{ "document": { "aggregate_severity": { "text": "Critical" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "TuxCare License Agreement", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Cloud Linux Inc. and provide a link to the original.", "title": "Terms of Use" }, { "category": "details", "text": "CVE-2024-41123: rexml: fix ReDoS in REXML::Source when parsing input with\n many >]/]]> sequences or without a terminator\n- CVE-2024-41946: rexml: enforce the entity expansion limit in the SAX2 and\n pull parsers\n- CVE-2024-43398: rexml: fix DoS in the tree parser on deep elements with\n same-local-name namespaced attributes\n (the affected bundled rexml 3.2.5 parser/source files are synced with\n rexml 3.3.9, which carries these fixes and their prerequisites)\n- CVE-2025-58767: rexml: fix DoS when parsing XML with multiple XML\n declarations; only one well-formed XML declaration is accepted", "title": "Details" } ], "publisher": { "category": "vendor", "contact_details": "https://tuxcare.com/contact/", "name": "TuxCare", "namespace": "https://tuxcare.com/" }, "references": [ { "category": "self", "summary": "https://cve.tuxcare.com/els/releases/CLSA-2026:1791195487", "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1791195487" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.tuxcare.com/csaf/v2/els_os/tuxcare9.8esu/advisories/2026/clsa-2026_1791195487.json" } ], "tracking": { "current_release_date": "2026-10-27T16:16:59Z", "generator": { "date": "2026-10-27T16:16:59Z", "engine": { "name": "pyCSAF" } }, "id": "CLSA-2026:1791195487", "initial_release_date": "2026-10-05T10:20:13Z", "revision_history": [ { "date": "2026-10-05T10:20:13Z", "number": "1", "summary": "Initial version" }, { "date": "2026-10-14T18:50:23Z", "number": "2", "summary": "Update document" }, { "date": "2026-10-27T16:16:59Z", "number": "3", "summary": "Update document" } ], "status": "final", "version": "3" }, "title": "ruby: Fix of 8 CVEs" }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "AlmaLinux 9.8", "product": { "name": "AlmaLinux 9.8", "product_id": "AlmaLinux-9.8", "product_identification_helper": { "cpe": "cpe:2.3:o:almalinux:almalinux:9.8:*:*:*:*:*:*:*" } } } ], "category": "product_family", "name": "AlmaLinux" } ], "category": "vendor", "name": "AlmaLinux OS Foundation" }, { "branches": [ { "branches": [ { "category": "product_name", "name": "Rocky Linux 9.8", "product": { "name": "Rocky Linux 9.8", "product_id": "Rocky Linux-9.8", "product_identification_helper": { "cpe": "cpe:2.3:o:resf:rocky_linux:9.8:*:*:*:*:*:*:*" } } } ], "category": "product_family", "name": "Rocky Linux" } ], "category": "vendor", "name": "Rocky Linux" }, { "branches": [ { "branches": [ { "category": "product_version", "name": "rubygem-typeprof-0:0.15.2-168.el9_8.tuxcare.els2.noarch", "product": { "name": "rubygem-typeprof-0:0.15.2-168.el9_8.tuxcare.els2.noarch", "product_id": "rubygem-typeprof-0:0.15.2-168.el9_8.tuxcare.els2.noarch", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/rubygem-typeprof@0.15.2-168.el9_8.tuxcare.els2?arch=noarch" } } }, { "category": "product_version", "name": "rubygem-bundler-0:2.2.33-168.el9_8.tuxcare.els2.noarch", "product": { "name": "rubygem-bundler-0:2.2.33-168.el9_8.tuxcare.els2.noarch", "product_id": "rubygem-bundler-0:2.2.33-168.el9_8.tuxcare.els2.noarch", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/rubygem-bundler@2.2.33-168.el9_8.tuxcare.els2?arch=noarch" } } }, { "category": "product_version", "name": "rubygem-rss-0:0.2.9-168.el9_8.tuxcare.els2.noarch", "product": { "name": "rubygem-rss-0:0.2.9-168.el9_8.tuxcare.els2.noarch", "product_id": "rubygem-rss-0:0.2.9-168.el9_8.tuxcare.els2.noarch", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/rubygem-rss@0.2.9-168.el9_8.tuxcare.els2?arch=noarch" } } }, { "category": "product_version", "name": "rubygem-test-unit-0:3.3.7-168.el9_8.tuxcare.els2.noarch", "product": { "name": "rubygem-test-unit-0:3.3.7-168.el9_8.tuxcare.els2.noarch", "product_id": "rubygem-test-unit-0:3.3.7-168.el9_8.tuxcare.els2.noarch", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/rubygem-test-unit@3.3.7-168.el9_8.tuxcare.els2?arch=noarch" } } }, { "category": "product_version", "name": "ruby-doc-0:3.0.7-168.el9_8.tuxcare.els2.noarch", "product": { "name": "ruby-doc-0:3.0.7-168.el9_8.tuxcare.els2.noarch", "product_id": "ruby-doc-0:3.0.7-168.el9_8.tuxcare.els2.noarch", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/ruby-doc@3.0.7-168.el9_8.tuxcare.els2?arch=noarch" } } }, { "category": "product_version", "name": "rubygems-0:3.2.33-168.el9_8.tuxcare.els2.noarch", "product": { "name": "rubygems-0:3.2.33-168.el9_8.tuxcare.els2.noarch", "product_id": "rubygems-0:3.2.33-168.el9_8.tuxcare.els2.noarch", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/rubygems@3.2.33-168.el9_8.tuxcare.els2?arch=noarch" } } }, { "category": "product_version", "name": "rubygem-irb-0:1.3.5-168.el9_8.tuxcare.els2.noarch", "product": { "name": "rubygem-irb-0:1.3.5-168.el9_8.tuxcare.els