Vulnerability · Published Apr 24, 2026 · Assigned by GitHub_M
CVE-2026-41316ERB has an @_init deserialization guard bypass via def_module / def_method / def_class
High 8.1
In plain English
A high-severity unsafe deserialization in erb from ruby. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.1% (higher than 67% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS 3.1)8.1High
Exploit odds (30 days)1.1%top 33.4% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
ERB is a templating system for Ruby. Ruby 2.7.0 (before ERB 2.2.0 was published on rubygems.org) introduced an `@_init` instance variable guard in `ERB#result` and `ERB#run` to prevent code execution when an ERB object is reconstructed via `Marshal.load` (deserialization). However, three other public methods that also evaluate `@src` via `eval()` were not given the same guard: `ERB#def_method`, `ERB#def_module`, and `ERB#def_class`. An attacker who can trigger `Marshal.load` on untrusted data in a Ruby application that has `erb` loaded can use `ERB#def_module` (zero-arg, default parameters) as a code execution sink, bypassing the `@_init` protection entirely. ERB 4.0.3.1, 4.0.4.1, 6.0.1.1, and 6.0.4 patch the issue.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:8 | ruby | 3.3.10-6.module_el8.10.0+4183+69a3c42f | ALSA-2026:20614 |
| AlmaLinux:9 | ruby | 3.0.7-166.el9_7 | ALSA-2026:18039 |
| AlmaLinux:9 | ruby | 4.0.3-32.module_el9.8.0+251+5fdbd96b | ALSA-2026:20596 |
| AlmaLinux:9 | ruby | 3.3.10-6.module_el9.7.0+245+447713a2 | ALSA-2026:18030 |
| AlmaLinux:8 | ruby-bundled-gems | 3.3.10-6.module_el8.10.0+4183+69a3c42f | ALSA-2026:20614 |
| AlmaLinux:9 | ruby-bundled-gems | 4.0.3-32.module_el9.8.0+251+5fdbd96b | ALSA-2026:20596 |
| AlmaLinux:9 | ruby-bundled-gems | 3.3.10-6.module_el9.7.0+245+447713a2 | ALSA-2026:18030 |
| AlmaLinux:10 | ruby-default-gems | 3.3.10-12.el10_1 | ALSA-2026:18065 |
| AlmaLinux:8 | ruby-default-gems | 3.3.10-6.module_el8.10.0+4183+69a3c42f | ALSA-2026:20614 |
| AlmaLinux:9 | ruby-default-gems | 4.0.3-32.module_el9.8.0+251+5fdbd96b | ALSA-2026:20596 |
| AlmaLinux:9 | ruby-default-gems | 3.0.7-166.el9_7 | ALSA-2026:18039 |
| AlmaLinux:9 | ruby-default-gems | 3.3.10-6.module_el9.7.0+245+447713a2 | ALSA-2026:18030 |
| AlmaLinux:8 | ruby-devel | 3.3.10-6.module_el8.10.0+4183+69a3c42f | ALSA-2026:20614 |
| AlmaLinux:9 | ruby-devel | 3.3.10-6.module_el9.7.0+245+447713a2 | ALSA-2026:18030 |
| AlmaLinux:9 | ruby-devel | 4.0.3-32.module_el9.8.0+251+5fdbd96b | ALSA-2026:20596 |
| AlmaLinux:9 | ruby-devel | 3.0.7-166.el9_7 | ALSA-2026:18039 |
