Red Hat Security Advisory

RHSA-2025:23648

ruby:3.3 security update

Released 2025-12-18 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream EUS (v.9.6) ruby-3.3.10-5.module+el9.6.0+23780+e40d2335.aarch64::ruby:3.3, ruby-3.3.10-5.module+el9.6.0+23780+e40d2335.i686::ruby:3.3, ruby-3.3.10-5.module+el9.6.0+23780+e40d2335.ppc64le::ruby:3.3 +47

TI-2025-19562 CVE-2025-26625 · GHSA-6pvw-g552-53c5

MEDIUM 47

Git LFS is a Git extension for versioning large files.

CVSS 4.0HIGH 8.6 Network No auth User interaction EPSS 0.01055 Published 2025-10-17 Fixed in 3.7.1 CWE-59

TI-2025-18041 CVE-2025-24294 · GHSA-xh69-987w-hrp8

MEDIUM 40

The attack vector is a potential Denial of Service (DoS).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00656 Published 2025-07-12 Partial fix · 0.2.3, 0.6.2 +1 CWE-400

TI-2025-36425 CVE-2025-58767 · GHSA-c2f4-jgmc-q2r5

LOW 7

REXML is an XML toolkit for Ruby.

CVSS 4.0LOW 1.2 Local No auth No interaction EPSS 0.00248 Published 2025-09-17 Partial fix · 3.4.2 CWE-400