<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="124">
<package pkgid="e92cff61d006c937d50c46fc72c867551b787cd64283a8791d9b4daa17023151" name="rpm-local-generator-support" arch="src">
  <version epoch="0" ver="1" rel="1.module_el9+1378+a53ec641"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1-1" date="1696593600">- Initial version.</changelog>
</package>
<package pkgid="9a7b546992cf017a0f01de1a5c3f6d2175a87cc0175eb892ee5b6bf2a8c8b4d4" name="ruby" arch="aarch64">
  <version epoch="0" ver="4.0.3" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="c26455b4dbbf6e6030f324b782aec4708dc3bc6cf9153853bb6e3a6cb6695ed0" name="ruby" arch="ppc64le">
  <version epoch="0" ver="4.0.3" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="7372124dfa5ec83bdcbc5d9d20f76896be76490eb6e4c592686982d0040f3fe1" name="ruby" arch="s390x">
  <version epoch="0" ver="4.0.3" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="05f452000b65d85cf21c4865299d324e8baffea0b04272ecc62ae2bb29810c4a" name="ruby" arch="src">
  <version epoch="0" ver="4.0.3" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="1ceeefac86fd3502da522d245d5ed6f514e175978b3fca8eead18ff88acdaf35" name="ruby" arch="x86_64">
  <version epoch="0" ver="4.0.3" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="741302f457936a3ba5ed9df2a3bde021a75673d189af444e9ff5e84aec047ee8" name="ruby-bundled-gems" arch="aarch64">
  <version epoch="0" ver="4.0.3" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="6519c61243c3cd0a13e41d059c44a91dd4e534795c00671819b59e71cb613859" name="ruby-bundled-gems" arch="ppc64le">
  <version epoch="0" ver="4.0.3" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="13d4636cbea4e9b464a3a29fe4ca2bc091fefc5778ff7074460d432c6f01ac3b" name="ruby-bundled-gems" arch="s390x">
  <version epoch="0" ver="4.0.3" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="d350bfc6ff8794ef827fac677d48d037b390b7ad03ccb079025765d58ff1c3a6" name="ruby-bundled-gems" arch="x86_64">
  <version epoch="0" ver="4.0.3" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="1de82f9befec698e1fbb2cb51325035d06cf75900c3f36aad397368f917e522d" name="ruby-bundled-gems-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.0.3" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="826841a251e825da3e307ff1873b6ab8cd14fa84fecafeaee030ddd4e7b01533" name="ruby-bundled-gems-debuginfo" arch="ppc64le">
  <version epoch="0" ver="4.0.3" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="a8f83fe404ade1562b194cb9bdc55f1e0f21b7e8f7cabd90d68cf87dc323687b" name="ruby-bundled-gems-debuginfo" arch="s390x">
  <version epoch="0" ver="4.0.3" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="e5b84613e6e6396badd69ae94ff1c134b3f3970bff4c32d99fd3d9a4859c699d" name="ruby-bundled-gems-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.0.3" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="3bef281f4b59edc414b47801163fa7ab6bc675b6f434f048fd8ccc2b59f601ec" name="ruby-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.0.3" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="418e7971462af4b54c9fdda03f82b756e24b91ae2a1c7bb31e8f07d4efcb71e6" name="ruby-debuginfo" arch="ppc64le">
  <version epoch="0" ver="4.0.3" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="103c054430893b1959da3dc2e350df72893fb02575ea079f199c11397eac0145" name="ruby-debuginfo" arch="s390x">
  <version epoch="0" ver="4.0.3" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="8c106a977c5fd8a871b9f19b52d4dfad128196d74c700e8469e66c356054dcb8" name="ruby-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.0.3" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="8d6c346f4f3fcde0d386fa29e6e7a3026fce0aaf6bb1ec365916b895888c9c34" name="ruby-debugsource" arch="aarch64">
  <version epoch="0" ver="4.0.3" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="0ca137b60dc66633726522c7a3453c3334d463ae9e7156bcc5e24577ae0c598b" name="ruby-debugsource" arch="ppc64le">
  <version epoch="0" ver="4.0.3" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="f07c856e07092b6454124035385691c5ce7408ce8583e66f5caf79a471d2c870" name="ruby-debugsource" arch="s390x">
