Linux · Security advisory · July 1, 2026

RHSA-2026:33577: Security update for 28 packages

RHSA-2026:33577, released July 1, 2026, fixes 3 CVEs across 28 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
3
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0078
56th percentile

Priority of the 3 CVEs

Patch now 0 Urgent 0 High 3 Routine 0

Fixed package versions

ProductReleaseFixed in
rubyRHEL 90:4.0.3-33.module+el9.8.0+24428+77f1d00a
ruby-bundled-gemsRHEL 90:4.0.3-33.module+el9.8.0+24428+77f1d00a
ruby-default-gemsRHEL 90:4.0.3-33.module+el9.8.0+24428+77f1d00a
ruby-develRHEL 90:4.0.3-33.module+el9.8.0+24428+77f1d00a
ruby-docRHEL 90:4.0.3-33.module+el9.8.0+24428+77f1d00a
ruby-libsRHEL 90:4.0.3-33.module+el9.8.0+24428+77f1d00a
rubygem-bigdecimalRHEL 90:4.0.1-33.module+el9.8.0+24428+77f1d00a
rubygem-bundlerRHEL 90:4.0.6-33.module+el9.8.0+24428+77f1d00a
rubygem-io-consoleRHEL 90:0.8.2-33.module+el9.8.0+24428+77f1d00a
rubygem-irbRHEL 90:1.16.0-33.module+el9.8.0+24428+77f1d00a
rubygem-jsonRHEL 90:2.18.0-33.module+el9.8.0+24428+77f1d00a
rubygem-minitestRHEL 90:6.0.0-33.module+el9.8.0+24428+77f1d00a
rubygem-mysql2RHEL 90:0.5.7-1.module+el9.8.0+24428+77f1d00a
rubygem-mysql2-docRHEL 90:0.5.7-1.module+el9.8.0+24428+77f1d00a
rubygem-pgRHEL 90:1.6.3-1.module+el9.8.0+24428+77f1d00a
rubygem-pg-docRHEL 90:1.6.3-1.module+el9.8.0+24428+77f1d00a
rubygem-power_assertRHEL 90:3.0.1-33.module+el9.8.0+24428+77f1d00a
rubygem-psychRHEL 90:5.3.1-33.module+el9.8.0+24428+77f1d00a
rubygem-raccRHEL 90:1.8.1-33.module+el9.8.0+24428+77f1d00a
rubygem-rakeRHEL 90:13.3.1-33.module+el9.8.0+24428+77f1d00a
rubygem-rbsRHEL 90:3.10.0-33.module+el9.8.0+24428+77f1d00a
rubygem-rdocRHEL 90:7.0.3-33.module+el9.8.0+24428+77f1d00a
rubygem-rexmlRHEL 90:3.4.4-33.module+el9.8.0+24428+77f1d00a
rubygem-rssRHEL 90:0.3.2-33.module+el9.8.0+24428+77f1d00a
rubygem-test-unitRHEL 90:3.7.5-33.module+el9.8.0+24428+77f1d00a
rubygem-typeprofRHEL 90:0.31.1-33.module+el9.8.0+24428+77f1d00a
rubygemsRHEL 90:4.0.6-33.module+el9.8.0+24428+77f1d00a
rubygems-develRHEL 90:4.0.6-33.module+el9.8.0+24428+77f1d00a

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2026-42258 net-imap: Command Injection via unvalidated Symbol inputs 7.4 0.0078 None reported
High CVE-2026-42245 ruby4.0: Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby 7.4 0.0041 None reported
High CVE-2026-42246 net-imap vulnerable to STARTTLS stripping via invalid response timing 7.4 0.0031 None reported
Showing 1 to 3 of 3 1