Red Hat Security Advisory

RHSA-2026:20606

ruby4.0 security update

Released 2026-05-26 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 10) ruby4.0-4.0.3-34.el10_2, ruby4.0-devel-4.0.3-34.el10_2, ruby4.0-rubygem-mysql2-0.5.7-34.el10_2 +1
Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) ruby4.0-doc-4.0.3-34.el10_2

TI-2026-29917 CVE-2026-41316 · GHSA-q339-8rmv-2mhv

MEDIUM 40

ERB is a templating system for Ruby.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.01131 Published 2026-04-24 Fixed in 4.0.3.1, 6.0.1.1 +2 CWE-693

TI-2026-25631 CVE-2026-33210 · GHSA-3m6g-2423-7cp3

LOW 38

Ruby JSON is a JSON implementation for Ruby.

CVSS 4.0HIGH 8.3 Network No auth No interaction EPSS 0.00892 Published 2026-03-20 Fixed in 2.15.2.1, 2.17.1.2 +1 CWE-134