  <version epoch="0" ver="4.0.3" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="3d973c98e3404749bfb015e7d5118646b786f924b2d7dc14887603fb13c9b5b5" name="ruby-debugsource" arch="x86_64">
  <version epoch="0" ver="4.0.3" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="15b8431c545e3fd5d87aa2de26e15593b39e70a96117788545b7852c98872916" name="ruby-default-gems" arch="noarch">
  <version epoch="0" ver="4.0.3" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="0de084eb058f0b3ff65f4b08db3555c7d928d973ba72fdbce0666d0111ab1186" name="ruby-devel" arch="aarch64">
  <version epoch="0" ver="4.0.3" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="4c8a4a3ab8bbdedca1da04e59bf108f1ee79217fe7295272fcfef909294607a6" name="ruby-devel" arch="ppc64le">
  <version epoch="0" ver="4.0.3" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="aa44f1c3093a75d8e1622f28c27bbde5970c2f67f3917145ff390faba3f415ae" name="ruby-devel" arch="s390x">
  <version epoch="0" ver="4.0.3" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="8af4f5b9f8c3f677afc32c857df8dbcdba50fe11001727aef7a08fd6e654dbaf" name="ruby-devel" arch="x86_64">
  <version epoch="0" ver="4.0.3" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="a1058ac395871842d24ec3583254f2c4983ac25dbf9fe7bd862b11fa9d125e4c" name="ruby-doc" arch="noarch">
  <version epoch="0" ver="4.0.3" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="cd47eb9992b5ab123a95659186129bc1d8a31e03297e9b8bd1df3e38fe39680e" name="ruby-libs" arch="aarch64">
  <version epoch="0" ver="4.0.3" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="a66a7c6402197ef937984a2a69f4c81d54fd6d729a7e622920460f1eaac4e706" name="ruby-libs" arch="ppc64le">
  <version epoch="0" ver="4.0.3" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="5f7a7ea4a03569433553d873dfbb06f2a2e20c1ec412d492a4fc74698ce6907d" name="ruby-libs" arch="s390x">
  <version epoch="0" ver="4.0.3" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="7923ca5275aca6e91e6403dc1d74a508264b5c9a3c6a9059af444b3e0d816efd" name="ruby-libs" arch="x86_64">
  <version epoch="0" ver="4.0.3" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="76011cf778f6e26ed3b69f78252774d005d46a4e1098ca5d0ad01ac796a9b2b2" name="ruby-libs-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.0.3" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="6a3268487ee2705a7b9c4ba731273fcb06c28879563c4443bf891f0dfdb0d6ab" name="ruby-libs-debuginfo" arch="ppc64le">
  <version epoch="0" ver="4.0.3" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="d9e934ddc1086b71e1ac6853e42a66884cf4e543836fc0bf12a1c5dfb0f2d742" name="ruby-libs-debuginfo" arch="s390x">
  <version epoch="0" ver="4.0.3" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="9bfc7f35ef3b7f70ae9b312b6155e84df6698ec6b75fc2fc19d3d0c4a41bbc39" name="ruby-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.0.3" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="e1eff19153d5e4320547b347483613e04aeb4fbe417b702c0a5e9ab52f315c42" name="rubygem-bigdecimal" arch="aarch64">
  <version epoch="0" ver="4.0.1" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="c465bf8d85eec29fbd4f61e7007c75ba4f8fc4b1dd56df2b26453f2fdcc06190" name="rubygem-bigdecimal" arch="ppc64le">
  <version epoch="0" ver="4.0.1" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="0f799fbf794b69a3597cf67c1238951644c1d158f8f08674c4cc262fe0fa639d" name="rubygem-bigdecimal" arch="s390x">
  <version epoch="0" ver="4.0.1" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="1232d27dc297c64fa51f1f2d8dd38ad66aba73c6d3ac9390b2e4f0cdd91a55c3" name="rubygem-bigdecimal" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="ab1a6f6885b5b726748ce4851d9c83d1c5c8938ba11ee38b6119333494762144" name="rubygem-bigdecimal-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.0.1" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="68d6e92cca0bc0bb97f7f6215b85cb0944c3228d7a7675dbd6e84704fa9c031c" name="rubygem-bigdecimal-debuginfo" arch="ppc64le">
  <version epoch="0" ver="4.0.1" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="edcd7ebaccd5d2737eea4db3dc327d4cb58dd40fee94a5b57d0cbd525624568c" name="rubygem-bigdecimal-debuginfo" arch="s390x">
