Red Hat Product Errata RHSA-2026:26655 - Security Advisory Issued: 2026-06-17 Updated: 2026-06-17 RHSA-2026:26655 - Security Advisory Overview Updated Packages Synopsis Important: ruby:3.3 security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for the ruby:3.3 module is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. Security Fix(es): erb: ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux Server - AUS 9.4 x86_64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.4 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.4 x86_64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.4 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.4 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.4 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.4 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.4 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.4 s390x Fixes BZ - 2461369 - CVE-2026-41316 erb: ERB: Arbitrary code execution via deserialization bypass CVEs CVE-2026-41316 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux Server - AUS 9.4 SRPM ruby-3.3.10-6.module+el9.4.0+24333+ed4ca411.src.rpm SHA-256: 7191745c27b68a50782fb8a30ce195ef7e81e3d48a3c1438d4e558f119b1766e rubygem-mysql2-0.5.5-1.module+el9.4.0+21222+faeeed2f.src.rpm SHA-256: 419e0ebe6f814e8e7f62662ce27d77fb3b60316c9d7e3b94d78327940a769e03 rubygem-pg-1.5.4-1.module+el9.4.0+21222+faeeed2f.src.rpm SHA-256: e8a8a2a8459b15625eecc0d993a25e825c63a761b8f55bd22b861557633a8029 x86_64 ruby-default-gems-3.3.10-6.module+el9.4.0+24333+ed4ca411.noarch.rpm SHA-256: 3ada386dade26ebeacec7b9ed3311e0b4ed29186f95049169343627572d5d94a ruby-doc-3.3.10-6.module+el9.4.0+24333+ed4ca411.noarch.rpm SHA-256: 10ccaee5fcd887b637e66c96bde916c9ed2c456bac0290c2d7ec6b5256618389 rubygem-bundler-2.5.22-6.module+el9.4.0+24333+ed4ca411.noarch.rpm SHA-256: da498a1a657717083e529d9a311cdab260c3b20f66c46a91ca7f7cdd4c83a4c9 rubygem-irb-1.13.1-6.module+el9.4.0+24333+ed4ca411.noarch.rpm SHA-256: d9cf2c4e371f57af9166ae9cb2377a8b70bab12f3c9c1268152896dfb2ba58a2 rubygem-minitest-5.20.0-6.module+el9.4.0+24333+ed4ca411.noarch.rpm SHA-256: b4362a54c73f3e448e11d4545dadf662c98faaf4e40a4166fcb3b885c84d5bb1 rubygem-mysql2-doc-0.5.5-1.module+el9.4.0+21222+faeeed2f.noarch.rpm SHA-256: 776791c4f98d288bc7f7475777aabe7665f6f34fa31f101b3345c2e69467232a rubygem-pg-doc-1.5.4-1.module+el9.4.0+21222+faeeed2f.noarch.rpm SHA-256: ff3e9f4f4ec4321b5b107c2f643f24c87f2ea1ecb6c3e560845d3cfff9538354 rubygem-power_assert-2.0.3-6.module+el9.4.0+24333+ed4ca411.noarch.rpm SHA-256: 1f089c67648cb40875e6c85ee2769e09483e6932cfe2e33806910d8fccf7f9cc rubygem-rake-13.1.0-6.module+el9.4.0+24333+ed4ca411.noarch.rpm SHA-256: 14b68cdec959b715b690309a3b750bba935d35f95e2f5e3de199b134cc6d14e2 rubygem-rdoc-6.6.3.1-6.module+el9.4.0+24333+ed4ca411.noarch.rpm SHA-256: b2885b260cec356d3086bfb27d6481e9390ea8f0d398904b77f90c56cccc8ea4 