RHSA-2025:8131: Moderate: ruby security update
Published May 26, 2025
·Updated
Moderate: ruby security update
Other sources
Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.Security Fix(es): net-imap: Net::IMAP vulnerable to possible DoS by memory exhaustion (CVE-2025-25186) CGI: Denial of Service in CGI::Cookie.parse (CVE-2025-27219) uri: userinfo leakage in URI#join, URI#merge and URI#+ (CVE-2025-27221) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
— Red Hat
Affected Software
113 affected componentsFixes available
Red Hat Red Hat Enterprise Linux for IBM z Systems - 4 years of updates
Red Hat Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Red Hat Enterprise Linux for Power, little endian - 4 years of support
Red Hat Red Hat CodeReady Linux Builder for x86_64
Red Hat Red Hat Enterprise Linux for ARM 64 - 4 years of updates
Red Hat Red Hat Enterprise Linux for IBM z Systems
Red Hat Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Red Hat Enterprise Linux for Power, little endian
Red Hat Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Red Hat Red Hat Enterprise Linux for x86_64
Red Hat Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Red Hat Enterprise Linux for ARM 64
Red Hat Red Hat Enterprise Linux for x86_64 - 4 years of updates
Red Hat Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support
Red Hat Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support
Red Hat Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support
Red Hat Red Hat CodeReady Linux Builder for Power, little endian
Red Hat Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support
Red Hat Red Hat CodeReady Linux Builder for IBM z Systems
Red Hat Red Hat CodeReady Linux Builder for ARM 64
redhat/ruby<3.3.8-10.el10_0
3.3.8-10.el10_0
redhat/ruby<3.3.8-10.el10_0
3.3.8-10.el10_0
redhat/ruby-bundled-gems<3.3.8-10.el10_0
3.3.8-10.el10_0
redhat/ruby-bundled-gems-debuginfo<3.3.8-10.el10_0
3.3.8-10.el10_0
redhat/ruby-debuginfo<3.3.8-10.el10_0
3.3.8-10.el10_0
redhat/ruby-debugsource<3.3.8-10.el10_0
3.3.8-10.el10_0
redhat/ruby-default-gems<3.3.8-10.el10_0
3.3.8-10.el10_0
redhat/ruby-devel<3.3.8-10.el10_0
3.3.8-10.el10_0
redhat/ruby-libs<3.3.8-10.el10_0
3.3.8-10.el10_0
redhat/ruby-libs-debuginfo<3.3.8-10.el10_0
3.3.8-10.el10_0
redhat/rubygem-bigdecimal<3.1.5-10.el10_0
3.1.5-10.el10_0
redhat/rubygem-bigdecimal-debuginfo<3.1.5-10.el10_0
3.1.5-10.el10_0
redhat/rubygem-bundler<2.5.22-10.el10_0
2.5.22-10.el10_0
redhat/rubygem-io-console<0.7.1-10.el10_0
0.7.1-10.el10_0
redhat/rubygem-io-console-debuginfo<0.7.1-10.el10_0
0.7.1-10.el10_0
redhat/rubygem-irb<1.13.1-10.el10_0
1.13.1-10.el10_0
redhat/rubygem-json<2.7.2-10.el10_0
2.7.2-10.el10_0
