Oracle alert ELSA-2026-72484 (ruby:4.0)
| From: | Errata Announcements for Oracle Linux via El-errata <el-errata@oss.oracle.com> | |
| To: | el-errata@oss.oracle.com | |
| Subject: | [El-errata] ELSA-2026-72484 Important: Oracle Linux 9 ruby:4.0 security update | |
| Date: | Thu, 01 Oct 2026 07:26:10 -0700 | |
| Message-ID: | <mailman.124.1790864785.18.el-errata@oss.oracle.com> |
Oracle Linux Security Advisory ELSA-2026-72484 http://linux.oracle.com/errata/ELSA-2026-72484.html The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network: x86_64: ruby-4.0.6-35.module+el9.8.0+91047+ad9c8476.i686.rpm ruby-4.0.6-35.module+el9.8.0+91047+ad9c8476.x86_64.rpm ruby-bundled-gems-4.0.6-35.module+el9.8.0+91047+ad9c8476.i686.rpm ruby-bundled-gems-4.0.6-35.module+el9.8.0+91047+ad9c8476.x86_64.rpm ruby-default-gems-4.0.6-35.module+el9.8.0+91047+ad9c8476.noarch.rpm ruby-devel-4.0.6-35.module+el9.8.0+91047+ad9c8476.i686.rpm ruby-devel-4.0.6-35.module+el9.8.0+91047+ad9c8476.x86_64.rpm ruby-doc-4.0.6-35.module+el9.8.0+91047+ad9c8476.noarch.rpm rubygem-bigdecimal-4.0.1-35.module+el9.8.0+91047+ad9c8476.i686.rpm rubygem-bigdecimal-4.0.1-35.module+el9.8.0+91047+ad9c8476.x86_64.rpm rubygem-bundler-4.0.16-35.module+el9.8.0+91047+ad9c8476.noarch.rpm rubygem-io-console-0.8.2-35.module+el9.8.0+91047+ad9c8476.i686.rpm rubygem-io-console-0.8.2-35.module+el9.8.0+91047+ad9c8476.x86_64.rpm rubygem-irb-1.16.0-35.module+el9.8.0+91047+ad9c8476.noarch.rpm rubygem-json-2.18.0-35.module+el9.8.0+91047+ad9c8476.i686.rpm rubygem-json-2.18.0-35.module+el9.8.0+91047+ad9c8476.x86_64.rpm rubygem-minitest-6.0.0-35.module+el9.8.0+91047+ad9c8476.noarch.rpm rubygem-mysql2-0.5.7-1.module+el9.8.0+90938+383082f5.x86_64.rpm rubygem-mysql2-doc-0.5.7-1.module+el9.8.0+90938+383082f5.noarch.rpm rubygem-pg-1.6.3-1.module+el9.8.0+90938+383082f5.x86_64.rpm rubygem-pg-doc-1.6.3-1.module+el9.8.0+90938+383082f5.noarch.rpm rubygem-power_assert-3.0.1-35.module+el9.8.0+91047+ad9c8476.noarch.rpm rubygem-psych-5.3.1-35.module+el9.8.0+91047+ad9c8476.i686.rpm rubygem-psych-5.3.1-35.module+el9.8.0+91047+ad9c8476.x86_64.rpm rubygem-racc-1.8.1-35.module+el9.8.0+91047+ad9c8476.i686.rpm rubygem-racc-1.8.1-35.module+el9.8.0+91047+ad9c8476.x86_64.rpm rubygem-rake-13.3.1-35.module+el9.8.0+91047+ad9c8476.noarch.rpm rubygem-rbs-3.10.0-35.module+el9.8.0+91047+ad9c8476.i686.rpm rubygem-rbs-3.10.0-35.module+el9.8.0+91047+ad9c8476.x86_64.rpm rubygem-rdoc-7.0.4-35.module+el9.8.0+91047+ad9c8476.noarch.rpm rubygem-rexml-3.4.4-35.module+el9.8.0+91047+ad9c8476.noarch.rpm rubygem-rss-0.3.2-35.module+el9.8.0+91047+ad9c8476.noarch.rpm rubygems-4.0.16-35.module+el9.8.0+91047+ad9c8476.noarch.rpm rubygems-devel-4.0.16-35.module+el9.8.0+91047+ad9c8476.noarch.rpm rubygem-test-unit-3.7.5-35.module+el9.8.0+91047+ad9c8476.noarch.rpm rubygem-typeprof-0.31.1-35.module+el9.8.0+91047+ad9c8476.noarch.rpm ruby-libs-4.0.6-35.module+el9.8.0+91047+ad9c8476.i686.rpm ruby-libs-4.0.6-35.module+el9.8.0+91047+ad9c8476.x86_64.rpm aarch64: ruby-4.0.6-35.module+el9.8.0+91047+ad9c8476.aarch64.rpm ruby-bundled-gems-4.0.6-35.module+el9.8.0+91047+ad9c8476.aarch64.rpm ruby-default-gems-4.0.6-35.module+el9.8.0+91047+ad9c8476.noarch.rpm ruby-devel-4.0.6-35.module+el9.8.0+91047+ad9c8476.aarch64.rpm ruby-doc-4.0.6-35.module+el9.8.0+91047+ad9c8476.noarch.rpm rubygem-bigdecimal-4.0.1-35.module+el9.8.0+91047+ad9c8476.aarch64.rpm rubygem-bundler-4.0.16-35.module+el9.8.0+91047+ad9c8476.noarch.rpm rubygem-io-console-0.8.2-35.module+el9.8.0+91047+ad9c8476.aarch64.rpm rubygem-irb-1.16.0-35.module+el9.8.0+91047+ad9c8476.noarch.rpm rubygem-json-2.18.0-35.module+el9.8.0+91047+ad9c8476.aarch64.rpm rubygem-minitest-6.0.0-35.module+el9.8.0+91047+ad9c8476.noarch.rpm rubygem-mysql2-0.5.7-1.module+el9.8.0+90938+383082f5.aarch64.rpm rubygem-mysql2-doc-0.5.7-1.module+el9.8.0+90938+383082f5.noarch.rpm rubygem-pg-1.6.3-1.module+el9.8.0+90938+383082f5.aarch64.rpm rubygem-pg-doc-1.6.3-1.module+el9.8.0+90938+383082f5.noarch.rpm rubygem-power_assert-3.0.1-35.module+el9.8.0+91047+ad9c8476.noarch.rpm rubygem-psych-5.3.1-35.module+el9.8.0+91047+ad9c8476.aarch64.rpm rubygem-racc-1.8.1-35.module+el9.8.0+91047+ad9c8476.aarch64.rpm rubygem-rake-13.3.1-35.module+el9.8.0+91047+ad9c8476.noarch.rpm rubygem-rbs-3.10.0-35.module+el9.8.0+91047+ad9c8476.aarch64.rpm rubygem-rdoc-7.0.4-35.module+el9.8.0+91047+ad9c8476.noarch.rpm rubygem-rexml-3.4.4-35.module+el9.8.0+91047+ad9c8476.noarch.rpm rubygem-rss-0.3.2-35.module+el9.8.0+91047+ad9c8476.noarch.rpm rubygems-4.0.16-35.module+el9.8.0+91047+ad9c8476.noarch.rpm rubygems-devel-4.0.16-35.module+el9.8.0+91047+ad9c8476.noarch.rpm rubygem-test-unit-3.7.5-35.module+el9.8.0+91047+ad9c8476.noarch.rpm rubygem-typeprof-0.31.1-35.module+el9.8.0+91047+ad9c8476.noarch.rpm ruby-libs-4.0.6-35.module+el9.8.0+91047+ad9c8476.aarch64.rpm SRPMS: http://oss.oracle.com/ol9/SRPMS-updates/ruby-4.0.6-35.mod... http://oss.oracle.com/ol9/SRPMS-updates/rubygem-mysql2-0.... http://oss.oracle.com/ol9/SRPMS-updates/rubygem-pg-1.6.3-... Related CVEs: CVE-2026-80212 Description of changes: ruby [4.0.6-35] - Fix resolv: do not register on-demand classes for unknown DNS types and SvcParamKeys to prevent memory exhaustion (CVE-2026-80212) Resolves: RHEL-252035 [4.0.6-34] - Upgrade to Ruby 4.0.6. Resolves: RHEL-211301 Resolves: RHEL-193663 [4.0.3-33] - Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245) Resolves: RHEL-181690 - Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246) Resolves: RHEL-181771 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258) Resolves: RHEL-181803 [4.0.3-32] - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 [4.0.1-31] - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 [3.3.10-5] - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 [3.3.8-4] - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) rubygem-mysql2 [0.5.7-1] - Upgrade to mysql2 0.5.7. Related: RHEL-142278 [0.5.5-3] - Disable tests on the 32bit platforms ix86. Related: RHEL-80222 [0.5.5-2] - Adapt tests to openssl 3.2 Resolves: RHEL-80222 rubygem-pg [1.6.3-1] - Upgrade to pg 1.6.3 Related: RHEL-142278 _______________________________________________ El-errata mailing list El-errata@oss.oracle.com https://oss.oracle.com/mailman/listinfo/el-errata