Issued at: 2026-11-09
Updated at: 2026-11-09
Advisory content derived from Red Hat RHSA-2026:96068, © Red Hat, Inc., used under CC BY 4.0, with modifications.
Synopsis
Moderate: ruby:3.3 security, bug fix, and enhancement update
Description
Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.
Security Fix(es):
* ruby: double free issue in regular expression parser (CVE-2026-89078)
* ruby: integer overflow issue in regular expression compiler (CVE-2026-93577)
* ruby: integer overflow issue in CI/CD regular expression compiler (CVE-2026-97229)
* ruby: integer overflow issue in regular expression compiler (CVE-2026-110264)
Bug Fix(es) and Enhancement(s):
* ruby:3.3/ruby: Rebase to the latest Ruby 3.3 release [rhel-9] (JIRA:Rocky Linux-290989)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.