Red Hat Product Security released an advisory (RHSA-2025:23141) for Ruby in Red Hat Enterprise Linux 10, addressing denial of service vulnerabilities in the resolv gem (CVE-2025-24294) and the REXML library (CVE-2025-58767). These vulnerabilities could cause denial of service conditions when processing certain inputs. The advisory includes updated Ruby packages to remediate these issues. The security impact is rated moderate by Red Hat. No CVSS base scores are provided in the advisory or CVE records. The advisory covers multiple architectures and extended support versions of Red Hat Enterprise Linux 10. The vendor provides official updates and instructions for applying the patches.

The vulnerabilities allow denial of service attacks via the resolv gem and REXML library in Ruby, potentially causing application or system unavailability. The impact is rated moderate by Red Hat. There are no known exploits in the wild at this time. The vulnerabilities affect Ruby components used for text processing and system management tasks within Red Hat Enterprise Linux 10 environments.

Red Hat has released updated Ruby packages for Red Hat Enterprise Linux 10 and related variants that address these denial of service vulnerabilities. Users should apply the official Red Hat update as described in the advisory RHSA-2025:23141 and the referenced article https://access.redhat.com/articles/11258. Since this is an official fix, applying the update fully mitigates the vulnerabilities. No additional mitigation steps are indicated by the vendor.