Skip to content
OpenAdvisories
Low RHSA-2026:47932 1 CVE

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Published Jul 30, 2026 · Updated Oct 6, 2026

Ecosystem: Red Hat

Fixed packages 24

ReleasePackageFixed in
Red Hat · Hardened Images 1 hummingbird:1 ruby4.0 0:4.0.6-37.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 ruby4.0-bundled-gems 0:4.0.6-37.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 ruby4.0-default-gems 0:4.0.6-37.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 ruby4.0-devel 0:4.0.6-37.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 ruby4.0-doc 0:4.0.6-37.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 ruby4.0-libs 0:4.0.6-37.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 rubygem4.0-bigdecimal 0:4.0.1-37.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 rubygem4.0-bundler 0:4.0.16-37.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 rubygem4.0-devel 0:4.0.16-37.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 rubygem4.0-io-console 0:0.8.2-37.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 rubygem4.0-irb 0:1.16.0-37.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 rubygem4.0-json 0:2.18.0-37.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 rubygem4.0-minitest 0:6.0.0-37.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 rubygem4.0-power_assert 0:3.0.1-37.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 rubygem4.0-psych 0:5.3.1-37.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 rubygem4.0-racc 0:1.8.1-37.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 rubygem4.0-rake 0:13.3.1-37.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 rubygem4.0-rbs 0:3.10.0-37.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 rubygem4.0-rdoc 0:7.0.4-37.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 rubygem4.0-rexml 0:3.4.4-37.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 rubygem4.0-rss 0:0.3.2-37.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 rubygem4.0-rubygems 0:4.0.16-37.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 rubygem4.0-test-unit 0:3.7.5-37.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 rubygem4.0-typeprof 0:0.31.1-37.1.hum1

Vulnerabilities 1

  • Low 3.7
    CVE-2026-54696

    Ruby JSON: JSON generator heap buffer overflow when streaming to an IO

    Ruby JSON is a JSON implementation for Ruby. Versions 2.9.0 through 2.19.8 are vulnerable to heap buffer overflow when the JSON generator is provided with an oversized streamed object. When streaming to an IO JSON.dump(obj, io) and JSON::State#generate(obj, i…

    ruby json ruby2.3 ruby2.5 Debian Ubuntu Wolfi RubyGems

References

  • report
    https://access.redhat.com/security/cve/CVE-2026-54696
  • article
    https://access.redhat.com/security/updates/classification/
  • article
    https://images.redhat.com/
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_47932.json
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2495409
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-54696
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-54696
  • article
    https://github.com/ruby/json/releases/tag/v2.19.9
  • article
    https://github.com/ruby/json/security/advisories/GHSA-x2f5-4prf-w687