<oval_definitions xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" xmlns:oval="http://oval.mitre.org/XMLSchema/oval-common-5" xmlns:oval-def="http://oval.mitre.org/XMLSchema/oval-definitions-5" xmlns:unix-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" xmlns:red-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" xmlns:ind-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://oval.mitre.org/XMLSchema/oval-common-5 oval-common-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5 oval-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5#unix unix-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5#linux linux-definitions-schema.xsd">
<generator>
<oval:product_name>Oracle Errata System</oval:product_name>
<oval:product_version>Oracle Linux</oval:product_version>
<oval:schema_version>5.11</oval:schema_version>
<oval:timestamp>2026-08-14T16:18:17</oval:timestamp>
</generator>
<definitions>
<definition id="oval:com.oracle.elsa:def:202650773" version="501" class="patch">
<metadata>
<title>
ELSA-2026-50773:  ruby4.0 security, bug fix, and enhancement update (IMPORTANT)
</title>
<affected family="unix">
<platform>Oracle Linux 10</platform>

</affected>
<reference source="elsa" ref_id="ELSA-2026-50773" ref_url="https://linux.oracle.com/errata/ELSA-2026-50773.html"/>
<reference source="CVE" ref_id="CVE-2026-27820" ref_url="https://linux.oracle.com/cve/CVE-2026-27820.html"/>
<reference source="CVE" ref_id="CVE-2026-42256" ref_url="https://linux.oracle.com/cve/CVE-2026-42256.html"/>
<reference source="CVE" ref_id="CVE-2026-42257" ref_url="https://linux.oracle.com/cve/CVE-2026-42257.html"/>
<reference source="CVE" ref_id="CVE-2026-47240" ref_url="https://linux.oracle.com/cve/CVE-2026-47240.html"/>
<reference source="CVE" ref_id="CVE-2026-47241" ref_url="https://linux.oracle.com/cve/CVE-2026-47241.html"/>
<reference source="CVE" ref_id="CVE-2026-47242" ref_url="https://linux.oracle.com/cve/CVE-2026-47242.html"/>

<description>
[4.0.6-36]
- Upgrade to Ruby 4.0.6.
  Resolves: RHEL-211310
  Resolves: RHEL-193660
</description>
<!--
 ~~~~~~~~~~~~~~~~~~~~   advisory details   ~~~~~~~~~~~~~~~~~~~ 
-->
<advisory>
<severity>IMPORTANT</severity>
<rights>Copyright 2026 Oracle, Inc.</rights>
<issued date="2026-08-14"/>
<cve cvss3="5.6/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://linux.oracle.com/cve/CVE-2026-27820.html" public="20260416">CVE-2026-27820</cve>
<cve cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://linux.oracle.com/cve/CVE-2026-42256.html" public="20260509">CVE-2026-42256</cve>
<cve cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L" href="https://linux.oracle.com/cve/CVE-2026-42257.html" public="20260509">CVE-2026-42257</cve>
<cve cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L" href="https://linux.oracle.com/cve/CVE-2026-47240.html" public="20260622">CVE-2026-47240</cve>
<cve cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://linux.oracle.com/cve/CVE-2026-47241.html" public="20260622">CVE-2026-47241</cve>
<cve cvss3="0.0/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:N" href="https://linux.oracle.com/cve/CVE-2026-47242.html" public="20260622">CVE-2026-47242</cve>

<affected_cpe_list>
<cpe>cpe:/a:oracle:linux:10::appstream</cpe>
<cpe>cpe:/a:oracle:linux:10::codeready_builder</cpe>
</affected_cpe_list>
</advisory>
</metadata>
<criteria operator="AND">
<criterion test_ref="oval:com.oracle.elsa:tst:202650773001" comment="Oracle Linux 10 is installed"/>
<criteria operator="OR">
<criteria operator="AND">
<criterion test_ref="oval:com.oracle.elsa:tst:202650773002" comment="Oracle Linux arch is aarch64"/>
<criteria operator="OR">
<criteria operator="AND">
<criterion test_ref="oval:com.oracle.elsa:tst:202650773003" comment="ruby4.0 is earlier than 0:4.0.6-36.el10_2"/>
<criterion test_ref="oval:com.oracle.elsa:tst:202650773004" comment="ruby4.0 is signed with the Oracle Linux 10 key"/>
</criteria>
<criteria operator="AND">
<criterion test_ref="oval:com.oracle.elsa:tst:202650773005" comment="ruby4.0-devel is earlier than 0:4.0.6-36.el10_2"/>
<criterion test_ref="oval:com.oracle.elsa:tst:202650773006" comment="ruby4.0-devel is signed with the Oracle Linux 10 key"/>
</criteria>
<criteria operator="AND">