rubygem-rexml-3.4.4-6.module+el9.4.0+24333+ed4ca411.noarch.rpm SHA-256: 64295feb1d93b9cb3c9b9572eb83cb59f70e8531c914a2d1a786e00b9aa2bd30 rubygem-rss-0.3.1-6.module+el9.4.0+24333+ed4ca411.noarch.rpm SHA-256: d6c882a3a84671ec638847a0601502ef0f3de1f9356ec582e5078f80e7af38aa rubygem-test-unit-3.6.1-6.module+el9.4.0+24333+ed4ca411.noarch.rpm SHA-256: 873e17fdd0bccdadc0bb14d5bc65762042c2856e4ef4eadd4c494784e30ad148 rubygem-typeprof-0.21.9-6.module+el9.4.0+24333+ed4ca411.noarch.rpm SHA-256: 01b7a9b37e85388b6cb430dfc30b9119446f7187a06632681f51efe10f8ad3b9 rubygems-3.5.22-6.module+el9.4.0+24333+ed4ca411.noarch.rpm SHA-256: 8926df77bf3d9cd020fb8ac4e86e167bf52bf1054a62987791ef002e7de83bcb rubygems-devel-3.5.22-6.module+el9.4.0+24333+ed4ca411.noarch.rpm SHA-256: 52cf982cbc31fb58a872f7fe2efa71bc0e139bec911d0a2c9ea73db4e4a07d4e ruby-default-gems-3.3.10-6.module+el9.4.0+24333+ed4ca411.noarch.rpm SHA-256: 3ada386dade26ebeacec7b9ed3311e0b4ed29186f95049169343627572d5d94a ruby-doc-3.3.10-6.module+el9.4.0+24333+ed4ca411.noarch.rpm SHA-256: 10ccaee5fcd887b637e66c96bde916c9ed2c456bac0290c2d7ec6b5256618389 rubygem-bundler-2.5.22-6.module+el9.4.0+24333+ed4ca411.noarch.rpm SHA-256: da498a1a657717083e529d9a311cdab260c3b20f66c46a91ca7f7cdd4c83a4c9 rubygem-irb-1.13.1-6.module+el9.4.0+24333+ed4ca411.noarch.rpm SHA-256: d9cf2c4e371f57af9166ae9cb2377a8b70bab12f3c9c1268152896dfb2ba58a2 rubygem-minitest-5.20.0-6.module+el9.4.0+24333+ed4ca411.noarch.rpm SHA-256: b4362a54c73f3e448e11d4545dadf662c98faaf4e40a4166fcb3b885c84d5bb1 rubygem-mysql2-doc-0.5.5-1.module+el9.4.0+21222+faeeed2f.noarch.rpm SHA-256: 776791c4f98d288bc7f7475777aabe7665f6f34fa31f101b3345c2e69467232a rubygem-pg-doc-1.5.4-1.module+el9.4.0+21222+faeeed2f.noarch.rpm SHA-256: ff3e9f4f4ec4321b5b107c2f643f24c87f2ea1ecb6c3e560845d3cfff9538354 rubygem-power_assert-2.0.3-6.module+el9.4.0+24333+ed4ca411.noarch.rpm SHA-256: 1f089c67648cb40875e6c85ee2769e09483e6932cfe2e33806910d8fccf7f9cc rubygem-rake-13.1.0-6.module+el9.4.0+24333+ed4ca411.noarch.rpm SHA-256: 14b68cdec959b715b690309a3b750bba935d35f95e2f5e3de199b134cc6d14e2 rubygem-rdoc-6.6.3.1-6.module+el9.4.0+24333+ed4ca411.noarch.rpm SHA-256: b2885b260cec356d3086bfb27d6481e9390ea8f0d398904b77f90c56cccc8ea4 rubygem-rexml-3.4.4-6.module+el9.4.0+24333+ed4ca411.noarch.rpm SHA-256: 64295feb1d93b9cb3c9b9572eb83cb59f70e8531c914a2d1a786e00b9aa2bd30 rubygem-rss-0.3.1-6.module+el9.4.0+24333+ed4ca411.noarch.rpm SHA-256: d6c882a3a84671ec638847a0601502ef0f3de1f9356ec582e5078f80e7af38aa rubygem-test-unit-3.6.1-6.module+el9.4.0+24333+ed4ca411.noarch.rpm SHA-256: 873e17fdd0bccdadc0bb14d5bc65762042c2856e4ef4eadd4c494784e30ad148 rubygem-typeprof-0.21.9-6.module+el9.4.0+24333+ed4ca411.noarch.rpm SHA-256: 01b7a9b37e85388b6cb430dfc30b9119446f7187a06632681f51efe10f8ad3b9 rubygems-3.5.22-6.module+el9.4.0+24333+ed4ca411.noarch.rpm SHA-256: 8926df77bf3d9cd020fb8ac4e86e167bf52bf1054a62987791ef002e7de83bcb