2.noarch", "product_id": "rubygem-irb-0:1.3.5-168.el9_8.tuxcare.els2.noarch", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/rubygem-irb@1.3.5-168.el9_8.tuxcare.els2?arch=noarch" } } }, { "category": "product_version", "name": "rubygem-rake-0:13.0.3-168.el9_8.tuxcare.els2.noarch", "product": { "name": "rubygem-rake-0:13.0.3-168.el9_8.tuxcare.els2.noarch", "product_id": "rubygem-rake-0:13.0.3-168.el9_8.tuxcare.els2.noarch", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/rubygem-rake@13.0.3-168.el9_8.tuxcare.els2?arch=noarch" } } }, { "category": "product_version", "name": "rubygem-minitest-0:5.14.2-168.el9_8.tuxcare.els2.noarch", "product": { "name": "rubygem-minitest-0:5.14.2-168.el9_8.tuxcare.els2.noarch", "product_id": "rubygem-minitest-0:5.14.2-168.el9_8.tuxcare.els2.noarch", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/rubygem-minitest@5.14.2-168.el9_8.tuxcare.els2?arch=noarch" } } }, { "category": "product_version", "name": "rubygem-rdoc-0:6.3.4.1-168.el9_8.tuxcare.els2.noarch", "product": { "name": "rubygem-rdoc-0:6.3.4.1-168.el9_8.tuxcare.els2.noarch", "product_id": "rubygem-rdoc-0:6.3.4.1-168.el9_8.tuxcare.els2.noarch", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/rubygem-rdoc@6.3.4.1-168.el9_8.tuxcare.els2?arch=noarch" } } }, { "category": "product_version", "name": "rubygem-power_assert-0:1.2.1-168.el9_8.tuxcare.els2.noarch", "product": { "name": "rubygem-power_assert-0:1.2.1-168.el9_8.tuxcare.els2.noarch", "product_id": "rubygem-power_assert-0:1.2.1-168.el9_8.tuxcare.els2.noarch", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/rubygem-power_assert@1.2.1-168.el9_8.tuxcare.els2?arch=noarch" } } }, { "category": "product_version", "name": "ruby-default-gems-0:3.0.7-168.el9_8.tuxcare.els2.noarch", "product": { "name": "ruby-default-gems-0:3.0.7-168.el9_8.tuxcare.els2.noarch", "product_id": "ruby-default-gems-0:3.0.7-168.el9_8.tuxcare.els2.noarch", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/ruby-default-gems@3.0.7-168.el9_8.tuxcare.els2?arch=noarch" } } }, { "category": "product_version", "name": "rubygem-rbs-0:1.4.0-168.el9_8.tuxcare.els2.noarch", "product": { "name": "rubygem-rbs-0:1.4.0-168.el9_8.tuxcare.els2.noarch", "product_id": "rubygem-rbs-0:1.4.0-168.el9_8.tuxcare.els2.noarch", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/rubygem-rbs@1.4.0-168.el9_8.tuxcare.els2?arch=noarch" } } }, { "category": "product_version", "name": "rubygem-rexml-0:3.2.5-168.el9_8.tuxcare.els2.noarch", "product": { "name": "rubygem-rexml-0:3.2.5-168.el9_8.tuxcare.els2.noarch", "product_id": "rubygem-rexml-0:3.2.5-168.el9_8.tuxcare.els2.noarch", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/rubygem-rexml@3.2.5-168.el9_8.tuxcare.els2?arch=noarch" } } }, { "category": "product_version", "name": "rubygems-devel-0:3.2.33-168.el9_8.tuxcare.els2.noarch", "product": { "name": "rubygems-devel-0:3.2.33-168.el9_8.tuxcare.els2.noarch", "product_id": "rubygems-devel-0:3.2.33-168.el9_8.tuxcare.els2.noarch", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/rubygems-devel@3.2.33-168.el9_8.tuxcare.els2?arch=noarch" } } } ], "category": "architecture", "name": "noarch" }, { "branches": [ { "category": "product_version", "name": "ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "product": { "name": "ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "product_id": "ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/ruby-devel@3.0.7-168.el9_8.tuxcare.els2?arch=aarch64" } } }, { "category": "product_version", "name": "rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.aarch64", "product": { "name": "rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.aarch64", "product_id": "rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.aarch64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/rubygem-json@2.5.1-168.el9_8.tuxcare.els2?arch=aarch64" } } }, { "category": "product_version", "name": "ruby-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "product": { "name": "ruby-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "product_id": "ruby-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/ruby@3.0.7-168.el9_8.tuxcare.els2?arch=aarch64" } } }, { "category": "product_version", "name": "rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.aarch64", "product": { "name": "rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.aarch64", "product_id": "rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.aarch64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/rubygem-io-console@0.5.7-168.el9_8.tuxcare.els2?arch=aarch64" } } }, { "category": "product_version", "name": "rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.aarch64", "product": { "name": "rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.aarch64", "product_id": "rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.aarch64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/rubygem-bigdecimal@3.0.0-168.el9_8.tuxcare.els2?arch=aarch64" } } }, { "category": "product_version", "name