  <version epoch="0" ver="4.0.1" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="36b4731e0e7822e39e5fea79ae6ad2e3af3a1d67a1c155168d57afa6cd0a83eb" name="rubygem-bigdecimal-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="89abf8305090cf4fb6fe52f6f252a577e29ff2c51ee9b5d8317555f8aafdeca0" name="rubygem-bundler" arch="noarch">
  <version epoch="0" ver="4.0.6" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="50486dcef108006b714ad4d99e593d2b7c06f680c7c1cdbfbdb43fa5f36258f2" name="rubygem-io-console" arch="aarch64">
  <version epoch="0" ver="0.8.2" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="2ee2645bc1d63866d6bcf643b0fd1f2f3479e826d1308e0f585ae6b3149e51db" name="rubygem-io-console" arch="ppc64le">
  <version epoch="0" ver="0.8.2" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="3b99d905d053cd8eb9f40e51cea2ae2f63ac2dabe937c77ffb310030309cf9e8" name="rubygem-io-console" arch="s390x">
  <version epoch="0" ver="0.8.2" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="4719860989393606c7e199c6ef525df1cc18bc522db33d0fd258069c42cf2018" name="rubygem-io-console" arch="x86_64">
  <version epoch="0" ver="0.8.2" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="9ea5f699b69471b6e05acbd1e3f194123bdfc7c9f2f046531cda4b910e376872" name="rubygem-io-console-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.8.2" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="31dc15df503122b8254f27dcc83b5f1659592ea31d35f9d6bd6185bc66a54238" name="rubygem-io-console-debuginfo" arch="ppc64le">
  <version epoch="0" ver="0.8.2" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="187cb1cbe26742539686dc0872e53b7907a57e6e0fbaecec479c99c1b1627680" name="rubygem-io-console-debuginfo" arch="s390x">
  <version epoch="0" ver="0.8.2" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="5674b27c825a65672a2d2d954f824c10d89c2493b1b1655eac01a8a98894e6e3" name="rubygem-io-console-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.8.2" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="e9a7a3551913e6e3fe55387659b79a02da1a5fe38258beca3ef8c7ae88f0be86" name="rubygem-irb" arch="noarch">
  <version epoch="0" ver="1.16.0" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="3af3c8ae8cf0f746a3772faedfb11ebbdb241d719bf3bfe7ad9c11a6ac5ab8c0" name="rubygem-json" arch="aarch64">
  <version epoch="0" ver="2.18.0" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="a0682e166cf182839a921605b352a61a4c33c611073d5fb773634e170b61e312" name="rubygem-json" arch="ppc64le">
  <version epoch="0" ver="2.18.0" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="e776c1f5db2c1441ab48390af5c9bb1287bbaa35d01f8f9066ff01b62b92a968" name="rubygem-json" arch="s390x">
  <version epoch="0" ver="2.18.0" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="5c9491da10178a3927736d66af8dd04fc972d04d2c3dd583b163f298ac4e911e" name="rubygem-json" arch="x86_64">
  <version epoch="0" ver="2.18.0" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="9156051a34282e9bb5958d75838b411cb0d2675cf4042631905cc9f0f2389f91" name="rubygem-json-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.18.0" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="95714d80eeab43fb946f725edaab9dfd367144c2366fc7477dfeeed9354d83e8" name="rubygem-json-debuginfo" arch="ppc64le">
  <version epoch="0" ver="2.18.0" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="4af9d82d3499c60ae8af297ba2066679b47146615804bb54cc2d429d0a16c3a9" name="rubygem-json-debuginfo" arch="s390x">
  <version epoch="0" ver="2.18.0" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="94c8931339e967cf745e9d7934e56d067257989d07f719b7b90f21f32fe0e229" name="rubygem-json-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.18.0" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="6c8650855e97bea6157d29df044b4aa41b133ced356e91d809dd9a96175e6b8c" name="rubygem-minitest" arch="noarch">
  <version epoch="0" ver="6.0.0" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="30476d05a7263b1c51580f256a069cc4903e84d7a1e89e4d3ed02feccf9ae8a5" name="rubygem-mysql2" arch="aarch64">
  <version epoch="0" ver="0.5.7" rel="1.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 0.5.5-2" date="1707480000">- Adapt tests to openssl 3.2
  Resolves: RHEL-80222</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 0.5.5-3" date="1753272000">- Disable tests on the 32bit platforms ix86.
