Issued at: 2026-11-10
Updated at: 2026-11-10
Advisory content derived from Red Hat RHSA-2026:96235, © Red Hat, Inc., used under CC BY 4.0, with modifications.
Synopsis
Moderate: ruby security, bug fix, and enhancement update
Description
Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.
Security Fix(es):
* ruby: double free issue in regular expression parser (CVE-2026-89078)
* ruby: integer overflow issue in regular expression compiler (CVE-2026-93577)
* ruby: integer overflow issue in CI/CD regular expression compiler (CVE-2026-97229)
* ruby: integer overflow issue in regular expression compiler (CVE-2026-110264)
Bug Fix(es) and Enhancement(s):
* ruby: Rebase to the latest Ruby 3.3 release [rhel-10.2.z] (JIRA:Rocky Linux-300972)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.