RHSA-2025:4488

See a problem?
Please try reporting it to the source first.

Source

https://access.redhat.com/errata/RHSA-2025:4488

Import Source

https://security.access.redhat.com/data/osv/RHSA-2025:4488.json

JSON Data

https://api.test.osv.dev/v1/vulns/RHSA-2025:4488

Upstream

CVE-2024-39908

CVE-2024-41123

CVE-2024-41946

CVE-2024-43398

CVE-2025-27219

CVE-2025-27220

CVE-2025-27221

Published

2025-05-06T10:04:00Z

Modified

2025-09-13T10:12:54Z

Severity

5.9 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator

Summary

Red Hat Security Advisory: ruby:3.1 security update

Details

References

Affected packages

Red Hat:enterprise_linux:9::appstream / ruby-3.1.7

Package

Name: ruby-3.1.7
Purl: pkg:rpm/redhat/ruby

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

146.module+el9.5.0+23003+a4c328ce.x86_64.rpm-ruby:3

Red Hat:enterprise_linux:9::appstream / ruby-bundled-gems-3.1.7

Package

Name: ruby-bundled-gems-3.1.7
Purl: pkg:rpm/redhat/ruby-bundled-gems

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

146.module+el9.5.0+23003+a4c328ce.x86_64.rpm-ruby:3

Red Hat:enterprise_linux:9::appstream / ruby-bundled-gems-debuginfo-3.1.7

Package

Name: ruby-bundled-gems-debuginfo-3.1.7
Purl: pkg:rpm/redhat/ruby-bundled-gems-debuginfo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

146.module+el9.5.0+23003+a4c328ce.x86_64.rpm-ruby:3

Red Hat:enterprise_linux:9::appstream / ruby-debuginfo-3.1.7

Package

Name: ruby-debuginfo-3.1.7
Purl: pkg:rpm/redhat/ruby-debuginfo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

146.module+el9.5.0+23003+a4c328ce.x86_64.rpm-ruby:3

Red Hat:enterprise_linux:9::appstream / ruby-debugsource-3.1.7

Package

Name: ruby-debugsource-3.1.7
Purl: pkg:rpm/redhat/ruby-debugsource

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

146.module+el9.5.0+23003+a4c328ce.x86_64.rpm-ruby:3

Red Hat:enterprise_linux:9::appstream / ruby-default-gems-3.1.7

Package

Name: ruby-default-gems-3.1.7
Purl: pkg:rpm/redhat/ruby-default-gems

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

146.module+el9.5.0+23003+a4c328ce.noarch.rpm-ruby:3

Red Hat:enterprise_linux:9::appstream / ruby-devel-3.1.7

Package

Name: ruby-devel-3.1.7
Purl: pkg:rpm/redhat/ruby-devel

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

146.module+el9.5.0+23003+a4c328ce.x86_64.rpm-ruby:3

Red Hat:enterprise_linux:9::appstream / ruby-doc-3.1.7

Package

Name: ruby-doc-3.1.7
Purl: pkg:rpm/redhat/ruby-doc

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

146.module+el9.5.0+23003+a4c328ce.noarch.rpm-ruby:3

Red Hat:enterprise_linux:9::appstream / ruby-libs-3.1.7

Package

Name: ruby-libs-3.1.7
Purl: pkg:rpm/redhat/ruby-libs

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

146.module+el9.5.0+23003+a4c328ce.x86_64.rpm-ruby:3

Red Hat:enterprise_linux:9::appstream / ruby-libs-debuginfo-3.1.7

Package

Name: ruby-libs-debuginfo-3.1.7
Purl: pkg:rpm/redhat/ruby-libs-debuginfo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

146.module+el9.5.0+23003+a4c328ce.x86_64.rpm-ruby:3

Red Hat:enterprise_linux:9::appstream / rubygem-bigdecimal-3.1.1

Package

Name: rubygem-bigdecimal-3.1.1
Purl: pkg:rpm/redhat/rubygem-bigdecimal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

146.module+el9.5.0+23003+a4c328ce.x86_64.rpm-ruby:3

Red Hat:enterprise_linux:9::appstream / rubygem-bigdecimal-debuginfo-3.1.1

Package

Name: rubygem-bigdecimal-debuginfo-3.1.1
Purl: pkg:rpm/redhat/rubygem-bigdecimal-debuginfo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

