Red Hat Security Advisory

RHSA-2026:35834

ruby security update

Released 2026-07-06 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream E4S (v.9.2) ruby-3.0.4-161.el9_2.3, ruby-default-gems-3.0.4-161.el9_2.3, ruby-devel-3.0.4-161.el9_2.3 +18

TI-2026-29917 CVE-2026-41316 · GHSA-q339-8rmv-2mhv

MEDIUM 40

ERB is a templating system for Ruby.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.01131 Published 2026-04-24 Fixed in 4.0.3.1, 6.0.1.1 +2 CWE-693

TI-2026-30563 CVE-2026-42246 · GHSA-vcgp-9326-pqcp

LOW 35

Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby.

CVSS 4.0HIGH 7.6 Network No auth User interaction EPSS 0.00312 Published 2026-05-09 Partial fix · 0.3.10, 0.4.24 +2 CWE-392

TI-2026-30574 CVE-2026-42258 · GHSA-75xq-5h9v-w6px

LOW 27

Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby.

CVSS 4.0MEDIUM 5.8 Local No auth User interaction EPSS 0.00783 Published 2026-05-09 Partial fix · 0.4.24, 0.5.14 +1 CWE-77