RLSA-2026:50778

Security

Mirrored from RHSA-2026:50778

Issued at: 2026-08-27

Updated at: 2026-08-27

Advisory content derived from Red Hat RHSA-2026:50778, © Red Hat, Inc., used under CC BY 4.0, with modifications.

Synopsis

Important: ruby security, bug fix, and enhancement update

Description

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.

Security Fix(es):

* zlib: zlib: Memory corruption via buffer overflow in Zlib::GzipReader (CVE-2026-27820)

* net-imap: Net::IMAP: Arbitrary IMAP command injection via CRLF sequences in unvalidated input (CVE-2026-42257)

* ruby/net-imap: ruby: Net::IMAP: Denial of Service via large iteration count in SCRAM authentication (CVE-2026-42256)

* net-imap: Net::IMAP: Command injection via non-synchronizing literals (CVE-2026-47240)

* net-imap: Net::IMAP: Arbitrary IMAP command injection due to improper input validation (CVE-2026-47242)

* net-imap: rubygem-net-imap: Net::IMAP: Denial of Service via malformed command input (CVE-2026-47241)

Bug Fix(es) and Enhancement(s):

* ruby: Rebase to the latest Ruby 3.3 release [rhel-10.2.z] (JIRA:Rocky Linux-211300)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected products