146.module+el9.5.0+23003+a4c328ce.x86_64.rpm-ruby:3

Red Hat:enterprise_linux:9::appstream / rubygem-bundler-2.3.27

Package

Name: rubygem-bundler-2.3.27
Purl: pkg:rpm/redhat/rubygem-bundler

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

146.module+el9.5.0+23003+a4c328ce.noarch.rpm-ruby:3

Red Hat:enterprise_linux:9::appstream / rubygem-io-console-0.5.11

Package

Name: rubygem-io-console-0.5.11
Purl: pkg:rpm/redhat/rubygem-io-console

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

146.module+el9.5.0+23003+a4c328ce.x86_64.rpm-ruby:3

Red Hat:enterprise_linux:9::appstream / rubygem-io-console-debuginfo-0.5.11

Package

Name: rubygem-io-console-debuginfo-0.5.11
Purl: pkg:rpm/redhat/rubygem-io-console-debuginfo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

146.module+el9.5.0+23003+a4c328ce.x86_64.rpm-ruby:3

Red Hat:enterprise_linux:9::appstream / rubygem-irb-1.4.1

Package

Name: rubygem-irb-1.4.1
Purl: pkg:rpm/redhat/rubygem-irb

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

146.module+el9.5.0+23003+a4c328ce.noarch.rpm-ruby:3

Red Hat:enterprise_linux:9::appstream / rubygem-json-2.6.1

Package

Name: rubygem-json-2.6.1
Purl: pkg:rpm/redhat/rubygem-json

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

146.module+el9.5.0+23003+a4c328ce.x86_64.rpm-ruby:3

Red Hat:enterprise_linux:9::appstream / rubygem-json-debuginfo-2.6.1

Package

Name: rubygem-json-debuginfo-2.6.1
Purl: pkg:rpm/redhat/rubygem-json-debuginfo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

146.module+el9.5.0+23003+a4c328ce.x86_64.rpm-ruby:3

Red Hat:enterprise_linux:9::appstream / rubygem-minitest-5.15.0

Package

Name: rubygem-minitest-5.15.0
Purl: pkg:rpm/redhat/rubygem-minitest

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

146.module+el9.5.0+23003+a4c328ce.noarch.rpm-ruby:3

Red Hat:enterprise_linux:9::appstream / rubygem-mysql2-0.5.4

Package

Name: rubygem-mysql2-0.5.4
Purl: pkg:rpm/redhat/rubygem-mysql2

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.module+el9.1.0+15737+76195479.x86_64.rpm-ruby:3

Red Hat:enterprise_linux:9::appstream / rubygem-mysql2-debuginfo-0.5.4

Package

Name: rubygem-mysql2-debuginfo-0.5.4
Purl: pkg:rpm/redhat/rubygem-mysql2-debuginfo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.module+el9.1.0+15737+76195479.x86_64.rpm-ruby:3

Red Hat:enterprise_linux:9::appstream / rubygem-mysql2-debugsource-0.5.4

Package

Name: rubygem-mysql2-debugsource-0.5.4
Purl: pkg:rpm/redhat/rubygem-mysql2-debugsource

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.module+el9.1.0+15737+76195479.x86_64.rpm-ruby:3

Red Hat:enterprise_linux:9::appstream / rubygem-mysql2-doc-0.5.4

Package

Name: rubygem-mysql2-doc-0.5.4
Purl: pkg:rpm/redhat/rubygem-mysql2-doc

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.module+el9.1.0+15737+76195479.noarch.rpm-ruby:3

Red Hat:enterprise_linux:9::appstream / rubygem-pg-1.3.5

Package

Name: rubygem-pg-1.3.5
Purl: pkg:rpm/redhat/rubygem-pg

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.module+el9.1.0+15737+76195479.x86_64.rpm-ruby:3

Red Hat:enterprise_linux:9::appstream / rubygem-pg-debuginfo-1.3.5

Package

Name: rubygem-pg-debuginfo-1.3.5
Purl: pkg:rpm/redhat/rubygem-pg-debuginfo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.module+el9.1.0+15737+76195479.x86_64.rpm-ruby:3

Red Hat:enterprise_linux:9::appstream / rubygem-pg-debugsource-1.3.5

Package

Name: rubygem-pg-debugsource-1.3.5
Purl: pkg:rpm/redhat/rubygem-pg-debugsource

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.module+el9.1.0+15737+76195479.x86_64.rpm-ruby:3

