Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
This update includes the following RPMs: ruby3.4: * ruby3.4-3.4.10-31.5.hum1 (aarch64, x86_64) * ruby3.4-bundled-gems-3.4.10-31.5.hum1 (aarch64, x86_64) * ruby3.4-default-gems-3.4.10-31.5.hum1 (noarch) * ruby3.4-devel-3.4.10-31.5.hum1 (aarch64, x86_64) * ruby3.4-doc-3.4.10-31.5.hum1 (noarch) * ruby3.4-libs-3.4.10-31.5.hum1 (aarch64, x86_64) * rubygem3.4-bigdecimal-3.1.8-31.5.hum1 (aarch64, x86_64) * rubygem3.4-bundler-2.6.9-31.5.hum1 (noarch) * rubygem3.4-devel-3.6.9-31.5.hum1 (noarch) * rubygem3.4-io-console-0.8.1-31.5.hum1 (aarch64, x86_64) * rubygem3.4-irb-1.14.3-31.5.hum1 (noarch) * rubygem3.4-json-2.9.1-31.5.hum1 (aarch64, x86_64) * rubygem3.4-minitest-5.25.4-31.5.hum1 (noarch) * rubygem3.4-power_assert-2.0.5-31.5.hum1 (noarch) * rubygem3.4-psych-5.2.2-31.5.hum1 (aarch64, x86_64) * rubygem3.4-racc-1.8.1-31.5.hum1 (aarch64, x86_64) * rubygem3.4-rake-13.2.1-31.5.hum1 (noarch) * rubygem3.4-rbs-3.8.0-31.5.hum1 (aarch64, x86_64) * rubygem3.4-rdoc-6.14.0-31.5.hum1 (noarch) * rubygem3.4-rexml-3.4.4-31.5.hum1 (noarch) * rubygem3.4-rss-0.3.1-31.5.hum1 (noarch) * rubygem3.4-rubygems-3.6.9-31.5.hum1 (noarch) * rubygem3.4-test-unit-3.6.7-31.5.hum1 (noarch) * rubygem3.4-typeprof-0.30.1-31.5.hum1 (noarch) * ruby3.4-3.4.10-31.5.hum1.src (src)
AI Analysis
Technical Summary
Red Hat Product Security released an advisory (RHSA-2026:47932) for Red Hat Hardened Images RPMs, updating ruby4.0 packages to address CVE-2026-54696, a vulnerability classified as CWE-787 (out-of-bounds write). The update includes multiple ruby4.0 and rubygem4.0 RPMs for aarch64 and x86_64 architectures. The advisory does not specify affected versions or detailed technical exploitation information. No CVSS score is provided, and no known exploits exist in the wild. The update is available via Red Hat Hardened Images repositories.
Potential Impact
The vulnerability involves an out-of-bounds write (CWE-787) in ruby4.0 packages, which could potentially lead to memory corruption. However, Red Hat rates the severity as low and no known exploits have been reported. The impact is therefore considered limited based on available information.
Mitigation Recommendations
A security update is available for Red Hat Hardened Images RPMs including ruby4.0 packages. Users should apply the update to ruby4.0-4.0.6-37.1.hum1 and related RPMs as provided by Red Hat Hardened Images repositories. No additional mitigation steps or temporary workarounds are indicated in the advisory.
Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
Description
This update includes the following RPMs: ruby3.4: * ruby3.4-3.4.10-31.5.hum1 (aarch64, x86_64) * ruby3.4-bundled-gems-3.4.10-31.5.hum1 (aarch64, x86_64) * ruby3.4-default-gems-3.4.10-31.5.hum1 (noarch) * ruby3.4-devel-3.4.10-31.5.hum1 (aarch64, x86_64) * ruby3.4-doc-3.4.10-31.5.hum1 (noarch) * ruby3.4-libs-3.4.10-31.5.hum1 (aarch64, x86_64) * rubygem3.4-bigdecimal-3.1.8-31.5.hum1 (aarch64, x86_64) * rubygem3.4-bundler-2.6.9-31.5.hum1 (noarch) * rubygem3.4-devel-3.6.9-31.5.hum1 (noarch) * rubygem3.4-io-console-0.8.1-31.5.hum1 (aarch64, x86_64) * rubygem3.4-irb-1.14.3-31.5.hum1 (noarch) * rubygem3.4-json-2.9.1-31.5.hum1 (aarch64, x86_64) * rubygem3.4-minitest-5.25.4-31.5.hum1 (noarch) * rubygem3.4-power_assert-2.0.5-31.5.hum1 (noarch) * rubygem3.4-psych-5.2.2-31.5.hum1 (aarch64, x86_64) * rubygem3.4-racc-1.8.1-31.5.hum1 (aarch64, x86_64) * rubygem3.4-rake-13.2.1-31.5.hum1 (noarch) * rubygem3.4-rbs-3.8.0-31.5.hum1 (aarch64, x86_64) * rubygem3.4-rdoc-6.14.0-31.5.hum1 (noarch) * rubygem3.4-rexml-3.4.4-31.5.hum1 (noarch) * rubygem3.4-rss-0.3.1-31.5.hum1 (noarch) * rubygem3.4-rubygems-3.6.9-31.5.hum1 (noarch) * rubygem3.4-test-unit-3.6.7-31.5.hum1 (noarch) * rubygem3.4-typeprof-0.30.1-31.5.hum1 (noarch) * ruby3.4-3.4.10-31.5.hum1.src (src)
Affected software
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
Red Hat Product Security released an advisory (RHSA-2026:47932) for Red Hat Hardened Images RPMs, updating ruby4.0 packages to address CVE-2026-54696, a vulnerability classified as CWE-787 (out-of-bounds write). The update includes multiple ruby4.0 and rubygem4.0 RPMs for aarch64 and x86_64 architectures. The advisory does not specify affected versions or detailed technical exploitation information. No CVSS score is provided, and no known exploits exist in the wild. The update is available via Red Hat Hardened Images repositories.
Potential Impact
The vulnerability involves an out-of-bounds write (CWE-787) in ruby4.0 packages, which could potentially lead to memory corruption. However, Red Hat rates the severity as low and no known exploits have been reported. The impact is therefore considered limited based on available information.
Mitigation Recommendations
A security update is available for Red Hat Hardened Images RPMs including ruby4.0 packages. Users should apply the update to ruby4.0-4.0.6-37.1.hum1 and related RPMs as provided by Red Hat Hardened Images repositories. No additional mitigation steps or temporary workarounds are indicated in the advisory.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHSA-2026:47932
- Cve Count
- 1
- Additional Cves
- []
- Cvss Version
- null
Threat ID: 6a6ae54a9c2644c7f8988581
Added to database: 07/30/2026, 05:46:50 UTC
Last enriched: 07/30/2026, 07:18:59 UTC
Last updated: 07/30/2026, 20:52:06 UTC
Views: 8
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.