<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="45">
<package pkgid="9a7b546992cf017a0f01de1a5c3f6d2175a87cc0175eb892ee5b6bf2a8c8b4d4" name="ruby" arch="aarch64">
  <version epoch="0" ver="4.0.3" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="05f452000b65d85cf21c4865299d324e8baffea0b04272ecc62ae2bb29810c4a" name="ruby" arch="src">
  <version epoch="0" ver="4.0.3" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="741302f457936a3ba5ed9df2a3bde021a75673d189af444e9ff5e84aec047ee8" name="ruby-bundled-gems" arch="aarch64">
  <version epoch="0" ver="4.0.3" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="1de82f9befec698e1fbb2cb51325035d06cf75900c3f36aad397368f917e522d" name="ruby-bundled-gems-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.0.3" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="3bef281f4b59edc414b47801163fa7ab6bc675b6f434f048fd8ccc2b59f601ec" name="ruby-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.0.3" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="8d6c346f4f3fcde0d386fa29e6e7a3026fce0aaf6bb1ec365916b895888c9c34" name="ruby-debugsource" arch="aarch64">
  <version epoch="0" ver="4.0.3" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="15b8431c545e3fd5d87aa2de26e15593b39e70a96117788545b7852c98872916" name="ruby-default-gems" arch="noarch">
  <version epoch="0" ver="4.0.3" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="0de084eb058f0b3ff65f4b08db3555c7d928d973ba72fdbce0666d0111ab1186" name="ruby-devel" arch="aarch64">
  <version epoch="0" ver="4.0.3" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="a1058ac395871842d24ec3583254f2c4983ac25dbf9fe7bd862b11fa9d125e4c" name="ruby-doc" arch="noarch">
  <version epoch="0" ver="4.0.3" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="cd47eb9992b5ab123a95659186129bc1d8a31e03297e9b8bd1df3e38fe39680e" name="ruby-libs" arch="aarch64">
  <version epoch="0" ver="4.0.3" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="76011cf778f6e26ed3b69f78252774d005d46a4e1098ca5d0ad01ac796a9b2b2" name="ruby-libs-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.0.3" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="e1eff19153d5e4320547b347483613e04aeb4fbe417b702c0a5e9ab52f315c42" name="rubygem-bigdecimal" arch="aarch64">
  <version epoch="0" ver="4.0.1" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="ab1a6f6885b5b726748ce4851d9c83d1c5c8938ba11ee38b6119333494762144" name="rubygem-bigdecimal-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.0.1" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="89abf8305090cf4fb6fe52f6f252a577e29ff2c51ee9b5d8317555f8aafdeca0" name="rubygem-bundler" arch="noarch">
  <version epoch="0" ver="4.0.6" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="50486dcef108006b714ad4d99e593d2b7c06f680c7c1cdbfbdb43fa5f36258f2" name="rubygem-io-console" arch="aarch64">
  <version epoch="0" ver="0.8.2" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="9ea5f699b69471b6e05acbd1e3f194123bdfc7c9f2f046531cda4b910e376872" name="rubygem-io-console-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.8.2" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="e9a7a3551913e6e3fe55387659b79a02da1a5fe38258beca3ef8c7ae88f0be86" name="rubygem-irb" arch="noarch">
  <version epoch="0" ver="1.16.0" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="3af3c8ae8cf0f746a3772faedfb11ebbdb241d719bf3bfe7ad9c11a6ac5ab8c0" name="rubygem-json" arch="aarch64">
  <version epoch="0" ver="2.18.0" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="9156051a34282e9bb5958d75838b411cb0d2675cf4042631905cc9f0f2389f91" name="rubygem-json-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.18.0" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="6c8650855e97bea6157d29df044b4aa41b133ced356e91d809dd9a96175e6b8c" name="rubygem-minitest" arch="noarch">
  <version epoch="0" ver="6.0.0" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="30476d05a7263b1c51580f256a069cc4903e84d7a1e89e4d3ed02feccf9ae8a5" name="rubygem-mysql2" arch="aarch64">
  <version epoch="0" ver="0.5.7" rel="1.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 0.5.5-2" date="1707480000">- Adapt tests to openssl 3.2
  Resolves: RHEL-80222</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 0.5.5-3" date="1753272000">- Disable tests on the 32bit platforms ix86.
