Description
ERB is a templating system for Ruby. Ruby 2.7.0 (before ERB 2.2.0 was published on rubygems.org) introduced an `@_init` instance variable guard in `ERB#result` and `ERB#run` to prevent code execution when an ERB object is reconstructed via `Marshal.load` (deserialization). However, three other public methods that also evaluate `@src` via `eval()` were not given the same guard: `ERB#def_method`, `ERB#def_module`, and `ERB#def_class`. An attacker who can trigger `Marshal.load` on untrusted data in a Ruby application that has `erb` loaded can use `ERB#def_module` (zero-arg, default parameters) as a code execution sink, bypassing the `@_init` protection entirely. ERB 4.0.3.1, 4.0.4.1, 6.0.1.1, and 6.0.4 patch the issue.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| ruby | erb | < 4.0.3.1, = 4.0.4, >= 5.0.0, < 6.0.1.1, >= 6.0.2, < 6.0.4 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | ruby3.3 | No fix yet | — |
| Debian 13 | ruby3.3 | 3.3.13-0+deb13u1 | — |
| Debian 12 | ruby3.1 | No fix yet | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 26.10 | jruby +1 | No fix yet | — |
| Ubuntu 26.04 LTS | jruby +1 | No fix yet | — |
| Ubuntu 25.10 | jruby +1 | No fix yet | — |
| Ubuntu 24.04 LTS | ruby3.2 | No fix yet | — |
| Ubuntu 22.04 LTS | ruby3.0 | No fix yet | — |
Show 7 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 20.04 LTS | jruby | No fix yet | — |
| Ubuntu 18.04 LTS | jruby | No fix yet | — |
| Ubuntu 16.04 LTS | jruby | No fix yet | — |
| Ubuntu Pro 20.04 LTS | ruby2.7 | No fix yet | — |
| Ubuntu Pro 18.04 LTS | ruby2.5 | No fix yet | — |
| Ubuntu Pro 16.04 LTS | ruby2.3 | No fix yet | — |
| Ubuntu Pro 14.04 LTS | jruby | No fix yet | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 10 | ruby +5 | 3.3.10-12.el10_1 | RHSA-2026:18065 |
| RHEL 10 | ruby4.0 +2 | 4.0.3-34.el10_2 | RHSA-2026:20606 |
| RHEL 10 | ruby4.0-rubygem-mysql2 | 0.5.7-34.el10_2 | RHSA-2026:20606 |
| RHEL 10 | ruby4.0-rubygem-pg | 1.6.3-34.el10_2 | RHSA-2026:20606 |
| RHEL 10 | rubygem-bigdecimal | 3.1.5-12.el10_1 | RHSA-2026:18065 |
| RHEL 10 | rubygem-bundler | 2.5.22-12.el10_1 | RHSA-2026:18065 |
| RHEL 10 | rubygem-io-console | 0.7.1-12.el10_1 | RHSA-2026:18065 |
| RHEL 10 | rubygem-irb | 1.13.1-12.el10_1 | RHSA-2026:18065 |
| RHEL 10 | rubygem-json | 2.7.2-12.el10_1 | RHSA-2026:18065 |
| RHEL 10 | rubygem-minitest | 5.20.0-12.el10_1 | RHSA-2026:18065 |
| RHEL 10 | rubygem-power_assert | 2.0.3-12.el10_1 | RHSA-2026:18065 |
| RHEL 10 | rubygem-psych | 5.1.2-12.el10_1 | RHSA-2026:18065 |
| RHEL 10 | rubygem-racc | 1.7.3-12.el10_1 | RHSA-2026:18065 |
| RHEL 10 | rubygem-rake | 13.1.0-12.el10_1 | RHSA-2026:18065 |
| RHEL 10 | rubygem-rbs | 3.4.0-12.el10_1 | RHSA-2026:18065 |
| RHEL 10 | rubygem-rdoc | 6.6.3.1-12.el10_1 | RHSA-2026:18065 |
| RHEL 10 | rubygem-rexml | 3.4.4-12.el10_1 | RHSA-2026:18065 |
| RHEL 10 | rubygem-rss | 0.3.1-12.el10_1 | RHSA-2026:18065 |
| RHEL 10 | rubygem-test-unit | 3.6.1-12.el10_1 | RHSA-2026:18065 |
| RHEL 10 | rubygem-typeprof | 0.21.9-12.el10_1 | RHSA-2026:18065 |
| RHEL 10 | rubygems +1 | 3.5.22-12.el10_1 | RHSA-2026:18065 |
| RHEL 9 | ruby +4 | 3.0.7-166.el9_7 | RHSA-2026:20596, RHSA-2026:18039, RHSA-2026:18030 |
| RHEL 9 | ruby-bundled-gems | 3.3.10-6.module+el9.7.0+24248+66578cbb | RHSA-2026:20596, RHSA-2026:18030 |
| RHEL 9 | rubygem-bigdecimal | 3.0.0-166.el9_7 | RHSA-2026:20596, RHSA-2026:18039, RHSA-2026:18030 |
| RHEL 9 | rubygem-bundler | 2.2.33-166.el9_7 | RHSA-2026:20596, RHSA-2026:18039, RHSA-2026:18030 |
| RHEL 9 | rubygem-io-console | 0.5.7-166.el9_7 | RHSA-2026:20596, RHSA-2026:18039, RHSA-2026:18030 |
| RHEL 9 | rubygem-irb | 1.3.5-166.el9_7 | RHSA-2026:20596, RHSA-2026:18039, RHSA-2026:18030 |
| RHEL 9 | rubygem-json | 2.5.1-166.el9_7 | RHSA-2026:20596, RHSA-2026:18039, RHSA-2026:18030 |
| RHEL 9 | rubygem-minitest | 5.14.2-166.el9_7 | RHSA-2026:20596, RHSA-2026:18039, RHSA-2026:18030 |
| RHEL 9 | rubygem-mysql2 +1 | 0.5.5-3.module+el9.7.0+24119+ccc80daf | RHSA-2026:20596, RHSA-2026:18030 |
| RHEL 9 | rubygem-pg +1 | 1.5.4-2.module+el9.7.0+24119+ccc80daf | RHSA-2026:20596, RHSA-2026:18030 |
| RHEL 9 | rubygem-power_assert | 1.2.1-166.el9_7 | RHSA-2026:20596, RHSA-2026:18039, RHSA-2026:18030 |
| RHEL 9 | rubygem-psych | 3.3.2-166.el9_7 | RHSA-2026:20596, RHSA-2026:18039, RHSA-2026:18030 |
