ELSA-2026-72484

ELSA-2026-72484 - ruby:4.0 security update

Type:SECURITY
Impact:IMPORTANT
Release Date:2026-09-29

Description


ruby
[4.0.6-35]
- Fix resolv: do not register on-demand classes for unknown DNS
types and SvcParamKeys to prevent memory exhaustion
(CVE-2026-80212)
Resolves: RHEL-252035

[4.0.6-34]
- Upgrade to Ruby 4.0.6.
Resolves: RHEL-211301
Resolves: RHEL-193663

[4.0.3-33]
- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
Resolves: RHEL-181690
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
Resolves: RHEL-181771
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
Resolves: RHEL-181803

[4.0.3-32]
- Upgrade to Ruby 4.0.3.
Resolves: RHEL-171933
- Fix ERB: Arbitrary code execution via deserialization bypass
(CVE-2026-41316)
Resolves: RHEL-171258
- Fix JSON: Denial of Service or Information Disclosure via format string injection
(CVE-2026-33210)
Resolves: RHEL-173458

[4.0.1-31]
- Upgrade to Ruby 4.0.1.
Resolves: RHEL-142278

[3.3.10-5]
- Upgrade to Ruby 3.3.10.
Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
Resolves: RHEL-126728

[3.3.8-4]
- Upgrade to Ruby 3.3.8.
Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)

