Red Hat Product Security released an advisory (RHSA-2026:34293) for Red Hat Hardened Images RPMs that includes updates to ruby3.4 packages to address CVE-2026-47242 and CVE-2026-47241. The advisory details updated package versions for multiple ruby3.4 RPMs across architectures aarch64 and x86_64, including bundled gems and libraries. The vulnerabilities are categorized under CWE-88. No CVSS score is provided. The advisory references updated RPMs with version 3.4.8-31.3.hum1 and related gem versions. No explicit technical details on the nature of the vulnerabilities or exploitation methods are provided in the advisory.

The vulnerabilities affect Red Hat Hardened Images using ruby3.4 packages, potentially allowing security issues related to CWE-88. The exact impact is not detailed, but the medium severity rating suggests moderate risk. There are no known exploits in the wild at the time of the advisory. The vulnerabilities could affect systems running the affected ruby3.4 RPMs on aarch64 and x86_64 architectures.

Red Hat has released updated ruby3.4 RPM packages (version 3.4.8-31.3.hum1) that address the vulnerabilities CVE-2026-47242 and CVE-2026-47241. Users of Red Hat Hardened Images with ruby3.4 packages should apply these updates promptly by following Red Hat's update procedures as detailed in the advisory at https://images.redhat.com/. Patch status is confirmed as an official fix available from Red Hat. No additional mitigation steps are specified or required beyond applying the provided updates.