| RHEL 9 | rubygem-racc | 1.7.3-6.module+el9.7.0+24248+66578cbb | RHSA-2026:20596, RHSA-2026:18030 |
| RHEL 9 | rubygem-rake | 13.0.3-166.el9_7 | RHSA-2026:20596, RHSA-2026:18039, RHSA-2026:18030 |
| RHEL 9 | rubygem-rbs | 1.4.0-166.el9_7 | RHSA-2026:20596, RHSA-2026:18039, RHSA-2026:18030 |
| RHEL 9 | rubygem-rdoc | 6.3.4.1-166.el9_7 | RHSA-2026:20596, RHSA-2026:18039, RHSA-2026:18030 |
| RHEL 9 | rubygem-rexml | 3.2.5-166.el9_7 | RHSA-2026:20596, RHSA-2026:18039, RHSA-2026:18030 |
| RHEL 9 | rubygem-rss | 0.2.9-166.el9_7 | RHSA-2026:20596, RHSA-2026:18039, RHSA-2026:18030 |
| RHEL 9 | rubygem-test-unit | 3.3.7-166.el9_7 | RHSA-2026:20596, RHSA-2026:18039, RHSA-2026:18030 |
| RHEL 9 | rubygem-typeprof | 0.15.2-166.el9_7 | RHSA-2026:20596, RHSA-2026:18039, RHSA-2026:18030 |
| RHEL 9 | rubygems +1 | 3.2.33-166.el9_7 | RHSA-2026:20596, RHSA-2026:18039, RHSA-2026:18030 |
| RHEL 8 | ruby +5 | 3.3.10-6.module+el8.10.0+24247+b74f0fb8 | RHSA-2026:20614 |
| RHEL 8 | rubygem-abrt +1 | 0.4.0-1.module+el8.10.0+21226+b78a28c4 | RHSA-2026:20614 |
| RHEL 8 | rubygem-bigdecimal | 3.1.5-6.module+el8.10.0+24247+b74f0fb8 | RHSA-2026:20614 |
| RHEL 8 | rubygem-bundler | 2.5.22-6.module+el8.10.0+24247+b74f0fb8 | RHSA-2026:20614 |
| RHEL 8 | rubygem-io-console | 0.7.1-6.module+el8.10.0+24247+b74f0fb8 | RHSA-2026:20614 |
| RHEL 8 | rubygem-irb | 1.13.1-6.module+el8.10.0+24247+b74f0fb8 | RHSA-2026:20614 |
| RHEL 8 | rubygem-json | 2.7.2-6.module+el8.10.0+24247+b74f0fb8 | RHSA-2026:20614 |
| RHEL 8 | rubygem-minitest | 5.20.0-6.module+el8.10.0+24247+b74f0fb8 | RHSA-2026:20614 |
| RHEL 8 | rubygem-mysql2 +1 | 0.5.5-1.module+el8.10.0+21226+b78a28c4 | RHSA-2026:20614 |
| RHEL 8 | rubygem-pg +1 | 1.5.4-1.module+el8.10.0+21226+b78a28c4 | RHSA-2026:20614 |
| RHEL 8 | rubygem-power_assert | 2.0.3-6.module+el8.10.0+24247+b74f0fb8 | RHSA-2026:20614 |
| RHEL 8 | rubygem-psych | 5.1.2-6.module+el8.10.0+24247+b74f0fb8 | RHSA-2026:20614 |
| RHEL 8 | rubygem-racc | 1.7.3-6.module+el8.10.0+24247+b74f0fb8 | RHSA-2026:20614 |
| RHEL 8 | rubygem-rake | 13.1.0-6.module+el8.10.0+24247+b74f0fb8 | RHSA-2026:20614 |
| RHEL 8 | rubygem-rbs | 3.4.0-6.module+el8.10.0+24247+b74f0fb8 | RHSA-2026:20614 |
| RHEL 8 | rubygem-rdoc | 6.6.3.1-6.module+el8.10.0+24247+b74f0fb8 | RHSA-2026:20614 |
| RHEL 8 | rubygem-rexml | 3.4.4-6.module+el8.10.0+24247+b74f0fb8 | RHSA-2026:20614 |
| RHEL 8 | rubygem-rss | 0.3.1-6.module+el8.10.0+24247+b74f0fb8 | RHSA-2026:20614 |
| RHEL 8 | rubygem-test-unit | 3.6.1-6.module+el8.10.0+24247+b74f0fb8 | RHSA-2026:20614 |
| RHEL 8 | rubygem-typeprof | 0.21.9-6.module+el8.10.0+24247+b74f0fb8 | RHSA-2026:20614 |
| RHEL 8 | rubygems +1 | 3.5.22-6.module+el8.10.0+24247+b74f0fb8 | RHSA-2026:20614 |
Show 5 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 10.0 EUS | ruby +5 | 3.3.10-11.el10_0.1 | RHSA-2026:33478 |
| RHEL 10.0 EUS | rubygem-bigdecimal | 3.1.5-11.el10_0.1 | RHSA-2026:33478 |
| RHEL 10.0 EUS | rubygem-bundler | 2.5.22-11.el10_0.1 | RHSA-2026:33478 |
| RHEL 10.0 EUS | rubygem-io-console | 0.7.1-11.el10_0.1 | RHSA-2026:33478 |
| RHEL 10.0 EUS | rubygem-irb | 1.13.1-11.el10_0.1 | RHSA-2026:33478 |
| RHEL 10.0 EUS | rubygem-json | 2.7.2-11.el10_0.1 | RHSA-2026:33478 |
| RHEL 10.0 EUS | rubygem-minitest | 5.20.0-11.el10_0.1 | RHSA-2026:33478 |
| RHEL 10.0 EUS | rubygem-power_assert | 2.0.3-11.el10_0.1 | RHSA-2026:33478 |
| RHEL 10.0 EUS | rubygem-psych | 5.1.2-11.el10_0.1 | RHSA-2026:33478 |
| RHEL 10.0 EUS | rubygem-racc | 1.7.3-11.el10_0.1 | RHSA-2026:33478 |
| RHEL 10.0 EUS | rubygem-rake | 13.1.0-11.el10_0.1 | RHSA-2026:33478 |
| RHEL 10.0 EUS | rubygem-rbs | 3.4.0-11.el10_0.1 | RHSA-2026:33478 |
| RHEL 10.0 EUS | rubygem-rdoc | 6.6.3.1-11.el10_0.1 | RHSA-2026:33478 |
| RHEL 10.0 EUS | rubygem-rexml | 3.4.4-11.el10_0.1 | RHSA-2026:33478 |
| RHEL 10.0 EUS | rubygem-rss | 0.3.1-11.el10_0.1 | RHSA-2026:33478 |
| RHEL 10.0 EUS | rubygem-test-unit | 3.6.1-11.el10_0.1 | RHSA-2026:33478 |
| RHEL 10.0 EUS | rubygem-typeprof | 0.21.9-11.el10_0.1 | RHSA-2026:33478 |
| RHEL 10.0 EUS | rubygems +1 | 3.5.22-11.el10_0.1 | RHSA-2026:33478 |
| RHEL 9.6 EUS | ruby +4 | 3.0.7-165.el9_6.1 | RHSA-2026:37238, RHSA-2026:33462 |
| RHEL 9.6 EUS | ruby-bundled-gems | 3.3.10-6.module+el9.6.0+24475+76cce029 | RHSA-2026:37238 |
