Skip to content
OpenAdvisories
High ALSA-2026:72427 1 CVE

Important: ruby4.0 security update

Published Sep 28, 2026 · Updated Oct 29, 2026

Summary

Ruby is the interpreted scripting language for quick and easy object-oriented programming. It has many features to process text files and to do system management tasks (as in Perl). It is simple, straight-forward, and extensible.

Security Fix(es):

* resolv: resolv gem: Denial of Service via uncontrolled memory growth from crafted DNS responses (CVE-2026-80212)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 5

ReleasePackageFixed in
AlmaLinux · 10 ruby4.0 4.0.6-37.el10_2
AlmaLinux · 10 ruby4.0-devel 4.0.6-37.el10_2
AlmaLinux · 10 ruby4.0-doc 4.0.6-37.el10_2
AlmaLinux · 10 ruby4.0-rubygem-mysql2 0.5.7-37.el10_2
AlmaLinux · 10 ruby4.0-rubygem-pg 1.6.3-37.el10_2

Vulnerabilities 1

References

  • report
    https://access.redhat.com/security/cve/CVE-2026-80212
  • advisory
    https://errata.almalinux.org/10/ALSA-2026-72427.html