Red Hat Product Errata RHSA-2026:37238 - Security Advisory Issued: 2026-07-09 Updated: 2026-07-09 RHSA-2026:37238 - Security Advisory Overview Updated Packages Synopsis Important: ruby:3.3 security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for the ruby:3.3 module is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. Security Fix(es): erb: ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) ruby: net-imap: Net::IMAP: Denial of Service via crafted IMAP responses (CVE-2026-42245) ruby/net-imap: ruby: Net::IMAP: IMAP Command Injection via Symbol Arguments (CVE-2026-42258) net-imap: ruby: Net::IMAP: Information disclosure via man-in-the-middle attack bypassing TLS (CVE-2026-42246) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.6 x86_64 Red Hat Enterprise Linux Server - AUS 9.6 x86_64 Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.6 s390x Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.6 ppc64le Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.6 aarch64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.6 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.6 x86_64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.6 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.6 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.6 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.6 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.6 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.6 s390x Fixes BZ - 2461369 - CVE-2026-41316 erb: ERB: Arbitrary code execution via deserialization bypass BZ - 2468495 - CVE-2026-42245 ruby: net-imap: Net::IMAP: Denial of Service via crafted IMAP responses BZ - 2468498 - CVE-2026-42258 ruby/net-imap: ruby: Net::IMAP: IMAP Command Injection via Symbol Arguments BZ - 2468499 - CVE-2026-42246 net-imap: ruby: Net::IMAP: Information disclosure via man-in-the-middle attack bypassing TLS CVEs CVE-2026-41316 CVE-2026-42245 CVE-2026-42246 CVE-2026-42258 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.6 SRPM ruby-3.3.10-6.module+el9.6.0+24475+76cce029.src.rpm SHA-256: 7d2e750c5d7d5eb857a5e5b84f915dd51ccd616ebcee2ef837b4385d84375d33 rubygem-mysql2-0.5.5-1.module+el9.4.0+21222+faeeed2f.src.rpm SHA-256: 419e0ebe6f814e8e7f62662ce27d77fb3b60316c9d7e3b94d78327940a769e03 rubygem-pg-1.5.4-1.module+el9.4.0+21222+faeeed2f.src.rpm SHA-256: e8a8a2a8459b15625eecc0d993a25e825c63a761b8f55bd22b861557633a8029 x86_64 ruby-default-gems-3.3.10-6.module+el9.6.0+24475+76cce029.noarch.rpm SHA-256: ce64c6d90c4ea75ba55344329bd3101b91c0e293a72fe8a90aa8147a24354c04 ruby-doc-3.3.10-6.module+el9.6.0+24475+76cce029.noarch.rpm SHA-256: 07c631b69cdf8b187e164001bbbdd9278bd7f786ce985f5ab6e9f0f30019e634 rubygem-bundler-2.5.22-6.module+el9.6.0+24475+76cce029.noarch.rpm SHA-256: a1f3e20d1d5bb3ea483ba4a82863cd95d0a1d1fd964601901bdfcfdb58b5d15d rubygem-irb-1.13.1-6.module+el9.6.0+24475+76cce029.noarch.rpm