| RHEL 9.6 EUS | rubygem-bigdecimal | 3.0.0-165.el9_6.1 | RHSA-2026:37238, RHSA-2026:33462 |
| RHEL 9.6 EUS | rubygem-bundler | 2.2.33-165.el9_6.1 | RHSA-2026:37238, RHSA-2026:33462 |
| RHEL 9.6 EUS | rubygem-io-console | 0.5.7-165.el9_6.1 | RHSA-2026:37238, RHSA-2026:33462 |
| RHEL 9.6 EUS | rubygem-irb | 1.3.5-165.el9_6.1 | RHSA-2026:37238, RHSA-2026:33462 |
| RHEL 9.6 EUS | rubygem-json | 2.5.1-165.el9_6.1 | RHSA-2026:37238, RHSA-2026:33462 |
| RHEL 9.6 EUS | rubygem-minitest | 5.14.2-165.el9_6.1 | RHSA-2026:37238, RHSA-2026:33462 |
| RHEL 9.6 EUS | rubygem-mysql2 +1 | 0.5.5-1.module+el9.4.0+21222+faeeed2f | RHSA-2026:37238 |
| RHEL 9.6 EUS | rubygem-pg +1 | 1.5.4-1.module+el9.4.0+21222+faeeed2f | RHSA-2026:37238 |
| RHEL 9.6 EUS | rubygem-power_assert | 1.2.1-165.el9_6.1 | RHSA-2026:37238, RHSA-2026:33462 |
| RHEL 9.6 EUS | rubygem-psych | 3.3.2-165.el9_6.1 | RHSA-2026:37238, RHSA-2026:33462 |
| RHEL 9.6 EUS | rubygem-racc | 1.7.3-6.module+el9.6.0+24475+76cce029 | RHSA-2026:37238 |
| RHEL 9.6 EUS | rubygem-rake | 13.0.3-165.el9_6.1 | RHSA-2026:37238, RHSA-2026:33462 |
| RHEL 9.6 EUS | rubygem-rbs | 1.4.0-165.el9_6.1 | RHSA-2026:37238, RHSA-2026:33462 |
| RHEL 9.6 EUS | rubygem-rdoc | 6.3.4.1-165.el9_6.1 | RHSA-2026:37238, RHSA-2026:33462 |
| RHEL 9.6 EUS | rubygem-rexml | 3.2.5-165.el9_6.1 | RHSA-2026:37238, RHSA-2026:33462 |
| RHEL 9.6 EUS | rubygem-rss | 0.2.9-165.el9_6.1 | RHSA-2026:37238, RHSA-2026:33462 |
| RHEL 9.6 EUS | rubygem-test-unit | 3.3.7-165.el9_6.1 | RHSA-2026:37238, RHSA-2026:33462 |
| RHEL 9.6 EUS | rubygem-typeprof | 0.15.2-165.el9_6.1 | RHSA-2026:37238, RHSA-2026:33462 |
| RHEL 9.6 EUS | rubygems +1 | 3.2.33-165.el9_6.1 | RHSA-2026:37238, RHSA-2026:33462 |
| RHEL 9.4 E4S | ruby +3 | 3.0.7-162.el9_4.2 | RHSA-2026:26655, RHSA-2026:26312 |
| RHEL 9.4 E4S | ruby-doc +1 | 3.3.10-6.module+el9.4.0+24333+ed4ca411 | RHSA-2026:26655 |
| RHEL 9.4 E4S | rubygem-bigdecimal | 3.0.0-162.el9_4.2 | RHSA-2026:26655, RHSA-2026:26312 |
| RHEL 9.4 E4S | rubygem-bundler | 2.2.33-162.el9_4.2 | RHSA-2026:26655, RHSA-2026:26312 |
| RHEL 9.4 E4S | rubygem-io-console | 0.5.7-162.el9_4.2 | RHSA-2026:26655, RHSA-2026:26312 |
| RHEL 9.4 E4S | rubygem-irb | 1.3.5-162.el9_4.2 | RHSA-2026:26655, RHSA-2026:26312 |
| RHEL 9.4 E4S | rubygem-json | 2.5.1-162.el9_4.2 | RHSA-2026:26655, RHSA-2026:26312 |
| RHEL 9.4 E4S | rubygem-minitest | 5.14.2-162.el9_4.2 | RHSA-2026:26655, RHSA-2026:26312 |
| RHEL 9.4 E4S | rubygem-mysql2 +1 | 0.5.5-1.module+el9.4.0+21222+faeeed2f | RHSA-2026:26655 |
| RHEL 9.4 E4S | rubygem-pg +1 | 1.5.4-1.module+el9.4.0+21222+faeeed2f | RHSA-2026:26655 |
| RHEL 9.4 E4S | rubygem-power_assert | 1.2.1-162.el9_4.2 | RHSA-2026:26655, RHSA-2026:26312 |
| RHEL 9.4 E4S | rubygem-psych | 3.3.2-162.el9_4.2 | RHSA-2026:26655, RHSA-2026:26312 |
| RHEL 9.4 E4S | rubygem-racc | 1.7.3-6.module+el9.4.0+24333+ed4ca411 | RHSA-2026:26655 |
| RHEL 9.4 E4S | rubygem-rake | 13.0.3-162.el9_4.2 | RHSA-2026:26655, RHSA-2026:26312 |
| RHEL 9.4 E4S | rubygem-rbs | 1.4.0-162.el9_4.2 | RHSA-2026:26655, RHSA-2026:26312 |
| RHEL 9.4 E4S | rubygem-rdoc | 6.3.4.1-162.el9_4.2 | RHSA-2026:26655, RHSA-2026:26312 |
| RHEL 9.4 E4S | rubygem-rexml | 3.2.5-162.el9_4.2 | RHSA-2026:26655, RHSA-2026:26312 |
| RHEL 9.4 E4S | rubygem-rss | 0.2.9-162.el9_4.2 | RHSA-2026:26655, RHSA-2026:26312 |
| RHEL 9.4 E4S | rubygem-test-unit | 3.3.7-162.el9_4.2 | RHSA-2026:26655, RHSA-2026:26312 |
| RHEL 9.4 E4S | rubygem-typeprof | 0.15.2-162.el9_4.2 | RHSA-2026:26655, RHSA-2026:26312 |
| RHEL 9.4 E4S | rubygems +1 | 3.2.33-162.el9_4.2 | RHSA-2026:26655, RHSA-2026:26312 |
| RHEL 9.2 E4S | ruby +3 | 3.0.4-161.el9_2.3 | RHSA-2026:35834 |
| RHEL 9.2 E4S | rubygem-bigdecimal | 3.0.0-161.el9_2.3 | RHSA-2026:35834 |
| RHEL 9.2 E4S | rubygem-bundler | 2.2.33-161.el9_2.3 | RHSA-2026:35834 |
| RHEL 9.2 E4S | rubygem-io-console | 0.5.7-161.el9_2.3 | RHSA-2026:35834 |
| RHEL 9.2 E4S | rubygem-irb | 1.3.5-161.el9_2.3 | RHSA-2026:35834 |
| RHEL 9.2 E4S | rubygem-json | 2.5.1-161.el9_2.3 | RHSA-2026:35834 |
| RHEL 9.2 E4S | rubygem-minitest | 5.14.2-161.el9_2.3 | RHSA-2026:35834 |
| RHEL 9.2 E4S | rubygem-power_assert | 1.2.0-161.el9_2.3 | RHSA-2026:35834 |
| RHEL 9.2 E4S | rubygem-psych | 3.3.2-161.el9_2.3 | RHSA-2026:35834 |
