Skip to content
OpenAdvisories
High RHSA-2026:7307 36 CVEs

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Published Apr 21, 2026 · Updated Oct 6, 2026

Ecosystem: Red Hat

Fixed packages 6

ReleasePackageFixed in
Red Hat · Hardened Images 1 hummingbird:1 ruby3.4 0:3.4.8-31.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 ruby3.4-bundled-gems 0:3.4.8-31.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 ruby3.4-default-gems 0:3.4.8-31.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 ruby3.4-devel 0:3.4.8-31.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 ruby3.4-doc 0:3.4.8-31.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 ruby3.4-libs 0:3.4.8-31.1.hum1

Vulnerabilities 36

  • High 8.8
    CVE-2017-10784 EPSS 16%

    WEBrick RCE Vulnerability

    The Basic authentication code in WEBrick library in Ruby before 2.2.8, 2.3.x before 2.3.5, and 2.4.x through 2.4.1 allows remote attackers to inject terminal emulator escape sequences into its log and possibly execute arbitrary commands via a crafted user nam…

    ruby2.3 ruby ruby2.0 ruby1.9.1 Ubuntu Alpine RubyGems
  • High 7.5
    CVE-2020-25613 Public exploit

    WEBRick vulnerable to HTTP Request/Response Smuggling

    An issue was discovered in Ruby through 2.5.8, 2.6.x through 2.6.6, and 2.7.x through 2.7.1. WEBrick, a simple HTTP server bundled with Ruby, had not checked the transfer-encoding header value rigorously. An attacker may potentially exploit this issue to bypa…

    ruby2.3 ruby ruby2.5 ruby2.7 Debian Ubuntu Alpine RubyGems
  • High 7.5
    CVE-2021-28965

    REXML round-trip instability

    The REXML gem before 3.2.5 in Ruby before 2.6.7, 2.7.x before 2.7.3, and 3.x before 3.0.1 does not properly address XML round-trip issues. An incorrect document can be produced after parsing and serializing.

    ruby2.3 ruby ruby2.5 ruby2.7 Debian Ubuntu Azure Linux Alpine RubyGems
  • High 7.5
    CVE-2021-41819

    Cookie Prefix Spoofing in CGI::Cookie.parse

    CGI::Cookie.parse in Ruby through 2.6.8 mishandles security prefixes in cookie names. This also affects the CGI gem through 0.3.0 for Ruby.

    ruby2.3 ruby ruby2.5 ruby2.7 Debian Ubuntu Azure Linux Alpine RubyGems
  • High 7.5
    CVE-2023-28756

    Ruby Time component ReDoS issue

    A ReDoS issue was discovered in the Time component through 0.2.1 in Ruby through 3.2.1. The Time parser mishandles invalid URLs that have specific characters. It causes an increase in execution time for parsing strings to Time objects. The fixed versions are …

    ruby2.3 ruby ruby2.5 jruby Debian Ubuntu Alpine Wolfi RubyGems
  • Medium 6.6
    CVE-2024-27282

    An issue was discovered in Ruby 3.x through 3.3.0. If attacker-supplied data is provided to the Ruby regex compiler, it…

    ruby2.3 ruby ruby2.5 jruby Debian Ubuntu Azure Linux Alpine
  • Low 1.7
    CVE-2026-27820

    zlib: Buffer Overflow in Zlib::GzipReader ungetc via large input leads to memory corruption

    zlib is a Ruby interface for the zlib compression/decompression library. Versions 3.0.0 and below, 3.1.0, 3.1.1, 3.2.0 and 3.2.1 contain a buffer overflow vulnerability in the Zlib::GzipReader. The zstream_buffer_ungets function prepends caller-provided bytes…

    ruby zlib ruby2.3 ruby Debian Ubuntu Azure Linux Alpine RubyGems
  • Unscored —
    CVE-2008-1891

    Directory traversal vulnerability in WEBrick in Ruby 1.8.4 and earlier, 1.8.5 before 1.8.5-p231, 1.8.6 before 1.8.6-p23…

  • Unscored —
    CVE-2008-2662

    Multiple integer overflows in the rb_str_buf_append function in Ruby 1.8.4 and earlier, 1.8.5 before 1.8.5-p231, 1.8.6 …

  • Unscored —
    CVE-2008-2663

    Multiple integer overflows in the rb_ary_store function in Ruby 1.8.4 and earlier, 1.8.5 before 1.8.5-p231, 1.8.6 befor…

