This Red Hat security advisory (RHSA-2026:33551) addresses multiple security vulnerabilities in the ruby4.0 RPM packages included in Red Hat Hardened Images. The vulnerabilities fixed include CVE-2026-42245, CVE-2026-42246, CVE-2026-42256, CVE-2026-47240, and CVE-2026-47242. The issues are related to CWE-606 (Unchecked Input for Loop Condition) and CWE-325 (Missing Required Cryptographic Step), indicating potential flaws in input validation and cryptographic operations. The advisory provides updated RPM packages for ruby4.0 and associated rubygems components for aarch64 and x86_64 architectures, as well as noarch packages. The update is intended to mitigate these vulnerabilities. No exploits in the wild have been reported, and no CVSS scores are provided. The advisory references Red Hat's official errata and update channels for applying the fixes.

The vulnerabilities fixed by this advisory affect ruby4.0 packages in Red Hat Hardened Images and may allow attackers to exploit unchecked loop conditions or missing cryptographic steps, potentially leading to security issues such as denial of service or weakened cryptographic protections. The exact impact details are not provided in the advisory. No known exploits in the wild have been reported at this time.

Red Hat has released updated ruby4.0 RPM packages that address these vulnerabilities. Users of Red Hat Hardened Images should apply the security update as provided by Red Hat through their official update channels (https://images.redhat.com/). The vendor advisory does not indicate that no action is required or that the issue is already mitigated; therefore, applying the update is recommended to remediate the vulnerabilities. Patch status is confirmed by the availability of updated RPMs in the advisory.