Oracle Errata System
Oracle Linux
5.11
2026-05-20T02:10:51
ELSA-2026-18039: ruby security update (IMPORTANT)
Oracle Linux 9
[3.0.7-166]
- Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316)
Resolves: RHEL-171254
IMPORTANT
Copyright 2026 Oracle, Inc.
CVE-2026-41316
cpe:/a:oracle:linux:9::appstream
cpe:/a:oracle:linux:9::codeready_builder
ruby-doc
rubygem-minitest
rubygem-rss
rubygem-power_assert
rubygem-io-console
rubygem-irb
rubygem-bundler
rubygem-json
ruby-default-gems
rubygems
ruby-devel
rubygem-rexml
rubygem-test-unit
rubygem-bigdecimal
ruby
rubygem-typeprof
rubygem-psych
oraclelinux-release
ruby-libs
rubygem-rdoc
rubygem-rake
rubygem-rbs
rubygems-devel
bc4d06a08d8b756f
^9
aarch64
0:3.0.7-166.el9_7
0:3.0.0-166.el9_7
0:2.2.33-166.el9_7
0:0.5.7-166.el9_7
0:1.3.5-166.el9_7
0:2.5.1-166.el9_7
0:5.14.2-166.el9_7
0:1.2.1-166.el9_7
0:3.3.2-166.el9_7
0:13.0.3-166.el9_7
0:1.4.0-166.el9_7
0:6.3.4.1-166.el9_7
0:3.2.5-166.el9_7
0:0.2.9-166.el9_7
0:3.3.7-166.el9_7
0:0.15.2-166.el9_7
0:3.2.33-166.el9_7
x86_64