": "rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.aarch64", "product": { "name": "rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.aarch64", "product_id": "rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.aarch64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/rubygem-psych@3.3.2-168.el9_8.tuxcare.els2?arch=aarch64" } } }, { "category": "product_version", "name": "ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "product": { "name": "ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "product_id": "ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/ruby-libs@3.0.7-168.el9_8.tuxcare.els2?arch=aarch64" } } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "product": { "name": "ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "product_id": "ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/ruby-devel@3.0.7-168.el9_8.tuxcare.els2?arch=x86_64" } } }, { "category": "product_version", "name": "rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.x86_64", "product": { "name": "rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.x86_64", "product_id": "rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/rubygem-json@2.5.1-168.el9_8.tuxcare.els2?arch=x86_64" } } }, { "category": "product_version", "name": "ruby-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "product": { "name": "ruby-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "product_id": "ruby-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/ruby@3.0.7-168.el9_8.tuxcare.els2?arch=x86_64" } } }, { "category": "product_version", "name": "rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.x86_64", "product": { "name": "rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.x86_64", "product_id": "rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/rubygem-io-console@0.5.7-168.el9_8.tuxcare.els2?arch=x86_64" } } }, { "category": "product_version", "name": "rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.x86_64", "product": { "name": "rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.x86_64", "product_id": "rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/rubygem-bigdecimal@3.0.0-168.el9_8.tuxcare.els2?arch=x86_64" } } }, { "category": "product_version", "name": "rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.x86_64", "product": { "name": "rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.x86_64", "product_id": "rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/rubygem-psych@3.3.2-168.el9_8.tuxcare.els2?arch=x86_64" } } }, { "category": "product_version", "name": "ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "product": { "name": "ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "product_id": "ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/ruby-libs@3.0.7-168.el9_8.tuxcare.els2?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.i686", "product": { "name": "ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.i686", "product_id": "ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/ruby-devel@3.0.7-168.el9_8.tuxcare.els2?arch=i686" } } }, { "category": "product_version", "name": "rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.i686", "product": { "name": "rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.i686", "product_id": "rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/rubygem-json@2.5.1-168.el9_8.tuxcare.els2?arch=i686" } } }, { "category": "product_version", "name": "ruby-0:3.0.7-168.el9_8.tuxcare.els2.i686", "product": { "name": "ruby-0:3.0.7-168.el9_8.tuxcare.els2.i686", "product_id": "ruby-0:3.0.7-168.el9_8.tuxcare.els2.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/ruby@3.0.7-168.el9_8.tuxcare.els2?arch=i686" } } }, { "category": "product_version", "name": "rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.i686", "product": { "name": "rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.i686", "product_id": "rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/rubygem-io-console@0.5.7-168.el9_8.tuxcare.els2?arch=i686" } } }, { "category": "product_version", "name": "rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.i686", "product": { "name": "rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.i686", "product_id": "rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/rubygem-bigdecimal@3.0.0-168.el9_8.tuxcare.els2?arch=i686" } } }, { "category": "product_version", "name": "rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.i686", "product": { "name": "rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.i686", "product_id": "rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/rubygem-psych@3.3.2-168.el9_8.tuxcare.els2?arch=i686" } } }, { "category": "product_version", "name": "ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.i686", "product": { "name": "ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.i686", "product_id": "ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/ruby-libs@3.0.7-168.el9_8.tuxcare.els2?arch=i686" } } } ], "category": "architecture", "name": "i686" } ], "category": "vendor", "name": "TuxCare" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "rubygem-typeprof-0:0.15.2-168.el9_8.tuxcare.els2.noarch