Rocky Linux 10 aarch64

Rocky Linux 10 ppc64le

Rocky Linux 10 riscv64

Rocky Linux 10 s390x

Rocky Linux 10 x86_64

Fixes

2491522

2468494

2468500

2459002

2491523

2491519

CVEs

CVE-2026-27820

CVE-2026-42256

CVE-2026-42257

CVE-2026-47240

CVE-2026-47241

CVE-2026-47242

Affected packages

Rocky Linux 10 ppc64le - AppStream

rubygem-io-console-0:0.7.1-14.el10_2.ppc64le.rpm

ruby-bundled-gems-0:3.3.12-14.el10_2.ppc64le.rpm

rubygem-rdoc-0:6.6.3.1-14.el10_2.noarch.rpm

rubygem-json-debuginfo-0:2.7.2-14.el10_2.ppc64le.rpm

rubygem-psych-0:5.1.2-14.el10_2.ppc64le.rpm

ruby-libs-debuginfo-0:3.3.12-14.el10_2.ppc64le.rpm

rubygem-psych-debuginfo-0:5.1.2-14.el10_2.ppc64le.rpm

rubygem-power_assert-0:2.0.3-14.el10_2.noarch.rpm

ruby-0:3.3.12-14.el10_2.src.rpm

ruby-devel-0:3.3.12-14.el10_2.ppc64le.rpm

ruby-0:3.3.12-14.el10_2.ppc64le.rpm

ruby-bundled-gems-debuginfo-0:3.3.12-14.el10_2.ppc64le.rpm

ruby-debugsource-0:3.3.12-14.el10_2.ppc64le.rpm

rubygem-rake-0:13.1.0-14.el10_2.noarch.rpm

rubygem-bundler-0:2.5.22-14.el10_2.noarch.rpm

ruby-default-gems-0:3.3.12-14.el10_2.noarch.rpm

rubygem-rexml-0:3.4.4-14.el10_2.noarch.rpm

rubygem-typeprof-0:0.21.9-14.el10_2.noarch.rpm

rubygem-rss-0:0.3.1-14.el10_2.noarch.rpm

rubygem-bigdecimal-0:3.1.5-14.el10_2.ppc64le.rpm

rubygems-0:3.5.22-14.el10_2.noarch.rpm

ruby-debuginfo-0:3.3.12-14.el10_2.ppc64le.rpm

rubygem-bigdecimal-debuginfo-0:3.1.5-14.el10_2.ppc64le.rpm

rubygem-io-console-debuginfo-0:0.7.1-14.el10_2.ppc64le.rpm

rubygem-minitest-0:5.20.0-14.el10_2.noarch.rpm

ruby-libs-0:3.3.12-14.el10_2.ppc64le.rpm

rubygems-devel-0:3.5.22-14.el10_2.noarch.rpm

rubygem-json-0:2.7.2-14.el10_2.ppc64le.rpm

rubygem-rbs-0:3.4.0-14.el10_2.ppc64le.rpm

rubygem-rbs-debuginfo-0:3.4.0-14.el10_2.ppc64le.rpm

rubygem-test-unit-0:3.6.1-14.el10_2.noarch.rpm

rubygem-irb-0:1.13.1-14.el10_2.noarch.rpm

Rocky Linux 10 x86_64 - AppStream

ruby-libs-0:3.3.12-14.el10_2.x86_64.rpm

rubygem-rdoc-0:6.6.3.1-14.el10_2.noarch.rpm

rubygem-bigdecimal-debuginfo-0:3.1.5-14.el10_2.x86_64.rpm

rubygem-bigdecimal-0:3.1.5-14.el10_2.x86_64.rpm

rubygem-json-0:2.7.2-14.el10_2.x86_64.rpm

rubygem-power_assert-0:2.0.3-14.el10_2.noarch.rpm

ruby-0:3.3.12-14.el10_2.src.rpm

ruby-0:3.3.12-14.el10_2.x86_64.rpm

rubygem-io-console-0:0.7.1-14.el10_2.x86_64.rpm

rubygem-rake-0:13.1.0-14.el10_2.noarch.rpm

rubygem-rbs-0:3.4.0-14.el10_2.x86_64.rpm

rubygem-io-console-debuginfo-0:0.7.1-14.el10_2.x86_64.rpm

rubygem-bundler-0:2.5.22-14.el10_2.noarch.rpm

ruby-default-gems-0:3.3.12-14.el10_2.noarch.rpm

rubygem-rexml-0:3.4.4-14.el10_2.noarch.rpm

rubygem-typeprof-0:0.21.9-14.el10_2.noarch.rpm

rubygem-rss-0:0.3.1-14.el10_2.noarch.rpm

ruby-libs-debuginfo-0:3.3.12-14.el10_2.x86_64.rpm

rubygems-0:3.5.22-14.el10_2.noarch.rpm

rubygem-psych-debuginfo-0:5.1.2-14.el10_2.x86_64.rpm

rubygem-json-debuginfo-0:2.7.2-14.el10_2.x86_64.rpm

ruby-bundled-gems-0:3.3.12-14.el10_2.x86_64.rpm

rubygem-minitest-0:5.20.0-14.el10_2.noarch.rpm

ruby-devel-0:3.3.12-14.el10_2.x86_64.rpm

rubygem-psych-0:5.1.2-14.el10_2.x86_64.rpm

rubygems-devel-0:3.5.22-14.el10_2.noarch.rpm

ruby-debugsource-0:3.3.12-14.el10_2.x86_64.rpm

ruby-bundled-gems-debuginfo-0:3.3.12-14.el10_2.x86_64.rpm

ruby-debuginfo-0:3.3.12-14.el10_2.x86_64.rpm

rubygem-test-unit-0:3.6.1-14.el10_2.noarch.rpm

rubygem-rbs-debuginfo-0:3.4.0-14.el10_2.x86_64.rpm

rubygem-irb-0:1.13.1-14.el10_2.noarch.rpm

Rocky Linux 10 aarch64 - AppStream

rubygem-rdoc-0:6.6.3.1-14.el10_2.noarch.rpm

rubygem-bigdecimal-debuginfo-0:3.1.5-14.el10_2.aarch64.rpm

ruby-bundled-gems-debuginfo-0:3.3.12-14.el10_2.aarch64.rpm

ruby-libs-debuginfo-0:3.3.12-14.el10_2.aarch64.rpm

rubygem-power_assert-0:2.0.3-14.el10_2.noarch.rpm

ruby-0:3.3.12-14.el10_2.src.rpm

