Red Hat Product Errata RHSA-2026:33478 - Security Advisory Issued: 2026-06-30 Updated: 2026-06-30 RHSA-2026:33478 - Security Advisory Overview Updated Packages Synopsis Important: ruby security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for ruby is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. Security Fix(es): erb: ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.0 x86_64 Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.0 s390x Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.0 ppc64le Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.0 aarch64 Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 10.0 x86_64 Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 10.0 ppc64le Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 10.0 s390x Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 10.0 aarch64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.0 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.0 s390x Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.0 ppc64le Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.0 x86_64 Fixes BZ - 2461369 - CVE-2026-41316 erb: ERB: Arbitrary code execution via deserialization bypass CVEs CVE-2026-41316 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.0 SRPM ruby-3.3.10-11.el10_0.1.src.rpm SHA-256: e0329cb0ff0dcd1fee73aedc748ea929dbaf60d73c5a3d3b371f817ba9e548cf x86_64 ruby-3.3.10-11.el10_0.1.x86_64.rpm SHA-256: 82eceaa705ed4288c628f7e76f1419a2dd9419746896adbad32b5f10e5727c7d ruby-bundled-gems-3.3.10-11.el10_0.1.x86_64.rpm SHA-256: aee0345614239996f60c64371de00785dc8d55d1ea14d55f50670e87f024230d ruby-bundled-gems-debuginfo-3.3.10-11.el10_0.1.x86_64.rpm SHA-256: 0b41d8a04322ebb95ebd013a2f392db33074dcd96ab8aafd71fcc10b4cbff43b ruby-debuginfo-3.3.10-11.el10_0.1.x86_64.rpm SHA-256: a24ac39ba7288fbe0d5ac938e7310d26f29d69ffc86f7b70922a9e5e2b8ead13 ruby-debugsource-3.3.10-11.el10_0.1.x86_64.rpm SHA-256: 8fbc9b7f390b85d989357e712af6bb3c74023f85d056b2bde4d407350680ad63 ruby-default-gems-3.3.10-11.el10_0.1.noarch.rpm SHA-256: b77662f802cda6532a2abd4e2c1542b687f8015102324de541608d1b852ec5eb ruby-devel-3.3.10-11.el10_0.1.x86_64.rpm SHA-256: e3b0b2d0d4668cc46170dcde97c9f8c7a15a00976957befdf0acb6ed66909348 ruby-libs-3.3.10-11.el10_0.1.x86_64.rpm SHA-256: 81b9456557db67962352e018df84f2159b881ab862c928181d697efa1d7869a8 ruby-libs-debuginfo-3.3.10-11.el10_0.1.x86_64.rpm SHA-256: 9f9256006668fb81d900fd7fb01db39850f5cfa9ef6a2ee47b5fb5f6f07aff49 rubygem-bigdecimal-3.1.5-11.el10_0.1.x86_64.rpm SHA-256: d0c920113485a1089081d4de8bd64b27f698f972a0871d63ae492956d8cadcef rubygem-bigdecimal-debuginfo-3.1.5-11.el10_0.1.x86_64.rpm SHA-256: 571b5c0a0c1a6ebeb0dc4e500f44a7d95a70409288f24a3efe913624244fb9fd rubygem-bundler-2.5.22-11.el10_0.1.noarch.rpm SHA-256: d706bd7fddb9e7ccd13b46e77ac449ae94d3894b700e80756f03250b4b1f33ed