as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:rubygem-typeprof-0:0.15.2-168.el9_8.tuxcare.els2.noarch" }, "product_reference": "rubygem-typeprof-0:0.15.2-168.el9_8.tuxcare.els2.noarch", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.aarch64 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.aarch64" }, "product_reference": "ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.x86_64 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.x86_64" }, "product_reference": "ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.i686 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.i686" }, "product_reference": "ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.i686", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-bundler-0:2.2.33-168.el9_8.tuxcare.els2.noarch as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:rubygem-bundler-0:2.2.33-168.el9_8.tuxcare.els2.noarch" }, "product_reference": "rubygem-bundler-0:2.2.33-168.el9_8.tuxcare.els2.noarch", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.x86_64 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.x86_64" }, "product_reference": "rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.x86_64", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.aarch64 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.aarch64" }, "product_reference": "rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.aarch64", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.i686 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.i686" }, "product_reference": "rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.i686", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-rss-0:0.2.9-168.el9_8.tuxcare.els2.noarch as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:rubygem-rss-0:0.2.9-168.el9_8.tuxcare.els2.noarch" }, "product_reference": "rubygem-rss-0:0.2.9-168.el9_8.tuxcare.els2.noarch", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "ruby-0:3.0.7-168.el9_8.tuxcare.els2.x86_64 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.x86_64" }, "product_reference": "ruby-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "ruby-0:3.0.7-168.el9_8.tuxcare.els2.i686 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.i686" }, "product_reference": "ruby-0:3.0.7-168.el9_8.tuxcare.els2.i686", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "ruby-0:3.0.7-168.el9_8.tuxcare.els2.aarch64 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.aarch64" }, "product_reference": "ruby-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-test-unit-0:3.3.7-168.el9_8.tuxcare.els2.noarch as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:rubygem-test-unit-0:3.3.7-168.el9_8.tuxcare.els2.noarch" }, "product_reference": "rubygem-test-unit-0:3.3.7-168.el9_8.tuxcare.els2.noarch", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.i686 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.i686" }, "product_reference": "rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.i686", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.x86_64 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.x86_64" }, "product_reference": "rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.x86_64", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.aarch64 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.aarch64" }, "product_reference": "rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.aarch64", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.x86_64 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.x86_64" }, "product_reference": "rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.x86_64", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.aarch64 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.aarch64" }, "product_reference": "rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.aarch64", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.i686 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.i686" }, "product_reference": "rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.i686", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "ruby-doc-0:3.0.7-168.el9_8.tuxcare.els2.noarch as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:ruby-doc-0:3.0.7-168.el9_8.tuxcare.els2.noarch" }, "product_reference": "ruby-doc-0:3.0.7-168.el9_8.tuxcare.els2.noarch", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.x86_64 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.x86_64" }, "product_reference": "rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.x86_64", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.aarch64 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.aarch64" }, "product_reference": "rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.aarch64", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.i686 