8.0+90938+383082f5.src.rpm59cb4318ebf1595be694b26e86d124c21772bc9018b59abeb43a2c2df616a292-ol9_aarch64_appstream
ruby-4.0.3-33.module+el9.8.0+90938+383082f5.aarch64.rpmeebe9157b9aecbf51c0eba97401873faa344775e8b982d63a3e345c9a7b1f54e-ol9_aarch64_appstream
ruby-bundled-gems-4.0.3-33.module+el9.8.0+90938+383082f5.aarch64.rpm04da44c0b541f52cda8d77239dc3ee05e61f82cbe48885e1436f882e93715a53-ol9_aarch64_appstream
ruby-default-gems-4.0.3-33.module+el9.8.0+90938+383082f5.noarch.rpm8272687bb6866201113177385e406b5dd0318500a820f708c2da227f5d440a66-ol9_aarch64_appstream
ruby-devel-4.0.3-33.module+el9.8.0+90938+383082f5.aarch64.rpme17081b9015a2956365e822665848a188c5b8277ca8d421f0073f30acd13b537-ol9_aarch64_appstream
ruby-doc-4.0.3-33.module+el9.8.0+90938+383082f5.noarch.rpmcf612c06c581ad6fcde7b5804d980df793f79dd80b70e2e603601273540d47a2-ol9_aarch64_appstream
ruby-libs-4.0.3-33.module+el9.8.0+90938+383082f5.aarch64.rpm21919dd23ec55f109a677edf3fd2bc9349b4876aa6c070bfbf21242e989354df-ol9_aarch64_appstream
rubygem-bigdecimal-4.0.1-33.module+el9.8.0+90938+383082f5.aarch64.rpma3b48a0334f8cc8bc7b40891dbea590c74c3fe3708f18d8f3aabcdb1939a8e21-ol9_aarch64_appstream
rubygem-bundler-4.0.6-33.module+el9.8.0+90938+383082f5.noarch.rpmdd11fc31fd0d3eecf53cc587e37ca7e528bfe2c1dca3f6a3a740809fd00fce57-ol9_aarch64_appstream
rubygem-io-console-0.8.2-33.module+el9.8.0+90938+383082f5.aarch64.rpm9286414a6ff362a3ebff1df4664bd25fc9e073dc66bfd5572ed67b0eaff88e1f-ol9_aarch64_appstream
rubygem-irb-1.16.0-33.module+el9.8.0+90938+383082f5.noarch.rpm6d6b7cff83df949893eab57cb0baa9e8822415ce475119933b8ac5bb652d326b-ol9_aarch64_appstream
rubygem-json-2.18.0-33.module+el9.8.0+90938+383082f5.aarch64.rpm4ab15a7cc82a7d79fdb6b0a1690e2371e13d36e6ff78ba070df79c2ad7eced7e-ol9_aarch64_appstream
rubygem-minitest-6.0.0-33.module+el9.8.0+90938+383082f5.noarch.rpm6650f49e4cb4becc7c590c03ff86e395dae049db1a20c048688a31b23654dfbc-ol9_aarch64_appstream
rubygem-mysql2-0.5.7-1.module+el9.8.0+90938+383082f5.aarch64.rpmab82b34e3e5fda048642feaa25ac5a3ee93ed4df4af80cc966fcc31759478ed6-ol9_aarch64_appstream
rubygem-mysql2-doc-0.5.7-1.module+el9.8.0+90938+383082f5.noarch.rpmbefe867ccaf141883da3820fc7177f7e98dce092fbfa5086308ab6b4db4485df-ol9_aarch64_appstream
rubygem-pg-1.6.3-1.module+el9.8.0+90938+383082f5.aarch64.rpma588308986590bfe828e7f05e60e16375c0b0c0cf4d6c2bf8400861b090ad80c-ol9_aarch64_appstream
rubygem-pg-doc-1.6.3-1.module+el9.8.0+90938+383082f5.noarch.rpm22ac1a785c1281c6cde755f32322c79b4b2069828ca2c382aefa94291a740568-ol9_aarch64_appstream
rubygem-power_assert-3.0.1-33.module+el9.8.0+90938+383082f5.noarch.rpmc91392442c887fb72bbef455f9fbee1ac4b2db48c9b74b1befe32ce2dc1d059b-ol9_aarch64_appstream
