Red Hat Security Advisory

RHSA-2025:23063

ruby:3.3 security update

Released 2025-12-10 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 9) ruby-3.3.10-5.module+el9.7.0+23651+15dc1615.aarch64::ruby:3.3, ruby-3.3.10-5.module+el9.7.0+23651+15dc1615.i686::ruby:3.3, ruby-3.3.10-5.module+el9.7.0+23651+15dc1615.ppc64le::ruby:3.3 +47

TI-2025-18041 CVE-2025-24294 · GHSA-xh69-987w-hrp8

MEDIUM 40

The attack vector is a potential Denial of Service (DoS).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00656 Published 2025-07-12 Partial fix · 0.2.3, 0.6.2 +1 CWE-400

TI-2025-38040 CVE-2025-61594 · GHSA-j4pr-3wm6-xx2r

LOW 18

URI is a module providing classes to handle Uniform Resource Identifiers.

CVSS 4.0LOW 2.1 Local No auth No interaction EPSS 0.0056 Published 2025-12-30 Partial fix · 0.12.5, 0.13.3 +1 CWE-200

TI-2025-36425 CVE-2025-58767 · GHSA-c2f4-jgmc-q2r5

LOW 7

REXML is an XML toolkit for Ruby.

CVSS 4.0LOW 1.2 Local No auth No interaction EPSS 0.00248 Published 2025-09-17 Partial fix · 3.4.2 CWE-400