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.i686" }, "product_reference": "rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.i686", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "rubygems-0:3.2.33-168.el9_8.tuxcare.els2.noarch as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:rubygems-0:3.2.33-168.el9_8.tuxcare.els2.noarch" }, "product_reference": "rubygems-0:3.2.33-168.el9_8.tuxcare.els2.noarch", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-irb-0:1.3.5-168.el9_8.tuxcare.els2.noarch as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:rubygem-irb-0:1.3.5-168.el9_8.tuxcare.els2.noarch" }, "product_reference": "rubygem-irb-0:1.3.5-168.el9_8.tuxcare.els2.noarch", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.aarch64 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.aarch64" }, "product_reference": "ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.x86_64 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.x86_64" }, "product_reference": "ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.i686 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.i686" }, "product_reference": "ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.i686", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-rake-0:13.0.3-168.el9_8.tuxcare.els2.noarch as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:rubygem-rake-0:13.0.3-168.el9_8.tuxcare.els2.noarch" }, "product_reference": "rubygem-rake-0:13.0.3-168.el9_8.tuxcare.els2.noarch", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-minitest-0:5.14.2-168.el9_8.tuxcare.els2.noarch as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:rubygem-minitest-0:5.14.2-168.el9_8.tuxcare.els2.noarch" }, "product_reference": "rubygem-minitest-0:5.14.2-168.el9_8.tuxcare.els2.noarch", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-rdoc-0:6.3.4.1-168.el9_8.tuxcare.els2.noarch as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:rubygem-rdoc-0:6.3.4.1-168.el9_8.tuxcare.els2.noarch" }, "product_reference": "rubygem-rdoc-0:6.3.4.1-168.el9_8.tuxcare.els2.noarch", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-power_assert-0:1.2.1-168.el9_8.tuxcare.els2.noarch as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:rubygem-power_assert-0:1.2.1-168.el9_8.tuxcare.els2.noarch" }, "product_reference": "rubygem-power_assert-0:1.2.1-168.el9_8.tuxcare.els2.noarch", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "ruby-default-gems-0:3.0.7-168.el9_8.tuxcare.els2.noarch as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:ruby-default-gems-0:3.0.7-168.el9_8.tuxcare.els2.noarch" }, "product_reference": "ruby-default-gems-0:3.0.7-168.el9_8.tuxcare.els2.noarch", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-rbs-0:1.4.0-168.el9_8.tuxcare.els2.noarch as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:rubygem-rbs-0:1.4.0-168.el9_8.tuxcare.els2.noarch" }, "product_reference": "rubygem-rbs-0:1.4.0-168.el9_8.tuxcare.els2.noarch", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-rexml-0:3.2.5-168.el9_8.tuxcare.els2.noarch as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:rubygem-rexml-0:3.2.5-168.el9_8.tuxcare.els2.noarch" }, "product_reference": "rubygem-rexml-0:3.2.5-168.el9_8.tuxcare.els2.noarch", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "rubygems-devel-0:3.2.33-168.el9_8.tuxcare.els2.noarch as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:rubygems-devel-0:3.2.33-168.el9_8.tuxcare.els2.noarch" }, "product_reference": "rubygems-devel-0:3.2.33-168.el9_8.tuxcare.els2.noarch", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-typeprof-0:0.15.2-168.el9_8.tuxcare.els2.noarch as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:rubygem-typeprof-0:0.15.2-168.el9_8.tuxcare.els2.noarch" }, "product_reference": "rubygem-typeprof-0:0.15.2-168.el9_8.tuxcare.els2.noarch", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.aarch64 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.aarch64" }, "product_reference": "ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.x86_64 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.x86_64" }, "product_reference": "ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.i686 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.i686" }, "product_reference": "ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.i686", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-bundler-0:2.2.33-168.el9_8.tuxcare.els2.noarch as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:rubygem-bundler-0:2.2.33-168.el9_8.tuxcare.els2.noarch" }, "product_reference": "rubygem-bundler-0:2.2.33-168.el9_8.tuxcare.els2.noarch", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.x86_64 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.x86_64" }, "product_reference": "rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.x86_64", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.aarch64 