  Related: RHEL-80222</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 0.5.7-1" date="1768824000">- Upgrade to mysql2 0.5.7.
  Related: RHEL-142278</changelog>
</package>
<package pkgid="5b7724e926c09f91796a989025c7a35210682b2cd34a3aa0046f983f8c5bcc44" name="rubygem-mysql2" arch="ppc64le">
  <version epoch="0" ver="0.5.7" rel="1.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 0.5.5-2" date="1707480000">- Adapt tests to openssl 3.2
  Resolves: RHEL-80222</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 0.5.5-3" date="1753272000">- Disable tests on the 32bit platforms ix86.
  Related: RHEL-80222</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 0.5.7-1" date="1768824000">- Upgrade to mysql2 0.5.7.
  Related: RHEL-142278</changelog>
</package>
<package pkgid="45344feea6f7259943ae36747044c7e3865205c192f7735c55d248cf53db4556" name="rubygem-mysql2" arch="s390x">
  <version epoch="0" ver="0.5.7" rel="1.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 0.5.5-2" date="1707480000">- Adapt tests to openssl 3.2
  Resolves: RHEL-80222</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 0.5.5-3" date="1753272000">- Disable tests on the 32bit platforms ix86.
  Related: RHEL-80222</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 0.5.7-1" date="1768824000">- Upgrade to mysql2 0.5.7.
  Related: RHEL-142278</changelog>
</package>
<package pkgid="4a0ebf5c6af63b3978f6ed32d9f8e9a4bc92a21a3f1f97a1206c05b87a3a7f0f" name="rubygem-mysql2" arch="src">
  <version epoch="0" ver="0.5.7" rel="1.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 0.5.5-2" date="1707480000">- Adapt tests to openssl 3.2
  Resolves: RHEL-80222</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 0.5.5-3" date="1753272000">- Disable tests on the 32bit platforms ix86.
  Related: RHEL-80222</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 0.5.7-1" date="1768824000">- Upgrade to mysql2 0.5.7.
  Related: RHEL-142278</changelog>
</package>
<package pkgid="427de1168184a4316a8d92025ac34b2a765bf69c732afa15063298bd011362c3" name="rubygem-mysql2" arch="x86_64">
  <version epoch="0" ver="0.5.7" rel="1.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 0.5.5-2" date="1707480000">- Adapt tests to openssl 3.2
  Resolves: RHEL-80222</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 0.5.5-3" date="1753272000">- Disable tests on the 32bit platforms ix86.
  Related: RHEL-80222</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 0.5.7-1" date="1768824000">- Upgrade to mysql2 0.5.7.
  Related: RHEL-142278</changelog>
</package>
<package pkgid="0dd495051325219c1d966d5ae4312d24b77d075638318e2f0a8990223a8db05a" name="rubygem-mysql2-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.5.7" rel="1.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 0.5.5-2" date="1707480000">- Adapt tests to openssl 3.2
  Resolves: RHEL-80222</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 0.5.5-3" date="1753272000">- Disable tests on the 32bit platforms ix86.
  Related: RHEL-80222</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 0.5.7-1" date="1768824000">- Upgrade to mysql2 0.5.7.
