| Index | index by Group | index by Distribution | index by Vendor | index by creation date | index by Name | Mirrors | Help | Search |
| Name: ruby | Distribution: AlmaLinux |
| Version: 3.0.7 | Vendor: AlmaLinux |
| Release: 170.el9_8 | Build date: Mon Nov 9 12:36:39 2026 |
| Group: Unspecified | Build host: arm-builder03-almalinux-org.novalocal |
| Size: 144723 | Source RPM: ruby-3.0.7-170.el9_8.src.rpm |
| Packager: AlmaLinux Packaging Team <packager@almalinux.org> | |
| Url: https://www.ruby-lang.org/ | |
| Summary: An interpreter of object-oriented scripting language | |
Ruby is the interpreted scripting language for quick and easy object-oriented programming. It has many features to process text files and to do system management tasks (as in Perl). It is simple, straight-forward, and extensible.
(Ruby or BSD) and Public Domain and MIT and CC0 and zlib and UCD
* Mon Nov 02 2026 Jun Aruga <jaruga@redhat.com> - 3.0.7-170
- Fix memory leak on compile error in a later branch of an alternation, found
via CVE-2026-89078 PR #13332.
- Keep the program size error from OP_END with subexp calls. Fix a bug found via
CVE-2026-93577, CVE-2026-97229 PR #19020.
* Fri Oct 30 2026 Jun Aruga <jaruga@redhat.com> - 3.0.7-169
- CVE-2026-89078: Prevent double free for too big repetition quantifiers.
(RHEL-292219)
- CVE-2026-110264: Reject overflowed repeat/null-check IDs in huge regexps.
(RHEL-292085)
- CVE-2026-93577, CVE-2026-97229: Avoid overflow in the regexp compiler's
program size arithmetic. (RHEL-292141, RHEL-292112)
* Wed Sep 02 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 3.0.7-168
- Fix memory exhaustion via unknown DNS resource types in resolv.
(CVE-2026-80212)
Resolves: RHEL-252045
* Thu Jun 11 2026 Jarek Prokop <jprokop@redhat.com> - 3.0.7-167
- Fix information disclosure via MITM attack bypassing TLS in net-imap.
(CVE-2026-42246)
Resolves: RHEL-181777
- Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258)
Resolves: RHEL-181808
* Mon Apr 27 2026 Jarek Prokop <jprokop@redhat.com> - 3.0.7-166
- Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316)
Resolves: RHEL-171256
* Fri Apr 11 2025 Jarek Prokop <jprokop@redhat.com> - 3.0.7-165
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
Resolves: RHEL-86104
- Fix ReDoS in CGI::Util#escapeElement. (CVE-2025-27220)
Resolves: RHEL-86130
* Thu Mar 06 2025 Jarek Prokop <jprokop@redhat.com> - 3.0.7-164
- Undefine GC compaction methods on ppc64le.
Resolves: RHEL-83136
- Fix printing warnings when using IRB from a script.
Resolves: RHEL-83044
* Tue Nov 26 2024 Jarek Prokop <jprokop@redhat.com> - 3.0.7-163
- Fix REXML ReDoS vulnerability. (CVE-2024-49761)
Resolves: RHEL-68525
/usr/bin/erb /usr/bin/ruby /usr/lib/.build-id /usr/lib/.build-id/67 /usr/lib/.build-id/67/1774d0bbe6536ea9d2e424a43e9069206e4772 /usr/share/licenses/ruby /usr/share/licenses/ruby/BSDL /usr/share/licenses/ruby/COPYING /usr/share/licenses/ruby/COPYING.ja /usr/share/licenses/ruby/GPL /usr/share/licenses/ruby/LEGAL /usr/share/man/man1/erb.1.gz /usr/share/man/man1/ruby.1.gz
Generated by rpm2html 1.8.1
Fabrice Bellet, Wed Nov 11 01:01:19 2026