Red Hat Security Advisory

RHSA-2026:37238

ruby:3.3 security update

Released 2026-07-09 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream EUS (v.9.6) ruby-3.3.10-6.module+el9.6.0+24475+76cce029.aarch64::ruby:3.3, ruby-3.3.10-6.module+el9.6.0+24475+76cce029.i686::ruby:3.3, ruby-3.3.10-6.module+el9.6.0+24475+76cce029.ppc64le::ruby:3.3 +47

TI-2026-29917 CVE-2026-41316 · GHSA-q339-8rmv-2mhv

MEDIUM 40

ERB is a templating system for Ruby.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.01131 Published 2026-04-24 Fixed in 4.0.3.1, 6.0.1.1 +2 CWE-693

TI-2026-30563 CVE-2026-42246 · GHSA-vcgp-9326-pqcp

LOW 35

Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby.

CVSS 4.0HIGH 7.6 Network No auth User interaction EPSS 0.00312 Published 2026-05-09 Partial fix · 0.3.10, 0.4.24 +2 CWE-392

TI-2026-30574 CVE-2026-42258 · GHSA-75xq-5h9v-w6px

LOW 27

Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby.

CVSS 4.0MEDIUM 5.8 Local No auth User interaction EPSS 0.00783 Published 2026-05-09 Partial fix · 0.4.24, 0.5.14 +1 CWE-77

TI-2026-30562 CVE-2026-42245 · GHSA-q2mw-fvj9-vvcw

LOW 12

Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby.

CVSS 4.0LOW 2.3 Network No auth User interaction EPSS 0.0041 Published 2026-05-09 Fixed in 0.4.24, 0.5.14 +1 CWE-407