This Red Hat security advisory (RHSA-2026:35447) announces a bug fix and enhancement update for Red Hat Hardened Images RPMs, specifically ruby3.4 and associated rubygem packages. It addresses two vulnerabilities, CVE-2026-42257 and CVE-2026-42258, categorized under CWE-93. The advisory provides a list of updated RPM packages for aarch64 and x86_64 architectures and noarch packages. The update is intended to fix security issues in these components. No CVSS score or detailed vulnerability descriptions are included in the advisory. No affected versions are explicitly stated, and no known exploits have been reported.

The vulnerabilities addressed are rated as high severity by Red Hat. They affect ruby3.4 packages in Red Hat Hardened Images. The exact impact is not detailed, but the CWE-93 classification suggests issues related to improper control of code generation or execution. No known exploits in the wild have been reported. Without further technical details, the impact is limited to the potential for exploitation of these vulnerabilities if unpatched.

Red Hat has released updated RPM packages for ruby3.4 and related gems as part of this advisory. Users of Red Hat Hardened Images should apply these updates to remediate the vulnerabilities. The advisory provides links to the updated packages and instructions on applying the update. Patch status is confirmed as fixed in the updated RPM versions listed. No additional mitigation steps are specified or required beyond applying the update.