ALSA-2026:96233: Moderate: ruby4.0 security, bug fix, and enhancement update
Ruby is the interpreted scripting language for quick and easy object-oriented programming. It has many features to process text files and to do system management tasks (as in Perl). It is simple, straight-forward, and extensible.
Security Fix(es):
ruby: integer overflow issue in regular expression compiler (CVE-2026-93577) ruby: integer overflow issue in CI/CD regular expression compiler (CVE-2026-97229) ruby: integer overflow issue in regular expression compiler (CVE-2026-110264)
Bug Fix(es) and Enhancement(s):
ruby4.0: Rebase to the latest Ruby 4.0 release [rhel-10.2.z] (JIRA:RHEL-300942)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
almalinux/ruby4.0to a version that resolves this vulnerability.Fixed in 4.0.9-38.el10_2 - Upgrade
Upgrade
almalinux/ruby4.0-develto a version that resolves this vulnerability.Fixed in 4.0.9-38.el10_2 - Upgrade
Upgrade
almalinux/ruby4.0-docto a version that resolves this vulnerability.Fixed in 4.0.9-38.el10_2 - Upgrade
Upgrade
almalinux/ruby4.0-rubygem-mysql2to a version that resolves this vulnerability.Fixed in 0.5.7-38.el10_2 - Upgrade
Upgrade
almalinux/ruby4.0-rubygem-pgto a version that resolves this vulnerability.Fixed in 1.6.3-38.el10_2
Event History
Child vulnerabilities
Contains the following vulnerabilities.