rubygem-mysql2
[0.5.7-1]
- Upgrade to mysql2 0.5.7.
Related: RHEL-142278

[0.5.5-3]
- Disable tests on the 32bit platforms ix86.
Related: RHEL-80222

[0.5.5-2]
- Adapt tests to openssl 3.2
Resolves: RHEL-80222

rubygem-pg
[1.6.3-1]
- Upgrade to pg 1.6.3
Related: RHEL-142278


Related CVEs


CVE-2026-80212

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 9 (aarch64) ruby-4.0.6-35.module+el9.8.0+91047+ad9c8476.src.rpm3d7598a43de449f14e6a6f7c09d5c0afccce289e803ec935615dccc8358364c4-ol9_aarch64_appstream
rubygem-mysql2-0.5.7-1.module+el9.8.0+90938+383082f5.src.rpmd0cf5dce452693e87f0e170b28b012b60ce259fe3e884f3eaf21c9a8d1c58d1a-ol9_aarch64_appstream
rubygem-pg-1.6.3-1.module+el9.8.0+90938+383082f5.src.rpm59cb4318ebf1595be694b26e86d124c21772bc9018b59abeb43a2c2df616a292-ol9_aarch64_appstream
ruby-4.0.6-35.module+el9.8.0+91047+ad9c8476.aarch64.rpmb26efcb5f5a80b14839e5b79a51e9f635f0bb5da4eeb83c0cd2a394958154d62-ol9_aarch64_appstream
ruby-bundled-gems-4.0.6-35.module+el9.8.0+91047+ad9c8476.aarch64.rpm7e1fcba77d3df586c956994a9269828d206d2ef8de3850a06b898951fcc7a6e9-ol9_aarch64_appstream
ruby-default-gems-4.0.6-35.module+el9.8.0+91047+ad9c8476.noarch.rpmf84fb47c2b334cdbe281b30c5241b7a54c248a39b422999967d9e3a5efb5e6c5-ol9_aarch64_appstream
ruby-devel-4.0.6-35.module+el9.8.0+91047+ad9c8476.aarch64.rpm286b3753408c15caa58fd66efe007ed4fab1597be2bd219d8877f6bbd5acecb3-ol9_aarch64_appstream
ruby-doc-4.0.6-35.module+el9.8.0+91047+ad9c8476.noarch.rpm5697745b5e7ffd2835e997c5b8a94a75dc8e6fc6d93a769ad6ea520ba44d4a00-ol9_aarch64_appstream
ruby-libs-4.0.6-35.module+el9.8.0+91047+ad9c8476.aarch64.rpm8dd6da00aa8ddb4552085875461c62cbe78cf9303896978d8ca15f79543eb153-ol9_aarch64_appstream
rubygem-bigdecimal-4.0.1-35.module+el9.8.0+91047+ad9c8476.aarch64.rpm31ba439090b170dd093cb92cc23bbcfbabbe0740551c5e9e0b3f104d0d98d6cd-ol9_aarch64_appstream
rubygem-bundler-4.0.16-35.module+el9.8.0+91047+ad9c8476.noarch.rpm8049f14d51e257bc58fa5fa47ba429aae64bc111284cbc9aae5751b3c14879bb-ol9_aarch64_appstream
rubygem-io-console-0.8.2-35.module+el9.8.0+91047+ad9c8476.aarch64.rpm46098a912d9aa6891ca8124fe0055b58c2c4cee8316277b887ed020dfd2c95f2-ol9_aarch64_appstream
rubygem-irb-1.16.0-35.module+el9.8.0+91047+ad9c8476.noarch.rpm010febddc84f20ebdd84fc8a47569bb80166c21841cc66d0c9a00f15f6e6ffa6-ol9_aarch64_appstream
rubygem-json-2.18.0-35.module+el9.8.0+91047+ad9c8476.aarch64.rpm15541a5c5b24a121d46a332c9eefb046c90d4d31c82061b05c58c8a896d53290-ol9_aarch64_appstream
rubygem-minitest-6.0.0-35.module+el9.8.0+91047+ad9c8476.noarch.rpm0d4fd1bb9e7e1c0ac2d4e8becda0bda03527c214c838abaf32604b185b1cc219-ol9_aarch64_appstream
rubygem-mysql2-0.5.7-1.module+el9.8.0+90938+383082f5.aarch64.rpmab82b34e3e5fda048642feaa25ac5a3ee93ed4df4af80cc966fcc31759478ed6-ol9_aarch64_appstream