  Related: RHEL-142278</changelog>
</package>
<package pkgid="5abb8ee65b5e32d45eb93b45663f56910ce339c03cec308d4d1946c0923b1caa" name="rubygem-mysql2-debuginfo" arch="ppc64le">
  <version epoch="0" ver="0.5.7" rel="1.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 0.5.5-2" date="1707480000">- Adapt tests to openssl 3.2
  Resolves: RHEL-80222</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 0.5.5-3" date="1753272000">- Disable tests on the 32bit platforms ix86.
  Related: RHEL-80222</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 0.5.7-1" date="1768824000">- Upgrade to mysql2 0.5.7.
  Related: RHEL-142278</changelog>
</package>
<package pkgid="60315eeea1632eb41fc9e0564e84aac0665199901b9a31de802230f3b2f12ea7" name="rubygem-mysql2-debuginfo" arch="s390x">
  <version epoch="0" ver="0.5.7" rel="1.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 0.5.5-2" date="1707480000">- Adapt tests to openssl 3.2
  Resolves: RHEL-80222</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 0.5.5-3" date="1753272000">- Disable tests on the 32bit platforms ix86.
  Related: RHEL-80222</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 0.5.7-1" date="1768824000">- Upgrade to mysql2 0.5.7.
  Related: RHEL-142278</changelog>
</package>
<package pkgid="6697b8baed50b8fc1c17be434e0fb494183a2473aed2e08255001722fcf15403" name="rubygem-mysql2-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.5.7" rel="1.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 0.5.5-2" date="1707480000">- Adapt tests to openssl 3.2
  Resolves: RHEL-80222</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 0.5.5-3" date="1753272000">- Disable tests on the 32bit platforms ix86.
  Related: RHEL-80222</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 0.5.7-1" date="1768824000">- Upgrade to mysql2 0.5.7.
  Related: RHEL-142278</changelog>
</package>
<package pkgid="3b80740cf51bdc9df78493d0864ce881ea709241304baf4bb7c811530195ed15" name="rubygem-mysql2-debugsource" arch="aarch64">
  <version epoch="0" ver="0.5.7" rel="1.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 0.5.5-2" date="1707480000">- Adapt tests to openssl 3.2
  Resolves: RHEL-80222</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 0.5.5-3" date="1753272000">- Disable tests on the 32bit platforms ix86.
  Related: RHEL-80222</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 0.5.7-1" date="1768824000">- Upgrade to mysql2 0.5.7.
  Related: RHEL-142278</changelog>
</package>
<package pkgid="dce563ab5dad35c16bece85e0b90de41b96e8fb14ded90b5e7790b29d9cd06f5" name="rubygem-mysql2-debugsource" arch="ppc64le">
  <version epoch="0" ver="0.5.7" rel="1.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 0.5.5-2" date="1707480000">- Adapt tests to openssl 3.2
  Resolves: RHEL-80222</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 0.5.5-3" date="1753272000">- Disable tests on the 32bit platforms ix86.
  Related: RHEL-80222</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 0.5.7-1" date="1768824000">- Upgrade to mysql2 0.5.7.
  Related: RHEL-142278</changelog>
</package>
<package pkgid="3709e250ed6bc6a167e5c96a2e6673ec5c874598f0b8c20200eb79c618a8b228" name="rubygem-mysql2-debugsource" arch="s390x">
  <version epoch="0" ver="0.5.7" rel="1.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 0.5.5-2" date="1707480000">- Adapt tests to openssl 3.2
  Resolves: RHEL-80222</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 0.5.5-3" date="1753272000">- Disable tests on the 32bit platforms ix86.
  Related: RHEL-80222</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 0.5.7-1" date="1768824000">- Upgrade to mysql2 0.5.7.
  Related: RHEL-142278</changelog>
</package>
<package pkgid="ad03242d50d086c8e2ab0dcb6cd93504b6c76a1047308ed2ec9e5d1e397a72b6" name="rubygem-mysql2-debugsource" arch="x86_64">
  <version epoch="0" ver="0.5.7" rel="1.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 0.5.5-2" date="1707480000">- Adapt tests to openssl 3.2
  Resolves: RHEL-80222</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 0.5.5-3" date="1753272000">- Disable tests on the 32bit platforms ix86.
  Related: RHEL-80222</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 0.5.7-1" date="1768824000">- Upgrade to mysql2 0.5.7.
  Related: RHEL-142278</changelog>
</package>
<package pkgid="bb20c3f0f51d849f18a2e141123acef9f9721e6622851fc8ef773c3627e04a28" name="rubygem-mysql2-doc" arch="noarch">
  <version epoch="0" ver="0.5.7" rel="1.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 0.5.5-2" date="1707480000">- Adapt tests to openssl 3.2
  Resolves: RHEL-80222</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 0.5.5-3" date="1753272000">- Disable tests on the 32bit platforms ix86.
  Related: RHEL-80222</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 0.5.7-1" date="1768824000">- Upgrade to mysql2 0.5.7.
  Related: RHEL-142278</changelog>
</package>
<package pkgid="393807b7c280f8b93ac9eaa4d04383fd441f0b66f4b6690d4f738a2272f88b7e" name="rubygem-pg" arch="aarch64">
  <version epoch="0" ver="1.6.3" rel="1.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 1.6.3-1" date="1768824000">- Upgrade to pg 1.6.3
  Related: RHEL-142278</changelog>
</package>
<package pkgid="d14cca8ea6c317c6b7786750ced6824c193c1e8705dac511725c053133f2604c" name="rubygem-pg" arch="ppc64le">
  <version epoch="0" ver="1.6.3" rel="1.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 1.6.3-1" date="1768824000">- Upgrade to pg 1.6.3
  Related: RHEL-142278</changelog>
</package>
<package pkgid="64e889de150d3b7df7ced6110cfcb3cee0b0d14de3e9cfb78c1351c276062281" name="rubygem-pg" arch="s390x">
  <version epoch="0" ver="1.6.3" rel="1.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 1.6.3-1" date="1768824000">- Upgrade to pg 1.6.3
  Related: RHEL-142278</changelog>
</package>
<package pkgid="5b394df334e3d954f2b4ca8a6c3f4240898ce3ddf7300cc79b123163dc01875e" name="rubygem-pg" arch="src">
  <version epoch="0" ver="1.6.3" rel="1.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 1.6.3-1" date="1768824000">- Upgrade to pg 1.6.3
  Related: RHEL-142278</changelog>
</package>
<package pkgid="ab8ffd4e5393f0f33402f39f604c8cd9f4b4a4f598c1cf6295482265fd7cc2b1" name="rubygem-pg" arch="x86_64">
  <version epoch="0" ver="1.6.3" rel="1.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 1.6.3-1" date="1768824000">- Upgrade to pg 1.6.3
  Related: RHEL-142278</changelog>
</package>
<package pkgid="feb2b6039376f74200ed604d302253b86fa469337e7398f896ebba153818f5ca" name="rubygem-pg-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.6.3" rel="1.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 1.6.3-1" date="1768824000">- Upgrade to pg 1.6.3
  Related: RHEL-142278</changelog>
</package>
<package pkgid="2dd2677e5ce387f6a99da9bf99f17057fc61924500d97658794b07862fc1e372" name="rubygem-pg-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.6.3" rel="1.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 1.6.3-1" date="1768824000">- Upgrade to pg 1.6.3
  Related: RHEL-142278</changelog>
</package>
<package pkgid="2d6865bc6f7cc0fb9af5136858d2dd134b70e52fcb6c740463315311023508b9" name="rubygem-pg-debuginfo" arch="s390x">
  <version epoch="0" ver="1.6.3" rel="1.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 1.6.3-1" date="1768824000">- Upgrade to pg 1.6.3
  Related: RHEL-142278</changelog>
</package>
<package pkgid="703d78197caad2f2b6aa2592844300e3a166caa92adc69c872602dc24f446b0d" name="rubygem-pg-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.6.3" rel="1.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 1.6.3-1" date="1768824000">- Upgrade to pg 1.6.3
  Related: RHEL-142278</changelog>
</package>
<package pkgid="3419d4b7f993e38e1ed3b7443953faef78949f4ca2a054a13337458a997aadd2" name="rubygem-pg-debugsource" arch="aarch64">
  <version epoch="0" ver="1.6.3" rel="1.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 1.6.3-1" date="1768824000">- Upgrade to pg 1.6.3