| AlmaLinux:10 | ruby-doc | 3.3.10-12.el10_1 | ALSA-2026:18065 |
| AlmaLinux:8 | ruby-doc | 3.3.10-6.module_el8.10.0+4183+69a3c42f | ALSA-2026:20614 |
| AlmaLinux:9 | ruby-doc | 3.3.10-6.module_el9.7.0+245+447713a2 | ALSA-2026:18030 |
| AlmaLinux:9 | ruby-doc | 4.0.3-32.module_el9.8.0+251+5fdbd96b | ALSA-2026:20596 |
| AlmaLinux:9 | ruby-doc | 3.0.7-166.el9_7 | ALSA-2026:18039 |
| AlmaLinux:8 | ruby-libs | 3.3.10-6.module_el8.10.0+4183+69a3c42f | ALSA-2026:20614 |
| AlmaLinux:9 | ruby-libs | 3.3.10-6.module_el9.7.0+245+447713a2 | ALSA-2026:18030 |
| AlmaLinux:9 | ruby-libs | 3.0.7-166.el9_7 | ALSA-2026:18039 |
| AlmaLinux:9 | ruby-libs | 4.0.3-32.module_el9.8.0+251+5fdbd96b | ALSA-2026:20596 |
| AlmaLinux:10 | ruby4.0 | 4.0.3-34.el10_2 | ALSA-2026:20606 |
| AlmaLinux:10 | ruby4.0-devel | 4.0.3-34.el10_2 | ALSA-2026:20606 |
| AlmaLinux:10 | ruby4.0-doc | 4.0.3-34.el10_2 | ALSA-2026:20606 |
| AlmaLinux:10 | ruby4.0-rubygem-mysql2 | 0.5.7-34.el10_2 | ALSA-2026:20606 |
| AlmaLinux:10 | ruby4.0-rubygem-pg | 1.6.3-34.el10_2 | ALSA-2026:20606 |
| AlmaLinux:8 | rubygem-abrt | 0.4.0-1.module_el8.10.0+3799+191214cc | ALSA-2026:20614 |
| AlmaLinux:8 | rubygem-abrt-doc | 0.4.0-1.module_el8.10.0+3799+191214cc | ALSA-2026:20614 |
| AlmaLinux:8 | rubygem-bigdecimal | 3.1.5-6.module_el8.10.0+4183+69a3c42f | ALSA-2026:20614 |
| AlmaLinux:9 | rubygem-bigdecimal | 4.0.1-32.module_el9.8.0+251+5fdbd96b | ALSA-2026:20596 |
| AlmaLinux:9 | rubygem-bigdecimal | 3.0.0-166.el9_7 | ALSA-2026:18039 |
| AlmaLinux:9 | rubygem-bigdecimal | 3.1.5-6.module_el9.7.0+245+447713a2 | ALSA-2026:18030 |
| AlmaLinux:10 | rubygem-bundler | 2.5.22-12.el10_1 | ALSA-2026:18065 |
| AlmaLinux:8 | rubygem-bundler | 2.5.22-6.module_el8.10.0+4183+69a3c42f | ALSA-2026:20614 |
| AlmaLinux:9 | rubygem-bundler | 2.5.22-6.module_el9.7.0+245+447713a2 | ALSA-2026:18030 |
| AlmaLinux:9 | rubygem-bundler | 4.0.6-32.module_el9.8.0+251+5fdbd96b | ALSA-2026:20596 |
| AlmaLinux:9 | rubygem-bundler | 2.2.33-166.el9_7 | ALSA-2026:18039 |
| AlmaLinux:8 | rubygem-io-console | 0.7.1-6.module_el8.10.0+4183+69a3c42f | ALSA-2026:20614 |
| AlmaLinux:9 | rubygem-io-console | 0.7.1-6.module_el9.7.0+245+447713a2 | ALSA-2026:18030 |
| AlmaLinux:9 | rubygem-io-console | 0.5.7-166.el9_7 | ALSA-2026:18039 |
| AlmaLinux:9 | rubygem-io-console | 0.8.2-32.module_el9.8.0+251+5fdbd96b | ALSA-2026:20596 |
| AlmaLinux:10 | rubygem-irb | 1.13.1-12.el10_1 | ALSA-2026:18065 |
| AlmaLinux:8 | rubygem-irb | 1.13.1-6.module_el8.10.0+4183+69a3c42f | ALSA-2026:20614 |
| AlmaLinux:9 | rubygem-irb | 1.16.0-32.module_el9.8.0+251+5fdbd96b | ALSA-2026:20596 |
