Alerts This Week
Warning Icon 1 758
Alerts This Week
Warning Icon 1 758

Oracle Linux 9: ELSA-2025-4493 moderate: ruby Denial of Service fixes

oracle
Calendar Grey May 13, 2025
Oracle Linux Logo Esm H88
The latest RPMs for Oracle Linux 9 feature enhancements for Ruby that address several security vulnerabilities and mitigate possible denial-of-service threats.
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

Summary

ruby [3.3.8-4] - Upgrade to Ruby 3.3.8. Resolves: RHEL-86933 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-87182 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)

Topics%20covered

Topics Covered

security advisory update DoS vulnerability ruby Oracle

SRPMs

http://oss.oracle.com/ol9/SRPMS-updates//ruby-3.3.8-4.module+el9.5.0+90562+4bc8f111.src.rpm http://oss.oracle.com/ol9/SRPMS-updates//rubygem-mysql2-0.5.5-1.module+el9.4.0+90257+8524dee7.src.rpm http://oss.oracle.com/ol9/SRPMS-updates//rubygem-pg-1.5.4-1.module+el9.4.0+90257+8524dee7.src.rpm

x86_64

ruby-3.3.8-4.module+el9.5.0+90562+4bc8f111.i686.rpm ruby-3.3.8-4.module+el9.5.0+90562+4bc8f111.x86_64.rpm ruby-bundled-gems-3.3.8-4.module+el9.5.0+90562+4bc8f111.i686.rpm ruby-bundled-gems-3.3.8-4.module+el9.5.0+90562+4bc8f111.x86_64.rpm ruby-default-gems-3.3.8-4.module+el9.5.0+90562+4bc8f111.noarch.rpm ruby-devel-3.3.8-4.module+el9.5.0+90562+4bc8f111.i686.rpm ruby-devel-3.3.8-4.module+el9.5.0+90562+4bc8f111.x86_64.rpm ruby-doc-3.3.8-4.module+el9.5.0+90562+4bc8f111.noarch.rpm rubygem-bigdecimal-3.1.5-4.module+el9.5.0+90562+4bc8f111.i686.rpm rubygem-bigdecimal-3.1.5-4.module+el9.5.0+90562+4bc8f111.x86_64.rpm rubygem-bundler-2.5.22-4.module+el9.5.0+90562+4bc8f111.noarch.rpm rubygem-io-console-0.7.1-4.module+el9.5.0+90562+4bc8f111.i686.rpm rubygem-io-console-0.7.1-4.module+el9.5.0+90562+4bc8f111.x86_64.rpm rubygem-irb-1.13.1-4.module+el9.5.0+90562+4bc8f111.noarch.rpm rubygem-json-2.7.2-4.module+el9.5.0+90562+4bc8f111.i686.rpm rubygem-json-2.7.2-4.module+el9.5.0+90562+4bc8f111.x86_64.rpm ...

Read the Full Advisory

aarch64

ruby-3.3.8-4.module+el9.5.0+90562+4bc8f111.aarch64.rpm ruby-bundled-gems-3.3.8-4.module+el9.5.0+90562+4bc8f111.aarch64.rpm ruby-default-gems-3.3.8-4.module+el9.5.0+90562+4bc8f111.noarch.rpm ruby-devel-3.3.8-4.module+el9.5.0+90562+4bc8f111.aarch64.rpm ruby-doc-3.3.8-4.module+el9.5.0+90562+4bc8f111.noarch.rpm rubygem-bigdecimal-3.1.5-4.module+el9.5.0+90562+4bc8f111.aarch64.rpm rubygem-bundler-2.5.22-4.module+el9.5.0+90562+4bc8f111.noarch.rpm rubygem-io-console-0.7.1-4.module+el9.5.0+90562+4bc8f111.aarch64.rpm rubygem-irb-1.13.1-4.module+el9.5.0+90562+4bc8f111.noarch.rpm rubygem-json-2.7.2-4.module+el9.5.0+90562+4bc8f111.aarch64.rpm rubygem-minitest-5.20.0-4.module+el9.5.0+90562+4bc8f111.noarch.rpm rubygem-mysql2-0.5.5-1.module+el9.4.0+90257+8524dee7.aarch64.rpm rubygem-mysql2-doc-0.5.5-1.module+el9.4.0+90257+8524dee7.noarch.rpm rubygem-pg-1.5.4-1.module+el9.4.0+90257+8524dee7.aarch64.rpm rubygem-pg-doc-1.5.4-1.module+el9.4.0+90257+8524dee7.noarch.rpm rubygem-power_assert-2.0.3-4.module+el9.5.0+90562+4bc8f111.noarch.rpm rubygem-psych-5.1.2-4.module+el9.5.0+90562+4bc8f111.aarch64.rpm rubygem-racc-1.7.3-4.module+el9.5.0+90562+4bc8f111.aarch64.rpm rubygem-rake-13.1.0-4.module+el9.5.0+90562+4bc8f111.noarch.rpm rubygem-rbs-3.4.0-4.module+el9.5.0+90562+4bc8f111.aarch64.rpm rubygem-rdoc-6.6.3.1-4.module+el9.5.0+90562+4bc8f111.noarch.rpm rubygem-rexml-3.3.9-4.module+el9.5.0+90562+4bc8f111.noarch.rpm rubygem-rss-0.3.1-4.module+el9.5.0+90562+4bc8f111.noarch.rpm rubygems-3.5.22-4.module+el9.5.0+90562+4bc8f111.noarch.rpm rubygems-devel-3.5.22-4.module+el9.5.0+90562+4bc8f111.noarch.rpm rubygem-test-unit-3.6.1-4.module+el9.5.0+90562+4bc8f111.noarch.rpm rubygem-typeprof-0.21.9-4.module+el9.5.0+90562+4bc8f111.noarch.rpm ruby-libs-3.3.8-4.module+el9.5.0+90562+4bc8f111.aarch64.rpm

Related CVEs: CVE-2025-25186 CVE-2025-27219 CVE-2025-27221

Topics%20covered

Topics Covered

security advisory update DoS vulnerability ruby Oracle

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here