elsa-2026-20614

oracle_linux
Description

ruby [3.3.10-6] - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171247 rubygem-abrt [0.4.0-1] - Update to abrt 0.4.0. Resolves: rhbz#1842476 rubygem-mysql2 [0.5.5-1] - Upgrade to mysql2 0.5.5. Related: RHEL-17090 rubygem-pg [1.5.4-1] - Upgrade to pg 1.5.4. Related: RHEL-17090

Timeline
Published
unknown
Last Modified
unknown
CVSS Details

CVSS details not available.

Affected Products

No product information available.

References

No references available.

Linked Vulnerabilities

No linked vulnerabilities found.

{
  "cves": [
    "CVE-2026-41316"
  ],
  "cvss": 0.0,
  "database_specific": {
    "severity": "IMPORTANT"
  },
  "description": "ruby\n[3.3.10-6]\n- Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316)\n  Resolves: RHEL-171247\n\nrubygem-abrt\n[0.4.0-1]\n- Update to abrt 0.4.0.\n  Resolves: rhbz#1842476\n\nrubygem-mysql2\n[0.5.5-1]\n- Upgrade to mysql2 0.5.5.\n  Related: RHEL-17090\n\nrubygem-pg\n[1.5.4-1]\n- Upgrade to pg 1.5.4.\n  Related: RHEL-17090",
  "id": "ELSA-2026-20614",
  "ovalId": "oval:com.oracle.elsa:def:202620614",
  "source": "oracle_linux",
  "title": "ELSA-2026-20614:  ruby:3.3 security update (IMPORTANT)",
  "url": "https://linux.oracle.com/errata/ELSA-2026-20614.html"
}
View JSON API Download JSON