  • Unscored —
    CVE-2008-2664

    The rb_str_format function in Ruby 1.8.4 and earlier, 1.8.5 before 1.8.5-p231, 1.8.6 before 1.8.6-p230, 1.8.7 before 1.…

  • Unscored —
    CVE-2008-2725

    Integer overflow in the (1) rb_ary_splice function in Ruby 1.8.4 and earlier, 1.8.5 before 1.8.5-p231, 1.8.6 before 1.8…

  • Unscored —
    CVE-2008-2726

    Integer overflow in the (1) rb_ary_splice function in Ruby 1.8.4 and earlier, 1.8.5 before 1.8.5-p231, 1.8.6 before 1.8…

  • Unscored —
    CVE-2008-3655 Public exploit EPSS 14%

    Ruby 1.8.5 and earlier, 1.8.6 through 1.8.6-p286, 1.8.7 through 1.8.7-p71, and 1.9 through r18423 does not properly res…

  • Unscored —
    CVE-2008-3656 Public exploit EPSS 70%

    Algorithmic complexity vulnerability in the WEBrick::HTTPUtils.split_header_value function in WEBrick::HTTP::DefaultFil…

  • Unscored —
    CVE-2008-3657 Public exploit EPSS 14%

    The dl module in Ruby 1.8.5 and earlier, 1.8.6 through 1.8.6-p286, 1.8.7 through 1.8.7-p71, and 1.9 through r18423 does…

  • Unscored —
    CVE-2008-3905

    resolv.rb in Ruby 1.8.5 and earlier, 1.8.6 before 1.8.6-p287, 1.8.7 before 1.8.7-p72, and 1.9 r18423 and earlier uses s…

  • Unscored —
    CVE-2009-5147 Public exploit

    DL::dlopen in Ruby 1.8, 1.9.0, 1.9.2, 1.9.3, 2.0.0 before patchlevel 648, and 2.1 before 2.1.8 opens libraries with tai…

    ruby1.9.1 Ubuntu
  • Unscored —
    CVE-2011-0188

    The VpMemAlloc function in bigdecimal.c in the BigDecimal class in Ruby 1.9.2-p136 and earlier, as used on Apple Mac OS…

  • Unscored —
    CVE-2011-2686

    Ruby before 1.8.7-p352 does not reset the random seed upon forking, which makes it easier for context-dependent attacke…

  • Unscored —
    CVE-2011-2705

    The SecureRandom.random_bytes function in lib/securerandom.rb in Ruby before 1.8.7-p352 and 1.9.x before 1.9.2-p290 rel…

  • Unscored —
    CVE-2011-3009

    Ruby before 1.8.6-p114 does not reset the random seed upon forking, which makes it easier for context-dependent attacke…

  • Unscored —
    CVE-2011-4815

    Ruby (aka CRuby) before 1.8.7-p357 computes hash values without restricting the ability to trigger hash collisions pred…

  • Unscored —
    CVE-2012-5371

    Ruby (aka CRuby) 1.9 before 1.9.3-p327 and 2.0 before r37575 computes hash values without properly restricting the abil…

  • Medium —
    CVE-2013-1821

    Ruby vulnerable to denial of service

    lib/rexml/text.rb in the REXML parser in Ruby before 1.9.3-p392 allows remote attackers to cause a denial of service (memory consumption and crash) via crafted text nodes in an XML document, aka an XML Entity Expansion (XEE) attack.

    org.jruby:jruby Maven
  • Unscored —
    CVE-2014-4975

    Off-by-one error in the encodes function in pack.c in Ruby 1.9.3 and earlier, and 2.x through 2.1.2, when using certain…

    ruby2.0 ruby1.9.1 Ubuntu
  • Unscored —
    CVE-2014-6438

    The URI.decode_www_form_component method in Ruby before 1.9.2-p330 allows remote attackers to cause a denial of service…

  • Unscored —
    CVE-2014-8080

    The REXML parser in Ruby 1.9.x before 1.9.3-p550, 2.0.x before 2.0.0-p594, and 2.1.x before 2.1.4 allows remote attacke…

    ruby2.0 ruby1.9.1 Ubuntu
  • Unscored —
    CVE-2014-8090

    The REXML parser in Ruby 1.9.x before 1.9.3 patchlevel 551, 2.0.x before 2.0.0 patchlevel 598, and 2.1.x before 2.1.5 a…

    ruby2.0 ruby1.9.1 Ubuntu
  • Unscored —
    CVE-2015-7551

    The Fiddle::Handle implementation in ext/fiddle/handle.c in Ruby before 2.0.0-p648, 2.1 before 2.1.8, and 2.2 before 2.…