rubygem-mysql2-doc-0.5.7-1.module+el9.8.0+90938+383082f5.noarch.rpmbefe867ccaf141883da3820fc7177f7e98dce092fbfa5086308ab6b4db4485df-ol9_aarch64_appstream
rubygem-pg-1.6.3-1.module+el9.8.0+90938+383082f5.aarch64.rpma588308986590bfe828e7f05e60e16375c0b0c0cf4d6c2bf8400861b090ad80c-ol9_aarch64_appstream
rubygem-pg-doc-1.6.3-1.module+el9.8.0+90938+383082f5.noarch.rpm22ac1a785c1281c6cde755f32322c79b4b2069828ca2c382aefa94291a740568-ol9_aarch64_appstream
rubygem-power_assert-3.0.1-35.module+el9.8.0+91047+ad9c8476.noarch.rpmf790612ef8f124d8510842c6fb81b68c0b56ed165ca246edd28fe73d5cb6506d-ol9_aarch64_appstream
rubygem-psych-5.3.1-35.module+el9.8.0+91047+ad9c8476.aarch64.rpm5f5f4cd4b476f78fe32c24396a273f0ed8e4aefd97e4ddb3a5a2c674fe390aed-ol9_aarch64_appstream
rubygem-racc-1.8.1-35.module+el9.8.0+91047+ad9c8476.aarch64.rpm9ab12a85b01c6ab844890c8363febcf0cbdf0f6e6df193d4a69588cd04630015-ol9_aarch64_appstream
rubygem-rake-13.3.1-35.module+el9.8.0+91047+ad9c8476.noarch.rpm7c474d599ee81b1beb7b87c2810817bcaebb7a5c01d9410ecc844c0102d56a04-ol9_aarch64_appstream
rubygem-rbs-3.10.0-35.module+el9.8.0+91047+ad9c8476.aarch64.rpm8abdb49d33cfe44f5c97bdaaa0c74d21679a587653e7a245f6f810b397454d05-ol9_aarch64_appstream
rubygem-rdoc-7.0.4-35.module+el9.8.0+91047+ad9c8476.noarch.rpm6b0fe1333123192e384b930c66b297c1d50fa99b55dc463859e2535c2cea1061-ol9_aarch64_appstream
rubygem-rexml-3.4.4-35.module+el9.8.0+91047+ad9c8476.noarch.rpm4a649143d8f1b549a30ee6fc487c1d7ca34f9f9ddb14b5970e6ad4891b0b8529-ol9_aarch64_appstream
rubygem-rss-0.3.2-35.module+el9.8.0+91047+ad9c8476.noarch.rpmf5ef22f38ce50f3cb7a310c66098de1b1fb49f3bd6f030ac82a162c895913ada-ol9_aarch64_appstream
rubygem-test-unit-3.7.5-35.module+el9.8.0+91047+ad9c8476.noarch.rpmaea7baa434a8379df3b81a9a996e27f61cf97021ec0af5717bf80a7669402931-ol9_aarch64_appstream
rubygem-typeprof-0.31.1-35.module+el9.8.0+91047+ad9c8476.noarch.rpmaf5265a7a1c4921779888aba693e718f48ae7a3eee35a1dca1c16fb120d7dcfd-ol9_aarch64_appstream
rubygems-4.0.16-35.module+el9.8.0+91047+ad9c8476.noarch.rpm52b0839df92ede254724587d255892aac3c09e3d844993282e83db2fcb191a71-ol9_aarch64_appstream
rubygems-devel-4.0.16-35.module+el9.8.0+91047+ad9c8476.noarch.rpm5f1d64474d08a1e0455939a8e41470d429909b11951a5394861a964bae2fa109-ol9_aarch64_appstream
Oracle Linux 9 (x86_64) ruby-4.0.6-35.module+el9.8.0+91047+ad9c8476.src.rpm3d7598a43de449f14e6a6f7c09d5c0afccce289e803ec935615dccc8358364c4-ol9_x86_64_appstream
rubygem-mysql2-0.5.7-1.module+el9.8.0+90938+383082f5.src.rpmd0cf5dce452693e87f0e170b28b012b60ce259fe3e884f3eaf21c9a8d1c58d1a-ol9_x86_64_appstream
rubygem-pg-1.6.3-1.module+el9.8.0+90938+383082f5.src.rpm59cb4318ebf1595be694b26e86d124c21772bc9018b59abeb43a2c2df616a292-ol9_x86_64_appstream
ruby-4.0.6-35.module+el9.8.0+91047+ad9c8476.i686.rpmfc456a7ad68a11b13ad8bf8ac2cb3c7680450a28a58f9bbae60d9f810d5fa41c-ol9_x86_64_appstream