rubygem-psych-5.3.1-33.module+el9.8.0+90938+383082f5.aarch64.rpmbb09e5af759ba93118f09d3601d592432147231edefad64674a1c9589e99cdfe-ol9_aarch64_appstream
rubygem-racc-1.8.1-33.module+el9.8.0+90938+383082f5.aarch64.rpm53538927298be234b4737f7223c22f2be92bebe0ff282f4cb631dd49278de0e5-ol9_aarch64_appstream
rubygem-rake-13.3.1-33.module+el9.8.0+90938+383082f5.noarch.rpmf797e3ba944928bc86ab4ebf6149b6ca6c6b2e6b922d09c77d220a050b278e44-ol9_aarch64_appstream
rubygem-rbs-3.10.0-33.module+el9.8.0+90938+383082f5.aarch64.rpm9729ecfb66f1e276789db1185d3e3f2e2e5da5b9ce3a9736bc5243377e17b076-ol9_aarch64_appstream
rubygem-rdoc-7.0.3-33.module+el9.8.0+90938+383082f5.noarch.rpma749544b03550a322e3bf2af86068f31321e1da2a2c8c9ff297cc58696745492-ol9_aarch64_appstream
rubygem-rexml-3.4.4-33.module+el9.8.0+90938+383082f5.noarch.rpm76b923e771301bf53c91d93cdd98b06851799b4bc12d9d6c19f950c0d33e1bd3-ol9_aarch64_appstream
rubygem-rss-0.3.2-33.module+el9.8.0+90938+383082f5.noarch.rpm75484357f40453851cc4594b2ec5f114fc4c525334c41b6547da71eb71fdd380-ol9_aarch64_appstream
rubygem-test-unit-3.7.5-33.module+el9.8.0+90938+383082f5.noarch.rpm4ac5cca5bffed6f9dfb09af8a7c94190f3127fa7a3b40228e1cdffdd935aafae-ol9_aarch64_appstream
rubygem-typeprof-0.31.1-33.module+el9.8.0+90938+383082f5.noarch.rpm9e127ca169d87fb08a01f8d36efe16edc898dac2914f5c7e3f4d0a90e9bc04ad-ol9_aarch64_appstream
rubygems-4.0.6-33.module+el9.8.0+90938+383082f5.noarch.rpm2abf572f314515b8cfa38ab0ca3540c064137aed17b656cfa5c64ee5ff4d2cb5-ol9_aarch64_appstream
rubygems-devel-4.0.6-33.module+el9.8.0+90938+383082f5.noarch.rpm2fa344c924e7457289ea8946483105c038377d830048131d461111c35deca3a9-ol9_aarch64_appstream
Oracle Linux 9 (x86_64) ruby-4.0.3-33.module+el9.8.0+90938+383082f5.src.rpm1cea650888a01e831313a2a88e5aef5e5b4fd39cb6811e8b10069d3dea582200-ol9_x86_64_appstream
rubygem-mysql2-0.5.7-1.module+el9.8.0+90938+383082f5.src.rpmd0cf5dce452693e87f0e170b28b012b60ce259fe3e884f3eaf21c9a8d1c58d1a-ol9_x86_64_appstream
rubygem-pg-1.6.3-1.module+el9.8.0+90938+383082f5.src.rpm59cb4318ebf1595be694b26e86d124c21772bc9018b59abeb43a2c2df616a292-ol9_x86_64_appstream
ruby-4.0.3-33.module+el9.8.0+90938+383082f5.i686.rpmf06bffdb5b42b0bafbd0fde5a844ee5f0c1de2225713db5fe19b8d76a778939f-ol9_x86_64_appstream
ruby-4.0.3-33.module+el9.8.0+90938+383082f5.x86_64.rpmad6410ed757e0b5ed9e24b63c77e9a95d0241bf7f8d4e8415253f5371ea9e694-ol9_x86_64_appstream
ruby-bundled-gems-4.0.3-33.module+el9.8.0+90938+383082f5.i686.rpm80cf88a3b83d389fa77fac03ba4b1fccfa91385b4c99fb226c10a80cf6f19b22-ol9_x86_64_appstream