    ruby2.0 Ubuntu
  • Unscored —
    CVE-2015-9096

    Net::SMTP in Ruby before 2.4.0 is vulnerable to SMTP command injection via CRLF sequences in a RCPT TO or MAIL FROM com…

    ruby2.3 ruby2.0 ruby1.9.1 Ubuntu
  • Unscored —
    CVE-2017-14064

    Ruby through 2.2.7, 2.3.x through 2.3.4, and 2.4.x through 2.4.1 can expose arbitrary memory during a JSON.generate cal…

    ruby2.3 ruby ruby2.0 ruby1.9.1 Ubuntu Alpine
  • Unscored —
    CVE-2018-8780

    In Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0-preview1, the Dir.open, Di…

    ruby2.3 ruby ruby2.0 ruby1.9.1 Ubuntu Alpine
  • Unscored —
    CVE-2019-16254

    Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 allows HTTP Response Splitting. If a program using WEB…

    ruby2.3 ruby ruby2.5 jruby Debian Ubuntu Alpine
  • Unscored —
    CVE-2021-31810

    An issue was discovered in Ruby through 2.6.7, 2.7.x through 2.7.3, and 3.x through 3.0.1. A malicious FTP server can u…

    ruby2.3 ruby ruby2.5 ruby2.7 Debian Ubuntu Alpine
  • Unscored —
    CVE-2022-28739

    There is a buffer over-read in Ruby before 2.6.10, 2.7.x before 2.7.6, 3.x before 3.0.4, and 3.1.x before 3.1.2. It occ…

    ruby2.3 ruby ruby2.5 ruby2.7 Debian Ubuntu Alpine

References

  • article
    https://images.redhat.com/
  • report
    https://access.redhat.com/security/cve/CVE-2026-27820
  • article
    https://access.redhat.com/security/updates/classification/
  • report
    https://access.redhat.com/security/cve/CVE-2008-3905
  • report
    https://access.redhat.com/security/cve/CVE-2008-3657
  • report
    https://access.redhat.com/security/cve/CVE-2008-3656
  • report
    https://access.redhat.com/security/cve/CVE-2008-3655
  • report
    https://access.redhat.com/security/cve/CVE-2024-27282
  • report
    https://access.redhat.com/security/cve/CVE-2021-31810
  • report
    https://access.redhat.com/security/cve/CVE-2019-16254
  • report
    https://access.redhat.com/security/cve/CVE-2018-8780
  • report
    https://access.redhat.com/security/cve/CVE-2017-14064
  • report
    https://access.redhat.com/security/cve/CVE-2017-10784
  • report
    https://access.redhat.com/security/cve/CVE-2015-9096
  • report
    https://access.redhat.com/security/cve/CVE-2014-8090
  • report
    https://access.redhat.com/security/cve/CVE-2014-8080
  • report
    https://access.redhat.com/security/cve/CVE-2014-6438
  • report
    https://access.redhat.com/security/cve/CVE-2014-4975
  • report
    https://access.redhat.com/security/cve/CVE-2013-1821
  • report
    https://access.redhat.com/security/cve/CVE-2012-5371
  • report
    https://access.redhat.com/security/cve/CVE-2011-4815
  • report
    https://access.redhat.com/security/cve/CVE-2008-1891
  • report
    https://access.redhat.com/security/cve/CVE-2023-28756
  • report
    https://access.redhat.com/security/cve/CVE-2022-28739
  • report
    https://access.redhat.com/security/cve/CVE-2021-41819
  • report
    https://access.redhat.com/security/cve/CVE-2021-28965
  • report
    https://access.redhat.com/security/cve/CVE-2020-25613
  • report
    https://access.redhat.com/security/cve/CVE-2008-2662
  • report
    https://access.redhat.com/security/cve/CVE-2008-2726
  • report
    https://access.redhat.com/security/cve/CVE-2008-2663
  • report
    https://access.redhat.com/security/cve/CVE-2008-2725
  • report
    https://access.redhat.com/security/cve/CVE-2011-0188
  • report
    https://access.redhat.com/security/cve/CVE-2008-2664
  • report
    https://access.redhat.com/security/cve/CVE-2011-2686
  • report
    https://access.redhat.com/security/cve/CVE-2011-3009
  • report
    https://access.redhat.com/security/cve/CVE-2011-2705
  • report
    https://access.redhat.com/security/cve/CVE-2009-5147
  • report
    https://access.redhat.com/security/cve/CVE-2015-7551
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_7307.json