Skip to content
Heist/ feed
UnratedFix available

Important: ruby security, bug fix, and enhancement update

Type: advisorySource: OSV1 source record

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. Security Fix(es): * resolv: resolv gem: Denial of Service via uncontrolled memory growth from crafted DNS responses (CVE-2026-80212) Bug Fix(es) and Enhancement(s): * ruby %check fails in Konflux: Rinda multicast tests need network device [almalinux-9.8.z] (JIRA:AlmaLinux-255606) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Announced Group revision 1
Original source ↗

ALSA-2026:72286

Primary source · Revision 1

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:ALSA-2026:72286

ruby

Source reference: /affected/0/package/name

Affected versions
Not stated in this record
Fixed versions
3.0.7-168.el9_8

Source reference: /affected/0/ranges

Prerequisites
Not stated in this record

ruby-default-gems

Source reference: /affected/1/package/name

Affected versions
Not stated in this record
Fixed versions
3.0.7-168.el9_8

Source reference: /affected/1/ranges

Prerequisites
Not stated in this record

ruby-devel

Source reference: /affected/2/package/name

Affected versions
Not stated in this record
Fixed versions
3.0.7-168.el9_8

Source reference: /affected/2/ranges

Prerequisites
Not stated in this record

ruby-doc

Source reference: /affected/3/package/name

Affected versions
Not stated in this record
Fixed versions
3.0.7-168.el9_8

Source reference: /affected/3/ranges

Prerequisites
Not stated in this record

ruby-libs

Source reference: /affected/4/package/name

Affected versions
Not stated in this record
Fixed versions
3.0.7-168.el9_8

Source reference: /affected/4/ranges

Prerequisites
Not stated in this record

rubygem-bigdecimal

Source reference: /affected/5/package/name

Affected versions
Not stated in this record
Fixed versions
3.0.0-168.el9_8

Source reference: /affected/5/ranges

Prerequisites
Not stated in this record

rubygem-bundler

Source reference: /affected/6/package/name

Affected versions
Not stated in this record
Fixed versions
2.2.33-168.el9_8

Source reference: /affected/6/ranges

Prerequisites
Not stated in this record

rubygem-io-console

Source reference: /affected/7/package/name

Affected versions
Not stated in this record
Fixed versions
0.5.7-168.el9_8

Source reference: /affected/7/ranges

Prerequisites
Not stated in this record

rubygem-irb

Source reference: /affected/8/package/name

Affected versions
Not stated in this record
Fixed versions
1.3.5-168.el9_8

Source reference: /affected/8/ranges

Prerequisites
Not stated in this record

rubygem-json

Source reference: /affected/9/package/name

Affected versions
Not stated in this record
Fixed versions
2.5.1-168.el9_8

Source reference: /affected/9/ranges

Prerequisites
Not stated in this record

rubygem-minitest

Source reference: /affected/10/package/name

Affected versions
Not stated in this record
Fixed versions
5.14.2-168.el9_8

Source reference: /affected/10/ranges

Prerequisites
Not stated in this record

rubygem-power_assert

Source reference: /affected/11/package/name

Affected versions
Not stated in this record
Fixed versions
1.2.1-168.el9_8

Source reference: /affected/11/ranges

Prerequisites
Not stated in this record

rubygem-psych

Source reference: /affected/12/package/name

Affected versions
Not stated in this record
Fixed versions
3.3.2-168.el9_8

Source reference: /affected/12/ranges

Prerequisites
Not stated in this record

rubygem-rake

Source reference: /affected/13/package/name

Affected versions
Not stated in this record
Fixed versions
13.0.3-168.el9_8

Source reference: /affected/13/ranges

Prerequisites
Not stated in this record

rubygem-rbs

Source reference: /affected/14/package/name

Affected versions
Not stated in this record
Fixed versions
1.4.0-168.el9_8

Source reference: /affected/14/ranges

Prerequisites
Not stated in this record

rubygem-rdoc

Source reference: /affected/15/package/name

Affected versions
Not stated in this record
Fixed versions
6.3.4.1-168.el9_8

Source reference: /affected/15/ranges

Prerequisites
Not stated in this record

rubygem-rexml

Source reference: /affected/16/package/name

Affected versions
Not stated in this record
Fixed versions
3.2.5-168.el9_8

Source reference: /affected/16/ranges

Prerequisites
Not stated in this record

rubygem-rss

Source reference: /affected/17/package/name

Affected versions
Not stated in this record
Fixed versions
0.2.9-168.el9_8

Source reference: /affected/17/ranges

Prerequisites
Not stated in this record

rubygem-test-unit

Source reference: /affected/18/package/name

Affected versions
Not stated in this record
Fixed versions
3.3.7-168.el9_8

Source reference: /affected/18/ranges

Prerequisites
Not stated in this record

rubygem-typeprof

Source reference: /affected/19/package/name

Affected versions
Not stated in this record
Fixed versions
0.15.2-168.el9_8

Source reference: /affected/19/ranges

Prerequisites
Not stated in this record

rubygems

Source reference: /affected/20/package/name

Affected versions
Not stated in this record
Fixed versions
3.2.33-168.el9_8

Source reference: /affected/20/ranges

Prerequisites
Not stated in this record

rubygems-devel

Source reference: /affected/21/package/name

Affected versions
Not stated in this record
Fixed versions
3.2.33-168.el9_8

Source reference: /affected/21/ranges

Prerequisites
Not stated in this record

Structured affected-version data

Original package identities and version rules from this source.