redhat/rubygem-json-debuginfo<2.7.2-10.el10_0
2.7.2-10.el10_0
redhat/rubygem-minitest<5.20.0-10.el10_0
5.20.0-10.el10_0
redhat/rubygem-psych<5.1.2-10.el10_0
5.1.2-10.el10_0
redhat/rubygem-psych-debuginfo<5.1.2-10.el10_0
5.1.2-10.el10_0
redhat/rubygem-racc<1.7.3-10.el10_0
1.7.3-10.el10_0
redhat/rubygem-racc-debuginfo<1.7.3-10.el10_0
1.7.3-10.el10_0
redhat/rubygem-rake<13.1.0-10.el10_0
13.1.0-10.el10_0
redhat/rubygem-rbs<3.4.0-10.el10_0
3.4.0-10.el10_0
redhat/rubygem-rbs-debuginfo<3.4.0-10.el10_0
3.4.0-10.el10_0
redhat/rubygem-rdoc<6.6.3.1-10.el10_0
6.6.3.1-10.el10_0
redhat/rubygem-rexml<3.3.9-10.el10_0
3.3.9-10.el10_0
redhat/rubygem-rss<0.3.1-10.el10_0
0.3.1-10.el10_0
redhat/rubygem-test-unit<3.6.1-10.el10_0
3.6.1-10.el10_0
redhat/rubygem-typeprof<0.21.9-10.el10_0
0.21.9-10.el10_0
redhat/rubygems<3.5.22-10.el10_0
3.5.22-10.el10_0
redhat/rubygems-devel<3.5.22-10.el10_0
3.5.22-10.el10_0
redhat/ruby-bundled-gems<3.3.8-10.el10_0
3.3.8-10.el10_0
redhat/ruby-bundled-gems-debuginfo<3.3.8-10.el10_0
3.3.8-10.el10_0
redhat/ruby-debuginfo<3.3.8-10.el10_0
3.3.8-10.el10_0
redhat/ruby-debugsource<3.3.8-10.el10_0
3.3.8-10.el10_0
redhat/ruby-devel<3.3.8-10.el10_0
3.3.8-10.el10_0
redhat/ruby-libs<3.3.8-10.el10_0
3.3.8-10.el10_0
redhat/ruby-libs-debuginfo<3.3.8-10.el10_0
3.3.8-10.el10_0
redhat/rubygem-bigdecimal<3.1.5-10.el10_0
3.1.5-10.el10_0
redhat/rubygem-bigdecimal-debuginfo<3.1.5-10.el10_0
3.1.5-10.el10_0
redhat/rubygem-io-console<0.7.1-10.el10_0
0.7.1-10.el10_0
redhat/rubygem-io-console-debuginfo<0.7.1-10.el10_0
0.7.1-10.el10_0
redhat/rubygem-json<2.7.2-10.el10_0
2.7.2-10.el10_0
redhat/rubygem-json-debuginfo<2.7.2-10.el10_0
2.7.2-10.el10_0
redhat/rubygem-psych<5.1.2-10.el10_0
5.1.2-10.el10_0
redhat/rubygem-psych-debuginfo<5.1.2-10.el10_0
5.1.2-10.el10_0
redhat/rubygem-racc<1.7.3-10.el10_0
1.7.3-10.el10_0
redhat/rubygem-racc-debuginfo<1.7.3-10.el10_0
1.7.3-10.el10_0
redhat/rubygem-rbs<3.4.0-10.el10_0
3.4.0-10.el10_0
redhat/rubygem-rbs-debuginfo<3.4.0-10.el10_0
3.4.0-10.el10_0
redhat/ruby<3.3.8-10.el10_0
3.3.8-10.el10_0
redhat/ruby-bundled-gems<3.3.8-10.el10_0
3.3.8-10.el10_0
redhat/ruby-bundled-gems-debuginfo<3.3.8-10.el10_0
3.3.8-10.el10_0
redhat/ruby-debuginfo<3.3.8-10.el10_0
3.3.8-10.el10_0
redhat/ruby-debugsource<3.3.8-10.el10_0
3.3.8-10.el10_0
redhat/ruby-devel<3.3.8-10.el10_0
3.3.8-10.el10_0
redhat/ruby-libs<3.3.8-10.el10_0
3.3.8-10.el10_0
redhat/ruby-libs-debuginfo<3.3.8-10.el10_0
3.3.8-10.el10_0
redhat/rubygem-bigdecimal<3.1.5-10.el10_0
3.1.5-10.el10_0
redhat/rubygem-bigdecimal-debuginfo<3.1.5-10.el10_0
3.1.5-10.el10_0
redhat/rubygem-io-console<0.7.1-10.el10_0
0.7.1-10.el10_0
redhat/rubygem-io-console-debuginfo<0.7.1-10.el10_0
0.7.1-10.el10_0