  Related: RHEL-80222</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 0.5.7-1" date="1768824000">- Upgrade to mysql2 0.5.7.
  Related: RHEL-142278</changelog>
</package>
<package pkgid="4a0ebf5c6af63b3978f6ed32d9f8e9a4bc92a21a3f1f97a1206c05b87a3a7f0f" name="rubygem-mysql2" arch="src">
  <version epoch="0" ver="0.5.7" rel="1.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 0.5.5-2" date="1707480000">- Adapt tests to openssl 3.2
  Resolves: RHEL-80222</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 0.5.5-3" date="1753272000">- Disable tests on the 32bit platforms ix86.
  Related: RHEL-80222</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 0.5.7-1" date="1768824000">- Upgrade to mysql2 0.5.7.
  Related: RHEL-142278</changelog>
</package>
<package pkgid="0dd495051325219c1d966d5ae4312d24b77d075638318e2f0a8990223a8db05a" name="rubygem-mysql2-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.5.7" rel="1.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 0.5.5-2" date="1707480000">- Adapt tests to openssl 3.2
  Resolves: RHEL-80222</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 0.5.5-3" date="1753272000">- Disable tests on the 32bit platforms ix86.
  Related: RHEL-80222</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 0.5.7-1" date="1768824000">- Upgrade to mysql2 0.5.7.
  Related: RHEL-142278</changelog>
</package>
<package pkgid="3b80740cf51bdc9df78493d0864ce881ea709241304baf4bb7c811530195ed15" name="rubygem-mysql2-debugsource" arch="aarch64">
  <version epoch="0" ver="0.5.7" rel="1.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 0.5.5-2" date="1707480000">- Adapt tests to openssl 3.2
  Resolves: RHEL-80222</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 0.5.5-3" date="1753272000">- Disable tests on the 32bit platforms ix86.
  Related: RHEL-80222</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 0.5.7-1" date="1768824000">- Upgrade to mysql2 0.5.7.
  Related: RHEL-142278</changelog>
</package>
<package pkgid="bb20c3f0f51d849f18a2e141123acef9f9721e6622851fc8ef773c3627e04a28" name="rubygem-mysql2-doc" arch="noarch">
  <version epoch="0" ver="0.5.7" rel="1.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 0.5.5-2" date="1707480000">- Adapt tests to openssl 3.2
  Resolves: RHEL-80222</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 0.5.5-3" date="1753272000">- Disable tests on the 32bit platforms ix86.
  Related: RHEL-80222</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 0.5.7-1" date="1768824000">- Upgrade to mysql2 0.5.7.
