ALSA-2026:96068: Moderate: ruby:3.3 security, bug fix, and enhancement update
Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.
Security Fix(es):
ruby: double free issue in regular expression parser (CVE-2026-89078) ruby: integer overflow issue in regular expression compiler (CVE-2026-93577) ruby: integer overflow issue in CI/CD regular expression compiler (CVE-2026-97229) ruby: integer overflow issue in regular expression compiler (CVE-2026-110264)
Bug Fix(es) and Enhancement(s):
ruby:3.3/ruby: Rebase to the latest Ruby 3.3 release [rhel-9] (JIRA:RHEL-290989)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
almalinux/rubygem-mysql2to a version that resolves this vulnerability.Fixed in 0.5.5-3.module_el9.7.0+184+e2e36072 - Upgrade
Upgrade
almalinux/rubygem-mysql2-docto a version that resolves this vulnerability.Fixed in 0.5.5-3.module_el9.7.0+184+e2e36072 - Upgrade
Upgrade
almalinux/rubygem-pgto a version that resolves this vulnerability.Fixed in 1.5.4-2.module_el9.7.0+245+447713a2 - Upgrade
Upgrade
almalinux/rubygem-pg-docto a version that resolves this vulnerability.Fixed in 1.5.4-2.module_el9.7.0+245+447713a2 - Upgrade
Upgrade
rubyto a version that resolves this vulnerability.Patch RHEL-290989
Event History
Child vulnerabilities
Contains the following vulnerabilities.