Red Hat Product Errata RHSA-2026:26312 - Security Advisory Issued: 2026-06-16 Updated: 2026-06-16 RHSA-2026:26312 - Security Advisory Overview Updated Packages Synopsis Important: ruby security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for ruby is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. Security Fix(es): erb: ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux Server - AUS 9.4 x86_64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.4 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.4 x86_64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.4 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.4 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.4 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.4 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.4 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.4 s390x Fixes BZ - 2461369 - CVE-2026-41316 erb: ERB: Arbitrary code execution via deserialization bypass CVEs CVE-2026-41316 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux Server - AUS 9.4 SRPM ruby-3.0.7-162.el9_4.2.src.rpm SHA-256: b35638ef1cee4b7c32d55076ef2ef30c276d05647dfe08745e1f8f9810fbef78 x86_64 ruby-3.0.7-162.el9_4.2.i686.rpm SHA-256: 15c1f72ddc639c88f151246bf490ea8febb00eff31fe268c5ed4ae4796d6f577 ruby-3.0.7-162.el9_4.2.x86_64.rpm SHA-256: 7f3cbb43797b7935c519ffd1fd37a0f776afc1dbb99d9c719db3a872ed8cf73f ruby-debuginfo-3.0.7-162.el9_4.2.i686.rpm SHA-256: 04abe9157a3554f4778208983887a7f93044c17349bf318972d259ecefcfc52b ruby-debuginfo-3.0.7-162.el9_4.2.x86_64.rpm SHA-256: 73a796522deb4958475846df5bc049a68c84c5231409e282bfdafaeb9845d6a7 ruby-debugsource-3.0.7-162.el9_4.2.i686.rpm SHA-256: dca5e07e86cf317b79dea1cac04fc314b32d5b7757c46ee40fda25c5c8f03482 ruby-debugsource-3.0.7-162.el9_4.2.x86_64.rpm SHA-256: 5861f62dab37dc30e0ac7915e1917b0a134d5521d3cd38822e78a77cf2e686e2 ruby-default-gems-3.0.7-162.el9_4.2.noarch.rpm SHA-256: 1692f362a80f5fe8e6ef4e305d596e0ba3706366d218ee6d53d307b20c958429 ruby-devel-3.0.7-162.el9_4.2.i686.rpm SHA-256: ebd6c86c27b31c9b1b66234e819ca48c12645ebae79d26c3813a3921a0c209e9 ruby-devel-3.0.7-162.el9_4.2.x86_64.rpm SHA-256: 0e0785b89c23e6565340845f550e0b6fe57454ee6eba306eaff2598e8eaa42f1 ruby-libs-3.0.7-162.el9_4.2.i686.rpm SHA-256: d3f83b893e9b0e7735ed78bbc2791536272904cfcc69d949a1383b13e77fdb46 ruby-libs-3.0.7-162.el9_4.2.x86_64.rpm SHA-256: fa22a7ab69eda6f1164a6eabb3a710f79e690ad348249b2c03dfee16ff173be6 ruby-libs-debuginfo-3.0.7-162.el9_4.2.i686.rpm SHA-256: 16ca4b318d50d04202080028118663447897687c9304cfdb412692beea7fd4bc ruby-libs-debuginfo-3.0.7-162.el9_4.2.x86_64.rpm SHA-256: d6845651e8cf7fb5e34206909a167b4f01c2a2198cb6510a7cc69f2b378e68e8 rubygem-bigdecimal-3.0.0-162.el9_4.2.x86_64.rpm SHA-256: dc7262c7e96e27384514c63d994b5a457d92e753768e6c3147e5827f3cb69916 rubygem-bigdecimal-debuginfo-3.0.0-162.el9_4.2.i686.rpm SHA-256: df53a6b0ee13f8c03d4ff0fd27c77264dceb1330df15de30db61d4edab11efd8 rubygem-bigdecimal-debuginfo-3.0.0-162.el9_4.2.x86_64.rpm SHA-256: ad2dc161d8ffeef23283f408346ac5a849ca427d7d6288410868746cbd610dd3 rubygem-bundler-2.2.33-162.el9_4.2.noarch.rpm SHA-256: 2fbd7daa6aabe8e4b17f7619f5205dccc7930497ea2a8ff5df92dcdf4b501b2f rubygem-io-console-0.5.7-162.el9_4.2.x86_64.rpm SHA-256: e026f600166d6c6309e71a85723f123747023d51c473e2c4ce72452f18abb0d5 rubygem-io-console-debuginfo-0.5.7-162.el9_4.2.i686.rpm SHA-256: aa377311e23f47059ff816d5a855342e37cdb804e94dee286d192fcf4ff9f4c3 rubygem-io-console-debuginfo-0.5.7-162.el9_4.2.x86_64.rpm SHA-256: 34c19e1ea0b32b3bc53ce7040aabd60e9f1fcb55659140c46512e9f1157b4fd3 rubygem-irb-1.3.5-162.el9_4.2.noarch.rpm SHA-256: 5c365d91734ba4f764e99fa09747fcf6ebe6f30f4b53aed9140ee73d1506559d rubygem-json-2.5.1-162.el9_4.2.x86_64.rpm SHA-256: 0f9c7cc15dfabdabe368d10b5eeb7405604eefd97851dfb4f36228ec4ce1c66f rubygem-json-debuginfo-2.5.1-162.el9_4.2.i686.rpm SHA-256: 4444cf00ccbffd2ab522c2fd4d328eb2f103f491eea269555cb5ac299524b968 rubygem-json-debuginfo-2.5.1-162.el9_4.2.x86_64.rpm SHA-256: 09265225c98b5598d511eb57516c81a2228e6ac8153937f417cc704058aa3770 rubygem-minitest-5.14.2-162.el9_4.2.noarch.rpm SHA-256: 1484dce582cb9419b8fc7b56c257489ccdcfd90e481f3593c6e9dd4d48441b0e rubygem-power_assert-1.2.1-162.el9_4.2.noarch.rpm SHA-256: 16759a4a90a849c944acf7563355c620121d40d8a57c7eee00788a684bb9c033 rubygem-psych-3.3.2-162.el9_4.2.x86_64.rpm SHA-256: 18e6e79f0a578417ef7252533017633b44dc9629dcb4d0ba6e16e1d5bc5c59ee rubygem-psych-debuginfo-3.3.2-162.el9_4.2.i686.rpm SHA-256: aff6ffbafe1edb6cfa010a2ffa2191b6a6f56570ef2c56cf10c38fcb19807664 rubygem-psych-debuginfo-3.3.2-162.el9_4.2.x86_64.rpm SHA-256: 5fdc5374e9f8849b04e3eeefa4f9b8f4525b5bddb3feb570d8aecc4c787384db rubygem-rake-13.0.3-162.el9_4.2.noarch.rpm SHA-256: c4583b56f8b6379368b47be6e16db60699924ac51d2174493bc173188f2dda59 rubygem-rbs-1.4.0-162.el9_4.2.noarch.rpm SHA-256: 3ba90bbae536ad8d68b4f628045aed59e983650d0d12df0521295539e7a62dc6 rubygem-rdoc-6.3.4.1-162.el9_4.2.noarch.rpm SHA-256: 2e388cc936d26daf82baeceb80139ca41d6c4b06e34167b8b9635f76d25fe551 rubygem-rexml-3.2.5-162.el9_4.2.noarch.rpm SHA-256: af0c08d88f9310e98c56e01dc5ede90853421e95036b7dfa77f8c384a1fb085e rubygem-rss-0.2.9-162.el9_4.2.noarch.rpm SHA-256: ef31eea46c1018ac741c5a0095f76ae70afb5418e57297eb9f3755c4351d3ff1 rubygem-test-unit-3.3.7-162.el9_4.2.noarch.rpm SHA-256: 833c9c63431a8f9e79da3abda4b66b684cbfa48ede53612a1d367991bbb1d4da rubygem-typeprof-0.15.2-162.el9_4.2.noarch.rpm SHA-256: 8adcbd19223b3a9fa8931f1e501b5e1a0a5b9ac3eb2049d25a3839530f451a65 rubygems-3.2.33-162.el9_4.2.noarch.rpm SHA-256: fd150483a75eaf68549539239662c77d448a7ad46a72be73a272aa93b9e71a75 rubygems-devel-3.2.33-162.el9_4.2.noarch.rpm SHA-256: e5d1112515ebda8172b51567d4d20b001f4251d312575158e39a5f101aeb50c5 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.4 