Red Hat Security Advisory

RHSA-2025:23927

ruby security update

Released 2025-12-22 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream EUS (v. 10.0) ruby-3.3.10-11.el10_0, ruby-bundled-gems-3.3.10-11.el10_0, ruby-default-gems-3.3.10-11.el10_0 +20
Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0) ruby-doc-3.3.10-11.el10_0

TI-2025-19562 CVE-2025-26625 · GHSA-6pvw-g552-53c5

MEDIUM 47

Git LFS is a Git extension for versioning large files.

CVSS 4.0HIGH 8.6 Network No auth User interaction EPSS 0.01055 Published 2025-10-17 Fixed in 3.7.1 CWE-59

TI-2025-18041 CVE-2025-24294 · GHSA-xh69-987w-hrp8

MEDIUM 40

The attack vector is a potential Denial of Service (DoS).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00656 Published 2025-07-12 Partial fix · 0.2.3, 0.6.2 +1 CWE-400

TI-2025-36425 CVE-2025-58767 · GHSA-c2f4-jgmc-q2r5

LOW 7

REXML is an XML toolkit for Ruby.

CVSS 4.0LOW 1.2 Local No auth No interaction EPSS 0.00248 Published 2025-09-17 Partial fix · 3.4.2 CWE-400