ruby-4.0.6-35.module+el9.8.0+91047+ad9c8476.x86_64.rpm99528c7d11d6493bcdbd56a2c5ec622149105ee2d99dc50170057606dbcdd342-ol9_x86_64_appstream
ruby-bundled-gems-4.0.6-35.module+el9.8.0+91047+ad9c8476.i686.rpm3c17148698000699e5f0910555b2d661217cf6bcd708404135858255b8226786-ol9_x86_64_appstream
ruby-bundled-gems-4.0.6-35.module+el9.8.0+91047+ad9c8476.x86_64.rpm4745c34a346ead6b341171d4e4b7777400b53b27ddce8516a4f3307343f88342-ol9_x86_64_appstream
ruby-default-gems-4.0.6-35.module+el9.8.0+91047+ad9c8476.noarch.rpmf84fb47c2b334cdbe281b30c5241b7a54c248a39b422999967d9e3a5efb5e6c5-ol9_x86_64_appstream
ruby-devel-4.0.6-35.module+el9.8.0+91047+ad9c8476.i686.rpm5e399e15b4dbcc83cb74697c5eebe5ca1ed7c195c982f1a928274c9b1c5524af-ol9_x86_64_appstream
ruby-devel-4.0.6-35.module+el9.8.0+91047+ad9c8476.x86_64.rpm11b403c6fa277b22148ef77df116a4d3d76a7ba056325d907b26b566a2cfe37a-ol9_x86_64_appstream
ruby-doc-4.0.6-35.module+el9.8.0+91047+ad9c8476.noarch.rpm5697745b5e7ffd2835e997c5b8a94a75dc8e6fc6d93a769ad6ea520ba44d4a00-ol9_x86_64_appstream
ruby-libs-4.0.6-35.module+el9.8.0+91047+ad9c8476.i686.rpm7ecfb52e180d3936a09e227d974b1158b583826417e69a4be9867336bff3d132-ol9_x86_64_appstream
ruby-libs-4.0.6-35.module+el9.8.0+91047+ad9c8476.x86_64.rpm4e1999e5aff3e17911b62e901311ea847c84116ba3e731d07f055ca1d7858360-ol9_x86_64_appstream
rubygem-bigdecimal-4.0.1-35.module+el9.8.0+91047+ad9c8476.i686.rpma8c430bc9564b27ae3fe44f4164c0cfd0772e89656fbb8793b9bbfaf45c55e86-ol9_x86_64_appstream
rubygem-bigdecimal-4.0.1-35.module+el9.8.0+91047+ad9c8476.x86_64.rpm148245b9903f2bf7224887941185b78fa619ca4e07c565d20f4d2ee983652922-ol9_x86_64_appstream
rubygem-bundler-4.0.16-35.module+el9.8.0+91047+ad9c8476.noarch.rpm8049f14d51e257bc58fa5fa47ba429aae64bc111284cbc9aae5751b3c14879bb-ol9_x86_64_appstream
rubygem-io-console-0.8.2-35.module+el9.8.0+91047+ad9c8476.i686.rpm3aaf422de1c9ea9bd3a1278ea8be95885cfbb3416b43a372c8eea8a2733f5bed-ol9_x86_64_appstream
rubygem-io-console-0.8.2-35.module+el9.8.0+91047+ad9c8476.x86_64.rpmed2eeb118dc64638ffb7a2ef3a0c41dd1bdb4d481992fd32665a639bac287a24-ol9_x86_64_appstream
rubygem-irb-1.16.0-35.module+el9.8.0+91047+ad9c8476.noarch.rpm010febddc84f20ebdd84fc8a47569bb80166c21841cc66d0c9a00f15f6e6ffa6-ol9_x86_64_appstream
rubygem-json-2.18.0-35.module+el9.8.0+91047+ad9c8476.i686.rpm8506a1487ec647be8a11841c5c89ab3f9a5e626d37f73e2c3fe4b8e1b1437fee-ol9_x86_64_appstream
rubygem-json-2.18.0-35.module+el9.8.0+91047+ad9c8476.x86_64.rpm28c252efc6f8451f50f15796cdb240a0a057e12ade25f1f25b43e23c24808327-ol9_x86_64_appstream
rubygem-minitest-6.0.0-35.module+el9.8.0+91047+ad9c8476.noarch.rpm0d4fd1bb9e7e1c0ac2d4e8becda0bda03527c214c838abaf32604b185b1cc219-ol9_x86_64_appstream
rubygem-mysql2-0.5.7-1.module+el9.8.0+90938+383082f5.x86_64.rpm934114ae7621aa4de1e771a9371fecc4668eedbac2d2748c2ed69bc422643361-ol9_x86_64_appstream
