<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="45">
<package pkgid="4199bb01d2974eb165acc84195d74961803b742f9c1eb278177381e123b89229" name="ruby" arch="ppc64le">
  <version epoch="0" ver="3.3.10" rel="6.module_el9+1365+a2f2007f"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.1-2" date="1716206400">- Upgrade to Ruby 3.3.1.
  Resolves: RHEL-33976
- Fix buffer overread vulnerability in StringIO.
  (CVE-2024-27280)
  Resolves: RHEL-34130
- Fix RCE vulnerability with .rdoc_options in RDoc.
  (CVE-2024-27281)
  Resolves: RHEL-34122
- Fix Arbitrary memory address read vulnerability with Regex search.
  (CVE-2024-27282)
  Resolves: RHEL-33872</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.10-6" date="1777377600">- Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316)
  Resolves: RHEL-171260</changelog>
</package>
<package pkgid="19e90f55704c031d45378f6d40d4deb10d1abe9d306f816269ac9f2fc78092b0" name="ruby" arch="src">
  <version epoch="0" ver="3.3.10" rel="6.module_el9+1365+a2f2007f"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.1-2" date="1716206400">- Upgrade to Ruby 3.3.1.
  Resolves: RHEL-33976
- Fix buffer overread vulnerability in StringIO.
  (CVE-2024-27280)
  Resolves: RHEL-34130
- Fix RCE vulnerability with .rdoc_options in RDoc.
  (CVE-2024-27281)
  Resolves: RHEL-34122
- Fix Arbitrary memory address read vulnerability with Regex search.
  (CVE-2024-27282)
  Resolves: RHEL-33872</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.10-6" date="1777377600">- Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316)
  Resolves: RHEL-171260</changelog>
</package>
<package pkgid="535be3616594b1d528f44808012e2a4a77a7da398614c3a62d5ddd189090ee92" name="ruby-bundled-gems" arch="ppc64le">
  <version epoch="0" ver="3.3.10" rel="6.module_el9+1365+a2f2007f"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.1-2" date="1716206400">- Upgrade to Ruby 3.3.1.
  Resolves: RHEL-33976
- Fix buffer overread vulnerability in StringIO.
  (CVE-2024-27280)
  Resolves: RHEL-34130
- Fix RCE vulnerability with .rdoc_options in RDoc.
  (CVE-2024-27281)
  Resolves: RHEL-34122
- Fix Arbitrary memory address read vulnerability with Regex search.
  (CVE-2024-27282)
  Resolves: RHEL-33872</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.10-6" date="1777377600">- Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316)
  Resolves: RHEL-171260</changelog>
</package>
<package pkgid="8499e3d1fe491fa3ab5b6e955e734662542b14e15005213a8ab07d077e2ba49d" name="ruby-bundled-gems-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.3.10" rel="6.module_el9+1365+a2f2007f"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.1-2" date="1716206400">- Upgrade to Ruby 3.3.1.
  Resolves: RHEL-33976
- Fix buffer overread vulnerability in StringIO.
  (CVE-2024-27280)
  Resolves: RHEL-34130
- Fix RCE vulnerability with .rdoc_options in RDoc.
  (CVE-2024-27281)
  Resolves: RHEL-34122
- Fix Arbitrary memory address read vulnerability with Regex search.
  (CVE-2024-27282)
  Resolves: RHEL-33872</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.10-6" date="1777377600">- Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316)
  Resolves: RHEL-171260</changelog>
</package>
<package pkgid="4acaeeb0fb88402b92365cb2f095c3e8dbbedb1ddb55b038fe774049972cca4a" name="ruby-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.3.10" rel="6.module_el9+1365+a2f2007f"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.1-2" date="1716206400">- Upgrade to Ruby 3.3.1.
  Resolves: RHEL-33976
- Fix buffer overread vulnerability in StringIO.
  (CVE-2024-27280)
  Resolves: RHEL-34130
- Fix RCE vulnerability with .rdoc_options in RDoc.
  (CVE-2024-27281)
  Resolves: RHEL-34122
- Fix Arbitrary memory address read vulnerability with Regex search.
  (CVE-2024-27282)
  Resolves: RHEL-33872</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.10-6" date="1777377600">- Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316)
  Resolves: RHEL-171260</changelog>
</package>
<package pkgid="6fb94232117064ae7a7e2a151430483ac9dcd917b6abee23150320e51c6d17a3" name="ruby-debugsource" arch="ppc64le">
  <version epoch="0" ver="3.3.10" rel="6.module_el9+1365+a2f2007f"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.1-2" date="1716206400">- Upgrade to Ruby 3.3.1.