<criterion test_ref="oval:com.oracle.elsa:tst:202650773007" comment="ruby4.0-doc is earlier than 0:4.0.6-36.el10_2"/>
<criterion test_ref="oval:com.oracle.elsa:tst:202650773008" comment="ruby4.0-doc is signed with the Oracle Linux 10 key"/>
</criteria>
<criteria operator="AND">
<criterion test_ref="oval:com.oracle.elsa:tst:202650773009" comment="ruby4.0-rubygem-mysql2 is earlier than 0:0.5.7-36.el10_2"/>
<criterion test_ref="oval:com.oracle.elsa:tst:202650773010" comment="ruby4.0-rubygem-mysql2 is signed with the Oracle Linux 10 key"/>
</criteria>
<criteria operator="AND">
<criterion test_ref="oval:com.oracle.elsa:tst:202650773011" comment="ruby4.0-rubygem-pg is earlier than 0:1.6.3-36.el10_2"/>
<criterion test_ref="oval:com.oracle.elsa:tst:202650773012" comment="ruby4.0-rubygem-pg is signed with the Oracle Linux 10 key"/>
</criteria>
</criteria>
</criteria>
<criteria operator="AND">
<criterion test_ref="oval:com.oracle.elsa:tst:202650773013" comment="Oracle Linux arch is x86_64"/>
<criteria operator="OR">
<criteria operator="AND">
<criterion test_ref="oval:com.oracle.elsa:tst:202650773003" comment="ruby4.0 is earlier than 0:4.0.6-36.el10_2"/>
<criterion test_ref="oval:com.oracle.elsa:tst:202650773004" comment="ruby4.0 is signed with the Oracle Linux 10 key"/>
</criteria>
<criteria operator="AND">
<criterion test_ref="oval:com.oracle.elsa:tst:202650773005" comment="ruby4.0-devel is earlier than 0:4.0.6-36.el10_2"/>
<criterion test_ref="oval:com.oracle.elsa:tst:202650773006" comment="ruby4.0-devel is signed with the Oracle Linux 10 key"/>
</criteria>
<criteria operator="AND">
<criterion test_ref="oval:com.oracle.elsa:tst:202650773007" comment="ruby4.0-doc is earlier than 0:4.0.6-36.el10_2"/>
<criterion test_ref="oval:com.oracle.elsa:tst:202650773008" comment="ruby4.0-doc is signed with the Oracle Linux 10 key"/>
</criteria>
<criteria operator="AND">
<criterion test_ref="oval:com.oracle.elsa:tst:202650773009" comment="ruby4.0-rubygem-mysql2 is earlier than 0:0.5.7-36.el10_2"/>
<criterion test_ref="oval:com.oracle.elsa:tst:202650773010" comment="ruby4.0-rubygem-mysql2 is signed with the Oracle Linux 10 key"/>
</criteria>
<criteria operator="AND">
<criterion test_ref="oval:com.oracle.elsa:tst:202650773011" comment="ruby4.0-rubygem-pg is earlier than 0:1.6.3-36.el10_2"/>
<criterion test_ref="oval:com.oracle.elsa:tst:202650773012" comment="ruby4.0-rubygem-pg is signed with the Oracle Linux 10 key"/>
</criteria>
</criteria>
</criteria>
</criteria>
</criteria>

</definition>
</definitions>
<!--
 ~~~~~~~~~~~~~~~~~~~~~   rpminfo tests   ~~~~~~~~~~~~~~~~~~~~~ 
-->
<tests>
<rpminfo_test id="oval:com.oracle.elsa:tst:202650773001"  version="501" comment="Oracle Linux 10 is installed" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:202650773001" />
<state state_ref="oval:com.oracle.elsa:ste:202650773002" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:202650773002"  version="501" comment="Oracle Linux arch is aarch64" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:202650773001" />
<state state_ref="oval:com.oracle.elsa:ste:202650773003" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:202650773003"  version="501" comment="ruby4.0 is earlier than 0:4.0.6-36.el10_2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:202650773002" />
<state state_ref="oval:com.oracle.elsa:ste:202650773004" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:202650773004"  version="501" comment="ruby4.0 is signed with the Oracle Linux 10 key" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:202650773002" />
<state state_ref="oval:com.oracle.elsa:ste:202650773001" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:202650773005"  version="501" comment="ruby4.0-devel is earlier than 0:4.0.6-36.el10_2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:202650773003" />
<state state_ref="oval:com.oracle.elsa:ste:202650773004" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:202650773006"  version="501" comment="ruby4.0-devel is signed with the Oracle Linux 10 key" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:202650773003" />
<state state_ref="oval:com.oracle.elsa:ste:202650773001" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:202650773007"  version="501" comment="ruby4.0-doc is earlier than 0:4.0.6-36.el10_2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:202650773004" />