ruby-bundled-gems-4.0.3-33.module+el9.8.0+90938+383082f5.x86_64.rpm7f8c94ff7bad6b24e03b63319dc8a5198ddb296846b03bb62643d6fe20050773-ol9_x86_64_appstream
ruby-default-gems-4.0.3-33.module+el9.8.0+90938+383082f5.noarch.rpm8272687bb6866201113177385e406b5dd0318500a820f708c2da227f5d440a66-ol9_x86_64_appstream
ruby-devel-4.0.3-33.module+el9.8.0+90938+383082f5.i686.rpm88a41b8040814ab8af1b13481c215a3c10fa6c7876ee5d155d261bcb660d047b-ol9_x86_64_appstream
ruby-devel-4.0.3-33.module+el9.8.0+90938+383082f5.x86_64.rpm8fa03f5a3fac31bcdde7d373e3fc79aceebe02a632410a82a95df553701deccb-ol9_x86_64_appstream
ruby-doc-4.0.3-33.module+el9.8.0+90938+383082f5.noarch.rpmcf612c06c581ad6fcde7b5804d980df793f79dd80b70e2e603601273540d47a2-ol9_x86_64_appstream
ruby-libs-4.0.3-33.module+el9.8.0+90938+383082f5.i686.rpm4432e520075bf32aff8ce03d961a58fa74982f50bcf542992e375e52116ede37-ol9_x86_64_appstream
ruby-libs-4.0.3-33.module+el9.8.0+90938+383082f5.x86_64.rpm4bb450c7b94b9c9f0eb8edcbe1ff5df8dcc93937b118389bd340ceff501a0575-ol9_x86_64_appstream
rubygem-bigdecimal-4.0.1-33.module+el9.8.0+90938+383082f5.i686.rpm56d13393b26758fea8ba4f9c125951c48e1a59dd7901104d47c33ede77c8ba9b-ol9_x86_64_appstream
rubygem-bigdecimal-4.0.1-33.module+el9.8.0+90938+383082f5.x86_64.rpm603f09de99b3f2963597c30df8687419af2fbd957a05b300196ee36b646af5df-ol9_x86_64_appstream
rubygem-bundler-4.0.6-33.module+el9.8.0+90938+383082f5.noarch.rpmdd11fc31fd0d3eecf53cc587e37ca7e528bfe2c1dca3f6a3a740809fd00fce57-ol9_x86_64_appstream
rubygem-io-console-0.8.2-33.module+el9.8.0+90938+383082f5.i686.rpma804079280dde8178bc14e8b8808d8953860f97ba95627ece3c76ac2dd50b819-ol9_x86_64_appstream
rubygem-io-console-0.8.2-33.module+el9.8.0+90938+383082f5.x86_64.rpm9e1ac32dde8a8ed037499156b21611ac4dafe7a7524987b82134ba8843789404-ol9_x86_64_appstream
rubygem-irb-1.16.0-33.module+el9.8.0+90938+383082f5.noarch.rpm6d6b7cff83df949893eab57cb0baa9e8822415ce475119933b8ac5bb652d326b-ol9_x86_64_appstream
rubygem-json-2.18.0-33.module+el9.8.0+90938+383082f5.i686.rpm082d25d3b6c35249693669fbff26a96f7f5b8c8524a12b605f6210517cadd063-ol9_x86_64_appstream
rubygem-json-2.18.0-33.module+el9.8.0+90938+383082f5.x86_64.rpm62c1b531c2d2da830c81f6b03708660f2f050ddaa37b74e4f89ee47fd1c27676-ol9_x86_64_appstream
rubygem-minitest-6.0.0-33.module+el9.8.0+90938+383082f5.noarch.rpm6650f49e4cb4becc7c590c03ff86e395dae049db1a20c048688a31b23654dfbc-ol9_x86_64_appstream
rubygem-mysql2-0.5.7-1.module+el9.8.0+90938+383082f5.x86_64.rpm934114ae7621aa4de1e771a9371fecc4668eedbac2d2748c2ed69bc422643361-ol9_x86_64_appstream
rubygem-mysql2-doc-0.5.7-1.module+el9.8.0+90938+383082f5.noarch.rpmbefe867ccaf141883da3820fc7177f7e98dce092fbfa5086308ab6b4db4485df-ol9_x86_64_appstream