  Resolves: RHEL-33976
- Fix buffer overread vulnerability in StringIO.
  (CVE-2024-27280)
  Resolves: RHEL-34130
- Fix RCE vulnerability with .rdoc_options in RDoc.
  (CVE-2024-27281)
  Resolves: RHEL-34122
- Fix Arbitrary memory address read vulnerability with Regex search.
  (CVE-2024-27282)
  Resolves: RHEL-33872</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.10-6" date="1777377600">- Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316)
  Resolves: RHEL-171260</changelog>
</package>
<package pkgid="114b1e29370fbfa3ceaa4a79c69d9ba44f4473000b4811e4e99f97bcc60e0bf1" name="ruby-default-gems" arch="noarch">
  <version epoch="0" ver="3.3.10" rel="6.module_el9+1365+a2f2007f"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.1-2" date="1716206400">- Upgrade to Ruby 3.3.1.
  Resolves: RHEL-33976
- Fix buffer overread vulnerability in StringIO.
  (CVE-2024-27280)
  Resolves: RHEL-34130
- Fix RCE vulnerability with .rdoc_options in RDoc.
  (CVE-2024-27281)
  Resolves: RHEL-34122
- Fix Arbitrary memory address read vulnerability with Regex search.
  (CVE-2024-27282)
  Resolves: RHEL-33872</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.10-6" date="1777377600">- Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316)
  Resolves: RHEL-171260</changelog>
</package>
<package pkgid="e27c2c952da1e9f19de0386d115a54323cec8ea73e7c50a84a87b38b6ead3fae" name="ruby-devel" arch="ppc64le">
  <version epoch="0" ver="3.3.10" rel="6.module_el9+1365+a2f2007f"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.1-2" date="1716206400">- Upgrade to Ruby 3.3.1.
  Resolves: RHEL-33976
- Fix buffer overread vulnerability in StringIO.
  (CVE-2024-27280)
  Resolves: RHEL-34130
- Fix RCE vulnerability with .rdoc_options in RDoc.
  (CVE-2024-27281)
  Resolves: RHEL-34122
- Fix Arbitrary memory address read vulnerability with Regex search.
  (CVE-2024-27282)
  Resolves: RHEL-33872</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.10-6" date="1777377600">- Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316)
  Resolves: RHEL-171260</changelog>
</package>
<package pkgid="ad5dd811361efdcd070c55415b0b402b7d1666ad3f703404f20d6c44b72d8049" name="ruby-doc" arch="noarch">
  <version epoch="0" ver="3.3.10" rel="6.module_el9+1365+a2f2007f"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.1-2" date="1716206400">- Upgrade to Ruby 3.3.1.
  Resolves: RHEL-33976
- Fix buffer overread vulnerability in StringIO.
  (CVE-2024-27280)
  Resolves: RHEL-34130
- Fix RCE vulnerability with .rdoc_options in RDoc.
  (CVE-2024-27281)
  Resolves: RHEL-34122
- Fix Arbitrary memory address read vulnerability with Regex search.
  (CVE-2024-27282)
  Resolves: RHEL-33872</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.10-6" date="1777377600">- Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316)
  Resolves: RHEL-171260</changelog>
</package>
<package pkgid="b54caa4a666fea816c5bf1126102c9012b5d4426aa7b1235941925b56c86aeae" name="ruby-libs" arch="ppc64le">
  <version epoch="0" ver="3.3.10" rel="6.module_el9+1365+a2f2007f"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.1-2" date="1716206400">- Upgrade to Ruby 3.3.1.
  Resolves: RHEL-33976
- Fix buffer overread vulnerability in StringIO.
  (CVE-2024-27280)
  Resolves: RHEL-34130
- Fix RCE vulnerability with .rdoc_options in RDoc.
  (CVE-2024-27281)
  Resolves: RHEL-34122
- Fix Arbitrary memory address read vulnerability with Regex search.
  (CVE-2024-27282)
  Resolves: RHEL-33872</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.10-6" date="1777377600">- Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316)
  Resolves: RHEL-171260</changelog>
</package>
<package pkgid="95c647fa85b01f5af10e2280e694370ba466e8e24b4243eb295417e931621345" name="ruby-libs-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.3.10" rel="6.module_el9+1365+a2f2007f"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.1-2" date="1716206400">- Upgrade to Ruby 3.3.1.