| RHEL 9.2 E4S | rubygem-rake | 13.0.3-161.el9_2.3 | RHSA-2026:35834 |
| RHEL 9.2 E4S | rubygem-rbs | 1.4.0-161.el9_2.3 | RHSA-2026:35834 |
| RHEL 9.2 E4S | rubygem-rdoc | 6.3.3-161.el9_2.3 | RHSA-2026:35834 |
| RHEL 9.2 E4S | rubygem-rexml | 3.2.5-161.el9_2.3 | RHSA-2026:35834 |
| RHEL 9.2 E4S | rubygem-rss | 0.2.9-161.el9_2.3 | RHSA-2026:35834 |
| RHEL 9.2 E4S | rubygem-test-unit | 3.3.7-161.el9_2.3 | RHSA-2026:35834 |
| RHEL 9.2 E4S | rubygem-typeprof | 0.15.2-161.el9_2.3 | RHSA-2026:35834 |
| RHEL 9.2 E4S | rubygems +1 | 3.2.33-161.el9_2.3 | RHSA-2026:35834 |
| RHEL 9.0 E4S | ruby +3 | 3.0.4-160.2.el9_0 | RHSA-2026:20670 |
| RHEL 9.0 E4S | rubygem-bigdecimal | 3.0.0-160.2.el9_0 | RHSA-2026:20670 |
| RHEL 9.0 E4S | rubygem-bundler | 2.2.33-160.2.el9_0 | RHSA-2026:20670 |
| RHEL 9.0 E4S | rubygem-io-console | 0.5.7-160.2.el9_0 | RHSA-2026:20670 |
| RHEL 9.0 E4S | rubygem-irb | 1.3.5-160.2.el9_0 | RHSA-2026:20670 |
| RHEL 9.0 E4S | rubygem-json | 2.5.1-160.2.el9_0 | RHSA-2026:20670 |
| RHEL 9.0 E4S | rubygem-minitest | 5.14.2-160.2.el9_0 | RHSA-2026:20670 |
| RHEL 9.0 E4S | rubygem-power_assert | 1.2.0-160.2.el9_0 | RHSA-2026:20670 |
| RHEL 9.0 E4S | rubygem-psych | 3.3.2-160.2.el9_0 | RHSA-2026:20670 |
| RHEL 9.0 E4S | rubygem-rake | 13.0.3-160.2.el9_0 | RHSA-2026:20670 |
| RHEL 9.0 E4S | rubygem-rbs | 1.4.0-160.2.el9_0 | RHSA-2026:20670 |
| RHEL 9.0 E4S | rubygem-rdoc | 6.3.3-160.2.el9_0 | RHSA-2026:20670 |
| RHEL 9.0 E4S | rubygem-rexml | 3.2.5-160.2.el9_0 | RHSA-2026:20670 |
| RHEL 9.0 E4S | rubygem-rss | 0.2.9-160.2.el9_0 | RHSA-2026:20670 |
| RHEL 9.0 E4S | rubygem-test-unit | 3.3.7-160.2.el9_0 | RHSA-2026:20670 |
| RHEL 9.0 E4S | rubygem-typeprof | 0.15.2-160.2.el9_0 | RHSA-2026:20670 |
| RHEL 9.0 E4S | rubygems +1 | 3.2.33-160.2.el9_0 | RHSA-2026:20670 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 10 | ruby-doc +1 | 3.3.10-12.el10_1 | ALSA-2026:18065 |
| AlmaLinux 10 | ruby4.0 +2 | 4.0.3-34.el10_2 | ALSA-2026:20606 |
| AlmaLinux 10 | ruby4.0-rubygem-mysql2 | 0.5.7-34.el10_2 | ALSA-2026:20606 |
| AlmaLinux 10 | ruby4.0-rubygem-pg | 1.6.3-34.el10_2 | ALSA-2026:20606 |
| AlmaLinux 10 | rubygem-bundler | 2.5.22-12.el10_1 | ALSA-2026:18065 |
| AlmaLinux 10 | rubygem-irb | 1.13.1-12.el10_1 | ALSA-2026:18065 |
| AlmaLinux 10 | rubygem-minitest | 5.20.0-12.el10_1 | ALSA-2026:18065 |
| AlmaLinux 10 | rubygem-power_assert | 2.0.3-12.el10_1 | ALSA-2026:18065 |
| AlmaLinux 10 | rubygem-rake | 13.1.0-12.el10_1 | ALSA-2026:18065 |
| AlmaLinux 10 | rubygem-rdoc | 6.6.3.1-12.el10_1 | ALSA-2026:18065 |
| AlmaLinux 10 | rubygem-rexml | 3.4.4-12.el10_1 | ALSA-2026:18065 |
| AlmaLinux 10 | rubygem-rss | 0.3.1-12.el10_1 | ALSA-2026:18065 |
| AlmaLinux 10 | rubygem-test-unit | 3.6.1-12.el10_1 | ALSA-2026:18065 |
| AlmaLinux 10 | rubygem-typeprof | 0.21.9-12.el10_1 | ALSA-2026:18065 |
| AlmaLinux 10 | rubygems +1 | 3.5.22-12.el10_1 | ALSA-2026:18065 |
| AlmaLinux 9 | ruby +4 | 3.0.7-166.el9_7 | ALSA-2026:20596, ALSA-2026:18039, ALSA-2026:18030 |
| AlmaLinux 9 | ruby-bundled-gems | 3.3.10-6.module_el9.7.0+245+447713a2 | ALSA-2026:20596, ALSA-2026:18030 |
| AlmaLinux 9 | rubygem-bigdecimal | 3.0.0-166.el9_7 | ALSA-2026:20596, ALSA-2026:18039, ALSA-2026:18030 |
| AlmaLinux 9 | rubygem-bundler | 2.2.33-166.el9_7 | ALSA-2026:20596, ALSA-2026:18039, ALSA-2026:18030 |
| AlmaLinux 9 | rubygem-io-console | 0.5.7-166.el9_7 | ALSA-2026:20596, ALSA-2026:18039, ALSA-2026:18030 |
| AlmaLinux 9 | rubygem-irb | 1.3.5-166.el9_7 | ALSA-2026:20596, ALSA-2026:18039, ALSA-2026:18030 |
| AlmaLinux 9 | rubygem-json | 2.5.1-166.el9_7 | ALSA-2026:20596, ALSA-2026:18039, ALSA-2026:18030 |
| AlmaLinux 9 | rubygem-minitest | 5.14.2-166.el9_7 | ALSA-2026:20596, ALSA-2026:18039, ALSA-2026:18030 |
| AlmaLinux 9 | rubygem-mysql2 +1 | 0.5.5-3.module_el9.7.0+184+e2e36072 | ALSA-2026:20596, ALSA-2026:18030 |
| AlmaLinux 9 | rubygem-pg +1 | 1.5.4-2.module_el9.7.0+245+447713a2 | ALSA-2026:20596, ALSA-2026:18030 |
| AlmaLinux 9 | rubygem-power_assert | 1.2.1-166.el9_7 | ALSA-2026:20596, ALSA-2026:18039, ALSA-2026:18030 |
| AlmaLinux 9 | rubygem-psych | 3.3.2-166.el9_7 | ALSA-2026:20596, ALSA-2026:18039, ALSA-2026:18030 |
| AlmaLinux 9 | rubygem-racc | 1.7.3-6.module_el9.7.0+245+447713a2 | ALSA-2026:20596, ALSA-2026:18030 |
