<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="45">
<package pkgid="c26455b4dbbf6e6030f324b782aec4708dc3bc6cf9153853bb6e3a6cb6695ed0" name="ruby" arch="ppc64le">
  <version epoch="0" ver="4.0.3" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="05f452000b65d85cf21c4865299d324e8baffea0b04272ecc62ae2bb29810c4a" name="ruby" arch="src">
  <version epoch="0" ver="4.0.3" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="6519c61243c3cd0a13e41d059c44a91dd4e534795c00671819b59e71cb613859" name="ruby-bundled-gems" arch="ppc64le">
  <version epoch="0" ver="4.0.3" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="826841a251e825da3e307ff1873b6ab8cd14fa84fecafeaee030ddd4e7b01533" name="ruby-bundled-gems-debuginfo" arch="ppc64le">
  <version epoch="0" ver="4.0.3" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="418e7971462af4b54c9fdda03f82b756e24b91ae2a1c7bb31e8f07d4efcb71e6" name="ruby-debuginfo" arch="ppc64le">
  <version epoch="0" ver="4.0.3" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="0ca137b60dc66633726522c7a3453c3334d463ae9e7156bcc5e24577ae0c598b" name="ruby-debugsource" arch="ppc64le">
  <version epoch="0" ver="4.0.3" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="15b8431c545e3fd5d87aa2de26e15593b39e70a96117788545b7852c98872916" name="ruby-default-gems" arch="noarch">
  <version epoch="0" ver="4.0.3" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="4c8a4a3ab8bbdedca1da04e59bf108f1ee79217fe7295272fcfef909294607a6" name="ruby-devel" arch="ppc64le">
  <version epoch="0" ver="4.0.3" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="a1058ac395871842d24ec3583254f2c4983ac25dbf9fe7bd862b11fa9d125e4c" name="ruby-doc" arch="noarch">
  <version epoch="0" ver="4.0.3" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="a66a7c6402197ef937984a2a69f4c81d54fd6d729a7e622920460f1eaac4e706" name="ruby-libs" arch="ppc64le">
  <version epoch="0" ver="4.0.3" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="6a3268487ee2705a7b9c4ba731273fcb06c28879563c4443bf891f0dfdb0d6ab" name="ruby-libs-debuginfo" arch="ppc64le">
  <version epoch="0" ver="4.0.3" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="c465bf8d85eec29fbd4f61e7007c75ba4f8fc4b1dd56df2b26453f2fdcc06190" name="rubygem-bigdecimal" arch="ppc64le">
  <version epoch="0" ver="4.0.1" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="68d6e92cca0bc0bb97f7f6215b85cb0944c3228d7a7675dbd6e84704fa9c031c" name="rubygem-bigdecimal-debuginfo" arch="ppc64le">
  <version epoch="0" ver="4.0.1" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="89abf8305090cf4fb6fe52f6f252a577e29ff2c51ee9b5d8317555f8aafdeca0" name="rubygem-bundler" arch="noarch">
  <version epoch="0" ver="4.0.6" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="2ee2645bc1d63866d6bcf643b0fd1f2f3479e826d1308e0f585ae6b3149e51db" name="rubygem-io-console" arch="ppc64le">
  <version epoch="0" ver="0.8.2" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="31dc15df503122b8254f27dcc83b5f1659592ea31d35f9d6bd6185bc66a54238" name="rubygem-io-console-debuginfo" arch="ppc64le">
  <version epoch="0" ver="0.8.2" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="e9a7a3551913e6e3fe55387659b79a02da1a5fe38258beca3ef8c7ae88f0be86" name="rubygem-irb" arch="noarch">
  <version epoch="0" ver="1.16.0" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="a0682e166cf182839a921605b352a61a4c33c611073d5fb773634e170b61e312" name="rubygem-json" arch="ppc64le">
  <version epoch="0" ver="2.18.0" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="95714d80eeab43fb946f725edaab9dfd367144c2366fc7477dfeeed9354d83e8" name="rubygem-json-debuginfo" arch="ppc64le">
  <version epoch="0" ver="2.18.0" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="6c8650855e97bea6157d29df044b4aa41b133ced356e91d809dd9a96175e6b8c" name="rubygem-minitest" arch="noarch">
  <version epoch="0" ver="6.0.0" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="5b7724e926c09f91796a989025c7a35210682b2cd34a3aa0046f983f8c5bcc44" name="rubygem-mysql2" arch="ppc64le">
  <version epoch="0" ver="0.5.7" rel="1.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 0.5.5-2" date="1707480000">- Adapt tests to openssl 3.2
  Resolves: RHEL-80222</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 0.5.5-3" date="1753272000">- Disable tests on the 32bit platforms ix86.
  Related: RHEL-80222</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 0.5.7-1" date="1768824000">- Upgrade to mysql2 0.5.7.
  Related: RHEL-142278</changelog>
</package>
<package pkgid="4a0ebf5c6af63b3978f6ed32d9f8e9a4bc92a21a3f1f97a1206c05b87a3a7f0f" name="rubygem-mysql2" arch="src">
  <version epoch="0" ver="0.5.7" rel="1.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 0.5.5-2" date="1707480000">- Adapt tests to openssl 3.2
  Resolves: RHEL-80222</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 0.5.5-3" date="1753272000">- Disable tests on the 32bit platforms ix86.
  Related: RHEL-80222</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 0.5.7-1" date="1768824000">- Upgrade to mysql2 0.5.7.
  Related: RHEL-142278</changelog>
</package>
<package pkgid="5abb8ee65b5e32d45eb93b45663f56910ce339c03cec308d4d1946c0923b1caa" name="rubygem-mysql2-debuginfo" arch="ppc64le">
  <version epoch="0" ver="0.5.7" rel="1.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 0.5.5-2" date="1707480000">- Adapt tests to openssl 3.2
  Resolves: RHEL-80222</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 0.5.5-3" date="1753272000">- Disable tests on the 32bit platforms ix86.
  Related: RHEL-80222</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 0.5.7-1" date="1768824000">- Upgrade to mysql2 0.5.7.
  Related: RHEL-142278</changelog>
</package>
<package pkgid="dce563ab5dad35c16bece85e0b90de41b96e8fb14ded90b5e7790b29d9cd06f5" name="rubygem-mysql2-debugsource" arch="ppc64le">
  <version epoch="0" ver="0.5.7" rel="1.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 0.5.5-2" date="1707480000">- Adapt tests to openssl 3.2
  Resolves: RHEL-80222</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 0.5.5-3" date="1753272000">- Disable tests on the 32bit platforms ix86.
  Related: RHEL-80222</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 0.5.7-1" date="1768824000">- Upgrade to mysql2 0.5.7.
  Related: RHEL-142278</changelog>
</package>
<package pkgid="bb20c3f0f51d849f18a2e141123acef9f9721e6622851fc8ef773c3627e04a28" name="rubygem-mysql2-doc" arch="noarch">
  <version epoch="0" ver="0.5.7" rel="1.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 0.5.5-2" date="1707480000">- Adapt tests to openssl 3.2
  Resolves: RHEL-80222</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 0.5.5-3" date="1753272000">- Disable tests on the 32bit platforms ix86.
  Related: RHEL-80222</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 0.5.7-1" date="1768824000">- Upgrade to mysql2 0.5.7.
  Related: RHEL-142278</changelog>
</package>
<package pkgid="d14cca8ea6c317c6b7786750ced6824c193c1e8705dac511725c053133f2604c" name="rubygem-pg" arch="ppc64le">
  <version epoch="0" ver="1.6.3" rel="1.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 1.6.3-1" date="1768824000">- Upgrade to pg 1.6.3
  Related: RHEL-142278</changelog>
</package>
<package pkgid="5b394df334e3d954f2b4ca8a6c3f4240898ce3ddf7300cc79b123163dc01875e" name="rubygem-pg" arch="src">
  <version epoch="0" ver="1.6.3" rel="1.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 1.6.3-1" date="1768824000">- Upgrade to pg 1.6.3
  Related: RHEL-142278</changelog>
</package>
<package pkgid="2dd2677e5ce387f6a99da9bf99f17057fc61924500d97658794b07862fc1e372" name="rubygem-pg-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.6.3" rel="1.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 1.6.3-1" date="1768824000">- Upgrade to pg 1.6.3
  Related: RHEL-142278</changelog>
</package>
<package pkgid="1ddf0c713b18a2dcc1ad27852179a42d869c3d710298d8df9b3fb45822162bc1" name="rubygem-pg-debugsource" arch="ppc64le">
  <version epoch="0" ver="1.6.3" rel="1.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 1.6.3-1" date="1768824000">- Upgrade to pg 1.6.3
  Related: RHEL-142278</changelog>
</package>
<package pkgid="22a998a4add72dd69ff6ce6fb52730ad760eb361b60db04a2981b8afe0901fce" name="rubygem-pg-doc" arch="noarch">
  <version epoch="0" ver="1.6.3" rel="1.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 1.6.3-1" date="1768824000">- Upgrade to pg 1.6.3
  Related: RHEL-142278</changelog>
</package>
<package pkgid="d5c832c0686efb2e2e4909d5b48276374240768e2e3325a588d6dc9814a3c3a4" name="rubygem-power_assert" arch="noarch">
  <version epoch="0" ver="3.0.1" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="53a88c703456e29a137fb2b89204128c98e05191f23728c306c8ab290cbcdcbc" name="rubygem-psych" arch="ppc64le">
  <version epoch="0" ver="5.3.1" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="2990f505bcd6b90f2561ca14599fef239cafef9bb899f5d33ad7081219b58105" name="rubygem-psych-debuginfo" arch="ppc64le">
  <version epoch="0" ver="5.3.1" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="54f9043a4b22febc271634b921d3045752898fcbdb78040ff07e90692372597a" name="rubygem-racc" arch="ppc64le">
  <version epoch="0" ver="1.8.1" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="0b91c9f031c6d8027b42365cc31a06be88805fa3f037f88799d5a116ec656e85" name="rubygem-racc-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.8.1" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="dad8a7fe6060a5332a9535cf12cb2e23731d717aee2cb0a8ec776177bed534b9" name="rubygem-rake" arch="noarch">
  <version epoch="0" ver="13.3.1" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="5abff54807cd2f077f4971a899fcee11e42880d54cfa685039326c4c541de929" name="rubygem-rbs" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="935cac9dad474f5afaa0cca3977cef4dac5d76fca168c01cd85cb8f74ca42278" name="rubygem-rbs-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="3c884218f99faaca995450a9f48c3f4e7bc75784043fd36c706e8f5e5edfcbbe" name="rubygem-rdoc" arch="noarch">
  <version epoch="0" ver="7.0.3" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="c04354542113cab31fb270abbf39783112939b8a4c71fbdb65eadf49a1221eee" name="rubygem-rexml" arch="noarch">
  <version epoch="0" ver="3.4.4" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="4e5c2e0439c74191357022bdc88118d3bbe9d1dd672ae92435e42e6d2b1f16de" name="rubygem-rss" arch="noarch">
  <version epoch="0" ver="0.3.2" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="7c5df3715eb073161421cbcdcf8dbcefaebc9d5f2b64069bf373c7f4fa9ad545" name="rubygem-test-unit" arch="noarch">
  <version epoch="0" ver="3.7.5" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="fd22b177ee33edc038f71a42ae2d6eb690002a6afcca4b1146e7ce9e9b2da099" name="rubygem-typeprof" arch="noarch">
  <version epoch="0" ver="0.31.1" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="64d506baa1b2d3fdc8d94bae33687752f048fedb9dc4070fb9f52900b7ab5557" name="rubygems" arch="noarch">
  <version epoch="0" ver="4.0.6" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
<package pkgid="ec1f16e5baeca930299493e97d3f3629b2c24124d87013a6294e97d1f84ad724" name="rubygems-devel" arch="noarch">
  <version epoch="0" ver="4.0.6" rel="33.module_el9+1378+a53ec641"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 4.0.1-31" date="1768478400">- Upgrade to Ruby 4.0.1.
  Resolves: RHEL-142278</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-32" date="1777464000">- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-170932
- Fix ERB: Arbitrary code execution via deserialization bypass
 (CVE-2026-41316)
  Resolves: RHEL-171261
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-169965</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 4.0.3-33" date="1781092800">- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
  Resolves: RHEL-181683
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
  Resolves: RHEL-181776
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
  Resolves: RHEL-181807</changelog>
</package>
</otherdata>