rubygem-pg-1.6.3-1.module+el9.8.0+90938+383082f5.x86_64.rpme4cf3c9d5a5adb7525a426e9367042541d3dea2765641a362056e7466147f5fc-ol9_x86_64_appstream
rubygem-pg-doc-1.6.3-1.module+el9.8.0+90938+383082f5.noarch.rpm22ac1a785c1281c6cde755f32322c79b4b2069828ca2c382aefa94291a740568-ol9_x86_64_appstream
rubygem-power_assert-3.0.1-33.module+el9.8.0+90938+383082f5.noarch.rpmc91392442c887fb72bbef455f9fbee1ac4b2db48c9b74b1befe32ce2dc1d059b-ol9_x86_64_appstream
rubygem-psych-5.3.1-33.module+el9.8.0+90938+383082f5.i686.rpm2978ce22d4be61792991fb4774eddf72d9bfdef778639536248326c075f5b847-ol9_x86_64_appstream
rubygem-psych-5.3.1-33.module+el9.8.0+90938+383082f5.x86_64.rpm7bd9213e7c653b6b9807757d3c9c4eddafe56c792f437be8e133aadd20bb2c65-ol9_x86_64_appstream
rubygem-racc-1.8.1-33.module+el9.8.0+90938+383082f5.i686.rpm9e0ac1cfa7f440e148634e59fd9996381665e405a6b8ea40941e99c4be823d5c-ol9_x86_64_appstream
rubygem-racc-1.8.1-33.module+el9.8.0+90938+383082f5.x86_64.rpm46f98e73300ba39638db7d9b90ca20f9c3a428d7dbbfb29ea6bdb70312dc8d31-ol9_x86_64_appstream
rubygem-rake-13.3.1-33.module+el9.8.0+90938+383082f5.noarch.rpmf797e3ba944928bc86ab4ebf6149b6ca6c6b2e6b922d09c77d220a050b278e44-ol9_x86_64_appstream
rubygem-rbs-3.10.0-33.module+el9.8.0+90938+383082f5.i686.rpmb9d39625a197c6135223c31ccfe6a0748404e9f395ea57d504310fe707cadabf-ol9_x86_64_appstream
rubygem-rbs-3.10.0-33.module+el9.8.0+90938+383082f5.x86_64.rpm6567a95e3f4be3bb9bcf2fc40d54caa8ee3b7ef30d6fd51d5696fd5db7e41221-ol9_x86_64_appstream
rubygem-rdoc-7.0.3-33.module+el9.8.0+90938+383082f5.noarch.rpma749544b03550a322e3bf2af86068f31321e1da2a2c8c9ff297cc58696745492-ol9_x86_64_appstream
rubygem-rexml-3.4.4-33.module+el9.8.0+90938+383082f5.noarch.rpm76b923e771301bf53c91d93cdd98b06851799b4bc12d9d6c19f950c0d33e1bd3-ol9_x86_64_appstream
rubygem-rss-0.3.2-33.module+el9.8.0+90938+383082f5.noarch.rpm75484357f40453851cc4594b2ec5f114fc4c525334c41b6547da71eb71fdd380-ol9_x86_64_appstream
rubygem-test-unit-3.7.5-33.module+el9.8.0+90938+383082f5.noarch.rpm4ac5cca5bffed6f9dfb09af8a7c94190f3127fa7a3b40228e1cdffdd935aafae-ol9_x86_64_appstream
rubygem-typeprof-0.31.1-33.module+el9.8.0+90938+383082f5.noarch.rpm9e127ca169d87fb08a01f8d36efe16edc898dac2914f5c7e3f4d0a90e9bc04ad-ol9_x86_64_appstream
rubygems-4.0.6-33.module+el9.8.0+90938+383082f5.noarch.rpm2abf572f314515b8cfa38ab0ca3540c064137aed17b656cfa5c64ee5ff4d2cb5-ol9_x86_64_appstream
rubygems-devel-4.0.6-33.module+el9.8.0+90938+383082f5.noarch.rpm2fa344c924e7457289ea8946483105c038377d830048131d461111c35deca3a9-ol9_x86_64_appstream



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete