ELSA-2026-72285

ULN >
Oracle Linux Errata repository >
ELSA-2026-72285

ELSA-2026-72285 - ruby:3.3 security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-09-29

Description

ruby
[3.3.12-9]
- Fix memory exhaustion via unknown DNS resource types in resolv.
(CVE-2026-80212)
Resolves: RHEL-252036

[3.3.12-8]
- Upgrade to Ruby 3.3.12.
Resolves: RHEL-170929
Resolves: RHEL-193664

[3.3.10-7]
- Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245)
Resolves: RHEL-181682
- Fix information disclosure via MITM attack bypassing TLS in net-imap.
(CVE-2026-42246)
Resolves: RHEL-181759
- Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258)
Resolves: RHEL-181791

[3.3.10-6]
- Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316)
Resolves: RHEL-171247

[3.3.10-5]
- Upgrade to Ruby 3.3.10.
Resolves: RHEL-106820
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
Resolves: RHEL-122012

[3.3.8-4]
- Upgrade to Ruby 3.3.8.
Resolves: RHEL-68632
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)

[3.3.5-3]
- Upgrade to Ruby 3.3.5
Resolves: RHEL-55409
- Fix DoS vulnerability in rexml.
(CVE-2024-39908)
(CVE-2024-41946)
(CVE-2024-43398)
Resolves: RHEL-57049
Resolves: RHEL-57054
Resolves: RHEL-57069
- Fix REXML DoS when parsing an XML having many specific characters such as
whitespace character, >] and ]>.
(CVE-2024-41123)
Resolves: RHEL-52783

[3.3.1-2]
- Upgrade to Ruby 3.3.1.
Resolves: RHEL-37446
- Fix buffer overread vulnerability in StringIO.
(CVE-2024-27280)
Resolves: RHEL-37448
- Fix RCE vulnerability with .rdoc_options in RDoc.
(CVE-2024-27281)
Resolves: RHEL-37449
- Fix Arbitrary memory address read vulnerability with Regex search.
(CVE-2024-27282)
Resolves: RHEL-37447

[3.3.0-1]
- Upgrade to Ruby 3.3.0.
Resolves: RHEL-17090

[3.1.2-141]
- Upgrade to Ruby 3.1.2.
Resolves: rhbz#2063772

rubygem-abrt
[0.4.0-1]
- Update to abrt 0.4.0.
Resolves: rhbz#1842476

[0.3.0-4]
- Execute test suite unconditionally.
- Upload correct sources.

[0.3.0-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[0.3.0-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[0.3.0-1]
- Update to abrt 0.3.0.

[0.2.0-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[0.2.0-1]
- Update to abrt 0.2.0.

[0.1.1-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[0.1.1-1]
- Update to abrt 0.1.1.

[0.0.6-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

rubygem-mysql2
[0.5.5-1]
- Upgrade to mysql2 0.5.5.
Related: RHEL-17090

rubygem-pg
[1.5.4-1]
- Upgrade to pg 1.5.4.
Related: RHEL-17090

Related CVEs

CVE-2026-80212

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label

Oracle Linux 8 (aarch64)	ruby-3.3.12-9.module+el8.10.0+91044+eb2de09c.src.rpm	019cfe4396abed51f7fccb064c0648f3eac0bef3baee0c710c57f751eb399bab	-	ol8_aarch64_appstream
	rubygem-abrt-0.4.0-1.module+el8.10.0+90287+d51aa4ed.src.rpm	6ac453e70feb9d7b23a1aa39db8221e88d8bb0cf083784a4a72a212cb7dd3fd4	-	ol8_aarch64_appstream
	rubygem-mysql2-0.5.5-1.module+el8.10.0+90287+d51aa4ed.src.rpm	19542bf2ea9dfd0f443a9ae064540ac9beb4d8a2e222afda8cdb6361ea4685ee	-	ol8_aarch64_appstream
	rubygem-pg-1.5.4-1.module+el8.10.0+90287+d51aa4ed.src.rpm	356d342d027d27c05a8656ef9c0de286ff107eb7bb0d2a279e0448a694847080	-	ol8_aarch64_appstream
	ruby-3.3.12-9.module+el8.10.0+91044+eb2de09c.aarch64.rpm	c7f1a02473c423a3ca847ecba5956e7410670c92b4d23816cf54d1ef680f0487	-	ol8_aarch64_appstream
	ruby-bundled-gems-3.3.12-9.module+el8.10.0+91044+eb2de09c.aarch64.rpm	4dd55f8aff90d2e3921a2787b97e36425d4e498904336e84ca143c91a4ee42f6	-	ol8_aarch64_appstream
	ruby-default-gems-3.3.12-9.module+el8.10.0+91044+eb2de09c.noarch.rpm	59af5ec3cc0d03eadd80e9eaec667e71918979fa68f47aadacfb5bf91d04d70d	-	ol8_aarch64_appstream
	ruby-devel-3.3.12-9.module+el8.10.0+91044+eb2de09c.aarch64.rpm	e8ec1b44d023defbf00552b1c8ae18c7683cf98e12175172f09ee7b832f85e6e	-	ol8_aarch64_appstream
	ruby-doc-3.3.12-9.module+el8.10.0+91044+eb2de09c.noarch.rpm	5c34a74d8b271297fc303db1253c11085974ad48de47de533b99daaa911f04c4	-	ol8_aarch64_appstream
	ruby-libs-3.3.12-9.module+el8.10.0+91044+eb2de09c.aarch64.rpm	4db310c31b227a20e244c726f4403b2f3b44d0ad44f3531cbd406730cc20c1fb	-	ol8_aarch64_appstream
	rubygem-abrt-0.4.0-1.module+el8.10.0+90287+d51aa4ed.noarch.rpm	850c952a22315c9d05721675e1b7cf80e95a946a589e3ca02c8b32c92ca510a8	-	ol8_aarch64_appstream
	rubygem-abrt-doc-0.4.0-1.module+el8.10.0+90287+d51aa4ed.noarch.rpm	f64940f45d8c50bf42060ea60af6243b6b33ce864200f4fa5f9db1fd4efbe8fe	-	ol8_aarch64_appstream
	rubygem-bigdecimal-3.1.5-9.module+el8.10.0+91044+eb2de09c.aarch64.rpm	23b2489e816662b94c90afd0b57d02ca5e11a5548a69bf7b45be4c7347156c1f	-	ol8_aarch64_appstream
	rubygem-bundler-2.5.22-9.module+el8.10.0+91044+eb2de09c.noarch.rpm	8cd45f2ad2229c5d68c0e9ff9f32c987351dc172cf8bc6845286de8c208b9355	-	ol8_aarch64_appstream
	rubygem-io-console-0.7.1-9.module+el8.10.0+91044+eb2de09c.aarch64.rpm	f43cb2b88428fceb8e405b8f48f8515a834bacb42806e3cd14ed1a9111b2413e	-	ol8_aarch64_appstream
	rubygem-irb-1.13.1-9.module+el8.10.0+91044+eb2de09c.noarch.rpm	7309bb1c9834ec6c0fa7a93ea29c948491cec59b49183bc818eb291b8a73a936	-	ol8_aarch64_appstream
	rubygem-json-2.7.2-9.module+el8.10.0+91044+eb2de09c.aarch64.rpm	7e4af5e02201e5c7381573914476a2e7e9616290268eab478f19ce154544d36b	-	ol8_aarch64_appstream
	rubygem-minitest-5.20.0-9.module+el8.10.0+91044+eb2de09c.noarch.rpm	a747b24f20eac37d30496decc03e40ee32e55a4550c9fdcc535e4b2910a1255f	-	ol8_aarch64_appstream
	rubygem-mysql2-0.5.5-1.module+el8.10.0+90287+d51aa4ed.aarch64.rpm	241698aacdaa05251b44f1e72e23b44237cefeb77166aab085bc7696add73bfc	-	ol8_aarch64_appstream
	rubygem-mysql2-doc-0.5.5-1.module+el8.10.0+90287+d51aa4ed.noarch.rpm	5c4b1b065eb50bec577ba43df6ab78548ee9e7ecf64de6db1842a1c73e86863f	-	ol8_aarch64_appstream
	rubygem-pg-1.5.4-1.module+el8.10.0+90287+d51aa4ed.aarch64.rpm	1b91523981f88ff21a26e5df54b2e3dbc3e1d9e8c0d9be200d5271ee93d47e52	-	ol8_aarch64_appstream
	rubygem-pg-doc-1.5.4-1.module+el8.10.0+90287+d51aa4ed.noarch.rpm	7ac85931907ba3b881aa39e0f7fd6beaa9a15e21cf8aa4b8e40d4eef8c6fe244	-	ol8_aarch64_appstream
	rubygem-power_assert-2.0.3-9.module+el8.10.0+91044+eb2de09c.noarch.rpm	d25bf355c18d4af6152f368ce0eb118bb9932c0029892279112f38fbf836b596	-	ol8_aarch64_appstream
	rubygem-psych-5.1.2-9.module+el8.10.0+91044+eb2de09c.aarch64.rpm	dd42eb829d5ca1e925b2e9a0c4024d0ee1726cb9ee1d18a3cdfb2a3d9ae6c456	-	ol8_aarch64_appstream
	rubygem-racc-1.7.3-9.module+el8.10.0+91044+eb2de09c.aarch64.rpm	99d8d78a206a5db7470416f4137170c1a268bedabe5dbe6767f38d47762b4484	-	ol8_aarch64_appstream
	rubygem-rake-13.1.0-9.module+el8.10.0+91044+eb2de09c.noarch.rpm	a0b278984eb4a0f0d78c0582f8a3e2b2e3a6c9d3a920dc79eb6d6805dea91472	-	ol8_aarch64_appstream
	rubygem-rbs-3.4.0-9.module+el8.10.0+91044+eb2de09c.aarch64.rpm	a1e1729d97a9dc04d5515af525d8e5aa3ee4d36d893920e791b669a5a10f5169	-	ol8_aarch64_appstream
	rubygem-rdoc-6.6.3.1-9.module+el8.10.0+91044+eb2de09c.noarch.rpm	c7b45e6c17fd59c37287b45e26dc90263d888eb58163fd2756ca635223f0cd6a	-	ol8_aarch64_appstream
	rubygem-rexml-3.4.4-9.module+el8.10.0+91044+eb2de09c.noarch.rpm	a917b594d76c8c6674a12875741fafdc078b072bf607db3a891d1de59e1b0434	-	ol8_aarch64_appstream
	rubygem-rss-0.3.1-9.module+el8.10.0+91044+eb2de09c.noarch.rpm	ad6312924cc6a730bb04d6d97933163c62a28f2f343040ad592027a2f038ec07	-	ol8_aarch64_appstream
	rubygem-test-unit-3.6.1-9.module+el8.10.0+91044+eb2de09c.noarch.rpm	585b9fe8a4bb5495d822d5d86c622ba02db2132a15620acc41baec58ec2f9221	-	ol8_aarch64_appstream
	rubygem-typeprof-0.21.9-9.module+el8.10.0+91044+eb2de09c.noarch.rpm	ab216b7b9ea04165d127d0913b77cd224e967063ec3b7ee6d7ab838406ed97cb	-	ol8_aarch64_appstream
	rubygems-3.5.22-9.module+el8.10.0+91044+eb2de09c.noarch.rpm	c42e5ec9e171df71340b4abbfe260d7a0e4b965a1065e06b7407791af4c318f6	-	ol8_aarch64_appstream
	rubygems-devel-3.5.22-9.module+el8.10.0+91044+eb2de09c.noarch.rpm	1ebe2f315f430623e423c22343924c3bd73c295785837fef794c9f50e1145c4b	-	ol8_aarch64_appstream

Oracle Linux 8 (x86_64)	ruby-3.3.12-9.module+el8.10.0+91044+eb2de09c.src.rpm	019cfe4396abed51f7fccb064c0648f3eac0bef3baee0c710c57f751eb399bab	-	ol8_x86_64_appstream
	rubygem-abrt-0.4.0-1.module+el8.10.0+90287+d51aa4ed.src.rpm	6ac453e70feb9d7b23a1aa39db8221e88d8bb0cf083784a4a72a212cb7dd3fd4	-	ol8_x86_64_appstream
	rubygem-mysql2-0.5.5-1.module+el8.10.0+90287+d51aa4ed.src.rpm	19542bf2ea9dfd0f443a9ae064540ac9beb4d8a2e222afda8cdb6361ea4685ee	-	ol8_x86_64_appstream
	rubygem-pg-1.5.4-1.module+el8.10.0+90287+d51aa4ed.src.rpm	356d342d027d27c05a8656ef9c0de286ff107eb7bb0d2a279e0448a694847080	-	ol8_x86_64_appstream
	ruby-3.3.12-9.module+el8.10.0+91044+eb2de09c.i686.rpm	76cc4b2bb50293966fe993ea4afe026a5c5bd1f9eb290f5e7aeac3d1908af1aa	-	ol8_x86_64_appstream
	ruby-3.3.12-9.module+el8.10.0+91044+eb2de09c.x86_64.rpm	3c5a734664e36df6824de39553230521ae7feec885574a02be404f67163d012d	-	ol8_x86_64_appstream
	ruby-bundled-gems-3.3.12-9.module+el8.10.0+91044+eb2de09c.i686.rpm	7d88c2e30a16f646b4e90c3491476556fbe58322a7ed6de4e4c2360d900195d8	-	ol8_x86_64_appstream
	ruby-bundled-gems-3.3.12-9.module+el8.10.0+91044+eb2de09c.x86_64.rpm	b64aacf483e7c57dab2adec1a1539ae4a3e3fea58bab390e891a67e475571287	-	ol8_x86_64_appstream
	ruby-default-gems-3.3.12-9.module+el8.10.0+91044+eb2de09c.noarch.rpm	59af5ec3cc0d03eadd80e9eaec667e71918979fa68f47aadacfb5bf91d04d70d	-	ol8_x86_64_appstream
	ruby-devel-3.3.12-9.module+el8.10.0+91044+eb2de09c.i686.rpm	5b623fb898e9b27b526f3fa92c6c82899ed8b27ef30286a8ff4aa9ed31de8c05	-	ol8_x86_64_appstream
	ruby-devel-3.3.12-9.module+el8.10.0+91044+eb2de09c.x86_64.rpm	5b176ef4e57f26c4bfa883e7f380fb8912169ec2b5d75a63a280dd31453e7ea5	-	ol8_x86_64_appstream
	ruby-doc-3.3.12-9.module+el8.10.0+91044+eb2de09c.noarch.rpm	5c34a74d8b271297fc303db1253c11085974ad48de47de533b99daaa911f04c4	-	ol8_x86_64_appstream
	ruby-libs-3.3.12-9.module+el8.10.0+91044+eb2de09c.i686.rpm	15715d0385fa3f76fd893cf3339c284c2ecf76fde8ca05a166163c29a51685ee	-	ol8_x86_64_appstream
	ruby-libs-3.3.12-9.module+el8.10.0+91044+eb2de09c.x86_64.rpm	9a51de2c8c164a93ca343fbf42062657c90050892d13d6156979487197a29a1e	-	ol8_x86_64_appstream
	rubygem-abrt-0.4.0-1.module+el8.10.0+90287+d51aa4ed.noarch.rpm	850c952a22315c9d05721675e1b7cf80e95a946a589e3ca02c8b32c92ca510a8	-	ol8_x86_64_appstream
	rubygem-abrt-doc-0.4.0-1.module+el8.10.0+90287+d51aa4ed.noarch.rpm	f64940f45d8c50bf42060ea60af6243b6b33ce864200f4fa5f9db1fd4efbe8fe	-	ol8_x86_64_appstream
	rubygem-bigdecimal-3.1.5-9.module+el8.10.0+91044+eb2de09c.i686.rpm	73057a4f537630111677c1293a0a03429e80dad824ef4f9c1c00d69f89b78622	-	ol8_x86_64_appstream
	rubygem-bigdecimal-3.1.5-9.module+el8.10.0+91044+eb2de09c.x86_64.rpm	930461946dcaffaf9c94393a9869e136e595aee19aeb123d33d64b3dae85e30b	-	ol8_x86_64_appstream
	rubygem-bundler-2.5.22-9.module+el8.10.0+91044+eb2de09c.noarch.rpm	8cd45f2ad2229c5d68c0e9ff9f32c987351dc172cf8bc6845286de8c208b9355	-	ol8_x86_64_appstream
	rubygem-io-console-0.7.1-9.module+el8.10.0+91044+eb2de09c.i686.rpm	87924686a4e6f7ccd40bf0cb28e3ac6370aeae0ea6ee991e96d74783b553f71a	-	ol8_x86_64_appstream
	rubygem-io-console-0.7.1-9.module+el8.10.0+91044+eb2de09c.x86_64.rpm	a0a1f6a79f19c3517cc1454b0f591ca2fd5352e371b69a33bc44a92eb76bff2d	-	ol8_x86_64_appstream
	rubygem-irb-1.13.1-9.module+el8.10.0+91044+eb2de09c.noarch.rpm	7309bb1c9834ec6c0fa7a93ea29c948491cec59b49183bc818eb291b8a73a936	-	ol8_x86_64_appstream
	rubygem-json-2.7.2-9.module+el8.10.0+91044+eb2de09c.i686.rpm	a84fa505d83541273e72e9f983f641f48c7f24425a650e201499739d7cc8675a	-	ol8_x86_64_appstream
	rubygem-json-2.7.2-9.module+el8.10.0+91044+eb2de09c.x86_64.rpm	5f350153939e407653950b9075b9e86af3ad4266222d99c466294335d1bd4840	-	ol8_x86_64_appstream
	rubygem-minitest-5.20.0-9.module+el8.10.0+91044+eb2de09c.noarch.rpm	a747b24f20eac37d30496decc03e40ee32e55a4550c9fdcc535e4b2910a1255f	-	ol8_x86_64_appstream
	rubygem-mysql2-0.5.5-1.module+el8.10.0+90287+d51aa4ed.x86_64.rpm	c2d31724242c82910a146d3b02d8349bf979be68752da2b4596b4fe25abf9164	-	ol8_x86_64_appstream
	rubygem-mysql2-doc-0.5.5-1.module+el8.10.0+90287+d51aa4ed.noarch.rpm	5c4b1b065eb50bec577ba43df6ab78548ee9e7ecf64de6db1842a1c73e86863f	-	ol8_x86_64_appstream
	rubygem-pg-1.5.4-1.module+el8.10.0+90287+d51aa4ed.x86_64.rpm	1b61ea1d32862bdb460b1fec2c996a9e59caacfe2d03ebe860809ffa5d4db00a	-	ol8_x86_64_appstream
	rubygem-pg-doc-1.5.4-1.module+el8.10.0+90287+d51aa4ed.noarch.rpm	7ac85931907ba3b881aa39e0f7fd6beaa9a15e21cf8aa4b8e40d4eef8c6fe244	-	ol8_x86_64_appstream
	rubygem-power_assert-2.0.3-9.module+el8.10.0+91044+eb2de09c.noarch.rpm	d25bf355c18d4af6152f368ce0eb118bb9932c0029892279112f38fbf836b596	-	ol8_x86_64_appstream