Red Hat:enterprise_linux:9::appstream / rubygem-pg-doc-1.3.5

Package

Name: rubygem-pg-doc-1.3.5
Purl: pkg:rpm/redhat/rubygem-pg-doc

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.module+el9.1.0+15737+76195479.noarch.rpm-ruby:3

Red Hat:enterprise_linux:9::appstream / rubygem-power_assert-2.0.1

Package

Name: rubygem-power_assert-2.0.1
Purl: pkg:rpm/redhat/rubygem-power_assert

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

146.module+el9.5.0+23003+a4c328ce.noarch.rpm-ruby:3

Red Hat:enterprise_linux:9::appstream / rubygem-psych-4.0.4

Package

Name: rubygem-psych-4.0.4
Purl: pkg:rpm/redhat/rubygem-psych

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

146.module+el9.5.0+23003+a4c328ce.x86_64.rpm-ruby:3

Red Hat:enterprise_linux:9::appstream / rubygem-psych-debuginfo-4.0.4

Package

Name: rubygem-psych-debuginfo-4.0.4
Purl: pkg:rpm/redhat/rubygem-psych-debuginfo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

146.module+el9.5.0+23003+a4c328ce.x86_64.rpm-ruby:3

Red Hat:enterprise_linux:9::appstream / rubygem-rake-13.0.6

Package

Name: rubygem-rake-13.0.6
Purl: pkg:rpm/redhat/rubygem-rake

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

146.module+el9.5.0+23003+a4c328ce.noarch.rpm-ruby:3

Red Hat:enterprise_linux:9::appstream / rubygem-rbs-2.7.0

Package

Name: rubygem-rbs-2.7.0
Purl: pkg:rpm/redhat/rubygem-rbs

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

146.module+el9.5.0+23003+a4c328ce.x86_64.rpm-ruby:3

Red Hat:enterprise_linux:9::appstream / rubygem-rbs-debuginfo-2.7.0

Package

Name: rubygem-rbs-debuginfo-2.7.0
Purl: pkg:rpm/redhat/rubygem-rbs-debuginfo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

146.module+el9.5.0+23003+a4c328ce.x86_64.rpm-ruby:3

Red Hat:enterprise_linux:9::appstream / rubygem-rdoc-6.4.1.1

Package

Name: rubygem-rdoc-6.4.1.1
Purl: pkg:rpm/redhat/rubygem-rdoc

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

146.module+el9.5.0+23003+a4c328ce.noarch.rpm-ruby:3

Red Hat:enterprise_linux:9::appstream / rubygem-rexml-3.3.9

Package

Name: rubygem-rexml-3.3.9
Purl: pkg:rpm/redhat/rubygem-rexml

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

146.module+el9.5.0+23003+a4c328ce.noarch.rpm-ruby:3

Red Hat:enterprise_linux:9::appstream / rubygem-rss-0.3.1

Package

Name: rubygem-rss-0.3.1
Purl: pkg:rpm/redhat/rubygem-rss

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

146.module+el9.5.0+23003+a4c328ce.noarch.rpm-ruby:3

Red Hat:enterprise_linux:9::appstream / rubygem-test-unit-3.5.3

Package

Name: rubygem-test-unit-3.5.3
Purl: pkg:rpm/redhat/rubygem-test-unit

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

146.module+el9.5.0+23003+a4c328ce.noarch.rpm-ruby:3

Red Hat:enterprise_linux:9::appstream / rubygem-typeprof-0.21.3

Package

Name: rubygem-typeprof-0.21.3
Purl: pkg:rpm/redhat/rubygem-typeprof

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

146.module+el9.5.0+23003+a4c328ce.noarch.rpm-ruby:3

Red Hat:enterprise_linux:9::appstream / rubygems-3.3.27

Package

Name: rubygems-3.3.27
Purl: pkg:rpm/redhat/rubygems

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

146.module+el9.5.0+23003+a4c328ce.noarch.rpm-ruby:3

Red Hat:enterprise_linux:9::appstream / rubygems-devel-3.3.27

Package

Name: rubygems-devel-3.3.27
Purl: pkg:rpm/redhat/rubygems-devel

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

146.module+el9.5.0+23003+a4c328ce.noarch.rpm-ruby:3