redhat/rubygem-json<2.7.2-10.el10_0
2.7.2-10.el10_0
redhat/rubygem-json-debuginfo<2.7.2-10.el10_0
2.7.2-10.el10_0
redhat/rubygem-psych<5.1.2-10.el10_0
5.1.2-10.el10_0
redhat/rubygem-psych-debuginfo<5.1.2-10.el10_0
5.1.2-10.el10_0
redhat/rubygem-racc<1.7.3-10.el10_0
1.7.3-10.el10_0
redhat/rubygem-racc-debuginfo<1.7.3-10.el10_0
1.7.3-10.el10_0
redhat/rubygem-rbs<3.4.0-10.el10_0
3.4.0-10.el10_0
redhat/rubygem-rbs-debuginfo<3.4.0-10.el10_0
3.4.0-10.el10_0
redhat/ruby<3.3.8-10.el10_0.aa
3.3.8-10.el10_0.aa
redhat/ruby-bundled-gems<3.3.8-10.el10_0.aa
3.3.8-10.el10_0.aa
redhat/ruby-bundled-gems-debuginfo<3.3.8-10.el10_0.aa
3.3.8-10.el10_0.aa
redhat/ruby-debuginfo<3.3.8-10.el10_0.aa
3.3.8-10.el10_0.aa
redhat/ruby-debugsource<3.3.8-10.el10_0.aa
3.3.8-10.el10_0.aa
redhat/ruby-devel<3.3.8-10.el10_0.aa
3.3.8-10.el10_0.aa
redhat/ruby-libs<3.3.8-10.el10_0.aa
3.3.8-10.el10_0.aa
redhat/ruby-libs-debuginfo<3.3.8-10.el10_0.aa
3.3.8-10.el10_0.aa
redhat/rubygem-bigdecimal<3.1.5-10.el10_0.aa
3.1.5-10.el10_0.aa
redhat/rubygem-bigdecimal-debuginfo<3.1.5-10.el10_0.aa
3.1.5-10.el10_0.aa
redhat/rubygem-io-console<0.7.1-10.el10_0.aa
0.7.1-10.el10_0.aa
redhat/rubygem-io-console-debuginfo<0.7.1-10.el10_0.aa
0.7.1-10.el10_0.aa
redhat/rubygem-json<2.7.2-10.el10_0.aa
2.7.2-10.el10_0.aa
redhat/rubygem-json-debuginfo<2.7.2-10.el10_0.aa
2.7.2-10.el10_0.aa
redhat/rubygem-psych<5.1.2-10.el10_0.aa
5.1.2-10.el10_0.aa
redhat/rubygem-psych-debuginfo<5.1.2-10.el10_0.aa
5.1.2-10.el10_0.aa
redhat/rubygem-racc<1.7.3-10.el10_0.aa
1.7.3-10.el10_0.aa
redhat/rubygem-racc-debuginfo<1.7.3-10.el10_0.aa
1.7.3-10.el10_0.aa
redhat/rubygem-rbs<3.4.0-10.el10_0.aa
3.4.0-10.el10_0.aa
redhat/rubygem-rbs-debuginfo<3.4.0-10.el10_0.aa
3.4.0-10.el10_0.aa
redhat/ruby-doc<3.3.8-10.el10_0
3.3.8-10.el10_0
Remediation
Event History
May 26, 2025
Advisory Published
via Red Hat·12:00 AM
Data Sourced
via Red Hat·12:00 AM
RemedyDescriptionAffected Software
Advisory Published
via Red Hat·08:16 AM
Frequently Asked Questions
1
What is the severity of RHSA-2025:8131?
The severity of RHSA-2025:8131 is rated as Moderate.
2
What vulnerabilities does RHSA-2025:8131 address?
RHSA-2025:8131 addresses a vulnerability in net-imap that could lead to a denial of service through memory exhaustion.
3
How do I fix RHSA-2025:8131?
To resolve RHSA-2025:8131, update Ruby to version 3.3.8-10.el10_0 or later.
4
Which software products are affected by RHSA-2025:8131?
RHSA-2025:8131 affects multiple versions of Red Hat Enterprise Linux, including those for x86_64, Power, and ARM architectures.
5
Is there any additional information about RHSA-2025:8131?
Additional details about RHSA-2025:8131 can be found in the Red Hat advisory and associated bug reports.