| AlmaLinux:9 | rubygem-irb | 1.3.5-166.el9_7 | ALSA-2026:18039 |
| AlmaLinux:9 | rubygem-irb | 1.13.1-6.module_el9.7.0+245+447713a2 | ALSA-2026:18030 |
| AlmaLinux:8 | rubygem-json | 2.7.2-6.module_el8.10.0+4183+69a3c42f | ALSA-2026:20614 |
| AlmaLinux:9 | rubygem-json | 2.7.2-6.module_el9.7.0+245+447713a2 | ALSA-2026:18030 |
| AlmaLinux:9 | rubygem-json | 2.5.1-166.el9_7 | ALSA-2026:18039 |
| AlmaLinux:9 | rubygem-json | 2.18.0-32.module_el9.8.0+251+5fdbd96b | ALSA-2026:20596 |
| AlmaLinux:10 | rubygem-minitest | 5.20.0-12.el10_1 | ALSA-2026:18065 |
| AlmaLinux:8 | rubygem-minitest | 5.20.0-6.module_el8.10.0+4183+69a3c42f | ALSA-2026:20614 |
| AlmaLinux:9 | rubygem-minitest | 6.0.0-32.module_el9.8.0+251+5fdbd96b | ALSA-2026:20596 |
| AlmaLinux:9 | rubygem-minitest | 5.20.0-6.module_el9.7.0+245+447713a2 | ALSA-2026:18030 |
| AlmaLinux:9 | rubygem-minitest | 5.14.2-166.el9_7 | ALSA-2026:18039 |
| AlmaLinux:8 | rubygem-mysql2 | 0.5.5-1.module_el8.10.0+3799+191214cc | ALSA-2026:20614 |
| AlmaLinux:9 | rubygem-mysql2 | 0.5.5-3.module_el9.7.0+184+e2e36072 | ALSA-2026:18030 |
| AlmaLinux:9 | rubygem-mysql2 | 0.5.7-1.module_el9.8.0+232+50f6dd36 | ALSA-2026:20596 |
| AlmaLinux:8 | rubygem-mysql2-doc | 0.5.5-1.module_el8.10.0+3799+191214cc | ALSA-2026:20614 |
| AlmaLinux:9 | rubygem-mysql2-doc | 0.5.5-3.module_el9.7.0+184+e2e36072 | ALSA-2026:18030 |
| AlmaLinux:9 | rubygem-mysql2-doc | 0.5.7-1.module_el9.8.0+232+50f6dd36 | ALSA-2026:20596 |
| AlmaLinux:8 | rubygem-pg | 1.5.4-1.module_el8.10.0+3799+191214cc | ALSA-2026:20614 |
| AlmaLinux:9 | rubygem-pg | 1.5.4-2.module_el9.7.0+245+447713a2 | ALSA-2026:18030 |
| AlmaLinux:9 | rubygem-pg | 1.6.3-1.module_el9.8.0+232+50f6dd36 | ALSA-2026:20596 |
| AlmaLinux:8 | rubygem-pg-doc | 1.5.4-1.module_el8.10.0+3799+191214cc | ALSA-2026:20614 |
| AlmaLinux:9 | rubygem-pg-doc | 1.5.4-2.module_el9.7.0+245+447713a2 | ALSA-2026:18030 |
| AlmaLinux:9 | rubygem-pg-doc | 1.6.3-1.module_el9.8.0+232+50f6dd36 | ALSA-2026:20596 |
| AlmaLinux:10 | rubygem-power_assert | 2.0.3-12.el10_1 | ALSA-2026:18065 |
| AlmaLinux:8 | rubygem-power_assert | 2.0.3-6.module_el8.10.0+4183+69a3c42f | ALSA-2026:20614 |
| AlmaLinux:9 | rubygem-power_assert | 1.2.1-166.el9_7 | ALSA-2026:18039 |
| AlmaLinux:9 | rubygem-power_assert | 3.0.1-32.module_el9.8.0+251+5fdbd96b | ALSA-2026:20596 |
| AlmaLinux:9 | rubygem-power_assert | 2.0.3-6.module_el9.7.0+245+447713a2 | ALSA-2026:18030 |
| AlmaLinux:8 | rubygem-psych | 5.1.2-6.module_el8.10.0+4183+69a3c42f | ALSA-2026:20614 |
| AlmaLinux:9 | rubygem-psych | 3.3.2-166.el9_7 | ALSA-2026:18039 |
| AlmaLinux:9 | rubygem-psych | 5.1.2-6.module_el9.7.0+245+447713a2 | ALSA-2026:18030 |
| AlmaLinux:9 | rubygem-psych | 5.3.1-32.module_el9.8.0+251+5fdbd96b | ALSA-2026:20596 |
| AlmaLinux:8 | rubygem-racc | 1.7.3-6.module_el8.10.0+4183+69a3c42f | ALSA-2026:20614 |
| AlmaLinux:9 | rubygem-racc | 1.8.1-32.module_el9.8.0+251+5fdbd96b | ALSA-2026:20596 |
| AlmaLinux:9 | rubygem-racc | 1.7.3-6.module_el9.7.0+245+447713a2 | ALSA-2026:18030 |
| AlmaLinux:10 | rubygem-rake | 13.1.0-12.el10_1 | ALSA-2026:18065 |
| AlmaLinux:8 | rubygem-rake | 13.1.0-6.module_el8.10.0+4183+69a3c42f | ALSA-2026:20614 |
| AlmaLinux:9 | rubygem-rake | 13.0.3-166.el9_7 | ALSA-2026:18039 |
| AlmaLinux:9 | rubygem-rake | 13.3.1-32.module_el9.8.0+251+5fdbd96b | ALSA-2026:20596 |
| AlmaLinux:9 | rubygem-rake | 13.1.0-6.module_el9.7.0+245+447713a2 | ALSA-2026:18030 |
| AlmaLinux:8 | rubygem-rbs | 3.4.0-6.module_el8.10.0+4183+69a3c42f | ALSA-2026:20614 |
| AlmaLinux:9 | rubygem-rbs | 3.10.0-32.module_el9.8.0+251+5fdbd96b | ALSA-2026:20596 |
| AlmaLinux:9 | rubygem-rbs | 1.4.0-166.el9_7 | ALSA-2026:18039 |
| AlmaLinux:9 | rubygem-rbs | 3.4.0-6.module_el9.7.0+245+447713a2 | ALSA-2026:18030 |
| AlmaLinux:10 | rubygem-rdoc | 6.6.3.1-12.el10_1 | ALSA-2026:18065 |
| AlmaLinux:8 | rubygem-rdoc | 6.6.3.1-6.module_el8.10.0+4183+69a3c42f | ALSA-2026:20614 |
| AlmaLinux:9 | rubygem-rdoc | 6.3.4.1-166.el9_7 | ALSA-2026:18039 |
| AlmaLinux:9 | rubygem-rdoc | 6.6.3.1-6.module_el9.7.0+245+447713a2 | ALSA-2026:18030 |
| AlmaLinux:9 | rubygem-rdoc | 7.0.3-32.module_el9.8.0+251+5fdbd96b | ALSA-2026:20596 |
| AlmaLinux:10 | rubygem-rexml | 3.4.4-12.el10_1 | ALSA-2026:18065 |
| AlmaLinux:8 | rubygem-rexml | 3.4.4-6.module_el8.10.0+4183+69a3c42f | ALSA-2026:20614 |
| AlmaLinux:9 | rubygem-rexml | 3.2.5-166.el9_7 | ALSA-2026:18039 |
| AlmaLinux:9 | rubygem-rexml | 3.4.4-6.module_el9.7.0+245+447713a2 | ALSA-2026:18030 |
| AlmaLinux:9 | rubygem-rexml | 3.4.4-32.module_el9.8.0+251+5fdbd96b | ALSA-2026:20596 |
| AlmaLinux:10 | rubygem-rss | 0.3.1-12.el10_1 | ALSA-2026:18065 |
| AlmaLinux:8 | rubygem-rss | 0.3.1-6.module_el8.10.0+4183+69a3c42f | ALSA-2026:20614 |
| AlmaLinux:9 | rubygem-rss | 0.2.9-166.el9_7 | ALSA-2026:18039 |
| AlmaLinux:9 | rubygem-rss | 0.3.2-32.module_el9.8.0+251+5fdbd96b | ALSA-2026:20596 |
| AlmaLinux:9 | rubygem-rss | 0.3.1-6.module_el9.7.0+245+447713a2 | ALSA-2026:18030 |
| AlmaLinux:10 | rubygem-test-unit | 3.6.1-12.el10_1 | ALSA-2026:18065 |
| AlmaLinux:8 | rubygem-test-unit | 3.6.1-6.module_el8.10.0+4183+69a3c42f | ALSA-2026:20614 |