rubygem-io-console-0.7.1-11.el10_0.1.x86_64.rpm SHA-256: 8d2d624a1ce2e9f1c899b6ac6f52e2af541e36ac8362af0f0e10542cad7ed3ad rubygem-io-console-debuginfo-0.7.1-11.el10_0.1.x86_64.rpm SHA-256: 976cb907f0a8dc29ea76b32e04f703a6e99461b12c9fef87824a74e4d3d8c8dd rubygem-irb-1.13.1-11.el10_0.1.noarch.rpm SHA-256: d52d2673733bad3ec34c551b2366d87348a06fa98881ab3b9f3b18cb67bb1f56 rubygem-json-2.7.2-11.el10_0.1.x86_64.rpm SHA-256: 540dc13ef439d94082f075fca8a4e50a0873203deff4b234581624366273beca rubygem-json-debuginfo-2.7.2-11.el10_0.1.x86_64.rpm SHA-256: e333d2ceddbec6538546ff65660d55c89925dec8abcfaa7a817fdbb634eb6011 rubygem-minitest-5.20.0-11.el10_0.1.noarch.rpm SHA-256: 7dcf6a625055e20906e85092ead74da30856ef0f9d9e490e7632f9b8424bd883 rubygem-power_assert-2.0.3-11.el10_0.1.noarch.rpm SHA-256: 59ab2bbacc17da07273aaf576f09be4fc880751d89a877994701cca7ed91bb17 rubygem-psych-5.1.2-11.el10_0.1.x86_64.rpm SHA-256: 93d64d177f7793f7e270ef705a3b4f85f5d2da8cae592abdecf90d3d12dea364 rubygem-psych-debuginfo-5.1.2-11.el10_0.1.x86_64.rpm SHA-256: 211106b5cbf5af39d169816b239e44d5aaa9f544c8cd3b388ce215cf4a6f5ffa rubygem-racc-1.7.3-11.el10_0.1.x86_64.rpm SHA-256: 84838b289f7fae0dcc3aff9fc379bcd53d9a151008d93e95e2f5d3e214b78e88 rubygem-racc-debuginfo-1.7.3-11.el10_0.1.x86_64.rpm SHA-256: 9281973e22a3147787dbcdc218f7868939616f656b684ef77b54156a3ce71cb6 rubygem-rake-13.1.0-11.el10_0.1.noarch.rpm SHA-256: e214dc685dd3e68fe68327b64c25bab79545d0fc2b274aff96c16d9b23cb7f44 rubygem-rbs-3.4.0-11.el10_0.1.x86_64.rpm SHA-256: 3da0cd2306c23240aab06017ba0c2f7dc728865efd5d382db19d097f6316c640 rubygem-rbs-debuginfo-3.4.0-11.el10_0.1.x86_64.rpm SHA-256: 51b284ab8335657ca02f802e4d31aa5e7ba465f00b9e4818f4f9465b508f59b5 rubygem-rdoc-6.6.3.1-11.el10_0.1.noarch.rpm SHA-256: f3e3eb18a3b05f83280a46b7f7547e69216d0116f2fd8d5261a93cc63b1d3f7d rubygem-rexml-3.4.4-11.el10_0.1.noarch.rpm SHA-256: 1cd49f172a64df11d4b2fac42b40b8b461e18ab1f00886972e03e35339ddeb87 rubygem-rss-0.3.1-11.el10_0.1.noarch.rpm SHA-256: 363fd167bc299961fc7d7d055a29e50dfda9210bd471e17c57b925bf3ba0e8a9 rubygem-test-unit-3.6.1-11.el10_0.1.noarch.rpm SHA-256: 8e037e94aa23014faf0657880fd8765be96d4c788ec47291fed1215fa2824573 rubygem-typeprof-0.21.9-11.el10_0.1.noarch.rpm SHA-256: 2aff8a29c75b64d9a9dc59ec50974acf175919c6cd41c140c872d9485393f8d1 rubygems-3.5.22-11.el10_0.1.noarch.rpm SHA-256: 688ac277c50d3865bfa52fa61933db81ddc2a9b251d48d0db9323476d0cf8048 rubygems-devel-3.5.22-11.el10_0.1.noarch.rpm SHA-256: 024199e07c1bfa5d501c5bc9fcc100cbebf7f0d46d6262c4f627e9a3593e330a Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.0 SRPM ruby-3.3.10-11.el10_0.1.src.rpm SHA-256: e0329cb0ff0dcd1fee73aedc748ea929dbaf60d73c5a3d3b371f817ba9e548cf s390x ruby-3.3.10-11.el10_0.1.s390x.rpm SHA-256: f4ed2f5c7b05a23aeb487b5b839c96efeb62011dd93cd6bc8eb9a7c940718842 ruby-bundled-gems-3.3.10-11.el10_0.1.s390x.rpm SHA-256: 