  Related: RHEL-142278</changelog>
</package>
<package pkgid="1ddf0c713b18a2dcc1ad27852179a42d869c3d710298d8df9b3fb45822162bc1" name="rubygem-pg-debugsource" arch="ppc64le">
  <version epoch="0" ver="1.6.3" rel="1.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 1.6.3-1" date="1768824000">- Upgrade to pg 1.6.3
  Related: RHEL-142278</changelog>
</package>
<package pkgid="9ef0bfb4443abf231a6ab8a2665b56dd4aa820ead7720fbdb747a6647df60933" name="rubygem-pg-debugsource" arch="s390x">
  <version epoch="0" ver="1.6.3" rel="1.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 1.6.3-1" date="1768824000">- Upgrade to pg 1.6.3
  Related: RHEL-142278</changelog>
</package>
<package pkgid="a4717bcad9e3567a4d3b15bbe7490aec7007051d933f8e3d602af70f9fd03680" name="rubygem-pg-debugsource" arch="x86_64">
  <version epoch="0" ver="1.6.3" rel="1.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 1.6.3-1" date="1768824000">- Upgrade to pg 1.6.3
  Related: RHEL-142278</changelog>
</package>
<package pkgid="22a998a4add72dd69ff6ce6fb52730ad760eb361b60db04a2981b8afe0901fce" name="rubygem-pg-doc" arch="noarch">
  <version epoch="0" ver="1.6.3" rel="1.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 1.6.3-1" date="1768824000">- Upgrade to pg 1.6.3
  Related: RHEL-142278</changelog>
</package>
<package pkgid="d5c832c0686efb2e2e4909d5b48276374240768e2e3325a588d6dc9814a3c3a4" name="rubygem-power_assert" arch="noarch">
  <version epoch="0" ver="3.0.1" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="b1b836e8716e240b22933d5cbd4842d58e66b32e00e1438274d89badeaa900bb" name="rubygem-psych" arch="aarch64">
  <version epoch="0" ver="5.3.1" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="53a88c703456e29a137fb2b89204128c98e05191f23728c306c8ab290cbcdcbc" name="rubygem-psych" arch="ppc64le">
  <version epoch="0" ver="5.3.1" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="ffb1fad86c69a80c06c10e42b3b25e0de622c53a59fd68356e49e3ad9bda8ef8" name="rubygem-psych" arch="s390x">
  <version epoch="0" ver="5.3.1" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="550fac3fdc7fab655f6cf8de7579b0c5be148beb1fc34cde89114aaf9cbbc68f" name="rubygem-psych" arch="x86_64">
  <version epoch="0" ver="5.3.1" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="2dd6bad022e3ce8d5ee29711ccb9260aa6287d0d4d1e5fda5f3a40fa4913bb55" name="rubygem-psych-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.3.1" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="2990f505bcd6b90f2561ca14599fef239cafef9bb899f5d33ad7081219b58105" name="rubygem-psych-debuginfo" arch="ppc64le">
  <version epoch="0" ver="5.3.1" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="bfb154eb8b823dc08914274f098e4a271322462f2eccc0165b7782669286e3c4" name="rubygem-psych-debuginfo" arch="s390x">
  <version epoch="0" ver="5.3.1" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="2f1d04929d00100dbb52904c9836dd82bc643216070db56d70bd5b76371495a8" name="rubygem-psych-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.1" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="a8943c0875444e84e24a13eea205554407a1cc673eedf946537b74b571e64334" name="rubygem-racc" arch="aarch64">
  <version epoch="0" ver="1.8.1" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="54f9043a4b22febc271634b921d3045752898fcbdb78040ff07e90692372597a" name="rubygem-racc" arch="ppc64le">
  <version epoch="0" ver="1.8.1" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="3df422819326e4d61ecc51b05b0c68fb5df79e342fd592b776ce5d1499b6994c" name="rubygem-racc" arch="s390x">
  <version epoch="0" ver="1.8.1" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="393f0f597e5c021ddc33a269f9f0ffa3cfa73f8cc848d2fdcc55ea428db4da11" name="rubygem-racc" arch="x86_64">