  Resolves: RHEL-33976
- Fix buffer overread vulnerability in StringIO.
  (CVE-2024-27280)
  Resolves: RHEL-34130
- Fix RCE vulnerability with .rdoc_options in RDoc.
  (CVE-2024-27281)
  Resolves: RHEL-34122
- Fix Arbitrary memory address read vulnerability with Regex search.
  (CVE-2024-27282)
  Resolves: RHEL-33872</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.10-6" date="1777377600">- Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316)
  Resolves: RHEL-171260</changelog>
</package>
<package pkgid="8459e4d083a0040315a6c1f912e08bc1e366fbd9f03636cb1146919cfa89b5c8" name="rubygem-bigdecimal" arch="ppc64le">
  <version epoch="0" ver="3.1.5" rel="6.module_el9+1365+a2f2007f"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.1-2" date="1716206400">- Upgrade to Ruby 3.3.1.
  Resolves: RHEL-33976
- Fix buffer overread vulnerability in StringIO.
  (CVE-2024-27280)
  Resolves: RHEL-34130
- Fix RCE vulnerability with .rdoc_options in RDoc.
  (CVE-2024-27281)
  Resolves: RHEL-34122
- Fix Arbitrary memory address read vulnerability with Regex search.
  (CVE-2024-27282)
  Resolves: RHEL-33872</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.10-6" date="1777377600">- Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316)
  Resolves: RHEL-171260</changelog>
</package>
<package pkgid="5c4596d678d197e2e43869fa7ba18186de4f6738ef8609a8ccc54a536f9e5aa5" name="rubygem-bigdecimal-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.1.5" rel="6.module_el9+1365+a2f2007f"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.1-2" date="1716206400">- Upgrade to Ruby 3.3.1.
  Resolves: RHEL-33976
- Fix buffer overread vulnerability in StringIO.
  (CVE-2024-27280)
  Resolves: RHEL-34130
- Fix RCE vulnerability with .rdoc_options in RDoc.
  (CVE-2024-27281)
  Resolves: RHEL-34122
- Fix Arbitrary memory address read vulnerability with Regex search.
  (CVE-2024-27282)
  Resolves: RHEL-33872</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.10-6" date="1777377600">- Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316)
  Resolves: RHEL-171260</changelog>
</package>
<package pkgid="9b85bac7f40bb2ad076ab561c0018258a93d25746bc44d898b86f765f2a3353d" name="rubygem-bundler" arch="noarch">
  <version epoch="0" ver="2.5.22" rel="6.module_el9+1365+a2f2007f"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.1-2" date="1716206400">- Upgrade to Ruby 3.3.1.
  Resolves: RHEL-33976
- Fix buffer overread vulnerability in StringIO.
  (CVE-2024-27280)
  Resolves: RHEL-34130
- Fix RCE vulnerability with .rdoc_options in RDoc.
  (CVE-2024-27281)
  Resolves: RHEL-34122
- Fix Arbitrary memory address read vulnerability with Regex search.
  (CVE-2024-27282)
  Resolves: RHEL-33872</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.10-6" date="1777377600">- Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316)
  Resolves: RHEL-171260</changelog>
</package>
<package pkgid="3f5eb26bcb325fab1dbf15436764f62aa27a89321de999cbc9959d29256d636a" name="rubygem-io-console" arch="ppc64le">
  <version epoch="0" ver="0.7.1" rel="6.module_el9+1365+a2f2007f"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.1-2" date="1716206400">- Upgrade to Ruby 3.3.1.
  Resolves: RHEL-33976
- Fix buffer overread vulnerability in StringIO.
  (CVE-2024-27280)
  Resolves: RHEL-34130
- Fix RCE vulnerability with .rdoc_options in RDoc.
  (CVE-2024-27281)
  Resolves: RHEL-34122
- Fix Arbitrary memory address read vulnerability with Regex search.
  (CVE-2024-27282)
  Resolves: RHEL-33872</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.10-6" date="1777377600">- Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316)
  Resolves: RHEL-171260</changelog>
</package>
<package pkgid="31ddcff4fe50dfcc5dc0473bcbfb6df9e2405569b85851d6d742772bcb83942e" name="rubygem-io-console-debuginfo" arch="ppc64le">
  <version epoch="0" ver="0.7.1" rel="6.module_el9+1365+a2f2007f"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.1-2" date="1716206400">- Upgrade to Ruby 3.3.1.
  Resolves: RHEL-33976
- Fix buffer overread vulnerability in StringIO.
