Red Hat Security Advisory

RHSA-2026:57565

Red Hat Hardened Images RPMs Security Update

Released 2026-08-20 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Hardened Images ruby4.0-4.0.6-37.2.hum1@aarch64, ruby4.0-4.0.6-37.2.hum1@src, ruby4.0-4.0.6-37.2.hum1@x86_64 +46

Fixes 4 records

TI-2026-55453 CVE-2026-80212 · GHSA-x2vh-ff4w-v64c

Resource allocation without limits in ruby resolv

LOW 39

An issue was discovered in the resolv gem before 0.7.2 for Ruby.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00401 Published 2026-08-27 Partial fix · 0.3.2, 0.7.2 CWE-770

TI-2026-39657 CVE-2026-54876 · GHSA-5cfw-78wc-wvjq

Client-Side Memory Leak in OCSP Response Checking

LOW 39

Issue summary: A malicious TLS server can cause a memory leak in a TLS client that has enabled OCSP response checking by sending an OCSP response that contains no single response entries.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00497 Published 2026-08-05 Partial fix · 4.0.2, 3.6.4 CWE-401

TI-2026-25631 CVE-2026-33210 · GHSA-3m6g-2423-7cp3

Ruby JSON has a format string injection vulnerability

LOW 38

Ruby JSON is a JSON implementation for Ruby.

CVSS 4.0HIGH 8.3 Network No auth No interaction EPSS 0.00892 Published 2026-03-20 Fixed in 2.15.2.1, 2.17.1.2 +1 CWE-134

TI-2026-55454 CVE-2026-80213 · GHSA-jr95-x3fr-rcg4

An issue was discovered in the resolv gem before 0.7.2 for Ruby.

LOW 18

An issue was discovered in the resolv gem before 0.7.2 for Ruby.

CVSS 3.1MEDIUM 4.0 Network No auth No interaction EPSS 0.00271 Published 2026-08-27 Partial fix · 0.3.2, 0.7.2 CWE-197