Red Hat Security Advisory

RHSA-2025:23141

ruby security update

Released 2025-12-11 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 10) ruby-3.3.10-11.el10_1, ruby-bundled-gems-3.3.10-11.el10_1, ruby-default-gems-3.3.10-11.el10_1 +20
Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) ruby-doc-3.3.10-11.el10_1

TI-2025-18041 CVE-2025-24294 · GHSA-xh69-987w-hrp8

MEDIUM 40

The attack vector is a potential Denial of Service (DoS).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00656 Published 2025-07-12 Partial fix · 0.2.3, 0.6.2 +1 CWE-400

TI-2025-38040 CVE-2025-61594 · GHSA-j4pr-3wm6-xx2r

LOW 18

URI is a module providing classes to handle Uniform Resource Identifiers.

CVSS 4.0LOW 2.1 Local No auth No interaction EPSS 0.0056 Published 2025-12-30 Partial fix · 0.12.5, 0.13.3 +1 CWE-200

TI-2025-36425 CVE-2025-58767 · GHSA-c2f4-jgmc-q2r5

LOW 7

REXML is an XML toolkit for Ruby.

CVSS 4.0LOW 1.2 Local No auth No interaction EPSS 0.00248 Published 2025-09-17 Partial fix · 3.4.2 CWE-400