rubygems-devel-3.5.22-6.module+el9.4.0+24333+ed4ca411.noarch.rpm SHA-256: 52cf982cbc31fb58a872f7fe2efa71bc0e139bec911d0a2c9ea73db4e4a07d4e ruby-3.3.10-6.module+el9.4.0+24333+ed4ca411.i686.rpm SHA-256: 0e858f849fdd38ff175a5c1bafa936014cd446f68aef7078d8011b3b7ed36c15 ruby-3.3.10-6.module+el9.4.0+24333+ed4ca411.x86_64.rpm SHA-256: 0eb8b160a47063a532758718ad3fce10b480b6cf2ba407722253764abc449f40 ruby-bundled-gems-3.3.10-6.module+el9.4.0+24333+ed4ca411.i686.rpm SHA-256: aae95e1ec14a47d534faf1c2d52b7a30a6b3b13c0aa7d299e2994b7659d9b0ef ruby-bundled-gems-3.3.10-6.module+el9.4.0+24333+ed4ca411.x86_64.rpm SHA-256: ff839f60bc8792efa8705acfcb6bbdfe017474637aa59e5e94cc0e91cc5ff859 ruby-bundled-gems-debuginfo-3.3.10-6.module+el9.4.0+24333+ed4ca411.i686.rpm SHA-256: f5c2e060c8d03910bbc49ba292db93abff408620b4659ffbe7cbf5d8e84368df ruby-bundled-gems-debuginfo-3.3.10-6.module+el9.4.0+24333+ed4ca411.x86_64.rpm SHA-256: b2a305024591a3b9939b539fcb6fa7e7c751b96278a996ebccf698ea3887400c ruby-debuginfo-3.3.10-6.module+el9.4.0+24333+ed4ca411.i686.rpm SHA-256: 0c74d3745bebab2dcc7e40f864e939356072c549adf787cf1d90fcac5c5dcf8a ruby-debuginfo-3.3.10-6.module+el9.4.0+24333+ed4ca411.x86_64.rpm SHA-256: ea469c8fb36d92dae7255299b4e678e14cfa38d313a6891f4b691aa300721cfb ruby-debugsource-3.3.10-6.module+el9.4.0+24333+ed4ca411.i686.rpm SHA-256: 5a870f65707931cf6c4a8c020571027ef5b2e48c916c5759fbe2bd1d6528d8ab ruby-debugsource-3.3.10-6.module+el9.4.0+24333+ed4ca411.x86_64.rpm SHA-256: 251c118e0bd4cfa79d68c9e0cc98bf49e5e3d86fecf1f2ca4d62122628e055ae ruby-default-gems-3.3.10-6.module+el9.4.0+24333+ed4ca411.noarch.rpm SHA-256: 3ada386dade26ebeacec7b9ed3311e0b4ed29186f95049169343627572d5d94a ruby-devel-3.3.10-6.module+el9.4.0+24333+ed4ca411.i686.rpm SHA-256: 348fdbe875e547146acff0c0d7ba75015b7bac4dd91ef7f34da0f675e341e729 ruby-devel-3.3.10-6.module+el9.4.0+24333+ed4ca411.x86_64.rpm SHA-256: 5564be571a99f8e171e918df809c9dbd197a53b081a4186e62e4d5448c452872 ruby-doc-3.3.10-6.module+el9.4.0+24333+ed4ca411.noarch.rpm SHA-256: 10ccaee5fcd887b637e66c96bde916c9ed2c456bac0290c2d7ec6b5256618389 ruby-libs-3.3.10-6.module+el9.4.0+24333+ed4ca411.i686.rpm SHA-256: c7271dfbb0f8dd83161ecb1db3a6f66c790892649a40bfe24d2e102ae2d88ddd ruby-libs-3.3.10-6.module+el9.4.0+24333+ed4ca411.x86_64.rpm SHA-256: 1f01673f7322947c87429f4b03bf0afab5d677e77fe4e2d01c0051762e4c6952 ruby-libs-debuginfo-3.3.10-6.module+el9.4.0+24333+ed4ca411.i686.rpm SHA-256: f722e39fd2a288bee880c03fc8d487fc320920897c76ee83714d7dadb012d1df ruby-libs-debuginfo-3.3.10-6.module+el9.4.0+24333+ed4ca411.x86_64.rpm SHA-256: 186cad635f42094c66a816bff67364ba2cbc2b924bacce44be767d6f8374a76b rubygem-bigdecimal-3.1.5-6.module+el9.4.0+24333+ed4ca411.i686.rpm SHA-256: 5114719cd31ed6b0f9a73aba633f5f168901d196d7151a924263bd2cdc0279ed rubygem-bigdecimal-3.1.5-6.module+el9.4.0+24333+ed4ca411.x86_64.rpm SHA-256: 6e3d639ba16b38ee8f1ccf7bdef8eeda53275751d5b572a6c5e2142660491a80 r