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.aarch64" }, "product_reference": "rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.aarch64", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.i686 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.i686" }, "product_reference": "rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.i686", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-rss-0:0.2.9-168.el9_8.tuxcare.els2.noarch as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:rubygem-rss-0:0.2.9-168.el9_8.tuxcare.els2.noarch" }, "product_reference": "rubygem-rss-0:0.2.9-168.el9_8.tuxcare.els2.noarch", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "ruby-0:3.0.7-168.el9_8.tuxcare.els2.x86_64 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.x86_64" }, "product_reference": "ruby-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "ruby-0:3.0.7-168.el9_8.tuxcare.els2.i686 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.i686" }, "product_reference": "ruby-0:3.0.7-168.el9_8.tuxcare.els2.i686", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "ruby-0:3.0.7-168.el9_8.tuxcare.els2.aarch64 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.aarch64" }, "product_reference": "ruby-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-test-unit-0:3.3.7-168.el9_8.tuxcare.els2.noarch as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:rubygem-test-unit-0:3.3.7-168.el9_8.tuxcare.els2.noarch" }, "product_reference": "rubygem-test-unit-0:3.3.7-168.el9_8.tuxcare.els2.noarch", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.i686 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.i686" }, "product_reference": "rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.i686", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.x86_64 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.x86_64" }, "product_reference": "rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.x86_64", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.aarch64 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.aarch64" }, "product_reference": "rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.aarch64", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.x86_64 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.x86_64" }, "product_reference": "rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.x86_64", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.aarch64 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.aarch64" }, "product_reference": "rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.aarch64", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.i686 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.i686" }, "product_reference": "rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.i686", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "ruby-doc-0:3.0.7-168.el9_8.tuxcare.els2.noarch as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:ruby-doc-0:3.0.7-168.el9_8.tuxcare.els2.noarch" }, "product_reference": "ruby-doc-0:3.0.7-168.el9_8.tuxcare.els2.noarch", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.x86_64 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.x86_64" }, "product_reference": "rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.x86_64", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.aarch64 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.aarch64" }, "product_reference": "rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.aarch64", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.i686 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.i686" }, "product_reference": "rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.i686", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "rubygems-0:3.2.33-168.el9_8.tuxcare.els2.noarch as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:rubygems-0:3.2.33-168.el9_8.tuxcare.els2.noarch" }, "product_reference": "rubygems-0:3.2.33-168.el9_8.tuxcare.els2.noarch", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-irb-0:1.3.5-168.el9_8.tuxcare.els2.noarch as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:rubygem-irb-0:1.3.5-168.el9_8.tuxcare.els2.noarch" }, "product_reference": "rubygem-irb-0:1.3.5-168.el9_8.tuxcare.els2.noarch", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.aarch64 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.aarch64" }, "product_reference": "ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.x86_64 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.x86_64" }, "product_reference": "ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.i686 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.i686" }, "product_reference": "ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.i686", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-rake-0:13.0.3-168.el9_8.tuxcare.els2.noarch as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:rubygem-rake-0:13.0.3-168.el9_8.tuxcare.els2.noarch" }, "product_reference": "rubygem-rake-0:13.0.3-168.el9_8.tuxcare.els2.noarch", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-minitest-0:5.14.2-168.el9_8.tuxcare.els2.noarch