Red Hat Product Errata RHSA-2026:35834 - Security Advisory Issued: 2026-07-06 Updated: 2026-07-06 RHSA-2026:35834 - Security Advisory Overview Updated Packages Synopsis Important: ruby security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for ruby is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. Security Fix(es): erb: ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) ruby/net-imap: ruby: Net::IMAP: IMAP Command Injection via Symbol Arguments (CVE-2026-42258) net-imap: ruby: Net::IMAP: Information disclosure via man-in-the-middle attack bypassing TLS (CVE-2026-42246) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux Server - AUS 9.2 x86_64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.2 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.2 x86_64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.2 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.2 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.2 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.2 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.2 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.2 s390x Fixes BZ - 2461369 - CVE-2026-41316 erb: ERB: Arbitrary code execution via deserialization bypass BZ - 2468498 - CVE-2026-42258 ruby/net-imap: ruby: Net::IMAP: IMAP Command Injection via Symbol Arguments BZ - 2468499 - CVE-2026-42246 net-imap: ruby: Net::IMAP: Information disclosure via man-in-the-middle attack bypassing TLS CVEs CVE-2026-41316 CVE-2026-42246 CVE-2026-42258 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux Server - AUS 9.2 SRPM ruby-3.0.4-161.el9_2.3.src.rpm SHA-256: 8b2c7a6edc931e23b694283f3aa48c9ffca5c9e031758441ffb296e75be827c2 x86_64 ruby-3.0.4-161.el9_2.3.i686.rpm SHA-256: aed81fcc8e2826aefa18823b0dad64c78627669dd182d340bf710753e7c09976 ruby-3.0.4-161.el9_2.3.x86_64.rpm SHA-256: 9869888720b9aa5108da8f6fd5ccf9b7b142a0dced15262ca56db2e538fa8c00 ruby-debuginfo-3.0.4-161.el9_2.3.i686.rpm SHA-256: 282e07e4553b14573b29fa104e93b4ef6498963b77730060169cc64994ae98b9 ruby-debuginfo-3.0.4-161.el9_2.3.x86_64.rpm SHA-256: 7ad54529091bed6f8c48523780a068ef14c2251227df614eaf21fddfc2ac9ca5 ruby-debugsource-3.0.4-161.el9_2.3.i686.rpm SHA-256: 0d40b042116b510dc76be6c584c3b9b04381a3d800780bb4176500eccf6397a7 ruby-debugsource-3.0.4-161.el9_2.3.x86_64.rpm SHA-256: 4088c0d0ca943b9eade1c206a6e5dfe48f19861f64c7c5611b12e9ff46552b8c ruby-default-gems-3.0.4-161.el9_2.3.noarch.rpm SHA-256: 3ec25d3fc2ea6659fc2c84f7a7a65f2dc3c983d8ba20e9018a3359e0bb75d133 ruby-devel-3.0.4-161.el9_2.3.i686.rpm SHA-256: f1dc23c21233aadde6bff5e24684d8e953b0433193d16d4571040357ba651026 ruby-devel-3.0.4-161.el9_2.3.x86_64.rpm SHA-256: fbdef055ea30eae95ca2e6ca2d8435709981e09dfa6b32cd4e5b54f3d6f3dc40 ruby-libs-3.0.4-161.el9_2.3.i686.rpm SHA-256: 7f0979580f9ac38cbf0e86b4e516c69371cf5ef9650175624261e74169753b88 ruby-libs-3.0.4-161.el9_2.3.x86_64.rpm SHA-256: a1c596f80158341b77e99d745f7e9d8f92673a6aafc5019f81254dd33454cbe2 ruby-libs-debuginfo-3.0.4-161.el9_2.3.i686.rpm SHA-256: 5abcba92bbf5b183e726b9e67ce2d8794fee99bf0fa2de94154a711c88ba2462 ruby-libs-debuginfo-3.0.4-161.el9_2.3.x86_64.rpm SHA-256: ee3071895cb2be548c02be415b74bd0fbe1a037412d56375184e165e7ff6d60a rubygem-bigdecimal-3.0.0-161.el9_2.3.x86_64.rpm SHA-256: 539e74bad5079a37b94edabef93c6980b7c60106dd7403215c04f5a12bdf3fb4 rubygem-bigdecimal-debuginfo-3.0.0-161.el9_2.3.i686.rpm SHA-256: f0f4aa6a6914d56505c7e6c37a9b8594eec007a936e7608f60dd7be3b4c92df3 rubygem-bigdecimal-debuginfo-3.0.0-161.el9_2.3.x86_64.rpm SHA-256: fc9416f28e9ce8133a825ef16d4a9aa67c6eda760e13557aa15739654726a9f8 rubygem-bundler-2.2.33-161.el9_2.3.noarch.rpm SHA-256: 33ba066791930303ae40c38f6bc76ac1e83ae56d587b411371d6d25a5aa3bf54 rubygem-io-console-0.5.7-161.el9_2.3.x86_64.rpm SHA-256: 94f967a5acd23f50b19cb334a8a7d4ce399cc6da8aa37a678be2a39dc4ebfa93 rubygem-io-console-debuginfo-0.5.7-161.el9_2.3.i686.rpm SHA-256: b4139aa6a4852a763b7b1f131c53e71f4b3bd805a3fe79ddb4848b3917f4af98 rubygem-io-console-debuginfo-0.5.7-161.el9_2.3.x86_64.rpm SHA-256: 7217fb7c3a7ed19947dd6a8aac95ade2095001dd51c59b472e75ce7d730f297e rubygem-irb-1.3.5-161.el9_2.3.noarch.rpm SHA-256: ef783b06ffad22ec9e4a2737c42e1540a586ebf3028705b685790a3191a70c66 rubygem-json-2.5.1-161.el9_2.3.x86_64.rpm SHA-256: 08ddc9c8b901d74079e73e2d446920448a11e6208897297c7c13ecc30442fc8b rubygem-json-debuginfo-2.5.1-161.el9_2.3.i686.rpm SHA-256: 59f108accad121b753c3e347d99f40c2793753abef08ffe99186332bf5685629 rubygem-json-debuginfo-2.5.1-161.el9_2.3.x86_64.rpm SHA-256: f26c2d8f485c6930bb57c981462d05ad42b33f60ab6c27aaaf60ac8719487b2f rubygem-minitest-5.14.2-161.el9_2.3.noarch.rpm SHA-256: 53f2b85014970a88bf40de75e484bc3281b12dcd04a00f8c389f560e93fd339b rubygem-power_assert-1.2.0-161.el9_2.3.noarch.rpm SHA-256: 8a4a4da4d86718ff2ff84d0ca1b89aae7948603fd6567625f15dda8d64ae2ea0 rubygem-psych-3.3.2-161.el9_2.3.x86_64.rpm SHA-256: 5fb2f3599f7905fbd6d9c365f98fe82547b66c593ae38c6d7c5efac5e5b18a15 rubygem-psych-debuginfo-3.3.2-161.el9_2.3.i686.rpm SHA-256: d5507e652e5324d4093a8c41fdeb7421f18e53bc5c1d83848994abd39b2ed841 rubygem-psych-debuginfo-3.3.2-161.el9_2.3.x86_64.rpm SHA-256: 086a1442db0684bc17729149510eda9b57e73a44133fe2a8704bad74178de2ad rubygem-rake-13.0.3-161.el9_2.3.noarch.rpm SHA-256: 945f6e8d29536d9016932bc353c2c1c9ed36d688dd609c01377076b2baf0251a rubygem-rbs-1.4.0-161.el9_2.3.noarch.rpm SHA-256: 0c4614a57d9c2a62e0dd1a9abe9d9f6133de3c85932611a4b2d916770943e960 rubygem-rdoc-6.3.3-161.el9_2.3.noarch.rpm SHA-256: aea9d7dfd4c1053477efe7a1e919bc1b53330a55a03dc91a9b71ff71834b9ea7 rubygem-rexml-3.2.5-161.el9_2.3.noarch.rpm SHA-256: bb86c3cadcb48afa899928dbd57c9087f12c817b5a6d3aef17c2562cec170084 rubygem-rss-0.2.9-161.el9_2.3.noarch.rpm SHA-256: 13ec5bee4c7624e4386a0ac0b755b5c5295c8bf82a56150066891afa687360da rubygem-test-unit-3.3.7-161.el9_2.3.noarch.rpm SHA-256: 65a4282ea1c221885f1ffd92a6a1fe9deac936e3ed6b0ab664e04bdcfbbd1d64 rubygem-typeprof-0.15.2-161.el9_2.3.noarch.rpm SHA-256: be85f12f7d5812beccaada2d71d57e2e30b3b542ef63cd036c194df9d323bda5 rubygems-3.2.33-161.el9_2.3.noarch.rpm SHA-256: b860e4e4ddbb15b2a97144b8a3077ad6b8c4149d788a28575812602084ca52cf rubygems-devel-3.2.33-161.el9_2.3.noarch.rpm SHA-256: 4efd639fd4d9824c1ef7769d208e99dae7d2a28b571c64e622360e5afab193c3 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.2 SRPM ruby-3.0.4-161.el9_2.3.src.rpm SHA-256: 8b2c7a6edc931e23b694283f3aa48c9ffca5c9e031758441ffb296e75be827c2 ppc64le ruby-3.0.4-161.el9_2.3.ppc64le.rpm SHA-256: 197139bc07fbc130ff3c96e60315150b06f73e7d06d31b45941790bfc6f30714 ruby-debuginfo-3.0.4-161.el9_2.3.ppc64le.rpm SHA-256: de13bde938dd3f5eda349b147a6caa9926e181cadcda1ea046e16465a17b2e72 ruby-debugsource-3.0.4-161.el9_2.3.ppc64le.rpm SHA-256: 038cff7335bebdaddec066c22a8f81bd54ee36e1fc4bc5a67d10a1bfea235c1c ruby-default-gems-3.0.4-161.el9_2.3.noarch.rpm SHA-256: 3ec25d3fc2ea6659fc2c84f7a7a65f2dc3c983d8ba20e9018a3359e0bb75d133 ruby-devel-3.0.4-161.el9_2.3.ppc64le.rpm SHA-256: 96f038f50c0211cadd3731142f2f1b7bf2b77be00afd1208dad4bffcf80833a1 ruby-libs-3.0.4-161.el9_2.3.ppc64le.rpm SHA-256: bf73ff8dc6ec26d20e22a48e945fba08420df394f3e953a7d0977062b4fc1dd2 ruby-libs-debuginfo-3.0.4-161.el9_2.3.ppc64le.rpm SHA-256: 3a71495e0c1271491981d811a042f0421bff39af408b577dae238e2e9c2db53a rubygem-bigdecimal-3.0.0-161.el9_2.3.ppc64le.rpm SHA-256: bfe58873456d973db901adba9d8366542b20e7df9b6ac1050c5b861f95b732f4 rubygem-bigdecimal-debuginfo-3.0.0-161.el9_2.3.ppc64le.rpm SHA-256: 90635c39e24ecea6f76596fe2d2836dc2e49beed189386e775100b86477c940e rubygem-bundler-2.2.33-161.el9_2.3.noarch.rpm SHA-256: 33ba066791930303ae40c38f6bc76ac1e83ae56d587b411371d6d25a5aa3bf54 rubygem-io-console-0.5.7-161.el9_2.3.ppc64le.rpm SHA-256: b3e2763d6d7345bf267117feeaed8467bdae51324a48623aa40a79b56a8397ae rubygem-io-console-debuginfo-0.5.7-161.el9_2.3.ppc64le.rpm SHA-256: 47132e4ac7ade572c429d6f86706eb7f5a5eabb4b82452ac8883e9421870bf25 rubygem-irb-1.3.5-161.el9_2.3.noarch.rpm SHA-256: ef783b06ffad22ec9e4a2737c42e1540a586ebf3028705b685790a3191a70c66 rubygem-json-2.5.1-161.el9_2.3.ppc64le.rpm SHA-256: 7d309e457ec3c29b2b626c6c880bb4e751bd82bb1db5e22990750c0730d3d93b rubygem-json-debuginfo-2.5.1-161.el9_2.3.ppc64le.rpm SHA-256: ddc389586401b0d75ae578792353ccb20d043d076d3dc0035b20b1b553cd0dc6 rubygem-minitest-5.14.2-161.el9_2.3.noarch.rpm SHA-256: 53f2b85014970a88bf40de75e484bc3281b12dcd04a00f8c389f560e93fd339b rubygem-power_assert-1.2.0-161.el9_2.3.noarch.rpm SHA-256: 8a4a4da4d86718ff2ff84d0ca1b89aae7948603fd6567625f15dda8d64ae2ea0 rubygem-psych-3.3.2-161.el9_2.3.ppc64le.rpm SHA-256: 3ce149d41af0b3b3d5e204bbbc988db7bce8796c0b4ef96e82c36ca63fd258ff rubygem-psych-debuginfo-3.3.2-161.el9_2.3.ppc64le.rpm SHA-256: 51df1761fd64e36b472d676847ca2d8c8485206687619d3f3d4d2fb9ede2f7b2 rubyge