rubygem-mysql2-doc-0.5.7-1.module+el9.8.0+90938+383082f5.noarch.rpmbefe867ccaf141883da3820fc7177f7e98dce092fbfa5086308ab6b4db4485df-ol9_x86_64_appstream
rubygem-pg-1.6.3-1.module+el9.8.0+90938+383082f5.x86_64.rpme4cf3c9d5a5adb7525a426e9367042541d3dea2765641a362056e7466147f5fc-ol9_x86_64_appstream
rubygem-pg-doc-1.6.3-1.module+el9.8.0+90938+383082f5.noarch.rpm22ac1a785c1281c6cde755f32322c79b4b2069828ca2c382aefa94291a740568-ol9_x86_64_appstream
rubygem-power_assert-3.0.1-35.module+el9.8.0+91047+ad9c8476.noarch.rpmf790612ef8f124d8510842c6fb81b68c0b56ed165ca246edd28fe73d5cb6506d-ol9_x86_64_appstream
rubygem-psych-5.3.1-35.module+el9.8.0+91047+ad9c8476.i686.rpm7decbafda4d72a4611b2ef654c20265cbcde9b328822bc0ef0e27a4eb43c1b29-ol9_x86_64_appstream
rubygem-psych-5.3.1-35.module+el9.8.0+91047+ad9c8476.x86_64.rpm28fad55c20dcb20c6bc126e46f9ad21af34209dd43c95e24d2eb613e05ee6735-ol9_x86_64_appstream
rubygem-racc-1.8.1-35.module+el9.8.0+91047+ad9c8476.i686.rpmee25d90a8c33740cbed30d5fde43eaa364f341cd8311153c348a42c45c88e02b-ol9_x86_64_appstream
rubygem-racc-1.8.1-35.module+el9.8.0+91047+ad9c8476.x86_64.rpm5a6d1c0425602f4750fdbfa5a8fef8ddef6d97221ad05011cc071f38e3bec421-ol9_x86_64_appstream
rubygem-rake-13.3.1-35.module+el9.8.0+91047+ad9c8476.noarch.rpm7c474d599ee81b1beb7b87c2810817bcaebb7a5c01d9410ecc844c0102d56a04-ol9_x86_64_appstream
rubygem-rbs-3.10.0-35.module+el9.8.0+91047+ad9c8476.i686.rpm2e5c353279801083b302fb905a4b7852ccbd01e06e208154134b75517753aeed-ol9_x86_64_appstream
rubygem-rbs-3.10.0-35.module+el9.8.0+91047+ad9c8476.x86_64.rpm3a6fac28c9475a309d9b49687856b6af275f30ad82397ed1950d1b6eb54d56a2-ol9_x86_64_appstream
rubygem-rdoc-7.0.4-35.module+el9.8.0+91047+ad9c8476.noarch.rpm6b0fe1333123192e384b930c66b297c1d50fa99b55dc463859e2535c2cea1061-ol9_x86_64_appstream
rubygem-rexml-3.4.4-35.module+el9.8.0+91047+ad9c8476.noarch.rpm4a649143d8f1b549a30ee6fc487c1d7ca34f9f9ddb14b5970e6ad4891b0b8529-ol9_x86_64_appstream
rubygem-rss-0.3.2-35.module+el9.8.0+91047+ad9c8476.noarch.rpmf5ef22f38ce50f3cb7a310c66098de1b1fb49f3bd6f030ac82a162c895913ada-ol9_x86_64_appstream
rubygem-test-unit-3.7.5-35.module+el9.8.0+91047+ad9c8476.noarch.rpmaea7baa434a8379df3b81a9a996e27f61cf97021ec0af5717bf80a7669402931-ol9_x86_64_appstream
rubygem-typeprof-0.31.1-35.module+el9.8.0+91047+ad9c8476.noarch.rpmaf5265a7a1c4921779888aba693e718f48ae7a3eee35a1dca1c16fb120d7dcfd-ol9_x86_64_appstream
rubygems-4.0.16-35.module+el9.8.0+91047+ad9c8476.noarch.rpm52b0839df92ede254724587d255892aac3c09e3d844993282e83db2fcb191a71-ol9_x86_64_appstream
rubygems-devel-4.0.16-35.module+el9.8.0+91047+ad9c8476.noarch.rpm5f1d64474d08a1e0455939a8e41470d429909b11951a5394861a964bae2fa109-ol9_x86_64_appstream



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete