Skip to content
OpenAdvisories
High ALSA-2026:72785 1 CVE

Important: ruby security update

Published Sep 28, 2026 · Updated Oct 29, 2026

Summary

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.

Security Fix(es):

* resolv: resolv gem: Denial of Service via uncontrolled memory growth from crafted DNS responses (CVE-2026-80212)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 24

ReleasePackageFixed in
AlmaLinux · 10 ruby 3.3.12-15.el10_2
AlmaLinux · 10 ruby-bundled-gems 3.3.12-15.el10_2
AlmaLinux · 10 ruby-default-gems 3.3.12-15.el10_2
AlmaLinux · 10 ruby-devel 3.3.12-15.el10_2
AlmaLinux · 10 ruby-doc 3.3.12-15.el10_2
AlmaLinux · 10 ruby-libs 3.3.12-15.el10_2
AlmaLinux · 10 rubygem-bigdecimal 3.1.5-15.el10_2
AlmaLinux · 10 rubygem-bundler 2.5.22-15.el10_2
AlmaLinux · 10 rubygem-io-console 0.7.1-15.el10_2
AlmaLinux · 10 rubygem-irb 1.13.1-15.el10_2
AlmaLinux · 10 rubygem-json 2.7.2-15.el10_2
AlmaLinux · 10 rubygem-minitest 5.20.0-15.el10_2
AlmaLinux · 10 rubygem-power_assert 2.0.3-15.el10_2
AlmaLinux · 10 rubygem-psych 5.1.2-15.el10_2
AlmaLinux · 10 rubygem-racc 1.7.3-15.el10_2
AlmaLinux · 10 rubygem-rake 13.1.0-15.el10_2
AlmaLinux · 10 rubygem-rbs 3.4.0-15.el10_2
AlmaLinux · 10 rubygem-rdoc 6.6.3.1-15.el10_2
AlmaLinux · 10 rubygem-rexml 3.4.4-15.el10_2
AlmaLinux · 10 rubygem-rss 0.3.1-15.el10_2
AlmaLinux · 10 rubygem-test-unit 3.6.1-15.el10_2
AlmaLinux · 10 rubygem-typeprof 0.21.9-15.el10_2
AlmaLinux · 10 rubygems 3.5.22-15.el10_2
AlmaLinux · 10 rubygems-devel 3.5.22-15.el10_2

Vulnerabilities 1

References

  • report
    https://access.redhat.com/security/cve/CVE-2026-80212
  • report
    https://bugzilla.redhat.com/2525066
  • advisory
    https://errata.almalinux.org/10/ALSA-2026-72785.html