<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="45">
<package pkgid="46bf27d156820b124b52a7eaafd5950eff644ede97f042ae3df1f6272a4528ce" name="ruby" arch="s390x">
  <version epoch="0" ver="3.3.10" rel="6.module_el9+1365+a2f2007f"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.1-2" date="1716206400">- Upgrade to Ruby 3.3.1.
  Resolves: RHEL-33976
- Fix buffer overread vulnerability in StringIO.
  (CVE-2024-27280)
  Resolves: RHEL-34130
- Fix RCE vulnerability with .rdoc_options in RDoc.
  (CVE-2024-27281)
  Resolves: RHEL-34122
- Fix Arbitrary memory address read vulnerability with Regex search.
  (CVE-2024-27282)
  Resolves: RHEL-33872</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.10-6" date="1777377600">- Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316)
  Resolves: RHEL-171260</changelog>
</package>
<package pkgid="19e90f55704c031d45378f6d40d4deb10d1abe9d306f816269ac9f2fc78092b0" name="ruby" arch="src">
  <version epoch="0" ver="3.3.10" rel="6.module_el9+1365+a2f2007f"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.1-2" date="1716206400">- Upgrade to Ruby 3.3.1.
  Resolves: RHEL-33976
- Fix buffer overread vulnerability in StringIO.
  (CVE-2024-27280)
  Resolves: RHEL-34130
- Fix RCE vulnerability with .rdoc_options in RDoc.
  (CVE-2024-27281)
  Resolves: RHEL-34122
- Fix Arbitrary memory address read vulnerability with Regex search.
  (CVE-2024-27282)
  Resolves: RHEL-33872</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.10-6" date="1777377600">- Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316)
  Resolves: RHEL-171260</changelog>
</package>
<package pkgid="cd7f3693eb37596dd67f90313cb0efba3f582d1586369a76a609d52e1543ae32" name="ruby-bundled-gems" arch="s390x">
  <version epoch="0" ver="3.3.10" rel="6.module_el9+1365+a2f2007f"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.1-2" date="1716206400">- Upgrade to Ruby 3.3.1.
  Resolves: RHEL-33976
- Fix buffer overread vulnerability in StringIO.
  (CVE-2024-27280)
  Resolves: RHEL-34130
- Fix RCE vulnerability with .rdoc_options in RDoc.
  (CVE-2024-27281)
  Resolves: RHEL-34122
- Fix Arbitrary memory address read vulnerability with Regex search.
  (CVE-2024-27282)
  Resolves: RHEL-33872</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.10-6" date="1777377600">- Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316)
  Resolves: RHEL-171260</changelog>
</package>
<package pkgid="1a0117d62ae774b21dbad08f6fed343def6cc782aa196ae05b606c93ed8e9676" name="ruby-bundled-gems-debuginfo" arch="s390x">
  <version epoch="0" ver="3.3.10" rel="6.module_el9+1365+a2f2007f"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.1-2" date="1716206400">- Upgrade to Ruby 3.3.1.
  Resolves: RHEL-33976
- Fix buffer overread vulnerability in StringIO.
  (CVE-2024-27280)
  Resolves: RHEL-34130
- Fix RCE vulnerability with .rdoc_options in RDoc.
  (CVE-2024-27281)
  Resolves: RHEL-34122
- Fix Arbitrary memory address read vulnerability with Regex search.
  (CVE-2024-27282)
  Resolves: RHEL-33872</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.10-6" date="1777377600">- Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316)
  Resolves: RHEL-171260</changelog>
</package>
<package pkgid="baf30b44df24b3f3bc992fa0a1fcd174da83977598c1f4ab293ac7a3d7f489a2" name="ruby-debuginfo" arch="s390x">
  <version epoch="0" ver="3.3.10" rel="6.module_el9+1365+a2f2007f"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.1-2" date="1716206400">- Upgrade to Ruby 3.3.1.
  Resolves: RHEL-33976
- Fix buffer overread vulnerability in StringIO.
  (CVE-2024-27280)
  Resolves: RHEL-34130
- Fix RCE vulnerability with .rdoc_options in RDoc.
  (CVE-2024-27281)
  Resolves: RHEL-34122
- Fix Arbitrary memory address read vulnerability with Regex search.
  (CVE-2024-27282)
  Resolves: RHEL-33872</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.10-6" date="1777377600">- Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316)
  Resolves: RHEL-171260</changelog>
</package>
<package pkgid="c6a4120fc16697394c48534e3a0e5d357fcef0adddbd825c6203acd2d13557a2" name="ruby-debugsource" arch="s390x">
  <version epoch="0" ver="3.3.10" rel="6.module_el9+1365+a2f2007f"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.1-2" date="1716206400">- Upgrade to Ruby 3.3.1.
  Resolves: RHEL-33976
- Fix buffer overread vulnerability in StringIO.
  (CVE-2024-27280)
  Resolves: RHEL-34130
- Fix RCE vulnerability with .rdoc_options in RDoc.
  (CVE-2024-27281)
  Resolves: RHEL-34122
- Fix Arbitrary memory address read vulnerability with Regex search.
  (CVE-2024-27282)
  Resolves: RHEL-33872</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.10-6" date="1777377600">- Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316)
  Resolves: RHEL-171260</changelog>
</package>
<package pkgid="114b1e29370fbfa3ceaa4a79c69d9ba44f4473000b4811e4e99f97bcc60e0bf1" name="ruby-default-gems" arch="noarch">
  <version epoch="0" ver="3.3.10" rel="6.module_el9+1365+a2f2007f"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.1-2" date="1716206400">- Upgrade to Ruby 3.3.1.
  Resolves: RHEL-33976
- Fix buffer overread vulnerability in StringIO.
  (CVE-2024-27280)
  Resolves: RHEL-34130
- Fix RCE vulnerability with .rdoc_options in RDoc.
  (CVE-2024-27281)
  Resolves: RHEL-34122
- Fix Arbitrary memory address read vulnerability with Regex search.
  (CVE-2024-27282)
  Resolves: RHEL-33872</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.10-6" date="1777377600">- Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316)
  Resolves: RHEL-171260</changelog>
</package>
<package pkgid="cbff55d591643f65f4fdb8fb67c34c3e447ae1fda395a87c039c0dc795ebb00f" name="ruby-devel" arch="s390x">
  <version epoch="0" ver="3.3.10" rel="6.module_el9+1365+a2f2007f"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.1-2" date="1716206400">- Upgrade to Ruby 3.3.1.
  Resolves: RHEL-33976
- Fix buffer overread vulnerability in StringIO.
  (CVE-2024-27280)
  Resolves: RHEL-34130
- Fix RCE vulnerability with .rdoc_options in RDoc.
  (CVE-2024-27281)
  Resolves: RHEL-34122
- Fix Arbitrary memory address read vulnerability with Regex search.
  (CVE-2024-27282)
  Resolves: RHEL-33872</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.10-6" date="1777377600">- Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316)
  Resolves: RHEL-171260</changelog>
</package>
<package pkgid="ad5dd811361efdcd070c55415b0b402b7d1666ad3f703404f20d6c44b72d8049" name="ruby-doc" arch="noarch">
  <version epoch="0" ver="3.3.10" rel="6.module_el9+1365+a2f2007f"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.1-2" date="1716206400">- Upgrade to Ruby 3.3.1.
  Resolves: RHEL-33976
- Fix buffer overread vulnerability in StringIO.
  (CVE-2024-27280)
  Resolves: RHEL-34130
- Fix RCE vulnerability with .rdoc_options in RDoc.
  (CVE-2024-27281)
  Resolves: RHEL-34122
- Fix Arbitrary memory address read vulnerability with Regex search.
  (CVE-2024-27282)
  Resolves: RHEL-33872</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.10-6" date="1777377600">- Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316)
  Resolves: RHEL-171260</changelog>
</package>
<package pkgid="b1e01deaa6b423e9507f72dc62ea97450b3ec9dc804bc36cf7f2d503181eefaa" name="ruby-libs" arch="s390x">
  <version epoch="0" ver="3.3.10" rel="6.module_el9+1365+a2f2007f"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.1-2" date="1716206400">- Upgrade to Ruby 3.3.1.
  Resolves: RHEL-33976
- Fix buffer overread vulnerability in StringIO.
  (CVE-2024-27280)
  Resolves: RHEL-34130
- Fix RCE vulnerability with .rdoc_options in RDoc.
  (CVE-2024-27281)
  Resolves: RHEL-34122
- Fix Arbitrary memory address read vulnerability with Regex search.
  (CVE-2024-27282)
  Resolves: RHEL-33872</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.10-6" date="1777377600">- Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316)
  Resolves: RHEL-171260</changelog>
</package>
<package pkgid="2c1232ee88cff25f504f27c0d5f430343cea8be0879046590b8c048e1d6562cb" name="ruby-libs-debuginfo" arch="s390x">
  <version epoch="0" ver="3.3.10" rel="6.module_el9+1365+a2f2007f"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.1-2" date="1716206400">- Upgrade to Ruby 3.3.1.
  Resolves: RHEL-33976
- Fix buffer overread vulnerability in StringIO.
  (CVE-2024-27280)
  Resolves: RHEL-34130
- Fix RCE vulnerability with .rdoc_options in RDoc.
  (CVE-2024-27281)
  Resolves: RHEL-34122
- Fix Arbitrary memory address read vulnerability with Regex search.
  (CVE-2024-27282)
  Resolves: RHEL-33872</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.10-6" date="1777377600">- Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316)
  Resolves: RHEL-171260</changelog>
</package>
<package pkgid="a4ce64238bf79adb7f48cd0f4f3ad71ef6ded5845500317786a88ef11cd8847e" name="rubygem-bigdecimal" arch="s390x">
  <version epoch="0" ver="3.1.5" rel="6.module_el9+1365+a2f2007f"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.1-2" date="1716206400">- Upgrade to Ruby 3.3.1.
  Resolves: RHEL-33976
- Fix buffer overread vulnerability in StringIO.
  (CVE-2024-27280)
  Resolves: RHEL-34130
- Fix RCE vulnerability with .rdoc_options in RDoc.
  (CVE-2024-27281)
  Resolves: RHEL-34122
- Fix Arbitrary memory address read vulnerability with Regex search.
  (CVE-2024-27282)
  Resolves: RHEL-33872</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.10-6" date="1777377600">- Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316)
  Resolves: RHEL-171260</changelog>
</package>
<package pkgid="a07ff439399bb4842107830868c5232766c0e93d8aec292aab48c337122bb86b" name="rubygem-bigdecimal-debuginfo" arch="s390x">
  <version epoch="0" ver="3.1.5" rel="6.module_el9+1365+a2f2007f"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.1-2" date="1716206400">- Upgrade to Ruby 3.3.1.
  Resolves: RHEL-33976
- Fix buffer overread vulnerability in StringIO.
  (CVE-2024-27280)
  Resolves: RHEL-34130
- Fix RCE vulnerability with .rdoc_options in RDoc.
  (CVE-2024-27281)
  Resolves: RHEL-34122
- Fix Arbitrary memory address read vulnerability with Regex search.
  (CVE-2024-27282)
  Resolves: RHEL-33872</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.10-6" date="1777377600">- Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316)
  Resolves: RHEL-171260</changelog>
</package>
<package pkgid="9b85bac7f40bb2ad076ab561c0018258a93d25746bc44d898b86f765f2a3353d" name="rubygem-bundler" arch="noarch">
  <version epoch="0" ver="2.5.22" rel="6.module_el9+1365+a2f2007f"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.1-2" date="1716206400">- Upgrade to Ruby 3.3.1.
  Resolves: RHEL-33976
- Fix buffer overread vulnerability in StringIO.
  (CVE-2024-27280)
  Resolves: RHEL-34130
- Fix RCE vulnerability with .rdoc_options in RDoc.
  (CVE-2024-27281)
  Resolves: RHEL-34122
- Fix Arbitrary memory address read vulnerability with Regex search.
  (CVE-2024-27282)
  Resolves: RHEL-33872</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.10-6" date="1777377600">- Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316)
  Resolves: RHEL-171260</changelog>
</package>
<package pkgid="a9bfc13888c720c82e0e3ccdd0ca01679ee4815408b7da6d06bf9ba3efbf42f3" name="rubygem-io-console" arch="s390x">
  <version epoch="0" ver="0.7.1" rel="6.module_el9+1365+a2f2007f"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.1-2" date="1716206400">- Upgrade to Ruby 3.3.1.
  Resolves: RHEL-33976
- Fix buffer overread vulnerability in StringIO.
  (CVE-2024-27280)
  Resolves: RHEL-34130
- Fix RCE vulnerability with .rdoc_options in RDoc.
  (CVE-2024-27281)
  Resolves: RHEL-34122
- Fix Arbitrary memory address read vulnerability with Regex search.
  (CVE-2024-27282)
  Resolves: RHEL-33872</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.10-6" date="1777377600">- Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316)
  Resolves: RHEL-171260</changelog>
</package>
<package pkgid="26dfd5dee15d90fe3c35a7948181833f60620f78ee0998bbe67cfb799ede5808" name="rubygem-io-console-debuginfo" arch="s390x">
  <version epoch="0" ver="0.7.1" rel="6.module_el9+1365+a2f2007f"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.1-2" date="1716206400">- Upgrade to Ruby 3.3.1.
  Resolves: RHEL-33976
- Fix buffer overread vulnerability in StringIO.
  (CVE-2024-27280)
  Resolves: RHEL-34130
- Fix RCE vulnerability with .rdoc_options in RDoc.
  (CVE-2024-27281)
  Resolves: RHEL-34122
- Fix Arbitrary memory address read vulnerability with Regex search.
  (CVE-2024-27282)
  Resolves: RHEL-33872</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.10-6" date="1777377600">- Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316)
  Resolves: RHEL-171260</changelog>
</package>
<package pkgid="708ab283c3f349f4aef5f8e33f8a0393c1afcceee6aacaf549c60f4a07ae0f25" name="rubygem-irb" arch="noarch">
  <version epoch="0" ver="1.13.1" rel="6.module_el9+1365+a2f2007f"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.1-2" date="1716206400">- Upgrade to Ruby 3.3.1.
  Resolves: RHEL-33976
- Fix buffer overread vulnerability in StringIO.
  (CVE-2024-27280)
  Resolves: RHEL-34130
- Fix RCE vulnerability with .rdoc_options in RDoc.
  (CVE-2024-27281)
  Resolves: RHEL-34122
- Fix Arbitrary memory address read vulnerability with Regex search.
  (CVE-2024-27282)
  Resolves: RHEL-33872</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.10-6" date="1777377600">- Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316)
  Resolves: RHEL-171260</changelog>
</package>
<package pkgid="bda6f1cd50d97ca85a5c63f1962d8defb488398d8c09bca34d9d42fd84afdacf" name="rubygem-json" arch="s390x">
  <version epoch="0" ver="2.7.2" rel="6.module_el9+1365+a2f2007f"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.1-2" date="1716206400">- Upgrade to Ruby 3.3.1.
  Resolves: RHEL-33976
- Fix buffer overread vulnerability in StringIO.
  (CVE-2024-27280)
  Resolves: RHEL-34130
- Fix RCE vulnerability with .rdoc_options in RDoc.
  (CVE-2024-27281)
  Resolves: RHEL-34122
- Fix Arbitrary memory address read vulnerability with Regex search.
  (CVE-2024-27282)
  Resolves: RHEL-33872</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.10-6" date="1777377600">- Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316)
  Resolves: RHEL-171260</changelog>
</package>
<package pkgid="80f02c6182d2f5fa41d5bde871b5be31e1fc237f6459d8abe596786bd2782811" name="rubygem-json-debuginfo" arch="s390x">
  <version epoch="0" ver="2.7.2" rel="6.module_el9+1365+a2f2007f"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.1-2" date="1716206400">- Upgrade to Ruby 3.3.1.
  Resolves: RHEL-33976
- Fix buffer overread vulnerability in StringIO.
  (CVE-2024-27280)
  Resolves: RHEL-34130
- Fix RCE vulnerability with .rdoc_options in RDoc.
  (CVE-2024-27281)
  Resolves: RHEL-34122
- Fix Arbitrary memory address read vulnerability with Regex search.
  (CVE-2024-27282)
  Resolves: RHEL-33872</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.10-6" date="1777377600">- Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316)
  Resolves: RHEL-171260</changelog>
</package>
<package pkgid="4289517be39ef91a1d156089c2b099114849a3c57c87c15c2d0b443f17445a1e" name="rubygem-minitest" arch="noarch">
  <version epoch="0" ver="5.20.0" rel="6.module_el9+1365+a2f2007f"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.1-2" date="1716206400">- Upgrade to Ruby 3.3.1.
  Resolves: RHEL-33976
- Fix buffer overread vulnerability in StringIO.
  (CVE-2024-27280)
  Resolves: RHEL-34130
- Fix RCE vulnerability with .rdoc_options in RDoc.
  (CVE-2024-27281)
  Resolves: RHEL-34122
- Fix Arbitrary memory address read vulnerability with Regex search.
  (CVE-2024-27282)
  Resolves: RHEL-33872</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.10-6" date="1777377600">- Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316)
  Resolves: RHEL-171260</changelog>
</package>
<package pkgid="919ebfa22cbb26648c7a72203cfd69cf324f6b77c51967c2de972121d457633b" name="rubygem-mysql2" arch="s390x">
  <version epoch="0" ver="0.5.5" rel="3.module_el9+1365+a2f2007f"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 0.5.5-1" date="1705665600">- Upgrade to mysql2 0.5.5.
  Related: RHEL-17089</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 0.5.5-2" date="1707480000">- Adapt tests to openssl 3.2
  Resolves: RHEL-80222</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 0.5.5-3" date="1753272000">- Disable tests on the 32bit platforms ix86.
  Related: RHEL-80222</changelog>
</package>
<package pkgid="343f32c27a358448fdd6137a71dfb35cecba5d4408d7bf2cd950e8fe730eda86" name="rubygem-mysql2" arch="src">
  <version epoch="0" ver="0.5.5" rel="3.module_el9+1365+a2f2007f"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 0.5.5-1" date="1705665600">- Upgrade to mysql2 0.5.5.
  Related: RHEL-17089</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 0.5.5-2" date="1707480000">- Adapt tests to openssl 3.2
  Resolves: RHEL-80222</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 0.5.5-3" date="1753272000">- Disable tests on the 32bit platforms ix86.
  Related: RHEL-80222</changelog>
</package>
<package pkgid="b07ca9304280fe6bdf7e2d49d2c56b7a006d8ab07a8cb15cb08c06b5b3c4012f" name="rubygem-mysql2-debuginfo" arch="s390x">
  <version epoch="0" ver="0.5.5" rel="3.module_el9+1365+a2f2007f"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 0.5.5-1" date="1705665600">- Upgrade to mysql2 0.5.5.
  Related: RHEL-17089</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 0.5.5-2" date="1707480000">- Adapt tests to openssl 3.2
  Resolves: RHEL-80222</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 0.5.5-3" date="1753272000">- Disable tests on the 32bit platforms ix86.
  Related: RHEL-80222</changelog>
</package>
<package pkgid="714b6757fe277bed29ef1b78621456ea7df0bd4c2f1eb6b8fd2bdd5dafd38e36" name="rubygem-mysql2-debugsource" arch="s390x">
  <version epoch="0" ver="0.5.5" rel="3.module_el9+1365+a2f2007f"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 0.5.5-1" date="1705665600">- Upgrade to mysql2 0.5.5.
  Related: RHEL-17089</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 0.5.5-2" date="1707480000">- Adapt tests to openssl 3.2
  Resolves: RHEL-80222</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 0.5.5-3" date="1753272000">- Disable tests on the 32bit platforms ix86.
  Related: RHEL-80222</changelog>
</package>
<package pkgid="b17b37db2cf1450a96f79c84c18c0e644d95ebcfe4bd5011cceac309870c1a90" name="rubygem-mysql2-doc" arch="noarch">
  <version epoch="0" ver="0.5.5" rel="3.module_el9+1365+a2f2007f"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 0.5.5-1" date="1705665600">- Upgrade to mysql2 0.5.5.
  Related: RHEL-17089</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 0.5.5-2" date="1707480000">- Adapt tests to openssl 3.2
  Resolves: RHEL-80222</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 0.5.5-3" date="1753272000">- Disable tests on the 32bit platforms ix86.
  Related: RHEL-80222</changelog>
</package>
<package pkgid="05e0cdc1ca5c5ee6b7f489b570f6416e032ff812bdac2a9d5d5c85a319ebc845" name="rubygem-pg" arch="s390x">
  <version epoch="0" ver="1.5.4" rel="2.module_el9+1365+a2f2007f"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; -1.5.4-2" date="1774353600">- Fix encoding issue in spec suite.
  Resolves: RHEL-159197</changelog>
</package>
<package pkgid="ed8d04155e38de9826e2014ce16bfa1a48f208179f9813a7cadccfba9918ada4" name="rubygem-pg" arch="src">
  <version epoch="0" ver="1.5.4" rel="2.module_el9+1365+a2f2007f"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; -1.5.4-2" date="1774353600">- Fix encoding issue in spec suite.
  Resolves: RHEL-159197</changelog>
</package>
<package pkgid="c778b6375bf9e73da32ac7ca8b234a59cace89b02446a6b2924289e7219c5183" name="rubygem-pg-debuginfo" arch="s390x">
  <version epoch="0" ver="1.5.4" rel="2.module_el9+1365+a2f2007f"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; -1.5.4-2" date="1774353600">- Fix encoding issue in spec suite.
  Resolves: RHEL-159197</changelog>
</package>
<package pkgid="4e49463d610de1ceecfcab847976cbc56dace80ae6ba73ffd9d1c28e669794cd" name="rubygem-pg-debugsource" arch="s390x">
  <version epoch="0" ver="1.5.4" rel="2.module_el9+1365+a2f2007f"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; -1.5.4-2" date="1774353600">- Fix encoding issue in spec suite.
  Resolves: RHEL-159197</changelog>
</package>
<package pkgid="95f9c0590668395279a5a6a2dadb8897e1272004436c74346af0d6f470be3af8" name="rubygem-pg-doc" arch="noarch">
  <version epoch="0" ver="1.5.4" rel="2.module_el9+1365+a2f2007f"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; -1.5.4-2" date="1774353600">- Fix encoding issue in spec suite.
  Resolves: RHEL-159197</changelog>
</package>
<package pkgid="3c004269d80195638de9b5d1fbecd312a4fec9a0e047e9dc168d99da6904d00d" name="rubygem-power_assert" arch="noarch">
  <version epoch="0" ver="2.0.3" rel="6.module_el9+1365+a2f2007f"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.1-2" date="1716206400">- Upgrade to Ruby 3.3.1.
  Resolves: RHEL-33976
- Fix buffer overread vulnerability in StringIO.
  (CVE-2024-27280)
  Resolves: RHEL-34130
- Fix RCE vulnerability with .rdoc_options in RDoc.
  (CVE-2024-27281)
  Resolves: RHEL-34122
- Fix Arbitrary memory address read vulnerability with Regex search.
  (CVE-2024-27282)
  Resolves: RHEL-33872</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.10-6" date="1777377600">- Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316)
  Resolves: RHEL-171260</changelog>
</package>
<package pkgid="f0f2d37a08ef086b15f082814b85f932ac1345d25c8ec54a0f0827ddbe88a399" name="rubygem-psych" arch="s390x">
  <version epoch="0" ver="5.1.2" rel="6.module_el9+1365+a2f2007f"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.1-2" date="1716206400">- Upgrade to Ruby 3.3.1.
  Resolves: RHEL-33976
- Fix buffer overread vulnerability in StringIO.
  (CVE-2024-27280)
  Resolves: RHEL-34130
- Fix RCE vulnerability with .rdoc_options in RDoc.
  (CVE-2024-27281)
  Resolves: RHEL-34122
- Fix Arbitrary memory address read vulnerability with Regex search.
  (CVE-2024-27282)
  Resolves: RHEL-33872</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.10-6" date="1777377600">- Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316)
  Resolves: RHEL-171260</changelog>
</package>
<package pkgid="1e0862952cf900ae7e1758195d33a2830ed6a0f5817b1be4e132f2c3aea1485e" name="rubygem-psych-debuginfo" arch="s390x">
  <version epoch="0" ver="5.1.2" rel="6.module_el9+1365+a2f2007f"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.1-2" date="1716206400">- Upgrade to Ruby 3.3.1.
  Resolves: RHEL-33976
- Fix buffer overread vulnerability in StringIO.
  (CVE-2024-27280)
  Resolves: RHEL-34130
- Fix RCE vulnerability with .rdoc_options in RDoc.
  (CVE-2024-27281)
  Resolves: RHEL-34122
- Fix Arbitrary memory address read vulnerability with Regex search.
  (CVE-2024-27282)
  Resolves: RHEL-33872</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.10-6" date="1777377600">- Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316)
  Resolves: RHEL-171260</changelog>
</package>
<package pkgid="f53c082d83606b0cacb0211bcef954d97242365e77cad6fb9225e7a1d4704917" name="rubygem-racc" arch="s390x">
  <version epoch="0" ver="1.7.3" rel="6.module_el9+1365+a2f2007f"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.1-2" date="1716206400">- Upgrade to Ruby 3.3.1.
  Resolves: RHEL-33976
- Fix buffer overread vulnerability in StringIO.
  (CVE-2024-27280)
  Resolves: RHEL-34130
- Fix RCE vulnerability with .rdoc_options in RDoc.
  (CVE-2024-27281)
  Resolves: RHEL-34122
- Fix Arbitrary memory address read vulnerability with Regex search.
  (CVE-2024-27282)
  Resolves: RHEL-33872</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.10-6" date="1777377600">- Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316)
  Resolves: RHEL-171260</changelog>
</package>
<package pkgid="751d1ea0453c72d5243bcc61cafa470a6babb5ec4d4361e07288a278a6c05713" name="rubygem-racc-debuginfo" arch="s390x">
  <version epoch="0" ver="1.7.3" rel="6.module_el9+1365+a2f2007f"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.1-2" date="1716206400">- Upgrade to Ruby 3.3.1.
  Resolves: RHEL-33976
- Fix buffer overread vulnerability in StringIO.
  (CVE-2024-27280)
  Resolves: RHEL-34130
- Fix RCE vulnerability with .rdoc_options in RDoc.
  (CVE-2024-27281)
  Resolves: RHEL-34122
- Fix Arbitrary memory address read vulnerability with Regex search.
  (CVE-2024-27282)
  Resolves: RHEL-33872</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.10-6" date="1777377600">- Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316)
  Resolves: RHEL-171260</changelog>
</package>
<package pkgid="14b5c6dd74789b1af207834169dca5b45192c87c704bce6f48ee82e832bd9143" name="rubygem-rake" arch="noarch">
  <version epoch="0" ver="13.1.0" rel="6.module_el9+1365+a2f2007f"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.1-2" date="1716206400">- Upgrade to Ruby 3.3.1.
  Resolves: RHEL-33976
- Fix buffer overread vulnerability in StringIO.
  (CVE-2024-27280)
  Resolves: RHEL-34130
- Fix RCE vulnerability with .rdoc_options in RDoc.
  (CVE-2024-27281)
  Resolves: RHEL-34122
- Fix Arbitrary memory address read vulnerability with Regex search.
  (CVE-2024-27282)
  Resolves: RHEL-33872</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.10-6" date="1777377600">- Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316)
  Resolves: RHEL-171260</changelog>
</package>
<package pkgid="9b173d2b57c67b7f75a1af8597afd2263258cc3e2bef742e10b9bf2725f0c7dc" name="rubygem-rbs" arch="s390x">
  <version epoch="0" ver="3.4.0" rel="6.module_el9+1365+a2f2007f"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.1-2" date="1716206400">- Upgrade to Ruby 3.3.1.
  Resolves: RHEL-33976
- Fix buffer overread vulnerability in StringIO.
  (CVE-2024-27280)
  Resolves: RHEL-34130
- Fix RCE vulnerability with .rdoc_options in RDoc.
  (CVE-2024-27281)
  Resolves: RHEL-34122
- Fix Arbitrary memory address read vulnerability with Regex search.
  (CVE-2024-27282)
  Resolves: RHEL-33872</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.10-6" date="1777377600">- Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316)
  Resolves: RHEL-171260</changelog>
</package>
<package pkgid="23c5132e12537fd63de2be48204e5602ca6ea695a38201dcc79c78597ae48da5" name="rubygem-rbs-debuginfo" arch="s390x">
  <version epoch="0" ver="3.4.0" rel="6.module_el9+1365+a2f2007f"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.1-2" date="1716206400">- Upgrade to Ruby 3.3.1.
  Resolves: RHEL-33976
- Fix buffer overread vulnerability in StringIO.
  (CVE-2024-27280)
  Resolves: RHEL-34130
- Fix RCE vulnerability with .rdoc_options in RDoc.
  (CVE-2024-27281)
  Resolves: RHEL-34122
- Fix Arbitrary memory address read vulnerability with Regex search.
  (CVE-2024-27282)
  Resolves: RHEL-33872</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.10-6" date="1777377600">- Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316)
  Resolves: RHEL-171260</changelog>
</package>
<package pkgid="30eb3c9ffb898e13826702daf1dbb902268886be12afff8173fe1a8541e3cd8c" name="rubygem-rdoc" arch="noarch">
  <version epoch="0" ver="6.6.3.1" rel="6.module_el9+1365+a2f2007f"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.1-2" date="1716206400">- Upgrade to Ruby 3.3.1.
  Resolves: RHEL-33976
- Fix buffer overread vulnerability in StringIO.
  (CVE-2024-27280)
  Resolves: RHEL-34130
- Fix RCE vulnerability with .rdoc_options in RDoc.
  (CVE-2024-27281)
  Resolves: RHEL-34122
- Fix Arbitrary memory address read vulnerability with Regex search.
  (CVE-2024-27282)
  Resolves: RHEL-33872</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.10-6" date="1777377600">- Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316)
  Resolves: RHEL-171260</changelog>
</package>
<package pkgid="54721b625c097aaed165424fdc1d766382f03df496b6c69280d2a533c3faf2dd" name="rubygem-rexml" arch="noarch">
  <version epoch="0" ver="3.4.4" rel="6.module_el9+1365+a2f2007f"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.1-2" date="1716206400">- Upgrade to Ruby 3.3.1.
  Resolves: RHEL-33976
- Fix buffer overread vulnerability in StringIO.
  (CVE-2024-27280)
  Resolves: RHEL-34130
- Fix RCE vulnerability with .rdoc_options in RDoc.
  (CVE-2024-27281)
  Resolves: RHEL-34122
- Fix Arbitrary memory address read vulnerability with Regex search.
  (CVE-2024-27282)
  Resolves: RHEL-33872</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.10-6" date="1777377600">- Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316)
  Resolves: RHEL-171260</changelog>
</package>
<package pkgid="5427fd585ec8ea113e38a5b7e3dc28b718ce5466b21278223c4c0bbc31a83300" name="rubygem-rss" arch="noarch">
  <version epoch="0" ver="0.3.1" rel="6.module_el9+1365+a2f2007f"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.1-2" date="1716206400">- Upgrade to Ruby 3.3.1.
  Resolves: RHEL-33976
- Fix buffer overread vulnerability in StringIO.
  (CVE-2024-27280)
  Resolves: RHEL-34130
- Fix RCE vulnerability with .rdoc_options in RDoc.
  (CVE-2024-27281)
  Resolves: RHEL-34122
- Fix Arbitrary memory address read vulnerability with Regex search.
  (CVE-2024-27282)
  Resolves: RHEL-33872</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.10-6" date="1777377600">- Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316)
  Resolves: RHEL-171260</changelog>
</package>
<package pkgid="f9ea57bf869833294cc9653ac18e75455e010e1942589f864b328f1497a6317c" name="rubygem-test-unit" arch="noarch">
  <version epoch="0" ver="3.6.1" rel="6.module_el9+1365+a2f2007f"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.1-2" date="1716206400">- Upgrade to Ruby 3.3.1.
  Resolves: RHEL-33976
- Fix buffer overread vulnerability in StringIO.
  (CVE-2024-27280)
  Resolves: RHEL-34130
- Fix RCE vulnerability with .rdoc_options in RDoc.
  (CVE-2024-27281)
  Resolves: RHEL-34122
- Fix Arbitrary memory address read vulnerability with Regex search.
  (CVE-2024-27282)
  Resolves: RHEL-33872</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.10-6" date="1777377600">- Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316)
  Resolves: RHEL-171260</changelog>
</package>
<package pkgid="b3daa42669981e74dca5287da1542be72295481559080000d30cf86aeb1e1307" name="rubygem-typeprof" arch="noarch">
  <version epoch="0" ver="0.21.9" rel="6.module_el9+1365+a2f2007f"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.1-2" date="1716206400">- Upgrade to Ruby 3.3.1.
  Resolves: RHEL-33976
- Fix buffer overread vulnerability in StringIO.
  (CVE-2024-27280)
  Resolves: RHEL-34130
- Fix RCE vulnerability with .rdoc_options in RDoc.
  (CVE-2024-27281)
  Resolves: RHEL-34122
- Fix Arbitrary memory address read vulnerability with Regex search.
  (CVE-2024-27282)
  Resolves: RHEL-33872</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.10-6" date="1777377600">- Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316)
  Resolves: RHEL-171260</changelog>
</package>
<package pkgid="8e637f42b5eee7aa7f0d4438f40d6172b86bc2d73f00dd8f8a112db3a4266635" name="rubygems" arch="noarch">
  <version epoch="0" ver="3.5.22" rel="6.module_el9+1365+a2f2007f"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.1-2" date="1716206400">- Upgrade to Ruby 3.3.1.
  Resolves: RHEL-33976
- Fix buffer overread vulnerability in StringIO.
  (CVE-2024-27280)
  Resolves: RHEL-34130
- Fix RCE vulnerability with .rdoc_options in RDoc.
  (CVE-2024-27281)
  Resolves: RHEL-34122
- Fix Arbitrary memory address read vulnerability with Regex search.
  (CVE-2024-27282)
  Resolves: RHEL-33872</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.10-6" date="1777377600">- Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316)
  Resolves: RHEL-171260</changelog>
</package>
<package pkgid="f2765328dc9063b0399a2a81c964808777339c64bb1f02ecc8232fe79e7ff137" name="rubygems-devel" arch="noarch">
  <version epoch="0" ver="3.5.22" rel="6.module_el9+1365+a2f2007f"/>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.1-2" date="1716206400">- Upgrade to Ruby 3.3.1.
  Resolves: RHEL-33976
- Fix buffer overread vulnerability in StringIO.
  (CVE-2024-27280)
  Resolves: RHEL-34130
- Fix RCE vulnerability with .rdoc_options in RDoc.
  (CVE-2024-27281)
  Resolves: RHEL-34122
- Fix Arbitrary memory address read vulnerability with Regex search.
  (CVE-2024-27282)
  Resolves: RHEL-33872</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.5-3" date="1725451200">- Upgrade to Ruby 3.3.5
  Resolves: RHEL-55411
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57575
  Resolves: RHEL-57572
  Resolves: RHEL-57068
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, &gt;] and ]&gt;.
  (CVE-2024-41123)
  Resolves: RHEL-57569
- Fix incorrect symlink for rubygem-irb's library.
  Resolves: RHEL-42646</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.8-4" date="1744372800">- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-68631
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86109
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 3.3.10-5" date="1762344000">- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-106821
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-126728</changelog>
  <changelog author="Jarek Prokop &lt;jprokop@redhat.com&gt; - 3.3.10-6" date="1777377600">- Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316)
  Resolves: RHEL-171260</changelog>
</package>
</otherdata>