	rubygem-psych-5.1.2-9.module+el8.10.0+91044+eb2de09c.i686.rpm	96b264b4eb020129545f97b7c20a4c6e499076d157fff3d9122e34a48b5b5a69	-	ol8_x86_64_appstream
	rubygem-psych-5.1.2-9.module+el8.10.0+91044+eb2de09c.x86_64.rpm	8cd96a109a49ddd47b3c744e852b720e9969359a7f3a82df7d80d87938a887fb	-	ol8_x86_64_appstream
	rubygem-racc-1.7.3-9.module+el8.10.0+91044+eb2de09c.i686.rpm	a3795eddd5a918e675ec1952f590e2a679113fba976084b0fb4c71c73bf02384	-	ol8_x86_64_appstream
	rubygem-racc-1.7.3-9.module+el8.10.0+91044+eb2de09c.x86_64.rpm	55b9a6224a66db9a1299360837b019ba29467ebc0ef54d0dfb4f2df98d8a2252	-	ol8_x86_64_appstream
	rubygem-rake-13.1.0-9.module+el8.10.0+91044+eb2de09c.noarch.rpm	a0b278984eb4a0f0d78c0582f8a3e2b2e3a6c9d3a920dc79eb6d6805dea91472	-	ol8_x86_64_appstream
	rubygem-rbs-3.4.0-9.module+el8.10.0+91044+eb2de09c.i686.rpm	575397ce231abf90e10e7e915d4cc7e7457e6722fd2f68f2353433ecb8e00533	-	ol8_x86_64_appstream
	rubygem-rbs-3.4.0-9.module+el8.10.0+91044+eb2de09c.x86_64.rpm	123a9c8d3f32d58a5ab5b7b78f9f7ea08f6f6ea8fb9c328cfa3c199220fc6204	-	ol8_x86_64_appstream
	rubygem-rdoc-6.6.3.1-9.module+el8.10.0+91044+eb2de09c.noarch.rpm	c7b45e6c17fd59c37287b45e26dc90263d888eb58163fd2756ca635223f0cd6a	-	ol8_x86_64_appstream
	rubygem-rexml-3.4.4-9.module+el8.10.0+91044+eb2de09c.noarch.rpm	a917b594d76c8c6674a12875741fafdc078b072bf607db3a891d1de59e1b0434	-	ol8_x86_64_appstream
	rubygem-rss-0.3.1-9.module+el8.10.0+91044+eb2de09c.noarch.rpm	ad6312924cc6a730bb04d6d97933163c62a28f2f343040ad592027a2f038ec07	-	ol8_x86_64_appstream
	rubygem-test-unit-3.6.1-9.module+el8.10.0+91044+eb2de09c.noarch.rpm	585b9fe8a4bb5495d822d5d86c622ba02db2132a15620acc41baec58ec2f9221	-	ol8_x86_64_appstream
	rubygem-typeprof-0.21.9-9.module+el8.10.0+91044+eb2de09c.noarch.rpm	ab216b7b9ea04165d127d0913b77cd224e967063ec3b7ee6d7ab838406ed97cb	-	ol8_x86_64_appstream
	rubygems-3.5.22-9.module+el8.10.0+91044+eb2de09c.noarch.rpm	c42e5ec9e171df71340b4abbfe260d7a0e4b965a1065e06b7407791af4c318f6	-	ol8_x86_64_appstream
	rubygems-devel-3.5.22-9.module+el8.10.0+91044+eb2de09c.noarch.rpm	1ebe2f315f430623e423c22343924c3bd73c295785837fef794c9f50e1145c4b	-	ol8_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

Technical information

Oracle Linux Support

Connect

Contact Us

Global contacts
Oracle 1-800-633-0691