  (CVE-2024-27280)
  Resolves: RHEL-34130
- Fix RCE vulnerability with .rdoc_options in RDoc.
  (CVE-2024-27281)
  Resolves: RHEL-34122
- Fix Arbitrary memory address read vulnerability with Regex search.
  (CVE-2024-27282)
  Resolves: RHEL-33872</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.10-6" date="1777377600">- Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316)
  Resolves: RHEL-171260</changelog>
</package>
<package pkgid="708ab283c3f349f4aef5f8e33f8a0393c1afcceee6aacaf549c60f4a07ae0f25" name="rubygem-irb" arch="noarch">
  <version epoch="0" ver="1.13.1" rel="6.module_el9+1365+a2f2007f"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.1-2" date="1716206400">- Upgrade to Ruby 3.3.1.
  Resolves: RHEL-33976
- Fix buffer overread vulnerability in StringIO.
  (CVE-2024-27280)
  Resolves: RHEL-34130
- Fix RCE vulnerability with .rdoc_options in RDoc.
  (CVE-2024-27281)
  Resolves: RHEL-34122
- Fix Arbitrary memory address read vulnerability with Regex search.
  (CVE-2024-27282)
  Resolves: RHEL-33872</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.10-6" date="1777377600">- Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316)
  Resolves: RHEL-171260</changelog>
</package>
<package pkgid="39c97bbd43bedf2bb823f809e2b5b2e6b84fb167985ab4f05534934068e976b1" name="rubygem-json" arch="ppc64le">
  <version epoch="0" ver="2.7.2" rel="6.module_el9+1365+a2f2007f"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.1-2" date="1716206400">- Upgrade to Ruby 3.3.1.
  Resolves: RHEL-33976
- Fix buffer overread vulnerability in StringIO.
  (CVE-2024-27280)
  Resolves: RHEL-34130
- Fix RCE vulnerability with .rdoc_options in RDoc.
  (CVE-2024-27281)
  Resolves: RHEL-34122
- Fix Arbitrary memory address read vulnerability with Regex search.
  (CVE-2024-27282)
  Resolves: RHEL-33872</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.10-6" date="1777377600">- Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316)
  Resolves: RHEL-171260</changelog>
</package>
<package pkgid="f030f318c438ede88f0669e92f6146125246e166d347b0980b51e5d04f9c44cb" name="rubygem-json-debuginfo" arch="ppc64le">
  <version epoch="0" ver="2.7.2" rel="6.module_el9+1365+a2f2007f"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.1-2" date="1716206400">- Upgrade to Ruby 3.3.1.
  Resolves: RHEL-33976
- Fix buffer overread vulnerability in StringIO.
  (CVE-2024-27280)
  Resolves: RHEL-34130
- Fix RCE vulnerability with .rdoc_options in RDoc.
  (CVE-2024-27281)
  Resolves: RHEL-34122
- Fix Arbitrary memory address read vulnerability with Regex search.
  (CVE-2024-27282)
  Resolves: RHEL-33872</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.10-6" date="1777377600">- Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316)
  Resolves: RHEL-171260</changelog>
</package>
<package pkgid="4289517be39ef91a1d156089c2b099114849a3c57c87c15c2d0b443f17445a1e" name="rubygem-minitest" arch="noarch">
  <version epoch="0" ver="5.20.0" rel="6.module_el9+1365+a2f2007f"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.1-2" date="1716206400">- Upgrade to Ruby 3.3.1.
  Resolves: RHEL-33976
- Fix buffer overread vulnerability in StringIO.
  (CVE-2024-27280)
  Resolves: RHEL-34130
- Fix RCE vulnerability with .rdoc_options in RDoc.
  (CVE-2024-27281)
  Resolves: RHEL-34122
- Fix Arbitrary memory address read vulnerability with Regex search.
  (CVE-2024-27282)
  Resolves: RHEL-33872</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.10-6" date="1777377600">- Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316)
  Resolves: RHEL-171260</changelog>
</package>
<package pkgid="a77dedc66629b2953b37a2405cf59161cce6209c77f2a0682f0c9926cfb1c906" name="rubygem-mysql2" arch="ppc64le">
  <version epoch="0" ver="0.5.5" rel="3.module_el9+1365+a2f2007f"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 0.5.5-1" date="1705665600">- Upgrade to mysql2 0.5.5.
  Related: RHEL-17089</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 0.5.5-2" date="1707480000">- Adapt tests to openssl 3.2
  Resolves: RHEL-80222</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 0.5.5-3" date="1753272000">- Disable tests on the 32bit platforms ix86.