SRPM ruby-3.0.7-162.el9_4.2.src.rpm SHA-256: b35638ef1cee4b7c32d55076ef2ef30c276d05647dfe08745e1f8f9810fbef78 ppc64le ruby-3.0.7-162.el9_4.2.ppc64le.rpm SHA-256: 198a2c43e98904ec4ba86717506bf32bbc1ef9e477c2c211291ca3fe464b4d10 ruby-debuginfo-3.0.7-162.el9_4.2.ppc64le.rpm SHA-256: 5e03fc8d5e2bdda41825a6ac523ed08faf8c17575d9b8f89a132ed82b572b0b6 ruby-debugsource-3.0.7-162.el9_4.2.ppc64le.rpm SHA-256: ae8e4a8c5cc225590911c436e80c3848dda71b39932f4b52ec36486ce4a670da ruby-default-gems-3.0.7-162.el9_4.2.noarch.rpm SHA-256: 1692f362a80f5fe8e6ef4e305d596e0ba3706366d218ee6d53d307b20c958429 ruby-devel-3.0.7-162.el9_4.2.ppc64le.rpm SHA-256: 0ccd01453335d8564c34a40b8eca0a291661199deb14e90d203785010fe3e7c5 ruby-libs-3.0.7-162.el9_4.2.ppc64le.rpm SHA-256: 25e4454a9a7d955c5d4721d00c6b53feaef1db248ad1982309a53036749b6a1d ruby-libs-debuginfo-3.0.7-162.el9_4.2.ppc64le.rpm SHA-256: 77364fd28ae6378e379470913127bd241542781489f45b975411f3cc29f1288d rubygem-bigdecimal-3.0.0-162.el9_4.2.ppc64le.rpm SHA-256: e5ea84525d8624f372254b5d6823d9cb1300c594c017018efa59d13ef3d5a5b5 rubygem-bigdecimal-debuginfo-3.0.0-162.el9_4.2.ppc64le.rpm SHA-256: 88e8cbf38a0efd20beaec6c1c6ced7cc949f64e2816c4fc871a927970753edeb rubygem-bundler-2.2.33-162.el9_4.2.noarch.rpm SHA-256: 2fbd7daa6aabe8e4b17f7619f5205dccc7930497ea2a8ff5df92dcdf4b501b2f rubygem-io-console-0.5.7-162.el9_4.2.ppc64le.rpm SHA-256: fa229b6a9944e5dcb80cf7c2b4d5f48f2e804fc41152768cad8ed6201690957a rubygem-io-console-debuginfo-0.5.7-162.el9_4.2.ppc64le.rpm SHA-256: bb50065d636452d6e82308b44b2fc95acdeb8e08a8edf2cc43a1698b8ccbb5a9 rubygem-irb-1.3.5-162.el9_4.2.noarch.rpm SHA-256: 5c365d91734ba4f764e99fa09747fcf6ebe6f30f4b53aed9140ee73d1506559d rubygem-json-2.5.1-162.el9_4.2.ppc64le.rpm SHA-256: 1baee2d679de56e3ba8c10e727ddc7eb8ccb58e7560ac81d56e134f8f7967961 rubygem-json-debuginfo-2.5.1-162.el9_4.2.ppc64le.rpm SHA-256: 35e83bcd8469c39deb5d80e073c8c4b54f82293f38698eb1f342968ec983f6a1 rubygem-minitest-5.14.2-162.el9_4.2.noarch.rpm SHA-256: 1484dce582cb9419b8fc7b56c257489ccdcfd90e481f3593c6e9dd4d48441b0e rubygem-power_assert-1.2.1-162.el9_4.2.noarch.rpm SHA-256: 16759a4a90a849c944acf7563355c620121d40d8a57c7eee00788a684bb9c033 rubygem-psych-3.3.2-162.el9_4.2.ppc64le.rpm SHA-256: 04ffdc5bc42b174d7158f081ace95a615a0b2660ceeda5949535f9889c3b9a05 rubygem-psych-debuginfo-3.3.2-162.el9_4.2.ppc64le.rpm SHA-256: f2bfc18456f2134770200a178fb47ca4fb52eb892a61addf8a889bcf73e4cb52 rubygem-rake-13.0.3-162.el9_4.2.noarch.rpm SHA-256: c4583b56f8b6379368b47be6e16db60699924ac51d2174493bc173188f2dda59 rubygem-rbs-1.4.0-162.el9_4.2.noarch.rpm SHA-256: 3ba90bbae536ad8d68b4f628045aed59e983650d0d12df0521295539e7a62dc6 rubygem-rdoc-6.3.4.1-162.el9_4.2.noarch.rpm SHA-256: 2e388cc936d26daf82baeceb80139ca41d6c4b06e34167b8b9635f76d25fe551 rubygem-rexml-3.2.5-162.el9_4.2.noarch.rpm SHA-256: af0c08d88f9310e98c56e01dc5ede90853421e95036b7dfa77f8c384a1fb085e