<state state_ref="oval:com.oracle.elsa:ste:202650773004" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:202650773008"  version="501" comment="ruby4.0-doc is signed with the Oracle Linux 10 key" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:202650773004" />
<state state_ref="oval:com.oracle.elsa:ste:202650773001" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:202650773009"  version="501" comment="ruby4.0-rubygem-mysql2 is earlier than 0:0.5.7-36.el10_2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:202650773005" />
<state state_ref="oval:com.oracle.elsa:ste:202650773005" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:202650773010"  version="501" comment="ruby4.0-rubygem-mysql2 is signed with the Oracle Linux 10 key" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:202650773005" />
<state state_ref="oval:com.oracle.elsa:ste:202650773001" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:202650773011"  version="501" comment="ruby4.0-rubygem-pg is earlier than 0:1.6.3-36.el10_2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:202650773006" />
<state state_ref="oval:com.oracle.elsa:ste:202650773006" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:202650773012"  version="501" comment="ruby4.0-rubygem-pg is signed with the Oracle Linux 10 key" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:202650773006" />
<state state_ref="oval:com.oracle.elsa:ste:202650773001" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:202650773013"  version="501" comment="Oracle Linux arch is x86_64" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:202650773001" />
<state state_ref="oval:com.oracle.elsa:ste:202650773007" />
</rpminfo_test>

</tests>
<!--
 ~~~~~~~~~~~~~~~~~~~~   rpminfo objects   ~~~~~~~~~~~~~~~~~~~~ 
-->
<objects>
<rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:com.oracle.elsa:obj:202650773006" version="501">
<name>ruby4.0-rubygem-pg</name>
</rpminfo_object>
<rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:com.oracle.elsa:obj:202650773001" version="501">
<name>oraclelinux-release</name>
</rpminfo_object>
<rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:com.oracle.elsa:obj:202650773004" version="501">
<name>ruby4.0-doc</name>
</rpminfo_object>
<rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:com.oracle.elsa:obj:202650773005" version="501">
<name>ruby4.0-rubygem-mysql2</name>
</rpminfo_object>
<rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:com.oracle.elsa:obj:202650773002" version="501">
<name>ruby4.0</name>
</rpminfo_object>
<rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:com.oracle.elsa:obj:202650773003" version="501">
<name>ruby4.0-devel</name>
</rpminfo_object>
</objects>
<states>
<!--
 ~~~~~~~~~~~~~~~~~~~~   rpminfo states   ~~~~~~~~~~~~~~~~~~~~~ 
-->
<rpminfo_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:com.oracle.elsa:ste:202650773001" version="501">
<signature_keyid operation="equals">bc4d06a08d8b756f</signature_keyid>
</rpminfo_state>
<rpminfo_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:com.oracle.elsa:ste:202650773002" version="501">
<version operation="pattern match">^10</version>
</rpminfo_state>
<rpminfo_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:com.oracle.elsa:ste:202650773003" version="501">
<arch operation="pattern match">aarch64</arch>
</rpminfo_state>
<rpminfo_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:com.oracle.elsa:ste:202650773004" version="501">
<evr datatype="evr_string" operation="less than">0:4.0.6-36.el10_2</evr>
</rpminfo_state>
<rpminfo_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:com.oracle.elsa:ste:202650773005" version="501">
<evr datatype="evr_string" operation="less than">0:0.5.7-36.el10_2</evr>
</rpminfo_state>
<rpminfo_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:com.oracle.elsa:ste:202650773006" version="501">
<evr datatype="evr_string" operation="less than">0:1.6.3-36.el10_2</evr>
</rpminfo_state>
<rpminfo_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:com.oracle.elsa:ste:202650773007" version="501">
<arch operation="pattern match">x86_64</arch>
</rpminfo_state>

</states>
</oval_definitions>