  Related: RHEL-80222</changelog>
</package>
<package pkgid="343f32c27a358448fdd6137a71dfb35cecba5d4408d7bf2cd950e8fe730eda86" name="rubygem-mysql2" arch="src">
  <version epoch="0" ver="0.5.5" rel="3.module_el9+1365+a2f2007f"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 0.5.5-1" date="1705665600">- Upgrade to mysql2 0.5.5.
  Related: RHEL-17089</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 0.5.5-2" date="1707480000">- Adapt tests to openssl 3.2
  Resolves: RHEL-80222</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 0.5.5-3" date="1753272000">- Disable tests on the 32bit platforms ix86.
  Related: RHEL-80222</changelog>
</package>
<package pkgid="e598866eaaac33e4b96329a271b0ea49d3a504a4f7e0941617bd8e236a7e28c9" name="rubygem-mysql2-debuginfo" arch="ppc64le">
  <version epoch="0" ver="0.5.5" rel="3.module_el9+1365+a2f2007f"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 0.5.5-1" date="1705665600">- Upgrade to mysql2 0.5.5.
  Related: RHEL-17089</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 0.5.5-2" date="1707480000">- Adapt tests to openssl 3.2
  Resolves: RHEL-80222</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 0.5.5-3" date="1753272000">- Disable tests on the 32bit platforms ix86.
  Related: RHEL-80222</changelog>
</package>
<package pkgid="ee80c9c236c45a8167a8ffcc0b13c455cfff63ee75f5d650f660a5d1df08c5c2" name="rubygem-mysql2-debugsource" arch="ppc64le">
  <version epoch="0" ver="0.5.5" rel="3.module_el9+1365+a2f2007f"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 0.5.5-1" date="1705665600">- Upgrade to mysql2 0.5.5.
  Related: RHEL-17089</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 0.5.5-2" date="1707480000">- Adapt tests to openssl 3.2
  Resolves: RHEL-80222</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 0.5.5-3" date="1753272000">- Disable tests on the 32bit platforms ix86.
  Related: RHEL-80222</changelog>
</package>
<package pkgid="b17b37db2cf1450a96f79c84c18c0e644d95ebcfe4bd5011cceac309870c1a90" name="rubygem-mysql2-doc" arch="noarch">
  <version epoch="0" ver="0.5.5" rel="3.module_el9+1365+a2f2007f"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 0.5.5-1" date="1705665600">- Upgrade to mysql2 0.5.5.
  Related: RHEL-17089</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 0.5.5-2" date="1707480000">- Adapt tests to openssl 3.2
  Resolves: RHEL-80222</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 0.5.5-3" date="1753272000">- Disable tests on the 32bit platforms ix86.
  Related: RHEL-80222</changelog>
</package>
<package pkgid="c428927f8e15f72f817359e7dc63ee39bc98148d78672b3512e0cf5059a8b392" name="rubygem-pg" arch="ppc64le">
  <version epoch="0" ver="1.5.4" rel="2.module_el9+1365+a2f2007f"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; -1.5.4-2" date="1774353600">- Fix encoding issue in spec suite.
  Resolves: RHEL-159197</changelog>
</package>
<package pkgid="ed8d04155e38de9826e2014ce16bfa1a48f208179f9813a7cadccfba9918ada4" name="rubygem-pg" arch="src">
  <version epoch="0" ver="1.5.4" rel="2.module_el9+1365+a2f2007f"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; -1.5.4-2" date="1774353600">- Fix encoding issue in spec suite.
  Resolves: RHEL-159197</changelog>
</package>
<package pkgid="c405da6e0f5cd4588e4152e9ffff08e0c5771c29640c52b4bd7107c5ff36d408" name="rubygem-pg-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.5.4" rel="2.module_el9+1365+a2f2007f"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; -1.5.4-2" date="1774353600">- Fix encoding issue in spec suite.
  Resolves: RHEL-159197</changelog>
</package>
<package pkgid="5e228ac18a86caeaea8db15572611858b59dcf112450774fd9edade10454b856" name="rubygem-pg-debugsource" arch="ppc64le">
  <version epoch="0" ver="1.5.4" rel="2.module_el9+1365+a2f2007f"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; -1.5.4-2" date="1774353600">- Fix encoding issue in spec suite.
