UnratedFix available

Important: ruby:3.3 security update

Type: advisorySource: OSV1 source record

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. Security Fix(es): * resolv: resolv gem: Denial of Service via uncontrolled memory growth from crafted DNS responses (CVE-2026-80212) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Announced 28 Sept 2026Group revision 1

Original source ↗

ALSA-2026:72485

Primary source · Revision 1

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:ALSA-2026:72485

ruby

Source reference: /affected/0/package/name

Affected versions: Not stated in this record
Fixed versions: 3.3.12-9.module_el9.8.0+320+13e2b195
Source reference: /affected/0/ranges
Prerequisites: Not stated in this record

ruby-bundled-gems

Source reference: /affected/1/package/name

Affected versions: Not stated in this record
Fixed versions: 3.3.12-9.module_el9.8.0+320+13e2b195
Source reference: /affected/1/ranges
Prerequisites: Not stated in this record

ruby-default-gems

Source reference: /affected/2/package/name

Affected versions: Not stated in this record
Fixed versions: 3.3.12-9.module_el9.8.0+320+13e2b195
Source reference: /affected/2/ranges
Prerequisites: Not stated in this record

ruby-devel

Source reference: /affected/3/package/name

Affected versions: Not stated in this record
Fixed versions: 3.3.12-9.module_el9.8.0+320+13e2b195
Source reference: /affected/3/ranges
Prerequisites: Not stated in this record

ruby-doc

Source reference: /affected/4/package/name

Affected versions: Not stated in this record
Fixed versions: 3.3.12-9.module_el9.8.0+320+13e2b195
Source reference: /affected/4/ranges
Prerequisites: Not stated in this record

ruby-libs

Source reference: /affected/5/package/name

Affected versions: Not stated in this record
Fixed versions: 3.3.12-9.module_el9.8.0+320+13e2b195
Source reference: /affected/5/ranges
Prerequisites: Not stated in this record

rubygem-bigdecimal

Source reference: /affected/6/package/name

Affected versions: Not stated in this record
Fixed versions: 3.1.5-9.module_el9.8.0+320+13e2b195
Source reference: /affected/6/ranges
Prerequisites: Not stated in this record

rubygem-bundler

Source reference: /affected/7/package/name

Affected versions: Not stated in this record
Fixed versions: 2.5.22-9.module_el9.8.0+320+13e2b195
Source reference: /affected/7/ranges
Prerequisites: Not stated in this record

rubygem-io-console

Source reference: /affected/8/package/name

Affected versions: Not stated in this record
Fixed versions: 0.7.1-9.module_el9.8.0+320+13e2b195
Source reference: /affected/8/ranges
Prerequisites: Not stated in this record

rubygem-irb

Source reference: /affected/9/package/name

Affected versions: Not stated in this record
Fixed versions: 1.13.1-9.module_el9.8.0+320+13e2b195
Source reference: /affected/9/ranges
Prerequisites: Not stated in this record

rubygem-json

Source reference: /affected/10/package/name

Affected versions: Not stated in this record
Fixed versions: 2.7.2-9.module_el9.8.0+320+13e2b195
Source reference: /affected/10/ranges
Prerequisites: Not stated in this record

rubygem-minitest

Source reference: /affected/11/package/name

Affected versions: Not stated in this record
Fixed versions: 5.20.0-9.module_el9.8.0+320+13e2b195
Source reference: /affected/11/ranges
Prerequisites: Not stated in this record

rubygem-mysql2

Source reference: /affected/12/package/name

Affected versions: Not stated in this record
Fixed versions: 0.5.5-3.module_el9.7.0+184+e2e36072
Source reference: /affected/12/ranges
Prerequisites: Not stated in this record

rubygem-mysql2-doc

Source reference: /affected/13/package/name

Affected versions: Not stated in this record
Fixed versions: 0.5.5-3.module_el9.7.0+184+e2e36072
Source reference: /affected/13/ranges
Prerequisites: Not stated in this record

rubygem-pg

Source reference: /affected/14/package/name

Affected versions: Not stated in this record
Fixed versions: 1.5.4-2.module_el9.7.0+245+447713a2
Source reference: /affected/14/ranges
Prerequisites: Not stated in this record

rubygem-pg-doc

Source reference: /affected/15/package/name

Affected versions: Not stated in this record
Fixed versions: 1.5.4-2.module_el9.7.0+245+447713a2
Source reference: /affected/15/ranges
Prerequisites: Not stated in this record

rubygem-power_assert

Source reference: /affected/16/package/name

Affected versions: Not stated in this record
Fixed versions: 2.0.3-9.module_el9.8.0+320+13e2b195
Source reference: /affected/16/ranges
Prerequisites: Not stated in this record

