Fixed packages 6
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · Hardened Images 1 hummingbird:1 | ruby3.4 | 0:3.4.10-31.6.hum1 |
| Red Hat · Hardened Images 1 hummingbird:1 | ruby3.4-bundled-gems | 0:3.4.10-31.6.hum1 |
| Red Hat · Hardened Images 1 hummingbird:1 | ruby3.4-default-gems | 0:3.4.10-31.6.hum1 |
| Red Hat · Hardened Images 1 hummingbird:1 | ruby3.4-devel | 0:3.4.10-31.6.hum1 |
| Red Hat · Hardened Images 1 hummingbird:1 | ruby3.4-doc | 0:3.4.10-31.6.hum1 |
| Red Hat · Hardened Images 1 hummingbird:1 | ruby3.4-libs | 0:3.4.10-31.6.hum1 |
Vulnerabilities 3
-
High 7.5
Client-Side Memory Leak in OCSP Response Checking
Issue summary: A malicious TLS server can cause a memory leak in a TLS client that has enabled OCSP response checking by sending an OCSP response that contains no single response entries. Impact summary: An attacker can leak an attacker-tunable amount of memo…
-
High 7.5
An issue was discovered in the resolv gem before 0.7.2 for Ruby. Resolv::DNS::Resource.get_class, Resolv::DNS::Resource…
-
Medium 4.0
An issue was discovered in the resolv gem before 0.7.2 for Ruby. Resolv::DNS::MessageEncoder wrote a DNS label's length…
References
-
article
https://images.redhat.com/
-
report
https://access.redhat.com/security/cve/CVE-2026-54876
-
article
https://access.redhat.com/security/updates/classification/
-
report
https://access.redhat.com/security/cve/CVE-2026-80213
-
report
https://access.redhat.com/security/cve/CVE-2026-80212
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_57994.json
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2511600
-
advisory
https://www.cve.org/CVERecord?id=CVE-2026-54876
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-54876
-
article
https://github.com/openssl/openssl/commit/155b5fe0f93365e6df1c56ee3606b121080c6c12
-
article
https://github.com/openssl/openssl/commit/d8c51048ac037a21bae0f41cad7a3920dc7f3638
-
article
https://openssl-library.org/news/secadv/20260805.txt
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2525066
-
advisory
https://www.cve.org/CVERecord?id=CVE-2026-80212
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-80212
-
article
https://github.com/ruby/resolv/commit/6393c628b224d0234ef915813c0977e11ebe57ea
-
article
https://www.ruby-lang.org/en/news/2026/08/27/multiple-vulnerabilities-in-resolv/
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2525014
-
advisory
https://www.cve.org/CVERecord?id=CVE-2026-80213
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-80213
-
article
https://github.com/ruby/resolv/commit/b336e42d6a3e2a824308f7b47fa26a968641b366