SHA-256: aaa9f39bde34c2cbcc49470ceb674afef9b597ef993a182c4c61cc82023b7834 rubygem-minitest-5.20.0-6.module+el9.6.0+24475+76cce029.noarch.rpm SHA-256: 6263c905bfc78ee9f133ce369553e364002f3d56ce5e901c5a7a973e74bdf188 rubygem-mysql2-doc-0.5.5-1.module+el9.4.0+21222+faeeed2f.noarch.rpm SHA-256: 776791c4f98d288bc7f7475777aabe7665f6f34fa31f101b3345c2e69467232a rubygem-pg-doc-1.5.4-1.module+el9.4.0+21222+faeeed2f.noarch.rpm SHA-256: ff3e9f4f4ec4321b5b107c2f643f24c87f2ea1ecb6c3e560845d3cfff9538354 rubygem-power_assert-2.0.3-6.module+el9.6.0+24475+76cce029.noarch.rpm SHA-256: 75afcc511ee55fa4bd8d6991fb771b04bf60516475381e689600557b05d159f0 rubygem-rake-13.1.0-6.module+el9.6.0+24475+76cce029.noarch.rpm SHA-256: bc75f203b8586918109291bca7ce4ee3e271a92c520f9118b72301c80819d32e rubygem-rdoc-6.6.3.1-6.module+el9.6.0+24475+76cce029.noarch.rpm SHA-256: 90f8d153f753f0098c2277c2c116b66c2f424035c9ab3b4a27cd9a8cfcac9b09 rubygem-rexml-3.4.4-6.module+el9.6.0+24475+76cce029.noarch.rpm SHA-256: f0838d1632dec3b4accb28c991d8d10cb9a3c91a366c14b73655a7de9a75bb02 rubygem-rss-0.3.1-6.module+el9.6.0+24475+76cce029.noarch.rpm SHA-256: ef6ae4c26a25086cb2a462d1d0975df7798841d2e008179af93257566cb4f887 rubygem-test-unit-3.6.1-6.module+el9.6.0+24475+76cce029.noarch.rpm SHA-256: 92c7aad68917f8f72a8c12a2fdf79b49047bbb7be1f7e719d37fb7a73bf5f1dd rubygem-typeprof-0.21.9-6.module+el9.6.0+24475+76cce029.noarch.rpm SHA-256: dea45c7d1c32915819815518ecc3d52e41e9f7d7e700fdcdaba83c618cc2f9eb rubygems-3.5.22-6.module+el9.6.0+24475+76cce029.noarch.rpm SHA-256: 667590f892fc4184b702528d3963c9d462fa09edc59f1e8a07b5190d0e18d1cd rubygems-devel-3.5.22-6.module+el9.6.0+24475+76cce029.noarch.rpm SHA-256: c8d2afcc024a654a457961d0c21c2e46289f8c82089f864590d04e20468020f8 ruby-default-gems-3.3.10-6.module+el9.6.0+24475+76cce029.noarch.rpm SHA-256: ce64c6d90c4ea75ba55344329bd3101b91c0e293a72fe8a90aa8147a24354c04 ruby-doc-3.3.10-6.module+el9.6.0+24475+76cce029.noarch.rpm SHA-256: 07c631b69cdf8b187e164001bbbdd9278bd7f786ce985f5ab6e9f0f30019e634 rubygem-bundler-2.5.22-6.module+el9.6.0+24475+76cce029.noarch.rpm SHA-256: a1f3e20d1d5bb3ea483ba4a82863cd95d0a1d1fd964601901bdfcfdb58b5d15d rubygem-irb-1.13.1-6.module+el9.6.0+24475+76cce029.noarch.rpm SHA-256: aaa9f39bde34c2cbcc49470ceb674afef9b597ef993a182c4c61cc82023b7834 rubygem-minitest-5.20.0-6.module+el9.6.0+24475+76cce029.noarch.rpm SHA-256: 6263c905bfc78ee9f133ce369553e364002f3d56ce5e901c5a7a973e74bdf188 rubygem-mysql2-doc-0.5.5-1.module+el9.4.0+21222+faeeed2f.noarch.rpm SHA-256: 776791c4f98d288bc7f7475777aabe7665f6f34fa31f101b3345c2e69467232a rubygem-pg-doc-1.5.4-1.module+el9.4.0+21222+faeeed2f.noarch.rpm SHA-256: ff3e9f4f4ec4321b5b107c2f643f24c87f2ea1ecb6c3e560845d3cfff9538354 rubygem-power_assert-2.0.3-6.module+el9.6.0+24475+76cce029.noarch.rpm SHA-256: 75afcc511ee55fa4bd8d6991fb771b04bf60516475381e689600557b05d159f0 rubygem-rake-13.1.0-6.module+el9.6.0+24475+76cce029.noarch.rpm SHA-256: bc75f203b8586918109291bca7ce4ee3e271a92c520f9118b72301c80819d32e rubygem-rdoc-6.6.3.1-6.module+el9.6.0+24475+76cce029.noarch.rpm SHA-256: 90f8d153f753f0098c2277c2c116b66c2f424035c9ab3b4a27cd9a8cfcac9b09 rubygem-rexml-3.4.4-6.module+el9.6.0+24475+76cce029.noarch.rpm SHA-256: f0838d1632dec3b4accb28c991d8d10cb9a3c91a366c14b73655a7de9a75bb02 rubygem-rss-0.3.1-6.module+el9.6.0+24475+76cce029.noarch.rpm SHA-256: ef6ae4c26a25086cb2a462d1d0975df7798841d2e008179af93257566cb4f887 rubygem-test-unit-3.6.1-6.module+el9.6.0+24475+76cce029.noarch.rpm SHA-256: 92c7aad68917f8f72a8c12a2fdf79b49047bbb7be1f7e719d37fb7a73bf5f1dd rubygem-typeprof-0.21.9-6.module+el9.6.0+24475+76cce029.noarch.rpm SHA-256: dea45c7d1c32915819815518ecc3d52e41e9f7d7e700fdcdaba83c618cc2f9eb rubygems-3.5.22-6.module+el9.6.0+24475+76cce029.noarch.rpm SHA-256: 667590f892fc4184b702528d3963c9d462fa09edc59f1e8a07b5190d0e18d1cd rubygems-devel-3.5.22-6.module+el9.6.0+24475+76cce029.noarch.rpm SHA-256: c8d2afcc024a654a457961d0c21c2e46289f8c82089f864590d04e20468020f8 ruby-default-gems-3.3.10-6.module+el9.6.0+24475+76cce029.noarch.rpm SHA-256: ce64c6d90c4ea75ba55344329bd3101b91c0e293a72fe8a90aa8147a24354c04 ruby-doc-3.3.10-6.module+el9.6.0+24475+76cce029.noarch.rpm SHA-256: 07c631b69cdf8b187e164001bbbdd9278bd7f786ce985f5ab6e9f0f30019e634 rubygem-bundler-2.5.22-6.module+el9.6.0+24475+76cce029.noarch.rpm SHA-256: a1f3e20d1d5bb3ea483ba4a82863cd95d0a1d1fd964601901bdfcfdb58b5d15d rubygem-irb-1.13.1-6.module+el9.6.0+24475+76cce029.noarch.rpm SHA-256: aaa9f39bde34c2cbcc49470ceb674afef9b597ef993a182c4c61cc82023b7834 rubygem-minitest-5.20.0-6.module+el9.6.0+24475+76cce029.noarch.rpm SHA-256: 6263c905bfc78ee9f133ce369553e364002f3d56ce5e901c5a7a973e74bdf188 rubygem-mysql2-doc-0.5.5-1.module+el9.4.0+21222+faeeed2f.noarch.rpm SHA-256: 776791c4f98d288bc7f7475777aabe7665f6f34fa31f101b3345c2e69467232a rubygem-pg-doc-1.5.4-1.module+el9.4.0+21222+faeeed2f.noarch.rpm SHA-256: ff3e9f4f4ec4321b5b107c2f643f24c87f2ea1ecb6c3e560845d3cfff9538354 rubygem-power_assert-2.0.3-6.module+el9.6.0+24475+76cce029.noarch.rpm SHA-256: 75afcc511ee55fa4bd8d6991fb771b04bf60516475381e689600557b05d159f0 rubygem-rake-13.1.0-6.module+el9.6.0+24475+76cce029.noarch.rpm SHA-256: bc75f203b8586918109291bca7ce4ee3e271a92c520f9118b72301c80819d32e rubygem-rdoc-6.6.3.1-6.module+el9.6.0+24475+76cce029.noarch.rpm SHA-256: 90f8d153f753f0098c2277c2c116b66c2f424035c9ab3b4a27cd9a8cfcac9b09 rubygem-rexml-3.4.4-6.module+el9.6.0+24475+76cce029.noarch.rpm SHA-256: f0838d1632dec3b4accb28c991d8d10cb9a3c91a366c14b73655a7de9a75bb02 rubygem-rss-0.3.1-6.module+el9.6.0+24475+76cce029.noarch.rpm SHA-256: ef6ae4c26a25086cb2a462d1d0975df7798841d2e008179af93257566cb4f887 rubygem-test-unit-3.6.1-6.module+el9.6.0+24475+76cce029.noarch.rpm SHA-256: 92c7aad68917f8f72a8c12a2fdf79b49047bbb7