rubygem-psych

Source reference: /affected/17/package/name

Affected versions: Not stated in this record
Fixed versions: 5.1.2-9.module_el9.8.0+320+13e2b195
Source reference: /affected/17/ranges
Prerequisites: Not stated in this record

rubygem-racc

Source reference: /affected/18/package/name

Affected versions: Not stated in this record
Fixed versions: 1.7.3-9.module_el9.8.0+320+13e2b195
Source reference: /affected/18/ranges
Prerequisites: Not stated in this record

rubygem-rake

Source reference: /affected/19/package/name

Affected versions: Not stated in this record
Fixed versions: 13.1.0-9.module_el9.8.0+320+13e2b195
Source reference: /affected/19/ranges
Prerequisites: Not stated in this record

rubygem-rbs

Source reference: /affected/20/package/name

Affected versions: Not stated in this record
Fixed versions: 3.4.0-9.module_el9.8.0+320+13e2b195
Source reference: /affected/20/ranges
Prerequisites: Not stated in this record

rubygem-rdoc

Source reference: /affected/21/package/name

Affected versions: Not stated in this record
Fixed versions: 6.6.3.1-9.module_el9.8.0+320+13e2b195
Source reference: /affected/21/ranges
Prerequisites: Not stated in this record

rubygem-rexml

Source reference: /affected/22/package/name

Affected versions: Not stated in this record
Fixed versions: 3.4.4-9.module_el9.8.0+320+13e2b195
Source reference: /affected/22/ranges
Prerequisites: Not stated in this record

rubygem-rss

Source reference: /affected/23/package/name

Affected versions: Not stated in this record
Fixed versions: 0.3.1-9.module_el9.8.0+320+13e2b195
Source reference: /affected/23/ranges
Prerequisites: Not stated in this record

rubygem-test-unit

Source reference: /affected/24/package/name

Affected versions: Not stated in this record
Fixed versions: 3.6.1-9.module_el9.8.0+320+13e2b195
Source reference: /affected/24/ranges
Prerequisites: Not stated in this record

rubygem-typeprof

Source reference: /affected/25/package/name

Affected versions: Not stated in this record
Fixed versions: 0.21.9-9.module_el9.8.0+320+13e2b195
Source reference: /affected/25/ranges
Prerequisites: Not stated in this record

rubygems

Source reference: /affected/26/package/name

Affected versions: Not stated in this record
Fixed versions: 3.5.22-9.module_el9.8.0+320+13e2b195
Source reference: /affected/26/ranges
Prerequisites: Not stated in this record

rubygems-devel

Source reference: /affected/27/package/name

Affected versions: Not stated in this record
Fixed versions: 3.5.22-9.module_el9.8.0+320+13e2b195
Source reference: /affected/27/ranges
Prerequisites: Not stated in this record

Structured affected-version data

Original package identities and version rules from this source.

