[ol10_appstream] ruby-3.3.12-14.el10_2.x86_64

Name:	ruby
Version:	3.3.12
Release:	14.el10_2
Architecture:	x86_64
Group:	Unspecified
Size:	91430
License:	(Ruby OR BSD-2-Clause) AND (Ruby OR BSD-2-Clause OR GPL-1.0-or-later) AND BSD-3-Clause AND (GPL-3.0-or-later WITH Bison-exception-2.2) AND ISC AND LicenseRef-Fedora-Public-Domain AND MIT AND CC0 AND zlib AND Unicode-DFS-2015 AND HPND-Markus-Kuhn AND Ruby-pty
RPM:	ruby-3.3.12-14.el10_2.x86_64.rpm
Source RPM:	ruby-3.3.12-14.el10_2.src.rpm
Build Date:	Wed Aug 05 2026
Build Host:	build-ol10-x86_64.oracle.com
Vendor:	Oracle America
URL:	https://www.ruby-lang.org/
Summary:	An interpreter of object-oriented scripting language
Description:	Ruby is the interpreted scripting language for quick and easy object-oriented programming. It has many features to process text files and to do system management tasks (as in Perl). It is simple, straight-forward, and extensible.

Changelog (Show File list) (Show related packages)

Thu Jul 23 2026 Jarek Prokop <jprokop@redhat.com> - 3.3.12-14

- Upgrade to Ruby 3.3.12.
  Resolves: RHEL-211300
  Resolves: RHEL-193659

Thu Jun 11 2026 Jarek Prokop <jprokop@redhat.com> - 3.3.10-13

- Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245)
  Resolves: RHEL-181687
- Fix information disclosure via MITM attack bypassing TLS in net-imap.
  (CVE-2026-42246)
  Resolves: RHEL-181775
- Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258)
  Resolves: RHEL-181797

Tue Apr 28 2026 Jarek Prokop <jprokop@redhat.com> - 3.3.10-12

- Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316)
  Resolves: RHEL-171245

Thu Nov 13 2025 Jun Aruga <jaruga@redhat.com> - 3.3.10-11

- Upgrade to Ruby 3.3.10.
  Resolves: RHEL-130160
- Fix possible denial of service in resolv gem (CVE-2025-24294)
- Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
- Fix REXML denial of service. (CVE-2025-58767)
  Resolves: RHEL-122028

Mon Apr 14 2025 Jarek Prokop <jprokop@redhat.com> - 3.3.8-10

- Upgrade to Ruby 3.3.8.
  Resolves: RHEL-87342
- Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
- Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  Resolves: RHEL-86116
- Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)

Thu Jan 30 2025 Jun Aruga <jaruga@redhat.com> - 3.3.7-9

- Upgrade to Ruby 3.3.7
  Resolves: RHEL-77994
- Fix Ruby OpenSSL to respect crypto-policies TLS minimal version.
  Resolves: RHEL-21019

Tue Oct 29 2024 Troy Dawson <tdawson@redhat.com>

- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018

Wed Sep 04 2024 Jarek Prokop <jprokop@redhat.com> - 3.3.5-7

- Upgrade to Ruby 3.3.5
  Resolves: RHEL-59035
- Fix DoS vulnerability in rexml.
  (CVE-2024-39908)
  (CVE-2024-41946)
  (CVE-2024-43398)
  Resolves: RHEL-57047
  Resolves: RHEL-57059
  Resolves: RHEL-57070
- Fix REXML DoS when parsing an XML having many specific characters such as
  whitespace character, >] and ]>.
  (CVE-2024-41123)
  Resolves: RHEL-52802

Mon Jun 24 2024 Troy Dawson <tdawson@redhat.com>
```
- Bump release for June 2024 mass rebuild
```

Thu May 09 2024 Jun Aruga <jaruga@redhat.com> - 3.3.1-5

- Upgrade to Ruby 3.3.1.
  Resolves: RHEL-33975
- Fix buffer overread vulnerability in StringIO.
  Resolves: RHEL-34124
- Fix RCE vulnerability with .rdoc_options in RDoc.
  Resolves: RHEL-34116
- Fix arbitrary memory address read vulnerability with Regex search.
  Resolves: RHEL-33866