  Resolves: RHEL-159197</changelog>
</package>
<package pkgid="95f9c0590668395279a5a6a2dadb8897e1272004436c74346af0d6f470be3af8" name="rubygem-pg-doc" arch="noarch">
  <version epoch="0" ver="1.5.4" rel="2.module_el9+1365+a2f2007f"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; -1.5.4-2" date="1774353600">- Fix encoding issue in spec suite.
  Resolves: RHEL-159197</changelog>
</package>
<package pkgid="3c004269d80195638de9b5d1fbecd312a4fec9a0e047e9dc168d99da6904d00d" name="rubygem-power_assert" arch="noarch">
  <version epoch="0" ver="2.0.3" rel="6.module_el9+1365+a2f2007f"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.1-2" date="1716206400">- Upgrade to Ruby 3.3.1.
  Resolves: RHEL-33976
- Fix buffer overread vulnerability in StringIO.
  (CVE-2024-27280)
  Resolves: RHEL-34130
- Fix RCE vulnerability with .rdoc_options in RDoc.
  (CVE-2024-27281)
  Resolves: RHEL-34122
- Fix Arbitrary memory address read vulnerability with Regex search.
  (CVE-2024-27282)
  Resolves: RHEL-33872</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.10-6" date="1777377600">- Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316)
  Resolves: RHEL-171260</changelog>
</package>
<package pkgid="3057adf713f79c0aa116b3a84e8a26f0aff7532ca5edea56d1983a264754fa5c" name="rubygem-psych" arch="ppc64le">
  <version epoch="0" ver="5.1.2" rel="6.module_el9+1365+a2f2007f"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.1-2" date="1716206400">- Upgrade to Ruby 3.3.1.
  Resolves: RHEL-33976
- Fix buffer overread vulnerability in StringIO.
  (CVE-2024-27280)
  Resolves: RHEL-34130
- Fix RCE vulnerability with .rdoc_options in RDoc.
  (CVE-2024-27281)
  Resolves: RHEL-34122
- Fix Arbitrary memory address read vulnerability with Regex search.
  (CVE-2024-27282)
  Resolves: RHEL-33872</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.10-6" date="1777377600">- Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316)
  Resolves: RHEL-171260</changelog>
</package>
<package pkgid="9f79f8d2d64dd767aff6bdb957df1ed90547a2d30345f967152361529bcabcae" name="rubygem-psych-debuginfo" arch="ppc64le">
  <version epoch="0" ver="5.1.2" rel="6.module_el9+1365+a2f2007f"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.1-2" date="1716206400">- Upgrade to Ruby 3.3.1.
  Resolves: RHEL-33976
- Fix buffer overread vulnerability in StringIO.
  (CVE-2024-27280)
  Resolves: RHEL-34130
- Fix RCE vulnerability with .rdoc_options in RDoc.
  (CVE-2024-27281)
  Resolves: RHEL-34122
- Fix Arbitrary memory address read vulnerability with Regex search.
  (CVE-2024-27282)
  Resolves: RHEL-33872</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.10-6" date="1777377600">- Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316)
  Resolves: RHEL-171260</changelog>
</package>
<package pkgid="aa7e85294c108d4a4457c51f573f47e1c7a2ed22a5b461634e74d937560fe9ba" name="rubygem-racc" arch="ppc64le">
  <version epoch="0" ver="1.7.3" rel="6.module_el9+1365+a2f2007f"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.1-2" date="1716206400">- Upgrade to Ruby 3.3.1.
  Resolves: RHEL-33976
- Fix buffer overread vulnerability in StringIO.
  (CVE-2024-27280)
  Resolves: RHEL-34130
- Fix RCE vulnerability with .rdoc_options in RDoc.
  (CVE-2024-27281)
  Resolves: RHEL-34122
- Fix Arbitrary memory address read vulnerability with Regex search.
  (CVE-2024-27282)
  Resolves: RHEL-33872</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.10-6" date="1777377600">- Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316)
  Resolves: RHEL-171260</changelog>
</package>
<package pkgid="b85c4934b735bd0a73af7f6b1bb6a49798c3b79412cdd7c82f3fbb56bc212f22" name="rubygem-racc-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.7.3" rel="6.module_el9+1365+a2f2007f"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.1-2" date="1716206400">- Upgrade to Ruby 3.3.1.
  Resolves: RHEL-33976
- Fix buffer overread vulnerability in StringIO.
  (CVE-2024-27280)
  Resolves: RHEL-34130
- Fix RCE vulnerability with .rdoc_options in RDoc.
