Linux · Security advisory · August 28, 2026

RHSA-2026:50828: Security update for 28 packages

RHSA-2026:50828, released August 28, 2026, fixes 6 CVEs across 28 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
6
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0083
57th percentile

Priority of the 6 CVEs

Patch now 0 Urgent 0 High 6 Routine 0

Fixed package versions

ProductReleaseFixed in
rubyRHEL 90:3.3.12-8.module+el9.8.0+24568+2bbebe96
ruby-bundled-gemsRHEL 90:3.3.12-8.module+el9.8.0+24568+2bbebe96
ruby-default-gemsRHEL 90:3.3.12-8.module+el9.8.0+24568+2bbebe96
ruby-develRHEL 90:3.3.12-8.module+el9.8.0+24568+2bbebe96
ruby-docRHEL 90:3.3.12-8.module+el9.8.0+24568+2bbebe96
ruby-libsRHEL 90:3.3.12-8.module+el9.8.0+24568+2bbebe96
rubygem-bigdecimalRHEL 90:3.1.5-8.module+el9.8.0+24568+2bbebe96
rubygem-bundlerRHEL 90:2.5.22-8.module+el9.8.0+24568+2bbebe96
rubygem-io-consoleRHEL 90:0.7.1-8.module+el9.8.0+24568+2bbebe96
rubygem-irbRHEL 90:1.13.1-8.module+el9.8.0+24568+2bbebe96
rubygem-jsonRHEL 90:2.7.2-8.module+el9.8.0+24568+2bbebe96
rubygem-minitestRHEL 90:5.20.0-8.module+el9.8.0+24568+2bbebe96
rubygem-mysql2RHEL 90:0.5.5-3.module+el9.8.0+24356+77305e91
rubygem-mysql2-docRHEL 90:0.5.5-3.module+el9.8.0+24356+77305e91
rubygem-pgRHEL 90:1.5.4-2.module+el9.8.0+24356+77305e91
rubygem-pg-docRHEL 90:1.5.4-2.module+el9.8.0+24356+77305e91
rubygem-power_assertRHEL 90:2.0.3-8.module+el9.8.0+24568+2bbebe96
rubygem-psychRHEL 90:5.1.2-8.module+el9.8.0+24568+2bbebe96
rubygem-raccRHEL 90:1.7.3-8.module+el9.8.0+24568+2bbebe96
rubygem-rakeRHEL 90:13.1.0-8.module+el9.8.0+24568+2bbebe96
rubygem-rbsRHEL 90:3.4.0-8.module+el9.8.0+24568+2bbebe96
rubygem-rdocRHEL 90:6.6.3.1-8.module+el9.8.0+24568+2bbebe96
rubygem-rexmlRHEL 90:3.4.4-8.module+el9.8.0+24568+2bbebe96
rubygem-rssRHEL 90:0.3.1-8.module+el9.8.0+24568+2bbebe96
rubygem-test-unitRHEL 90:3.6.1-8.module+el9.8.0+24568+2bbebe96
rubygem-typeprofRHEL 90:0.21.9-8.module+el9.8.0+24568+2bbebe96
rubygemsRHEL 90:3.5.22-8.module+el9.8.0+24568+2bbebe96
rubygems-develRHEL 90:3.5.22-8.module+el9.8.0+24568+2bbebe96

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2026-47240 Net::IMAP: Command Injection via non-synchronizing literal in "raw" argument 7.3 0.0083 None reported
High CVE-2026-27820 zlib: Buffer Overflow in Zlib::GzipReader ungetc via large input leads to memory corruption 7.3 0.0056 None reported
High CVE-2026-42257 net-imap: Command Injection via "raw" arguments to multiple commands 7.3 0.0043 None reported
High CVE-2026-47241 Net::IMAP: Denial of Service via incomplete raw argument validation 7.3 0.0038 None reported
High CVE-2026-42256 net-imap: Denial of service via high iteration count for `SCRAM-*` authentication 7.3 0.0030 None reported
High CVE-2026-47242 ruby: Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby 7.3 0.0018 None reported
Showing 1 to 6 of 6 1