| AlmaLinux 9 | rubygem-rake | 13.0.3-166.el9_7 | ALSA-2026:20596, ALSA-2026:18039, ALSA-2026:18030 |
| AlmaLinux 9 | rubygem-rbs | 1.4.0-166.el9_7 | ALSA-2026:20596, ALSA-2026:18039, ALSA-2026:18030 |
| AlmaLinux 9 | rubygem-rdoc | 6.3.4.1-166.el9_7 | ALSA-2026:20596, ALSA-2026:18039, ALSA-2026:18030 |
| AlmaLinux 9 | rubygem-rexml | 3.2.5-166.el9_7 | ALSA-2026:20596, ALSA-2026:18039, ALSA-2026:18030 |
| AlmaLinux 9 | rubygem-rss | 0.2.9-166.el9_7 | ALSA-2026:20596, ALSA-2026:18039, ALSA-2026:18030 |
| AlmaLinux 9 | rubygem-test-unit | 3.3.7-166.el9_7 | ALSA-2026:20596, ALSA-2026:18039, ALSA-2026:18030 |
| AlmaLinux 9 | rubygem-typeprof | 0.15.2-166.el9_7 | ALSA-2026:20596, ALSA-2026:18039, ALSA-2026:18030 |
| AlmaLinux 9 | rubygems +1 | 3.2.33-166.el9_7 | ALSA-2026:20596, ALSA-2026:18039, ALSA-2026:18030 |
| AlmaLinux 8 | ruby +5 | 3.3.10-6.module_el8.10.0+4183+69a3c42f | ALSA-2026:20614 |
| AlmaLinux 8 | rubygem-abrt +1 | 0.4.0-1.module_el8.10.0+3799+191214cc | ALSA-2026:20614 |
| AlmaLinux 8 | rubygem-bigdecimal | 3.1.5-6.module_el8.10.0+4183+69a3c42f | ALSA-2026:20614 |
| AlmaLinux 8 | rubygem-bundler | 2.5.22-6.module_el8.10.0+4183+69a3c42f | ALSA-2026:20614 |
| AlmaLinux 8 | rubygem-io-console | 0.7.1-6.module_el8.10.0+4183+69a3c42f | ALSA-2026:20614 |
| AlmaLinux 8 | rubygem-irb | 1.13.1-6.module_el8.10.0+4183+69a3c42f | ALSA-2026:20614 |
| AlmaLinux 8 | rubygem-json | 2.7.2-6.module_el8.10.0+4183+69a3c42f | ALSA-2026:20614 |
| AlmaLinux 8 | rubygem-minitest | 5.20.0-6.module_el8.10.0+4183+69a3c42f | ALSA-2026:20614 |
| AlmaLinux 8 | rubygem-mysql2 +1 | 0.5.5-1.module_el8.10.0+3799+191214cc | ALSA-2026:20614 |
| AlmaLinux 8 | rubygem-pg +1 | 1.5.4-1.module_el8.10.0+3799+191214cc | ALSA-2026:20614 |
| AlmaLinux 8 | rubygem-power_assert | 2.0.3-6.module_el8.10.0+4183+69a3c42f | ALSA-2026:20614 |
| AlmaLinux 8 | rubygem-psych | 5.1.2-6.module_el8.10.0+4183+69a3c42f | ALSA-2026:20614 |
| AlmaLinux 8 | rubygem-racc | 1.7.3-6.module_el8.10.0+4183+69a3c42f | ALSA-2026:20614 |
| AlmaLinux 8 | rubygem-rake | 13.1.0-6.module_el8.10.0+4183+69a3c42f | ALSA-2026:20614 |
| AlmaLinux 8 | rubygem-rbs | 3.4.0-6.module_el8.10.0+4183+69a3c42f | ALSA-2026:20614 |
| AlmaLinux 8 | rubygem-rdoc | 6.6.3.1-6.module_el8.10.0+4183+69a3c42f | ALSA-2026:20614 |
| AlmaLinux 8 | rubygem-rexml | 3.4.4-6.module_el8.10.0+4183+69a3c42f | ALSA-2026:20614 |
| AlmaLinux 8 | rubygem-rss | 0.3.1-6.module_el8.10.0+4183+69a3c42f | ALSA-2026:20614 |
| AlmaLinux 8 | rubygem-test-unit | 3.6.1-6.module_el8.10.0+4183+69a3c42f | ALSA-2026:20614 |
| AlmaLinux 8 | rubygem-typeprof | 0.21.9-6.module_el8.10.0+4183+69a3c42f | ALSA-2026:20614 |
| AlmaLinux 8 | rubygems +1 | 3.5.22-6.module_el8.10.0+4183+69a3c42f | ALSA-2026:20614 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 10 | ruby | 3.3.10-12.el10_1 | RLSA-2026:18065 |
| Rocky Linux 10 | ruby4.0 | 4.0.3-34.el10_2 | RLSA-2026:20606 |
| Rocky Linux 9 | ruby | 3.0.7-166.el9_7 | RLSA-2026:18039 |
| Rocky Linux 9 | rubygem-mysql2 | 0.5.5-3.module+el9.7.0+40032+36e56d0d | RLSA-2026:20596, RLSA-2026:18030 |
| Rocky Linux 9 | rubygem-pg | 1.6.3-1.module+el9.8.0+40094+ce01217c | RLSA-2026:20596 |
| Rocky Linux 8 | rubygem-abrt | 0.4.0-1.module+el8.5.0+668+665814fa | RLSA-2026:20614 |
| Rocky Linux 8 | rubygem-mysql2 | 0.5.5-1.module+el8.10.0+1679+61871737 | RLSA-2026:20614 |
| Rocky Linux 8 | rubygem-pg | 1.5.4-1.module+el8.10.0+1679+61871737 | RLSA-2026:20614 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP7 | ruby2.5 | 2.5.9-150700.24.11.1 | SUSE-SU-2026:3556-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | ruby4.0 | 4.0.3-1.1 | openSUSE-SU-2026:10609-1 |
| openSUSE Leap 16.0 | ruby3.4 | 3.4.10-160000.1.1 | openSUSE-SU-2026:21878-1 |
Alpine
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.21 | ruby | 3.3.13-r0 | — |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2023 | ruby3.4 +5 | 3.4.8-27.amzn2023.0.5 | ALAS2023-2026-1690 |
| Amazon Linux 2023 | ruby3.4-rubygem-bigdecimal | 3.1.8-27.amzn2023.0.5 | ALAS2023-2026-1690 |
| Amazon Linux 2023 | ruby3.4-rubygem-bundler | 2.6.9-27.amzn2023.0.5 | ALAS2023-2026-1690 |
| Amazon Linux 2023 | ruby3.4-rubygem-io-console | 0.8.1-27.amzn2023.0.5 | ALAS2023-2026-1690 |
| Amazon Linux 2023 | ruby3.4-rubygem-irb | 1.14.3-27.amzn2023.0.5 | ALAS2023-2026-1690 |