  <version epoch="0" ver="1.8.1" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="b7ed97fc40483ff897329dbda27fefa1d3291aedcc38e11e3225c61e82d4cc1a" name="rubygem-racc-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.8.1" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="0b91c9f031c6d8027b42365cc31a06be88805fa3f037f88799d5a116ec656e85" name="rubygem-racc-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.8.1" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="7dea580427f433bf4bfe4c4112a1798fa8271798e5c3a16f8522a5568991f47e" name="rubygem-racc-debuginfo" arch="s390x">
  <version epoch="0" ver="1.8.1" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="17754a4d7d5c1ba7043d7376f42cc3d46948b1eab3fca5e517275279879687c4" name="rubygem-racc-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.8.1" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="dad8a7fe6060a5332a9535cf12cb2e23731d717aee2cb0a8ec776177bed534b9" name="rubygem-rake" arch="noarch">
  <version epoch="0" ver="13.3.1" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="d86702e9ba68f5b181c87c2ecaec67ca6d72b3f2553f99cca43419c1c54ab467" name="rubygem-rbs" arch="aarch64">
  <version epoch="0" ver="3.10.0" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="5abff54807cd2f077f4971a899fcee11e42880d54cfa685039326c4c541de929" name="rubygem-rbs" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="5eccf81e8f3345762fa56d493505818c98cb78bbd953392aeb20cea8f2e9988a" name="rubygem-rbs" arch="s390x">
  <version epoch="0" ver="3.10.0" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="b14bb96b323a6bbdf1d0479333e7a01a75943b433a82b50f782e03e0c6f0ef06" name="rubygem-rbs" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="f7edd2249faede92ed396e0fba9250762044eb1b942feaaf43bae43b00406750" name="rubygem-rbs-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.10.0" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="935cac9dad474f5afaa0cca3977cef4dac5d76fca168c01cd85cb8f74ca42278" name="rubygem-rbs-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="bd6c896a7a20e3206e704661efe9cf4d1cd52376b764ba2e900091aecf83f8a7" name="rubygem-rbs-debuginfo" arch="s390x">
  <version epoch="0" ver="3.10.0" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="a2ff3fd429a620bc3a12ba2e9ee46635afe746a242bc19daef4e62460b1f234f" name="rubygem-rbs-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="3c884218f99faaca995450a9f48c3f4e7bc75784043fd36c706e8f5e5edfcbbe" name="rubygem-rdoc" arch="noarch">
  <version epoch="0" ver="7.0.3" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="c04354542113cab31fb270abbf39783112939b8a4c71fbdb65eadf49a1221eee" name="rubygem-rexml" arch="noarch">
  <version epoch="0" ver="3.4.4" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="4e5c2e0439c74191357022bdc88118d3bbe9d1dd672ae92435e42e6d2b1f16de" name="rubygem-rss" arch="noarch">
  <version epoch="0" ver="0.3.2" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="7c5df3715eb073161421cbcdcf8dbcefaebc9d5f2b64069bf373c7f4fa9ad545" name="rubygem-test-unit" arch="noarch">
  <version epoch="0" ver="3.7.5" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="fd22b177ee33edc038f71a42ae2d6eb690002a6afcca4b1146e7ce9e9b2da099" name="rubygem-typeprof" arch="noarch">
  <version epoch="0" ver="0.31.1" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="64d506baa1b2d3fdc8d94bae33687752f048fedb9dc4070fb9f52900b7ab5557" name="rubygems" arch="noarch">
  <version epoch="0" ver="4.0.6" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="ec1f16e5baeca930299493e97d3f3629b2c24124d87013a6294e97d1f84ad724" name="rubygems-devel" arch="noarch">
  <version epoch="0" ver="4.0.6" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
</otherdata>