Skip to content
OpenAdvisories
Low RHSA-2026:48482 1 CVE

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Published Jul 31, 2026 · Updated Oct 6, 2026

Ecosystem: Red Hat

Fixed packages 6

ReleasePackageFixed in
Red Hat · Hardened Images 1 hummingbird:1 ruby3.4 0:3.4.10-31.5.hum1
Red Hat · Hardened Images 1 hummingbird:1 ruby3.4-bundled-gems 0:3.4.10-31.5.hum1
Red Hat · Hardened Images 1 hummingbird:1 ruby3.4-default-gems 0:3.4.10-31.5.hum1
Red Hat · Hardened Images 1 hummingbird:1 ruby3.4-devel 0:3.4.10-31.5.hum1
Red Hat · Hardened Images 1 hummingbird:1 ruby3.4-doc 0:3.4.10-31.5.hum1
Red Hat · Hardened Images 1 hummingbird:1 ruby3.4-libs 0:3.4.10-31.5.hum1

Vulnerabilities 1

  • Low 3.7
    CVE-2026-54696

    Ruby JSON: JSON generator heap buffer overflow when streaming to an IO

    Ruby JSON is a JSON implementation for Ruby. Versions 2.9.0 through 2.19.8 are vulnerable to heap buffer overflow when the JSON generator is provided with an oversized streamed object. When streaming to an IO JSON.dump(obj, io) and JSON::State#generate(obj, i…

    ruby json ruby2.3 ruby2.5 Debian Ubuntu Wolfi RubyGems

References

  • article
    https://images.redhat.com/
  • report
    https://access.redhat.com/security/cve/CVE-2026-54696
  • article
    https://access.redhat.com/security/updates/classification/
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_48482.json
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2495409
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-54696
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-54696
  • article
    https://github.com/ruby/json/releases/tag/v2.19.9
  • article
    https://github.com/ruby/json/security/advisories/GHSA-x2f5-4prf-w687