  (CVE-2024-27281)
  Resolves: RHEL-34122
- Fix Arbitrary memory address read vulnerability with Regex search.
  (CVE-2024-27282)
  Resolves: RHEL-33872</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.10-6" date="1777377600">- Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316)
  Resolves: RHEL-171260</changelog>
</package>
<package pkgid="14b5c6dd74789b1af207834169dca5b45192c87c704bce6f48ee82e832bd9143" name="rubygem-rake" arch="noarch">
  <version epoch="0" ver="13.1.0" rel="6.module_el9+1365+a2f2007f"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.1-2" date="1716206400">- Upgrade to Ruby 3.3.1.
  Resolves: RHEL-33976
- Fix buffer overread vulnerability in StringIO.
  (CVE-2024-27280)
  Resolves: RHEL-34130
- Fix RCE vulnerability with .rdoc_options in RDoc.
  (CVE-2024-27281)
  Resolves: RHEL-34122
- Fix Arbitrary memory address read vulnerability with Regex search.
  (CVE-2024-27282)
  Resolves: RHEL-33872</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.10-6" date="1777377600">- Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316)
  Resolves: RHEL-171260</changelog>
</package>
<package pkgid="de53b597cb398adfece1f73a9a275315669b1dabf971a37a0980da457a3951c1" name="rubygem-rbs" arch="ppc64le">
  <version epoch="0" ver="3.4.0" rel="6.module_el9+1365+a2f2007f"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.1-2" date="1716206400">- Upgrade to Ruby 3.3.1.
  Resolves: RHEL-33976
- Fix buffer overread vulnerability in StringIO.
  (CVE-2024-27280)
  Resolves: RHEL-34130
- Fix RCE vulnerability with .rdoc_options in RDoc.
  (CVE-2024-27281)
  Resolves: RHEL-34122
- Fix Arbitrary memory address read vulnerability with Regex search.
  (CVE-2024-27282)
  Resolves: RHEL-33872</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.10-6" date="1777377600">- Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316)
  Resolves: RHEL-171260</changelog>
</package>
<package pkgid="f24e6325afbbb42868e3000e127fbca065e28719f43ece90da1e16fd2ce8a9f5" name="rubygem-rbs-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.4.0" rel="6.module_el9+1365+a2f2007f"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.1-2" date="1716206400">- Upgrade to Ruby 3.3.1.
  Resolves: RHEL-33976
- Fix buffer overread vulnerability in StringIO.
  (CVE-2024-27280)
  Resolves: RHEL-34130
- Fix RCE vulnerability with .rdoc_options in RDoc.
  (CVE-2024-27281)
  Resolves: RHEL-34122
- Fix Arbitrary memory address read vulnerability with Regex search.
  (CVE-2024-27282)
  Resolves: RHEL-33872</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.10-6" date="1777377600">- Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316)
  Resolves: RHEL-171260</changelog>
</package>
<package pkgid="30eb3c9ffb898e13826702daf1dbb902268886be12afff8173fe1a8541e3cd8c" name="rubygem-rdoc" arch="noarch">
  <version epoch="0" ver="6.6.3.1" rel="6.module_el9+1365+a2f2007f"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.1-2" date="1716206400">- Upgrade to Ruby 3.3.1.
  Resolves: RHEL-33976
- Fix buffer overread vulnerability in StringIO.
  (CVE-2024-27280)
  Resolves: RHEL-34130
- Fix RCE vulnerability with .rdoc_options in RDoc.
  (CVE-2024-27281)
  Resolves: RHEL-34122
- Fix Arbitrary memory address read vulnerability with Regex search.
  (CVE-2024-27282)
  Resolves: RHEL-33872</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.10-6" date="1777377600">- Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316)
  Resolves: RHEL-171260</changelog>
</package>
<package pkgid="54721b625c097aaed165424fdc1d766382f03df496b6c69280d2a533c3faf2dd" name="rubygem-rexml" arch="noarch">
  <version epoch="0" ver="3.4.4" rel="6.module_el9+1365+a2f2007f"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.1-2" date="1716206400">- Upgrade to Ruby 3.3.1.
  Resolves: RHEL-33976
- Fix buffer overread vulnerability in StringIO.
  (CVE-2024-27280)
  Resolves: RHEL-34130
- Fix RCE vulnerability with .rdoc_options in RDoc.
  (CVE-2024-27281)
  Resolves: RHEL-34122
- Fix Arbitrary memory address read vulnerability with Regex search.
  (CVE-2024-27282)
  Resolves: RHEL-33872</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.10-6" date="1777377600">- Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316)
  Resolves: RHEL-171260</changelog>
</package>
<package pkgid="5427fd585ec8ea113e38a5b7e3dc28b718ce5466b21278223c4c0bbc31a83300" name="rubygem-rss" arch="noarch">
  <version epoch="0" ver="0.3.1" rel="6.module_el9+1365+a2f2007f"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.1-2" date="1716206400">- Upgrade to Ruby 3.3.1.
  Resolves: RHEL-33976
- Fix buffer overread vulnerability in StringIO.
  (CVE-2024-27280)
  Resolves: RHEL-34130
- Fix RCE vulnerability with .rdoc_options in RDoc.
  (CVE-2024-27281)
  Resolves: RHEL-34122
- Fix Arbitrary memory address read vulnerability with Regex search.
  (CVE-2024-27282)
  Resolves: RHEL-33872</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.10-6" date="1777377600">- Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316)
  Resolves: RHEL-171260</changelog>
</package>
<package pkgid="f9ea57bf869833294cc9653ac18e75455e010e1942589f864b328f1497a6317c" name="rubygem-test-unit" arch="noarch">
  <version epoch="0" ver="3.6.1" rel="6.module_el9+1365+a2f2007f"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.1-2" date="1716206400">- Upgrade to Ruby 3.3.1.
  Resolves: RHEL-33976
- Fix buffer overread vulnerability in StringIO.
  (CVE-2024-27280)
  Resolves: RHEL-34130
- Fix RCE vulnerability with .rdoc_options in RDoc.
  (CVE-2024-27281)
  Resolves: RHEL-34122
- Fix Arbitrary memory address read vulnerability with Regex search.
  (CVE-2024-27282)
  Resolves: RHEL-33872</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.10-6" date="1777377600">- Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316)
  Resolves: RHEL-171260</changelog>
</package>
<package pkgid="b3daa42669981e74dca5287da1542be72295481559080000d30cf86aeb1e1307" name="rubygem-typeprof" arch="noarch">
  <version epoch="0" ver="0.21.9" rel="6.module_el9+1365+a2f2007f"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.1-2" date="1716206400">- Upgrade to Ruby 3.3.1.
  Resolves: RHEL-33976
- Fix buffer overread vulnerability in StringIO.
  (CVE-2024-27280)
  Resolves: RHEL-34130
- Fix RCE vulnerability with .rdoc_options in RDoc.
  (CVE-2024-27281)
  Resolves: RHEL-34122
- Fix Arbitrary memory address read vulnerability with Regex search.
  (CVE-2024-27282)
  Resolves: RHEL-33872</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.10-6" date="1777377600">- Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316)
  Resolves: RHEL-171260</changelog>
</package>
<package pkgid="8e637f42b5eee7aa7f0d4438f40d6172b86bc2d73f00dd8f8a112db3a4266635" name="rubygems" arch="noarch">
  <version epoch="0" ver="3.5.22" rel="6.module_el9+1365+a2f2007f"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.1-2" date="1716206400">- Upgrade to Ruby 3.3.1.
  Resolves: RHEL-33976
- Fix buffer overread vulnerability in StringIO.
  (CVE-2024-27280)
  Resolves: RHEL-34130
- Fix RCE vulnerability with .rdoc_options in RDoc.
  (CVE-2024-27281)
  Resolves: RHEL-34122
- Fix Arbitrary memory address read vulnerability with Regex search.
  (CVE-2024-27282)
  Resolves: RHEL-33872</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.10-6" date="1777377600">- Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316)
  Resolves: RHEL-171260</changelog>
</package>
<package pkgid="f2765328dc9063b0399a2a81c964808777339c64bb1f02ecc8232fe79e7ff137" name="rubygems-devel" arch="noarch">
  <version epoch="0" ver="3.5.22" rel="6.module_el9+1365+a2f2007f"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.1-2" date="1716206400">- Upgrade to Ruby 3.3.1.
  Resolves: RHEL-33976
- Fix buffer overread vulnerability in StringIO.
  (CVE-2024-27280)
  Resolves: RHEL-34130
- Fix RCE vulnerability with .rdoc_options in RDoc.
  (CVE-2024-27281)
  Resolves: RHEL-34122
- Fix Arbitrary memory address read vulnerability with Regex search.
  (CVE-2024-27282)
  Resolves: RHEL-33872</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.10-6" date="1777377600">- Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316)
  Resolves: RHEL-171260</changelog>
</package>
</otherdata>