859b271f5481ff409299e47da431e0f8bc8ecff4c4c3ff0d0930d5b39a2079ea ruby-bundled-gems-debuginfo-3.3.10-11.el10_0.1.s390x.rpm SHA-256: 014bcfccf6efbe7744ce45da8048cb5b3b14c10d817b96a7b0df1f0b764c2228 ruby-debuginfo-3.3.10-11.el10_0.1.s390x.rpm SHA-256: a8bdb6f497d55d4ffd042bca35856a77801e7f3065ba6c2a82423c66ae832cd5 ruby-debugsource-3.3.10-11.el10_0.1.s390x.rpm SHA-256: 93081626a97d2ea1e1e32bd9cba1273a99775b10e36ef4c9f8ac04d1c6cd53da ruby-default-gems-3.3.10-11.el10_0.1.noarch.rpm SHA-256: b77662f802cda6532a2abd4e2c1542b687f8015102324de541608d1b852ec5eb ruby-devel-3.3.10-11.el10_0.1.s390x.rpm SHA-256: d3cc2fee33ad320a5cc3071c139866a73f1e4b16bca75c0b274a25a163af81ad ruby-libs-3.3.10-11.el10_0.1.s390x.rpm SHA-256: 2c237f602964c39a0b7c38e6cf2d15cbc1c1f1dd6d166fe44a3dea9117f13a85 ruby-libs-debuginfo-3.3.10-11.el10_0.1.s390x.rpm SHA-256: b0be8e339626433bfd3b15b5510b639bc8b0a2762554a9644d6d648eb3fe5a2d rubygem-bigdecimal-3.1.5-11.el10_0.1.s390x.rpm SHA-256: 2aff82ea479290bc2bce60bd1c8f534a9fff75d562def8bcefcf4a3c258bd2a3 rubygem-bigdecimal-debuginfo-3.1.5-11.el10_0.1.s390x.rpm SHA-256: dd9e4abe8a77b386b275b136cbba31418008fde5a4c43f1c176247df49e3cc9d rubygem-bundler-2.5.22-11.el10_0.1.noarch.rpm SHA-256: d706bd7fddb9e7ccd13b46e77ac449ae94d3894b700e80756f03250b4b1f33ed rubygem-io-console-0.7.1-11.el10_0.1.s390x.rpm SHA-256: 7754bcc35233ede0e410171c6fb0d442e818261657235b4b0aad727358993df2 rubygem-io-console-debuginfo-0.7.1-11.el10_0.1.s390x.rpm SHA-256: 8594df65c09c12c757f029f015e96d72f4392ffb9e5d19ef60fbc05bf5aac7a0 rubygem-irb-1.13.1-11.el10_0.1.noarch.rpm SHA-256: d52d2673733bad3ec34c551b2366d87348a06fa98881ab3b9f3b18cb67bb1f56 rubygem-json-2.7.2-11.el10_0.1.s390x.rpm SHA-256: 44930a8dff97fc2611acd365f17450e156857dadddf32ede6f35acab0a349a55 rubygem-json-debuginfo-2.7.2-11.el10_0.1.s390x.rpm SHA-256: 5f01248acb9f551f4b7c109c7649efa86c43968d675cb693d282cd91e959355d rubygem-minitest-5.20.0-11.el10_0.1.noarch.rpm SHA-256: 7dcf6a625055e20906e85092ead74da30856ef0f9d9e490e7632f9b8424bd883 rubygem-power_assert-2.0.3-11.el10_0.1.noarch.rpm SHA-256: 59ab2bbacc17da07273aaf576f09be4fc880751d89a877994701cca7ed91bb17 rubygem-psych-5.1.2-11.el10_0.1.s390x.rpm SHA-256: 41d4ca91cae69b0f5ce1391f640cf7edea930d49e829a3eba866a3a2ad80e30a rubygem-psych-debuginfo-5.1.2-11.el10_0.1.s390x.rpm SHA-256: e41abda56de819d90faa43f82c2c63eb4f081fddf47a50814efe4cc90efac5ea rubygem-racc-1.7.3-11.el10_0.1.s390x.rpm SHA-256: a33a4775094c0c7d6ead9d4b31c58cccc18dd4feec2ad1618063a86bfab017af rubygem-racc-debuginfo-1.7.3-11.el10_0.1.s390x.rpm SHA-256: 7c9f4b2d4332ea05a50fbcaeb99536d2298e1114151e7aced5b29b88716cb54e rubygem-rake-13.1.0-11.el10_0.1.noarch.rpm SHA-256: e214dc685dd3e68fe68327b64c25bab79545d0fc2b274aff96c16d9b23cb7f44 rubygem-rbs-3.4.0-11.el10_0.1.s390x.rpm SHA-256: e42ae716f7e4a435084f7ffcef0f1e2ba2a3fd0b44eecb31189311c061ccbc88 rubygem-rbs-debuginfo-3.4.