ruby-devel-0:3.3.12-14.el10_2.aarch64.rpm

rubygem-io-console-debuginfo-0:0.7.1-14.el10_2.aarch64.rpm

ruby-debuginfo-0:3.3.12-14.el10_2.aarch64.rpm

rubygem-psych-0:5.1.2-14.el10_2.aarch64.rpm

rubygem-psych-debuginfo-0:5.1.2-14.el10_2.aarch64.rpm

rubygem-json-0:2.7.2-14.el10_2.aarch64.rpm

rubygem-bigdecimal-0:3.1.5-14.el10_2.aarch64.rpm

ruby-libs-0:3.3.12-14.el10_2.aarch64.rpm

rubygem-rbs-debuginfo-0:3.4.0-14.el10_2.aarch64.rpm

rubygem-rake-0:13.1.0-14.el10_2.noarch.rpm

ruby-bundled-gems-0:3.3.12-14.el10_2.aarch64.rpm

rubygem-bundler-0:2.5.22-14.el10_2.noarch.rpm

ruby-default-gems-0:3.3.12-14.el10_2.noarch.rpm

rubygem-rexml-0:3.4.4-14.el10_2.noarch.rpm

rubygem-typeprof-0:0.21.9-14.el10_2.noarch.rpm

rubygem-rss-0:0.3.1-14.el10_2.noarch.rpm

ruby-0:3.3.12-14.el10_2.aarch64.rpm

rubygems-0:3.5.22-14.el10_2.noarch.rpm

rubygem-json-debuginfo-0:2.7.2-14.el10_2.aarch64.rpm

rubygem-minitest-0:5.20.0-14.el10_2.noarch.rpm

rubygems-devel-0:3.5.22-14.el10_2.noarch.rpm

ruby-debugsource-0:3.3.12-14.el10_2.aarch64.rpm

rubygem-rbs-0:3.4.0-14.el10_2.aarch64.rpm

rubygem-test-unit-0:3.6.1-14.el10_2.noarch.rpm

rubygem-io-console-0:0.7.1-14.el10_2.aarch64.rpm

rubygem-irb-0:1.13.1-14.el10_2.noarch.rpm

Rocky Linux 10 riscv64 - AppStream

rubygem-rdoc-0:6.6.3.1-14.el10_2.noarch.rpm

rubygem-power_assert-0:2.0.3-14.el10_2.noarch.rpm

ruby-0:3.3.12-14.el10_2.src.rpm

rubygem-rake-0:13.1.0-14.el10_2.noarch.rpm

rubygem-bundler-0:2.5.22-14.el10_2.noarch.rpm

ruby-default-gems-0:3.3.12-14.el10_2.noarch.rpm

rubygem-rexml-0:3.4.4-14.el10_2.noarch.rpm

rubygem-typeprof-0:0.21.9-14.el10_2.noarch.rpm

rubygem-rss-0:0.3.1-14.el10_2.noarch.rpm

rubygems-0:3.5.22-14.el10_2.noarch.rpm

rubygem-minitest-0:5.20.0-14.el10_2.noarch.rpm

rubygems-devel-0:3.5.22-14.el10_2.noarch.rpm

rubygem-test-unit-0:3.6.1-14.el10_2.noarch.rpm

rubygem-irb-0:1.13.1-14.el10_2.noarch.rpm

Rocky Linux 10 s390x - AppStream

rubygem-rdoc-0:6.6.3.1-14.el10_2.noarch.rpm

rubygem-bigdecimal-0:3.1.5-14.el10_2.s390x.rpm

ruby-libs-debuginfo-0:3.3.12-14.el10_2.s390x.rpm

rubygem-power_assert-0:2.0.3-14.el10_2.noarch.rpm

rubygem-rbs-debuginfo-0:3.4.0-14.el10_2.s390x.rpm

ruby-0:3.3.12-14.el10_2.src.rpm

rubygem-json-0:2.7.2-14.el10_2.s390x.rpm

ruby-devel-0:3.3.12-14.el10_2.s390x.rpm

ruby-0:3.3.12-14.el10_2.s390x.rpm

rubygem-rake-0:13.1.0-14.el10_2.noarch.rpm

rubygem-bundler-0:2.5.22-14.el10_2.noarch.rpm

ruby-libs-0:3.3.12-14.el10_2.s390x.rpm

rubygem-psych-0:5.1.2-14.el10_2.s390x.rpm

ruby-default-gems-0:3.3.12-14.el10_2.noarch.rpm

rubygem-rbs-0:3.4.0-14.el10_2.s390x.rpm

rubygem-rexml-0:3.4.4-14.el10_2.noarch.rpm

rubygem-typeprof-0:0.21.9-14.el10_2.noarch.rpm

ruby-bundled-gems-0:3.3.12-14.el10_2.s390x.rpm

rubygem-rss-0:0.3.1-14.el10_2.noarch.rpm

ruby-debuginfo-0:3.3.12-14.el10_2.s390x.rpm

rubygems-0:3.5.22-14.el10_2.noarch.rpm

rubygem-io-console-0:0.7.1-14.el10_2.s390x.rpm

rubygem-minitest-0:5.20.0-14.el10_2.noarch.rpm

ruby-bundled-gems-debuginfo-0:3.3.12-14.el10_2.s390x.rpm

rubygems-devel-0:3.5.22-14.el10_2.noarch.rpm

rubygem-psych-debuginfo-0:5.1.2-14.el10_2.s390x.rpm

rubygem-json-debuginfo-0:2.7.2-14.el10_2.s390x.rpm

rubygem-bigdecimal-debuginfo-0:3.1.5-14.el10_2.s390x.rpm

rubygem-io-console-debuginfo-0:0.7.1-14.el10_2.s390x.rpm

rubygem-test-unit-0:3.6.1-14.el10_2.noarch.rpm

ruby-debugsource-0:3.3.12-14.el10_2.s390x.rpm

rubygem-irb-0:1.13.1-14.el10_2.noarch.rpm

Rocky Linux 10 aarch64 - CRB

ruby-doc-0:3.3.12-14.el10_2.noarch.rpm

Rocky Linux 10 ppc64le - CRB

ruby-doc-0:3.3.12-14.el10_2.noarch.rpm

Rocky Linux 10 riscv64 - CRB

ruby-doc-0:3.3.12-14.el10_2.noarch.rpm

Rocky Linux 10 s390x - CRB

ruby-doc-0:3.3.12-14.el10_2.noarch.rpm

Rocky Linux 10 x86_64 - CRB

ruby-doc-0:3.3.12-14.el10_2.noarch.rpm