| AlmaLinux:9 | rubygem-test-unit | 3.7.5-32.module_el9.8.0+251+5fdbd96b | ALSA-2026:20596 |
| AlmaLinux:9 | rubygem-test-unit | 3.3.7-166.el9_7 | ALSA-2026:18039 |
| AlmaLinux:9 | rubygem-test-unit | 3.6.1-6.module_el9.7.0+245+447713a2 | ALSA-2026:18030 |
| AlmaLinux:10 | rubygem-typeprof | 0.21.9-12.el10_1 | ALSA-2026:18065 |
| AlmaLinux:8 | rubygem-typeprof | 0.21.9-6.module_el8.10.0+4183+69a3c42f | ALSA-2026:20614 |
| AlmaLinux:9 | rubygem-typeprof | 0.21.9-6.module_el9.7.0+245+447713a2 | ALSA-2026:18030 |
| AlmaLinux:9 | rubygem-typeprof | 0.15.2-166.el9_7 | ALSA-2026:18039 |
| AlmaLinux:9 | rubygem-typeprof | 0.31.1-32.module_el9.8.0+251+5fdbd96b | ALSA-2026:20596 |
| AlmaLinux:10 | rubygems | 3.5.22-12.el10_1 | ALSA-2026:18065 |
| AlmaLinux:8 | rubygems | 3.5.22-6.module_el8.10.0+4183+69a3c42f | ALSA-2026:20614 |
| AlmaLinux:9 | rubygems | 3.2.33-166.el9_7 | ALSA-2026:18039 |
| AlmaLinux:9 | rubygems | 3.5.22-6.module_el9.7.0+245+447713a2 | ALSA-2026:18030 |
| AlmaLinux:9 | rubygems | 4.0.6-32.module_el9.8.0+251+5fdbd96b | ALSA-2026:20596 |
| AlmaLinux:10 | rubygems-devel | 3.5.22-12.el10_1 | ALSA-2026:18065 |
| AlmaLinux:8 | rubygems-devel | 3.5.22-6.module_el8.10.0+4183+69a3c42f | ALSA-2026:20614 |
| AlmaLinux:9 | rubygems-devel | 4.0.6-32.module_el9.8.0+251+5fdbd96b | ALSA-2026:20596 |
| AlmaLinux:9 | rubygems-devel | 3.5.22-6.module_el9.7.0+245+447713a2 | ALSA-2026:18030 |
| AlmaLinux:9 | rubygems-devel | 3.2.33-166.el9_7 | ALSA-2026:18039 |
| Alpine:v3.21 | ruby | 3.3.13-r0 | ALPINE-CVE-2026-41316 |
| Debian:12 | ruby3.1 | no fix listed | DEBIAN-CVE-2026-41316 |
| Debian:13 | ruby3.3 | no fix listed | DEBIAN-CVE-2026-41316 |
| Debian:14 | ruby3.3 | no fix listed | DEBIAN-CVE-2026-41316 |
| Rocky Linux:10 | ruby | 0:3.3.10-12.el10_1 | RLSA-2026:18065 |
| Rocky Linux:9 | ruby | 0:3.0.7-166.el9_7 | RLSA-2026:18039 |
| Rocky Linux:10 | ruby4.0 | 0:4.0.3-34.el10_2 | RLSA-2026:20606 |
| Rocky Linux:8 | rubygem-abrt | 0:0.4.0-1.module+el8.10.0+1826+b62220b4 | RLSA-2026:20614 |
| Rocky Linux:8 | rubygem-abrt | 0:0.4.0-1.module+el8.5.0+668+665814fa | RLSA-2026:20614 |
| Rocky Linux:8 | rubygem-abrt | 0:0.4.0-1.module+el8.10.0+1827+16ecb9d2 | RLSA-2026:20614 |
| Rocky Linux:8 | rubygem-abrt | 0:0.4.0-1.module+el8.9.0+1537+0b2034bd | RLSA-2026:20614 |
| Rocky Linux:8 | rubygem-abrt | 0:0.4.0-1.module+el8.10.0+1741+bdb5b6ca | RLSA-2026:20614 |
| Rocky Linux:8 | rubygem-abrt | 0:0.4.0-1.module+el8.10.0+1679+61871737 | RLSA-2026:20614 |
| Rocky Linux:8 | rubygem-abrt | 0:0.4.0-1.module+el8.10.0+1820+f3fffb92 | RLSA-2026:20614 |
| Rocky Linux:8 | rubygem-mysql2 | 0:0.5.5-1.module+el8.10.0+1679+61871737 | RLSA-2026:20614 |