[
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          },
          {
            "fixed": "3.0.7-168.el9_8"
          }
        ]
      }
    ],
    "package": {
      "name": "ruby",
      "purl": "pkg:rpm/almalinux/ruby",
      "ecosystem": "AlmaLinux:9"
    },
    "database_specific": {
      "source": "https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:72286.json"
    }
  },
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          },
          {
            "fixed": "3.0.7-168.el9_8"
          }
        ]
      }
    ],
    "package": {
      "name": "ruby-default-gems",
      "purl": "pkg:rpm/almalinux/ruby-default-gems",
      "ecosystem": "AlmaLinux:9"
    },
    "database_specific": {
      "source": "https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:72286.json"
    }
  },
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          },
          {
            "fixed": "3.0.7-168.el9_8"
          }
        ]
      }
    ],
    "package": {
      "name": "ruby-devel",
      "purl": "pkg:rpm/almalinux/ruby-devel",
      "ecosystem": "AlmaLinux:9"
    },
    "database_specific": {
      "source": "https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:72286.json"
    }
  },
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          },
          {
            "fixed": "3.0.7-168.el9_8"
          }
        ]
      }
    ],
    "package": {
      "name": "ruby-doc",
      "purl": "pkg:rpm/almalinux/ruby-doc",
      "ecosystem": "AlmaLinux:9"
    },
    "database_specific": {
      "source": "https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:72286.json"
    }
  },
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          },
          {
            "fixed": "3.0.7-168.el9_8"
          }
        ]
      }
    ],
    "package": {
      "name": "ruby-libs",
      "purl": "pkg:rpm/almalinux/ruby-libs",
      "ecosystem": "AlmaLinux:9"
    },
    "database_specific": {
      "source": "https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:72286.json"
    }
  },
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          },
          {
            "fixed": "3.0.0-168.el9_8"
          }
        ]
      }
    ],
    "package": {
      "name": "rubygem-bigdecimal",
      "purl": "pkg:rpm/almalinux/rubygem-bigdecimal",
      "ecosystem": "AlmaLinux:9"
    },
    "database_specific": {
      "source": "https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:72286.json"
    }
  },
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          },
          {
            "fixed": "2.2.33-168.el9_8"
          }
        ]
      }
    ],
    "package": {
      "name": "rubygem-bundler",
      "purl": "pkg:rpm/almalinux/rubygem-bundler",
      "ecosystem": "AlmaLinux:9"
    },
    "database_specific": {
      "source": "https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:72286.json"
    }
  },
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          },
          {
            "fixed": "0.5.7-168.el9_8"
          }
        ]
      }
    ],
    "package": {
      "name": "rubygem-io-console",
      "purl": "pkg:rpm/almalinux/rubygem-io-console",
      "ecosystem": "AlmaLinux:9"
    },
    "database_specific": {
      "source": "https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:72286.json"
    }
  },
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          },
          {
            "fixed": "1.3.5-168.el9_8"
          }
        ]
      }
    ],
    "package": {
      "name": "rubygem-irb",
      "purl": "pkg:rpm/almalinux/rubygem-irb",
      "ecosystem": "AlmaLinux:9"
    },
    "database_specific": {
      "source": "https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:72286.json"
    }
  },
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          },
          {
            "fixed": "2.5.1-168.el9_8"
          }
        ]
      }
    ],
    "package": {
      "name": "rubygem-json",
      "purl": "pkg:rpm/almalinux/rubygem-json",
      "ecosystem": "AlmaLinux:9"
    },
    "database_specific": {
      "source": "https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:72286.json"
    }
  },
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          },
          {
            "fixed": "5.14.2-168.el9_8"
          }
        ]
      }
    ],
    "package": {
      "name": "rubygem-minitest",
      "purl": "pkg:rpm/almalinux/rubygem-minitest",
      "ecosystem": "AlmaLinux:9"
    },
    "database_specific": {
      "source": "https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:72286.json"
    }
  },
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          },
          {