  Related: RHEL-142278</changelog>
</package>
<package pkgid="393807b7c280f8b93ac9eaa4d04383fd441f0b66f4b6690d4f738a2272f88b7e" name="rubygem-pg" arch="aarch64">
  <version epoch="0" ver="1.6.3" rel="1.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 1.6.3-1" date="1768824000">- Upgrade to pg 1.6.3
  Related: RHEL-142278</changelog>
</package>
<package pkgid="5b394df334e3d954f2b4ca8a6c3f4240898ce3ddf7300cc79b123163dc01875e" name="rubygem-pg" arch="src">
  <version epoch="0" ver="1.6.3" rel="1.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 1.6.3-1" date="1768824000">- Upgrade to pg 1.6.3
  Related: RHEL-142278</changelog>
</package>
<package pkgid="feb2b6039376f74200ed604d302253b86fa469337e7398f896ebba153818f5ca" name="rubygem-pg-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.6.3" rel="1.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 1.6.3-1" date="1768824000">- Upgrade to pg 1.6.3
  Related: RHEL-142278</changelog>
</package>
<package pkgid="3419d4b7f993e38e1ed3b7443953faef78949f4ca2a054a13337458a997aadd2" name="rubygem-pg-debugsource" arch="aarch64">
  <version epoch="0" ver="1.6.3" rel="1.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 1.6.3-1" date="1768824000">- Upgrade to pg 1.6.3
  Related: RHEL-142278</changelog>
</package>
<package pkgid="22a998a4add72dd69ff6ce6fb52730ad760eb361b60db04a2981b8afe0901fce" name="rubygem-pg-doc" arch="noarch">
  <version epoch="0" ver="1.6.3" rel="1.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 1.6.3-1" date="1768824000">- Upgrade to pg 1.6.3
  Related: RHEL-142278</changelog>
</package>
<package pkgid="d5c832c0686efb2e2e4909d5b48276374240768e2e3325a588d6dc9814a3c3a4" name="rubygem-power_assert" arch="noarch">
  <version epoch="0" ver="3.0.1" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="b1b836e8716e240b22933d5cbd4842d58e66b32e00e1438274d89badeaa900bb" name="rubygem-psych" arch="aarch64">
  <version epoch="0" ver="5.3.1" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="2dd6bad022e3ce8d5ee29711ccb9260aa6287d0d4d1e5fda5f3a40fa4913bb55" name="rubygem-psych-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.3.1" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="a8943c0875444e84e24a13eea205554407a1cc673eedf946537b74b571e64334" name="rubygem-racc" arch="aarch64">
  <version epoch="0" ver="1.8.1" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="b7ed97fc40483ff897329dbda27fefa1d3291aedcc38e11e3225c61e82d4cc1a" name="rubygem-racc-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.8.1" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="dad8a7fe6060a5332a9535cf12cb2e23731d717aee2cb0a8ec776177bed534b9" name="rubygem-rake" arch="noarch">
  <version epoch="0" ver="13.3.1" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="d86702e9ba68f5b181c87c2ecaec67ca6d72b3f2553f99cca43419c1c54ab467" name="rubygem-rbs" arch="aarch64">
  <version epoch="0" ver="3.10.0" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="f7edd2249faede92ed396e0fba9250762044eb1b942feaaf43bae43b00406750" name="rubygem-rbs-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.10.0" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="3c884218f99faaca995450a9f48c3f4e7bc75784043fd36c706e8f5e5edfcbbe" name="rubygem-rdoc" arch="noarch">
  <version epoch="0" ver="7.0.3" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="c04354542113cab31fb270abbf39783112939b8a4c71fbdb65eadf49a1221eee" name="rubygem-rexml" arch="noarch">
  <version epoch="0" ver="3.4.4" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="4e5c2e0439c74191357022bdc88118d3bbe9d1dd672ae92435e42e6d2b1f16de" name="rubygem-rss" arch="noarch">
  <version epoch="0" ver="0.3.2" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="7c5df3715eb073161421cbcdcf8dbcefaebc9d5f2b64069bf373c7f4fa9ad545" name="rubygem-test-unit" arch="noarch">
  <version epoch="0" ver="3.7.5" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="fd22b177ee33edc038f71a42ae2d6eb690002a6afcca4b1146e7ce9e9b2da099" name="rubygem-typeprof" arch="noarch">
  <version epoch="0" ver="0.31.1" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="64d506baa1b2d3fdc8d94bae33687752f048fedb9dc4070fb9f52900b7ab5557" name="rubygems" arch="noarch">
  <version epoch="0" ver="4.0.6" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="ec1f16e5baeca930299493e97d3f3629b2c24124d87013a6294e97d1f84ad724" name="rubygems-devel" arch="noarch">
  <version epoch="0" ver="4.0.6" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
</otherdata>