| Rocky Linux:8 | rubygem-mysql2 | 0:0.5.5-1.module+el8.10.0+1827+16ecb9d2 | RLSA-2026:20614 |
| Rocky Linux:9 | rubygem-mysql2 | 0:0.5.5-3.module+el9.7.0+40032+36e56d0d | RLSA-2026:18030 |
| Rocky Linux:9 | rubygem-mysql2 | 0:0.5.7-1.module+el9.8.0+40094+ce01217c | RLSA-2026:20596 |
| Rocky Linux:8 | rubygem-pg | 0:1.5.4-1.module+el8.10.0+1679+61871737 | RLSA-2026:20614 |
| Rocky Linux:8 | rubygem-pg | 0:1.5.4-1.module+el8.10.0+1827+16ecb9d2 | RLSA-2026:20614 |
| Rocky Linux:9 | rubygem-pg | 0:1.6.3-1.module+el9.8.0+40094+ce01217c | RLSA-2026:20596 |
| RubyGems | erb | 4.0.4.1 | GHSA-q339-8rmv-2mhv |
| RubyGems | erb | 4.0.3.1 | GHSA-q339-8rmv-2mhv |
| RubyGems | erb | 6.0.1.1 | GHSA-q339-8rmv-2mhv |
| RubyGems | erb | 6.0.4 | GHSA-q339-8rmv-2mhv |
| Ubuntu:25.10 | jruby | no fix listed | UBUNTU-CVE-2026-41316 |
| Ubuntu:26.04:LTS | jruby | no fix listed | UBUNTU-CVE-2026-41316 |
| Ubuntu:26.10 | jruby | no fix listed | UBUNTU-CVE-2026-41316 |
| Ubuntu:22.04:LTS | ruby3.0 | no fix listed | UBUNTU-CVE-2026-41316 |
| Ubuntu:24.04:LTS | ruby3.2 | no fix listed | UBUNTU-CVE-2026-41316 |
| Ubuntu:25.10 | ruby3.3 | no fix listed | UBUNTU-CVE-2026-41316 |
| Ubuntu:26.04:LTS | ruby3.3 | no fix listed | UBUNTU-CVE-2026-41316 |
| Ubuntu:26.10 | ruby3.3 | no fix listed | UBUNTU-CVE-2026-41316 |
Affected products (as reported)
Weakness: CWE-693, CWE-502 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
References
- https://github.com/ruby/erb/security/advisories/GHSA-q339-8rmv-2mhv x_refsource_CONFIRM
- https://access.redhat.com/security/cve/CVE-2026-41316 vdb-entry, x_refsource_REDHAT
- RHBZ#2461369 issue-tracking, x_refsource_REDHAT
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-41316.json x_sadp-csaf-vex
- https://access.redhat.com/errata/RHSA-2026:33478 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:18065 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:20606 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:20614 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:20670 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:35834 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:26312 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:26655 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:33462 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:37238 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:18039 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:18030 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:20596 vendor-advisory, x_refsource_REDHAT