[
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          },
          {
            "fixed": "3.3.12-9.module_el9.8.0+320+13e2b195"
          }
        ]
      }
    ],
    "package": {
      "name": "ruby",
      "purl": "pkg:rpm/almalinux/ruby",
      "ecosystem": "AlmaLinux:9"
    },
    "database_specific": {
      "source": "https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:72485.json"
    }
  },
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          },
          {
            "fixed": "3.3.12-9.module_el9.8.0+320+13e2b195"
          }
        ]
      }
    ],
    "package": {
      "name": "ruby-bundled-gems",
      "purl": "pkg:rpm/almalinux/ruby-bundled-gems",
      "ecosystem": "AlmaLinux:9"
    },
    "database_specific": {
      "source": "https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:72485.json"
    }
  },
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          },
          {
            "fixed": "3.3.12-9.module_el9.8.0+320+13e2b195"
          }
        ]
      }
    ],
    "package": {
      "name": "ruby-default-gems",
      "purl": "pkg:rpm/almalinux/ruby-default-gems",
      "ecosystem": "AlmaLinux:9"
    },
    "database_specific": {
      "source": "https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:72485.json"
    }
  },
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          },
          {
            "fixed": "3.3.12-9.module_el9.8.0+320+13e2b195"
          }
        ]
      }
    ],
    "package": {
      "name": "ruby-devel",
      "purl": "pkg:rpm/almalinux/ruby-devel",
      "ecosystem": "AlmaLinux:9"
    },
    "database_specific": {
      "source": "https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:72485.json"
    }
  },
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          },
          {
            "fixed": "3.3.12-9.module_el9.8.0+320+13e2b195"
          }
        ]
      }
    ],
    "package": {
      "name": "ruby-doc",
      "purl": "pkg:rpm/almalinux/ruby-doc",
      "ecosystem": "AlmaLinux:9"
    },
    "database_specific": {
      "source": "https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:72485.json"
    }
  },
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          },
          {
            "fixed": "3.3.12-9.module_el9.8.0+320+13e2b195"
          }
        ]
      }
    ],
    "package": {
      "name": "ruby-libs",
      "purl": "pkg:rpm/almalinux/ruby-libs",
      "ecosystem": "AlmaLinux:9"
    },
    "database_specific": {
      "source": "https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:72485.json"
    }
  },
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          },
          {
            "fixed": "3.1.5-9.module_el9.8.0+320+13e2b195"
          }
        ]
      }
    ],
    "package": {
      "name": "rubygem-bigdecimal",
      "purl": "pkg:rpm/almalinux/rubygem-bigdecimal",
      "ecosystem": "AlmaLinux:9"
    },
    "database_specific": {
      "source": "https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:72485.json"
    }
  },
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          },
          {
            "fixed": "2.5.22-9.module_el9.8.0+320+13e2b195"
          }
        ]
      }
    ],
    "package": {
      "name": "rubygem-bundler",
      "purl": "pkg:rpm/almalinux/rubygem-bundler",
      "ecosystem": "AlmaLinux:9"
    },
    "database_specific": {
      "source": "https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:72485.json"
    }
  },
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          },
          {
            "fixed": "0.7.1-9.module_el9.8.0+320+13e2b195"
          }
        ]
      }
    ],
    "package": {
      "name": "rubygem-io-console",
      "purl": "pkg:rpm/almalinux/rubygem-io-console",
      "ecosystem": "AlmaLinux:9"
    },
    "database_specific": {
      "source": "https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:72485.json"
    }
  },
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          },
          {
            "fixed": "1.13.1-9.module_el9.8.0+320+13e2b195"
          }
        ]
      }
    ],
    "package": {
      "name": "rubygem-irb",
      "purl": "pkg:rpm/almalinux/rubygem-irb",
      "ecosystem": "AlmaLinux:9"
    },
    "database_specific": {
      "source": "https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:72485.json"
    }
  },
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          },
          {
            "fixed": "2.7.2-9.module_el9.8.0+320+13e2b195"
          }
        ]
      }
    ],
    "package": {
      "name": "rubygem-json",
      "purl": "pkg:rpm/almalinux/rubygem-json",
      "ecosystem": "AlmaLinux:9"
    },
    "database_specific": {
      "source": "https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:72485.json"
    }
  },
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          },
          {
            "fixed": "5.20.0-9.module_el9.8.0+320+13e2b195"
          }
        ]
      }
    ],
    "package": {
      "name": "rubygem-minitest",
      "purl": "pkg:rpm/almalinux/rubygem-minitest",
      "ecosystem": "AlmaLinux:9"
    },
    "database_specific": {
      "source": "https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:72485.json"
    }
  },
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          },
          {
            "fixed": "0.5.5-3.module_el9.7.0+184+e2e36072"
          }
        ]
      }
    ],
    "package": {
      "name": "rubygem-mysql2",
      "purl": "pkg:rpm/almalinux/rubygem-mysql2",
      "ecosystem": "AlmaLinux:9"
    },
    "database_specific": {
      "source": "https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:72485.json"
    }
  },
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          },
          {
            "fixed": "0.5.5-3.module_el9.7.0+184+e2e36072"
          }
        ]
      }
    ],
    "package": {
      "name": "rubygem-mysql2-doc",
      "purl": "pkg:rpm/almalinux/rubygem-mysql2-doc",
      "ecosystem": "AlmaLinux:9"
    },
    "database_specific": {
      "source": "https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:72485.json"
    }
  },
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          },
          {
            "fixed": "1.5.4-2.module_el9.7.0+245+447713a2"
