ELSA-2026-96233

ELSA-2026-96233 - ruby4.0 security, bug fix, and enhancement update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2026-11-09

Description

[4.0.9-38]
- Upgrade to ruby 4.0.9.
Resolves: RHEL-300942
- Fix: integer overflow issue in regular expression compiler (CVE-2026-110264)
Resolves: RHEL-292062
- Fix: integer overflow issue in CI/CD regular expression compiler (CVE-2026-97229)
Resolves: RHEL-292090
- Fix: integer overflow issue in regular expression compiler (CVE-2026-93577)
Resolves: RHEL-292119

Related CVEs

CVE-2026-110264

CVE-2026-93577

CVE-2026-97229

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 10 (aarch64)	ruby4.0-4.0.9-38.el10_2.src.rpm	35aeffadb64e19880e1b7bb6cb77dd14dedcd90462b4f6df770a4e23e4841044	-	ol10_aarch64_appstream
	ruby4.0-4.0.9-38.el10_2.src.rpm	35aeffadb64e19880e1b7bb6cb77dd14dedcd90462b4f6df770a4e23e4841044	-	ol10_aarch64_codeready_builder
	ruby4.0-4.0.9-38.el10_2.aarch64.rpm	78d78d1937f4f6c8d8ce68ef3b034bab97a69e274ab2090a3e80a037d9079db8	-	ol10_aarch64_appstream
	ruby4.0-devel-4.0.9-38.el10_2.aarch64.rpm	0db433f541d0cc9bca66aa97bcaf26d88f819e5e4e1653aa63fc0baf08f0c0dc	-	ol10_aarch64_appstream
	ruby4.0-doc-4.0.9-38.el10_2.noarch.rpm	15cc9fed699c9440c44f832cde81443f3a68461b982bcdcb75ad44b54d85733e	-	ol10_aarch64_codeready_builder
	ruby4.0-rubygem-mysql2-0.5.7-38.el10_2.aarch64.rpm	a6c27bccae1a598ba226bf2eedc18f860cc02f388a7b02e3bc7a398cf9ef5aea	-	ol10_aarch64_appstream
	ruby4.0-rubygem-pg-1.6.3-38.el10_2.aarch64.rpm	502d5c5bc3c59d4dbcfb84573f8133e465bcab7227f8efb558828c8ec4692410	-	ol10_aarch64_appstream
Oracle Linux 10 (x86_64)	ruby4.0-4.0.9-38.el10_2.src.rpm	35aeffadb64e19880e1b7bb6cb77dd14dedcd90462b4f6df770a4e23e4841044	-	ol10_x86_64_appstream
	ruby4.0-4.0.9-38.el10_2.src.rpm	35aeffadb64e19880e1b7bb6cb77dd14dedcd90462b4f6df770a4e23e4841044	-	ol10_x86_64_codeready_builder
	ruby4.0-4.0.9-38.el10_2.x86_64.rpm	e51c68860fb106f90ebde230bd7a401e1d68c3768654839c2dc1d96a57faafd1	-	ol10_x86_64_appstream
	ruby4.0-devel-4.0.9-38.el10_2.x86_64.rpm	8f8d2274f5d9352e5483ba09b28f4b59d8eca1d8dfec24c5e6ce6e7cd2c137f2	-	ol10_x86_64_appstream
	ruby4.0-doc-4.0.9-38.el10_2.noarch.rpm	15cc9fed699c9440c44f832cde81443f3a68461b982bcdcb75ad44b54d85733e	-	ol10_x86_64_codeready_builder
	ruby4.0-rubygem-mysql2-0.5.7-38.el10_2.x86_64.rpm	86afca20dda61c895adfc95a20e24176c614c3224e05a9de25563c558e536308	-	ol10_x86_64_appstream
	ruby4.0-rubygem-pg-1.6.3-38.el10_2.x86_64.rpm	7e207503a3d1fef53b783b1d155edc05a17d4c80be61c78b0d320a6dd8d781b6	-	ol10_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team