Linux · Security advisory · May 27, 2026

RHSA-2026:20596: Security update for 28 packages

RHSA-2026:20596, released May 27, 2026, fixes 2 CVEs across 28 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
2
1 rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0113
66th percentile

Priority of the 2 CVEs

Patch now 0 Urgent 1 High 1 Routine 0

Fixed package versions

ProductReleaseFixed in
rubyRHEL 90:4.0.3-32.module+el9.8.0+24280+122d8796
ruby-bundled-gemsRHEL 90:4.0.3-32.module+el9.8.0+24280+122d8796
ruby-default-gemsRHEL 90:4.0.3-32.module+el9.8.0+24280+122d8796
ruby-develRHEL 90:4.0.3-32.module+el9.8.0+24280+122d8796
ruby-docRHEL 90:4.0.3-32.module+el9.8.0+24280+122d8796
ruby-libsRHEL 90:4.0.3-32.module+el9.8.0+24280+122d8796
rubygem-bigdecimalRHEL 90:4.0.1-32.module+el9.8.0+24280+122d8796
rubygem-bundlerRHEL 90:4.0.6-32.module+el9.8.0+24280+122d8796
rubygem-io-consoleRHEL 90:0.8.2-32.module+el9.8.0+24280+122d8796
rubygem-irbRHEL 90:1.16.0-32.module+el9.8.0+24280+122d8796
rubygem-jsonRHEL 90:2.18.0-32.module+el9.8.0+24280+122d8796
rubygem-minitestRHEL 90:6.0.0-32.module+el9.8.0+24280+122d8796
rubygem-mysql2RHEL 90:0.5.7-1.module+el9.8.0+24280+122d8796
rubygem-mysql2-docRHEL 90:0.5.7-1.module+el9.8.0+24280+122d8796
rubygem-pgRHEL 90:1.6.3-1.module+el9.8.0+24280+122d8796
rubygem-pg-docRHEL 90:1.6.3-1.module+el9.8.0+24280+122d8796
rubygem-power_assertRHEL 90:3.0.1-32.module+el9.8.0+24280+122d8796
rubygem-psychRHEL 90:5.3.1-32.module+el9.8.0+24280+122d8796
rubygem-raccRHEL 90:1.8.1-32.module+el9.8.0+24280+122d8796
rubygem-rakeRHEL 90:13.3.1-32.module+el9.8.0+24280+122d8796
rubygem-rbsRHEL 90:3.10.0-32.module+el9.8.0+24280+122d8796
rubygem-rdocRHEL 90:7.0.3-32.module+el9.8.0+24280+122d8796
rubygem-rexmlRHEL 90:3.4.4-32.module+el9.8.0+24280+122d8796
rubygem-rssRHEL 90:0.3.2-32.module+el9.8.0+24280+122d8796
rubygem-test-unitRHEL 90:3.7.5-32.module+el9.8.0+24280+122d8796
rubygem-typeprofRHEL 90:0.31.1-32.module+el9.8.0+24280+122d8796
rubygemsRHEL 90:4.0.6-32.module+el9.8.0+24280+122d8796
rubygems-develRHEL 90:4.0.6-32.module+el9.8.0+24280+122d8796

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
Urgent CVE-2026-33210 ruby-json: Ruby JSON is a JSON implementation for Ruby 9.1 0.0089 None reported
High CVE-2026-41316 ruby: Ruby is an extensible, interpreted, object-oriented, scripting language 9.1 0.0113 None reported
Showing 1 to 2 of 2 1