[ALSA-2026:50773] Important: ruby4.0 security, bug fix, and enhancement update
Type:
security
Severity:
important
Release date:
2026-09-14
Description:
Ruby is the interpreted scripting language for quick and easy object-oriented programming. It has many features to process text files and to do system management tasks (as in Perl). It is simple, straight-forward, and extensible. Security Fix(es): * zlib: zlib: Memory corruption via buffer overflow in Zlib::GzipReader (CVE-2026-27820) * net-imap: Net::IMAP: Arbitrary IMAP command injection via CRLF sequences in unvalidated input (CVE-2026-42257) * ruby/net-imap: ruby: Net::IMAP: Denial of Service via large iteration count in SCRAM authentication (CVE-2026-42256) * net-imap: Net::IMAP: Command injection via non-synchronizing literals (CVE-2026-47240) * net-imap: Net::IMAP: Arbitrary IMAP command injection due to improper input validation (CVE-2026-47242) * net-imap: rubygem-net-imap: Net::IMAP: Denial of Service via malformed command input (CVE-2026-47241) Bug Fix(es) and Enhancement(s): * ruby4.0: Rebase to the latest Ruby 4.0 release [almalinux-10.2.z] (JIRA:AlmaLinux-211310) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 ruby4.0-rubygem-mysql2-0.5.7-36.el10_2.aarch64.rpm 6e2bf05d760c6812499fd0a116046c8ae6a337df7a990ded72463c977894afb6
aarch64 ruby4.0-4.0.6-36.el10_2.aarch64.rpm e176ec3f59a5409d2be7f3097664c96c40f20d426c5a3e1fa2b34d1a84c5fa77
aarch64 ruby4.0-rubygem-pg-1.6.3-36.el10_2.aarch64.rpm e8f51d0d756c253dde61e694aaac5f976563b26b04d5fc4975c4306bb5a9886f
aarch64 ruby4.0-devel-4.0.6-36.el10_2.aarch64.rpm f93f75479436ecb8ce989d81e80c13b36f5ce4ce89b9d87e8eaa57afe7e12b8a
noarch ruby4.0-doc-4.0.6-36.el10_2.noarch.rpm 10b9f69dd32723f605cbc08edd0d11d6f4c657671bda53ce633749a396f52e1b
ppc64le ruby4.0-rubygem-pg-1.6.3-36.el10_2.ppc64le.rpm 7d6cf8265df4f47619e5d0df2dd4a9b8afbabedc96a920a8332fcd72d5b1e3c7
ppc64le ruby4.0-devel-4.0.6-36.el10_2.ppc64le.rpm 98d2a50127e40719e69d2b4b81a40a7de52a08343acc5914eb0c37dbe90539e7
ppc64le ruby4.0-rubygem-mysql2-0.5.7-36.el10_2.ppc64le.rpm a4bedd2ea205316214a0e932373a99aea441d5bb39ea8fada5da4a89a8e279f1
ppc64le ruby4.0-4.0.6-36.el10_2.ppc64le.rpm d03e99b04cba4e4f8f4e3427e52ee097725dcd9efb7d0bf3cb062747445a2b58
s390x ruby4.0-4.0.6-36.el10_2.s390x.rpm 389f27fbac266988f935ed642e411eda28e06706100ee44554707e6fdd87240b
s390x ruby4.0-rubygem-mysql2-0.5.7-36.el10_2.s390x.rpm ac994ba7f00a2b88a9c47c463dc6ed779c8227e889fe77f95f132fa976c5e4c0
s390x ruby4.0-rubygem-pg-1.6.3-36.el10_2.s390x.rpm b2f4edd94ae1e78e3817a77c73aa5b67b28869bc679c4f4965a2824ecf01d17b
s390x ruby4.0-devel-4.0.6-36.el10_2.s390x.rpm b923e68ce7cb4262723f906972aacc7a39362959e91ee861f126c0433c84e4ef
x86_64 ruby4.0-devel-4.0.6-36.el10_2.x86_64.rpm 1b6f7612cd4c85f98cafd38f23490ca0c9f4d2b117d496cfd2932c29d137fbb6
x86_64 ruby4.0-rubygem-pg-1.6.3-36.el10_2.x86_64.rpm 7572d0c5321d743cac743887a9b8e41c8a5051f1dd06756bec54c245a5ad5b1b
x86_64 ruby4.0-4.0.6-36.el10_2.x86_64.rpm 8d8ae3060a31e87b34cc885350a915503a51481081fe066badfc258272c82675
x86_64 ruby4.0-rubygem-mysql2-0.5.7-36.el10_2.x86_64.rpm 96e03642b2598591ece6f388230a877427ad5b6c9da80aa14b691039418dfc73
x86_64_v2 ruby4.0-4.0.6-36.el10_2.x86_64_v2.rpm 94b094a1919485424920161e872e7a4bd58498cae5f957f6e6352f90b5be9935
x86_64_v2 ruby4.0-rubygem-mysql2-0.5.7-36.el10_2.x86_64_v2.rpm af4de3e8f367563ea9519e03af7d68777d76aa94da73702f8c1f5f23cceb8e75
x86_64_v2 ruby4.0-devel-4.0.6-36.el10_2.x86_64_v2.rpm c74306d509c1e0cdbe3f8c521b712779d940a78230c94df2f07ee0b5de234acc
x86_64_v2 ruby4.0-rubygem-pg-1.6.3-36.el10_2.x86_64_v2.rpm ef1db25adb551dd018c2c5a5c142e0fc0cf7d3149cbf9f749140d2ac69d2f45a
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.