| Amazon Linux 2023 | ruby3.4-rubygem-json | 2.9.1-27.amzn2023.0.5 | ALAS2023-2026-1690 |
| Amazon Linux 2023 | ruby3.4-rubygem-minitest | 5.25.4-27.amzn2023.0.5 | ALAS2023-2026-1690 |
| Amazon Linux 2023 | ruby3.4-rubygem-power_assert | 2.0.5-27.amzn2023.0.5 | ALAS2023-2026-1690 |
| Amazon Linux 2023 | ruby3.4-rubygem-psych | 5.2.2-27.amzn2023.0.5 | ALAS2023-2026-1690 |
| Amazon Linux 2023 | ruby3.4-rubygem-racc | 1.8.1-27.amzn2023.0.5 | ALAS2023-2026-1690 |
| Amazon Linux 2023 | ruby3.4-rubygem-rake | 13.2.1-27.amzn2023.0.5 | ALAS2023-2026-1690 |
| Amazon Linux 2023 | ruby3.4-rubygem-rbs | 3.8.0-27.amzn2023.0.5 | ALAS2023-2026-1690 |
| Amazon Linux 2023 | ruby3.4-rubygem-rdoc | 6.14.0-27.amzn2023.0.5 | ALAS2023-2026-1690 |
| Amazon Linux 2023 | ruby3.4-rubygem-rexml | 3.4.4-27.amzn2023.0.5 | ALAS2023-2026-1690 |
| Amazon Linux 2023 | ruby3.4-rubygem-rss | 0.3.1-27.amzn2023.0.5 | ALAS2023-2026-1690 |
| Amazon Linux 2023 | ruby3.4-rubygem-test-unit | 3.6.7-27.amzn2023.0.5 | ALAS2023-2026-1690 |
| Amazon Linux 2023 | ruby3.4-rubygem-typeprof | 0.30.1-27.amzn2023.0.5 | ALAS2023-2026-1690 |
| Amazon Linux 2023 | ruby3.4-rubygems +1 | 3.6.9-27.amzn2023.0.5 | ALAS2023-2026-1690 |
| Amazon Linux 2 | ruby +5 | 2.0.0.648-36.amzn2.0.18 | ALAS2-2026-3284 |
| Amazon Linux 2 | rubygem-bigdecimal | 1.2.0-36.amzn2.0.18 | ALAS2-2026-3284 |
| Amazon Linux 2 | rubygem-io-console | 0.4.2-36.amzn2.0.18 | ALAS2-2026-3284 |
| Amazon Linux 2 | rubygem-json | 1.7.7-36.amzn2.0.18 | ALAS2-2026-3284 |
| Amazon Linux 2 | rubygem-minitest | 4.3.2-36.amzn2.0.18 | ALAS2-2026-3284 |
| Amazon Linux 2 | rubygem-psych | 2.0.0-36.amzn2.0.18 | ALAS2-2026-3284 |
| Amazon Linux 2 | rubygem-rake | 0.9.6-36.amzn2.0.18 | ALAS2-2026-3284 |
| Amazon Linux 2 | rubygem-rdoc | 4.0.0-36.amzn2.0.18 | ALAS2-2026-3284 |
| Amazon Linux 2 | rubygems +1 | 2.0.14.1-36.amzn2.0.18 | ALAS2-2026-3284 |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 10 | ruby +5 | 3.3.10-12.el10_1 | ELSA-2026-18065 |
| Oracle Linux 10 | ruby4.0 +2 | 4.0.3-35.el10_2 | ELSA-2026-20606 |
| Oracle Linux 10 | ruby4.0-rubygem-mysql2 | 0.5.7-35.el10_2 | ELSA-2026-20606 |
| Oracle Linux 10 | ruby4.0-rubygem-pg | 1.6.3-35.el10_2 | ELSA-2026-20606 |
| Oracle Linux 10 | rubygem-bigdecimal | 3.1.5-12.el10_1 | ELSA-2026-18065 |
| Oracle Linux 10 | rubygem-bundler | 2.5.22-12.el10_1 | ELSA-2026-18065 |
| Oracle Linux 10 | rubygem-io-console | 0.7.1-12.el10_1 | ELSA-2026-18065 |
| Oracle Linux 10 | rubygem-irb | 1.13.1-12.el10_1 | ELSA-2026-18065 |
| Oracle Linux 10 | rubygem-json | 2.7.2-12.el10_1 | ELSA-2026-18065 |
| Oracle Linux 10 | rubygem-minitest | 5.20.0-12.el10_1 | ELSA-2026-18065 |
| Oracle Linux 10 | rubygem-power_assert | 2.0.3-12.el10_1 | ELSA-2026-18065 |
| Oracle Linux 10 | rubygem-psych | 5.1.2-12.el10_1 | ELSA-2026-18065 |
| Oracle Linux 10 | rubygem-racc | 1.7.3-12.el10_1 | ELSA-2026-18065 |
| Oracle Linux 10 | rubygem-rake | 13.1.0-12.el10_1 | ELSA-2026-18065 |
| Oracle Linux 10 | rubygem-rbs | 3.4.0-12.el10_1 | ELSA-2026-18065 |
| Oracle Linux 10 | rubygem-rdoc | 6.6.3.1-12.el10_1 | ELSA-2026-18065 |
| Oracle Linux 10 | rubygem-rexml | 3.4.4-12.el10_1 | ELSA-2026-18065 |
| Oracle Linux 10 | rubygem-rss | 0.3.1-12.el10_1 | ELSA-2026-18065 |
| Oracle Linux 10 | rubygem-test-unit | 3.6.1-12.el10_1 | ELSA-2026-18065 |
| Oracle Linux 10 | rubygem-typeprof | 0.21.9-12.el10_1 | ELSA-2026-18065 |
| Oracle Linux 10 | rubygems +1 | 3.5.22-12.el10_1 | ELSA-2026-18065 |
| Oracle Linux 9 | ruby +4 | 3.0.7-166.el9_7 | ELSA-2026-20596, ELSA-2026-18039, ELSA-2026-18030 |
| Oracle Linux 9 | ruby-bundled-gems | 3.3.10-6.module+el9.7.0+90894+66578cbb | ELSA-2026-20596, ELSA-2026-18030 |
| Oracle Linux 9 | rubygem-bigdecimal | 3.0.0-166.el9_7 | ELSA-2026-20596, ELSA-2026-18039, ELSA-2026-18030 |
| Oracle Linux 9 | rubygem-bundler | 2.2.33-166.el9_7 | ELSA-2026-20596, ELSA-2026-18039, ELSA-2026-18030 |
| Oracle Linux 9 | rubygem-io-console | 0.5.7-166.el9_7 | ELSA-2026-20596, ELSA-2026-18039, ELSA-2026-18030 |
| Oracle Linux 9 | rubygem-irb | 1.3.5-166.el9_7 | ELSA-2026-20596, ELSA-2026-18039, ELSA-2026-18030 |
| Oracle Linux 9 | rubygem-json | 2.5.1-166.el9_7 | ELSA-2026-20596, ELSA-2026-18039, ELSA-2026-18030 |
| Oracle Linux 9 | rubygem-minitest | 5.14.2-166.el9_7 | ELSA-2026-20596, ELSA-2026-18039, ELSA-2026-18030 |
| Oracle Linux 9 | rubygem-mysql2 +1 | 0.5.5-3.module+el9.7.0+90894+66578cbb | ELSA-2026-20596, ELSA-2026-18030 |
| Oracle Linux 9 | rubygem-pg +1 | 1.5.4-2.module+el9.7.0+90894+66578cbb | ELSA-2026-20596, ELSA-2026-18030 |
| Oracle Linux 9 | rubygem-power_assert | 1.2.1-166.el9_7 | ELSA-2026-20596, ELSA-2026-18039, ELSA-2026-18030 |
| Oracle Linux 9 | rubygem-psych | 3.3.2-166.el9_7 | ELSA-2026-20596, ELSA-2026-18039, ELSA-2026-18030 |
| Oracle Linux 9 | rubygem-racc | 1.7.3-6.module+el9.7.0+90894+66578cbb | ELSA-2026-20596, ELSA-2026-18030 |
| Oracle Linux 9 | rubygem-rake | 13.0.3-166.el9_7 | ELSA-2026-20596, ELSA-2026-18039, ELSA-2026-18030 |
| Oracle Linux 9 | rubygem-rbs | 1.4.0-166.el9_7 | ELSA-2026-20596, ELSA-2026-18039, ELSA-2026-18030 |
| Oracle Linux 9 | rubygem-rdoc | 6.3.4.1-166.el9_7 | ELSA-2026-20596, ELSA-2026-18039, ELSA-2026-18030 |
| Oracle Linux 9 | rubygem-rexml | 3.2.5-166.el9_7 | ELSA-2026-20596, ELSA-2026-18039, ELSA-2026-18030 |
| Oracle Linux 9 | rubygem-rss | 0.2.9-166.el9_7 | ELSA-2026-20596, ELSA-2026-18039, ELSA-2026-18030 |
| Oracle Linux 9 | rubygem-test-unit | 3.3.7-166.el9_7 | ELSA-2026-20596, ELSA-2026-18039, ELSA-2026-18030 |
| Oracle Linux 9 | rubygem-typeprof | 0.15.2-166.el9_7 | ELSA-2026-20596, ELSA-2026-18039, ELSA-2026-18030 |
| Oracle Linux 9 | rubygems +1 | 3.2.33-166.el9_7 | ELSA-2026-20596, ELSA-2026-18039, ELSA-2026-18030 |
| Oracle Linux 8 | ruby +5 | 3.3.10-6.module+el8.10.0+90896+16c7234c | ELSA-2026-20614 |
| Oracle Linux 8 | rubygem-abrt +1 | 0.4.0-1.module+el8.10.0+90287+d51aa4ed | ELSA-2026-20614 |
| Oracle Linux 8 | rubygem-bigdecimal | 3.1.5-6.module+el8.10.0+90896+16c7234c | ELSA-2026-20614 |
| Oracle Linux 8 | rubygem-bundler | 2.5.22-6.module+el8.10.0+90896+16c7234c | ELSA-2026-20614 |
| Oracle Linux 8 | rubygem-io-console | 0.7.1-6.module+el8.10.0+90896+16c7234c | ELSA-2026-20614 |
| Oracle Linux 8 | rubygem-irb | 1.13.1-6.module+el8.10.0+90896+16c7234c | ELSA-2026-20614 |
| Oracle Linux 8 | rubygem-json | 2.7.2-6.module+el8.10.0+90896+16c7234c | ELSA-2026-20614 |
| Oracle Linux 8 | rubygem-minitest | 5.20.0-6.module+el8.10.0+90896+16c7234c | ELSA-2026-20614 |
| Oracle Linux 8 | rubygem-mysql2 +1 | 0.5.5-1.module+el8.10.0+90287+d51aa4ed | ELSA-2026-20614 |
| Oracle Linux 8 | rubygem-pg +1 | 1.5.4-1.module+el8.10.0+90287+d51aa4ed | ELSA-2026-20614 |
| Oracle Linux 8 | rubygem-power_assert | 2.0.3-6.module+el8.10.0+90896+16c7234c | ELSA-2026-20614 |
| Oracle Linux 8 | rubygem-psych | 5.1.2-6.module+el8.10.0+90896+16c7234c | ELSA-2026-20614 |
| Oracle Linux 8 | rubygem-racc | 1.7.3-6.module+el8.10.0+90896+16c7234c | ELSA-2026-20614 |
| Oracle Linux 8 | rubygem-rake | 13.1.0-6.module+el8.10.0+90896+16c7234c | ELSA-2026-20614 |
| Oracle Linux 8 | rubygem-rbs | 3.4.0-6.module+el8.10.0+90896+16c7234c | ELSA-2026-20614 |
| Oracle Linux 8 | rubygem-rdoc | 6.6.3.1-6.module+el8.10.0+90896+16c7234c | ELSA-2026-20614 |
| Oracle Linux 8 | rubygem-rexml | 3.4.4-6.module+el8.10.0+90896+16c7234c | ELSA-2026-20614 |
| Oracle Linux 8 | rubygem-rss | 0.3.1-6.module+el8.10.0+90896+16c7234c | ELSA-2026-20614 |
| Oracle Linux 8 | rubygem-test-unit | 3.6.1-6.module+el8.10.0+90896+16c7234c | ELSA-2026-20614 |
| Oracle Linux 8 | rubygem-typeprof | 0.21.9-6.module+el8.10.0+90896+16c7234c | ELSA-2026-20614 |
| Oracle Linux 8 | rubygems +1 | 3.5.22-6.module+el8.10.0+90896+16c7234c | ELSA-2026-20614 |
Wolfi
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Wolfi rolling | jruby-10.1 | 10.1.1.0-r0 | — |
| Wolfi rolling | jruby-9.4 | 9.4.15.0-r0 | — |
| Wolfi rolling | logstash-9.3 +1 | 9.3.4-r2 | — |
| Wolfi rolling | ruby-3.2 +1 | No fix yet | — |
| Wolfi rolling | ruby-3.3 | 3.3.12-r0 | — |
| Wolfi rolling | ruby-3.4 | 3.4.10-r0 | — |
| Wolfi rolling | ruby-4.0 | 4.0.3-r0 | — |
| Wolfi rolling | ruby3.2-rails-8.1 +1 | 8.1.3-r3 | — |
| Wolfi rolling | ruby3.3-rails-8.1 +1 | 8.1.3-r4 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| RubyGems | erb | < 4.0.3.1 | 4.0.3.1 | GHSA-q339-8rmv-2mhv |
| RubyGems | erb | >= 4.0.4, < 4.0.4.1 | 4.0.4.1 | GHSA-q339-8rmv-2mhv |
| RubyGems | erb | >= 5.0.0, < 6.0.1.1 | 6.0.1.1 | GHSA-q339-8rmv-2mhv |
| RubyGems | erb | >= 6.0.2, < 6.0.4 | 6.0.4 | GHSA-q339-8rmv-2mhv |
Advisories 39
- WID-SEC-2026-2379 Ruby: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 8, 2026
- WID-SEC-2026-1187 Ruby und Ruby on Rails (erb gem): Schwachstelle ermöglicht Codeausführung BSI CERT-Bund (WID) · Nov 8, 2026
- ALSA-2026:20596 Important: ruby:4.0 security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2026:18030 Important: ruby:3.3 security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2026:18039 Important: ruby security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2026:20606 Important: ruby4.0 security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2026:18065 Important: ruby security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2026:20614 Important: ruby:3.3 security update AlmaLinux Security Advisories · Oct 29, 2026
- WID-SEC-2026-2455 Oracle Solaris Drittanbieterkomponenten: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 27, 2026
- openSUSE-SU-2026:21878-1 Security update for ruby3.4 SUSE / openSUSE Security Updates · Sep 25, 2026
- RHSA-2026:37238 Red Hat Security Advisory: ruby:3.3 security update Red Hat Security Advisories (RHSA) · Sep 1, 2026
- RHSA-2026:35834 Red Hat Security Advisory: ruby security update Red Hat Security Advisories (RHSA) · Sep 1, 2026
- RHSA-2026:33462 Red Hat Security Advisory: ruby security update Red Hat Security Advisories (RHSA) · Sep 1, 2026
- RHSA-2026:33478 Red Hat Security Advisory: ruby security update Red Hat Security Advisories (RHSA) · Aug 22, 2026
- RHSA-2026:26655 Red Hat Security Advisory: ruby:3.3 security update Red Hat Security Advisories (RHSA) · Aug 22, 2026
- RHSA-2026:26312 Red Hat Security Advisory: ruby security update Red Hat Security Advisories (RHSA) · Aug 22, 2026
- RHSA-2026:20670 Red Hat Security Advisory: ruby security update Red Hat Security Advisories (RHSA) · Aug 22, 2026
- RHSA-2026:20614 Red Hat Security Advisory: ruby:3.3 security update Red Hat Security Advisories (RHSA) · Aug 22, 2026
- RHSA-2026:20606 Red Hat Security Advisory: ruby4.0 security update Red Hat Security Advisories (RHSA) · Aug 22, 2026
- RHSA-2026:20596 Red Hat Security Advisory: ruby:4.0 security update Red Hat Security Advisories (RHSA) · Aug 22, 2026
- RHSA-2026:18065 Red Hat Security Advisory: ruby security update Red Hat Security Advisories (RHSA) · Aug 22, 2026
- RHSA-2026:18039 Red Hat Security Advisory: ruby security update Red Hat Security Advisories (RHSA) · Aug 22, 2026
- RHSA-2026:18030 Red Hat Security Advisory: ruby:3.3 security update Red Hat Security Advisories (RHSA) · Aug 22, 2026
- SUSE-SU-2026:3556-1 Security update for ruby2.5 SUSE / openSUSE Security Updates · Aug 12, 2026
- ELSA-2026-20606 Important: ruby4.0 security update (Oracle Linux 10) Oracle Linux Security Advisories (ELSA) · Jul 17, 2026
- ELSA-2026-20596 Important: ruby:4.0 security update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · Jun 24, 2026
- RLSA-2026:20606 Important: ruby4.0 security update Rocky Linux Security Advisories · Jun 4, 2026
- RLSA-2026:20596 Important: ruby:4.0 security update Rocky Linux Security Advisories · May 28, 2026
- RLSA-2026:20614 Important: ruby:3.3 security update Rocky Linux Security Advisories · May 26, 2026
- ELSA-2026-20614 Important: ruby:3.3 security update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · May 26, 2026
- RLSA-2026:18065 Important: ruby security update Rocky Linux Security Advisories · May 19, 2026
- RLSA-2026:18039 Important: ruby security update Rocky Linux Security Advisories · May 19, 2026
- ELSA-2026-18039 Important: ruby security update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · May 19, 2026
- ELSA-2026-18030 Important: ruby:3.3 security update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · May 19, 2026
- RLSA-2026:18030 Important: ruby:3.3 security update Rocky Linux Security Advisories · May 18, 2026
- ELSA-2026-18065 Important: ruby security update (Oracle Linux 10) Oracle Linux Security Advisories (ELSA) · May 18, 2026
- ALAS2023-2026-1690 Important: ruby3.4 security update (Amazon Linux 2023) Amazon Linux Security Center (ALAS) · May 15, 2026
- ALAS2-2026-3284 Important: ruby security update (Amazon Linux 2) Amazon Linux Security Center (ALAS) · May 13, 2026
- openSUSE-SU-2026:10609-1 libruby4_0-4_0-4.0.3-1.1 on GA media SUSE / openSUSE Security Updates · Apr 24, 2026