            "fixed": "1.2.1-168.el9_8"
          }
        ]
      }
    ],
    "package": {
      "name": "rubygem-power_assert",
      "purl": "pkg:rpm/almalinux/rubygem-power_assert",
      "ecosystem": "AlmaLinux:9"
    },
    "database_specific": {
      "source": "https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:72286.json"
    }
  },
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          },
          {
            "fixed": "3.3.2-168.el9_8"
          }
        ]
      }
    ],
    "package": {
      "name": "rubygem-psych",
      "purl": "pkg:rpm/almalinux/rubygem-psych",
      "ecosystem": "AlmaLinux:9"
    },
    "database_specific": {
      "source": "https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:72286.json"
    }
  },
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          },
          {
            "fixed": "13.0.3-168.el9_8"
          }
        ]
      }
    ],
    "package": {
      "name": "rubygem-rake",
      "purl": "pkg:rpm/almalinux/rubygem-rake",
      "ecosystem": "AlmaLinux:9"
    },
    "database_specific": {
      "source": "https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:72286.json"
    }
  },
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          },
          {
            "fixed": "1.4.0-168.el9_8"
          }
        ]
      }
    ],
    "package": {
      "name": "rubygem-rbs",
      "purl": "pkg:rpm/almalinux/rubygem-rbs",
      "ecosystem": "AlmaLinux:9"
    },
    "database_specific": {
      "source": "https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:72286.json"
    }
  },
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          },
          {
            "fixed": "6.3.4.1-168.el9_8"
          }
        ]
      }
    ],
    "package": {
      "name": "rubygem-rdoc",
      "purl": "pkg:rpm/almalinux/rubygem-rdoc",
      "ecosystem": "AlmaLinux:9"
    },
    "database_specific": {
      "source": "https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:72286.json"
    }
  },
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          },
          {
            "fixed": "3.2.5-168.el9_8"
          }
        ]
      }
    ],
    "package": {
      "name": "rubygem-rexml",
      "purl": "pkg:rpm/almalinux/rubygem-rexml",
      "ecosystem": "AlmaLinux:9"
    },
    "database_specific": {
      "source": "https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:72286.json"
    }
  },
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          },
          {
            "fixed": "0.2.9-168.el9_8"
          }
        ]
      }
    ],
    "package": {
      "name": "rubygem-rss",
      "purl": "pkg:rpm/almalinux/rubygem-rss",
      "ecosystem": "AlmaLinux:9"
    },
    "database_specific": {
      "source": "https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:72286.json"
    }
  },
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          },
          {
            "fixed": "3.3.7-168.el9_8"
          }
        ]
      }
    ],
    "package": {
      "name": "rubygem-test-unit",
      "purl": "pkg:rpm/almalinux/rubygem-test-unit",
      "ecosystem": "AlmaLinux:9"
    },
    "database_specific": {
      "source": "https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:72286.json"
    }
  },
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          },
          {
            "fixed": "0.15.2-168.el9_8"
          }
        ]
      }
    ],
    "package": {
      "name": "rubygem-typeprof",
      "purl": "pkg:rpm/almalinux/rubygem-typeprof",
      "ecosystem": "AlmaLinux:9"
    },
    "database_specific": {
      "source": "https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:72286.json"
    }
  },
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          },
          {
            "fixed": "3.2.33-168.el9_8"
          }
        ]
      }
    ],
    "package": {
      "name": "rubygems",
      "purl": "pkg:rpm/almalinux/rubygems",
      "ecosystem": "AlmaLinux:9"
    },
    "database_specific": {
      "source": "https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:72286.json"
    }
  },
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          },
          {
            "fixed": "3.2.33-168.el9_8"
          }
        ]
      }
    ],
    "package": {
      "name": "rubygems-devel",
      "purl": "pkg:rpm/almalinux/rubygems-devel",
      "ecosystem": "AlmaLinux:9"
    },
    "database_specific": {
      "source": "https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:72286.json"
    }
  }
]

Publisher severity

No explicit severity was provided.

Event
#23580 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement