Linux · Security advisory · June 24, 2026

ELSA-2026-20596: Security update for 28 packages

ELSA-2026-20596, released June 24, 2026, fixes 1 CVE across 28 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
1
1 rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0089
59th percentile

Fixed package versions

ProductReleaseFixed in
rubyol 90:4.0.3-32.module+el9.8.0+90929+122d8796
ruby-bundled-gemsol 90:4.0.3-32.module+el9.8.0+90929+122d8796
ruby-default-gemsol 90:4.0.3-32.module+el9.8.0+90929+122d8796
ruby-develol 90:4.0.3-32.module+el9.8.0+90929+122d8796
ruby-docol 90:4.0.3-32.module+el9.8.0+90929+122d8796
ruby-libsol 90:4.0.3-32.module+el9.8.0+90929+122d8796
rubygem-bigdecimalol 90:4.0.1-32.module+el9.8.0+90929+122d8796
rubygem-bundlerol 90:4.0.6-32.module+el9.8.0+90929+122d8796
rubygem-io-consoleol 90:0.8.2-32.module+el9.8.0+90929+122d8796
rubygem-irbol 90:1.16.0-32.module+el9.8.0+90929+122d8796
rubygem-jsonol 90:2.18.0-32.module+el9.8.0+90929+122d8796
rubygem-minitestol 90:6.0.0-32.module+el9.8.0+90929+122d8796
rubygem-mysql2ol 90:0.5.7-1.module+el9.8.0+90929+122d8796
rubygem-mysql2-docol 90:0.5.7-1.module+el9.8.0+90929+122d8796
rubygem-pgol 90:1.6.3-1.module+el9.8.0+90929+122d8796
rubygem-pg-docol 90:1.6.3-1.module+el9.8.0+90929+122d8796
rubygem-power_assertol 90:3.0.1-32.module+el9.8.0+90929+122d8796
rubygem-psychol 90:5.3.1-32.module+el9.8.0+90929+122d8796
rubygem-raccol 90:1.8.1-32.module+el9.8.0+90929+122d8796
rubygem-rakeol 90:13.3.1-32.module+el9.8.0+90929+122d8796
rubygem-rbsol 90:3.10.0-32.module+el9.8.0+90929+122d8796
rubygem-rdocol 90:7.0.3-32.module+el9.8.0+90929+122d8796
rubygem-rexmlol 90:3.4.4-32.module+el9.8.0+90929+122d8796
rubygem-rssol 90:0.3.2-32.module+el9.8.0+90929+122d8796
rubygem-test-unitol 90:3.7.5-32.module+el9.8.0+90929+122d8796
rubygem-typeprofol 90:0.31.1-32.module+el9.8.0+90929+122d8796
rubygemsol 90:4.0.6-32.module+el9.8.0+90929+122d8796
rubygems-develol 90:4.0.6-32.module+el9.8.0+90929+122d8796

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
Urgent CVE-2026-33210 ruby-json: Ruby JSON is a JSON implementation for Ruby 9.1 0.0089 None reported
Showing 1 to 1 of 1 1