          }
        ]
      }
    ],
    "package": {
      "name": "rubygem-pg",
      "purl": "pkg:rpm/almalinux/rubygem-pg",
      "ecosystem": "AlmaLinux:9"
    },
    "database_specific": {
      "source": "https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:72485.json"
    }
  },
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          },
          {
            "fixed": "1.5.4-2.module_el9.7.0+245+447713a2"
          }
        ]
      }
    ],
    "package": {
      "name": "rubygem-pg-doc",
      "purl": "pkg:rpm/almalinux/rubygem-pg-doc",
      "ecosystem": "AlmaLinux:9"
    },
    "database_specific": {
      "source": "https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:72485.json"
    }
  },
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          },
          {
            "fixed": "2.0.3-9.module_el9.8.0+320+13e2b195"
          }
        ]
      }
    ],
    "package": {
      "name": "rubygem-power_assert",
      "purl": "pkg:rpm/almalinux/rubygem-power_assert",
      "ecosystem": "AlmaLinux:9"
    },
    "database_specific": {
      "source": "https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:72485.json"
    }
  },
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          },
          {
            "fixed": "5.1.2-9.module_el9.8.0+320+13e2b195"
          }
        ]
      }
    ],
    "package": {
      "name": "rubygem-psych",
      "purl": "pkg:rpm/almalinux/rubygem-psych",
      "ecosystem": "AlmaLinux:9"
    },
    "database_specific": {
      "source": "https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:72485.json"
    }
  },
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          },
          {
            "fixed": "1.7.3-9.module_el9.8.0+320+13e2b195"
          }
        ]
      }
    ],
    "package": {
      "name": "rubygem-racc",
      "purl": "pkg:rpm/almalinux/rubygem-racc",
      "ecosystem": "AlmaLinux:9"
    },
    "database_specific": {
      "source": "https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:72485.json"
    }
  },
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          },
          {
            "fixed": "13.1.0-9.module_el9.8.0+320+13e2b195"
          }
        ]
      }
    ],
    "package": {
      "name": "rubygem-rake",
      "purl": "pkg:rpm/almalinux/rubygem-rake",
      "ecosystem": "AlmaLinux:9"
    },
    "database_specific": {
      "source": "https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:72485.json"
    }
  },
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          },
          {
            "fixed": "3.4.0-9.module_el9.8.0+320+13e2b195"
          }
        ]
      }
    ],
    "package": {
      "name": "rubygem-rbs",
      "purl": "pkg:rpm/almalinux/rubygem-rbs",
      "ecosystem": "AlmaLinux:9"
    },
    "database_specific": {
      "source": "https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:72485.json"
    }
  },
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          },
          {
            "fixed": "6.6.3.1-9.module_el9.8.0+320+13e2b195"
          }
        ]
      }
    ],
    "package": {
      "name": "rubygem-rdoc",
      "purl": "pkg:rpm/almalinux/rubygem-rdoc",
      "ecosystem": "AlmaLinux:9"
    },
    "database_specific": {
      "source": "https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:72485.json"
    }
  },
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          },
          {
            "fixed": "3.4.4-9.module_el9.8.0+320+13e2b195"
          }
        ]
      }
    ],
    "package": {
      "name": "rubygem-rexml",
      "purl": "pkg:rpm/almalinux/rubygem-rexml",
      "ecosystem": "AlmaLinux:9"
    },
    "database_specific": {
      "source": "https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:72485.json"
    }
  },
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          },
          {
            "fixed": "0.3.1-9.module_el9.8.0+320+13e2b195"
          }
        ]
      }
    ],
    "package": {
      "name": "rubygem-rss",
      "purl": "pkg:rpm/almalinux/rubygem-rss",
      "ecosystem": "AlmaLinux:9"
    },
    "database_specific": {
      "source": "https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:72485.json"
    }
  },
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          },
          {
            "fixed": "3.6.1-9.module_el9.8.0+320+13e2b195"
          }
        ]
      }
    ],
    "package": {
      "name": "rubygem-test-unit",
      "purl": "pkg:rpm/almalinux/rubygem-test-unit",
      "ecosystem": "AlmaLinux:9"
    },
    "database_specific": {
      "source": "https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:72485.json"
    }
  },
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          },
          {
            "fixed": "0.21.9-9.module_el9.8.0+320+13e2b195"
          }
        ]
      }
    ],
    "package": {
      "name": "rubygem-typeprof",
      "purl": "pkg:rpm/almalinux/rubygem-typeprof",
      "ecosystem": "AlmaLinux:9"
    },
    "database_specific": {
      "source": "https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:72485.json"
    }
  },
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          },
          {
            "fixed": "3.5.22-9.module_el9.8.0+320+13e2b195"
          }
        ]
      }
    ],
    "package": {
      "name": "rubygems",
      "purl": "pkg:rpm/almalinux/rubygems",
      "ecosystem": "AlmaLinux:9"
    },
    "database_specific": {
      "source": "https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:72485.json"
    }
  },
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          },
          {
            "fixed": "3.5.22-9.module_el9.8.0+320+13e2b195"
          }
        ]
      }
    ],
    "package": {
      "name": "rubygems-devel",
      "purl": "pkg:rpm/almalinux/rubygems-devel",
      "ecosystem": "AlmaLinux:9"
    },
    "database_specific": {
      "source": "https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:72485.json"
    }
  }
]

Publisher severity

No explicit severity was provided.

Event: #23578 · Revision 1
Added to Heist Feed: Sun, 25 Oct 2026 06:21:37 GMT
Publisher date: Mon, 28 Sep 2026 00:00:00 GMT

Read the original announcement

Revision history

25 Oct 2026ALSA-2026:72485 · Revision 1Source updated