as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:rubygem-minitest-0:5.14.2-168.el9_8.tuxcare.els2.noarch" }, "product_reference": "rubygem-minitest-0:5.14.2-168.el9_8.tuxcare.els2.noarch", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-rdoc-0:6.3.4.1-168.el9_8.tuxcare.els2.noarch as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:rubygem-rdoc-0:6.3.4.1-168.el9_8.tuxcare.els2.noarch" }, "product_reference": "rubygem-rdoc-0:6.3.4.1-168.el9_8.tuxcare.els2.noarch", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-power_assert-0:1.2.1-168.el9_8.tuxcare.els2.noarch as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:rubygem-power_assert-0:1.2.1-168.el9_8.tuxcare.els2.noarch" }, "product_reference": "rubygem-power_assert-0:1.2.1-168.el9_8.tuxcare.els2.noarch", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "ruby-default-gems-0:3.0.7-168.el9_8.tuxcare.els2.noarch as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:ruby-default-gems-0:3.0.7-168.el9_8.tuxcare.els2.noarch" }, "product_reference": "ruby-default-gems-0:3.0.7-168.el9_8.tuxcare.els2.noarch", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-rbs-0:1.4.0-168.el9_8.tuxcare.els2.noarch as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:rubygem-rbs-0:1.4.0-168.el9_8.tuxcare.els2.noarch" }, "product_reference": "rubygem-rbs-0:1.4.0-168.el9_8.tuxcare.els2.noarch", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-rexml-0:3.2.5-168.el9_8.tuxcare.els2.noarch as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:rubygem-rexml-0:3.2.5-168.el9_8.tuxcare.els2.noarch" }, "product_reference": "rubygem-rexml-0:3.2.5-168.el9_8.tuxcare.els2.noarch", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "rubygems-devel-0:3.2.33-168.el9_8.tuxcare.els2.noarch as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:rubygems-devel-0:3.2.33-168.el9_8.tuxcare.els2.noarch" }, "product_reference": "rubygems-devel-0:3.2.33-168.el9_8.tuxcare.els2.noarch", "relates_to_product_reference": "Rocky Linux-9.8" } ] }, "vulnerabilities": [ { "cve": "CVE-2026-27820", "cwe": { "id": "CWE-120", "name": "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')" }, "notes": [ { "category": "description", "text": "zlib is a Ruby interface for the zlib compression/decompression library. Versions 3.0.0 and below, 3.1.0, 3.1.1, 3.2.0 and 3.2.1 contain a buffer overflow vulnerability in the Zlib::GzipReader. The zstream_buffer_ungets function prepends caller-provided bytes ahead of previously produced output but fails to guarantee the backing Ruby string has enough capacity before the memmove shifts the existing data. This can lead to memory corruption when the buffer length exceeds capacity. This issue has been fixed in versions 3.0.1, 3.1.2 and 3.2.3.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:ruby-default-gems-0:3.0.7-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:ruby-doc-0:3.0.7-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:rubygem-bundler-0:2.2.33-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:rubygem-irb-0:1.3.5-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:rubygem-minitest-0:5.14.2-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-power_assert-0:1.2.1-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:rubygem-rake-0:13.0.3-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-rbs-0:1.4.0-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-rdoc-0:6.3.4.1-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-rexml-0:3.2.5-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-rss-0:0.2.9-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-test-unit-0:3.3.7-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-typeprof-0:0.15.2-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygems-0:3.2.33-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygems-devel-0:3.2.33-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:ruby-default-gems-0:3.0.7-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:ruby-doc-0:3.0.7-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:rubygem-bundler-0:2.2.33-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:rubygem-irb-0:1.3.5-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:rubygem-minitest-0:5.14.2-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-power_assert-0:1.2.1-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:rubygem-rake-0:13.0.3-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-rbs-0:1.4.0-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-rdoc-0:6.3.4.1-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-rexml-0:3.2.5-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-rss-0:0.2.9-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-test-unit-0:3.3.7-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-typeprof-0:0.15.2-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygems-0:3.2.33-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygems-devel-0:3.2.33-168.el9_8.tuxcare.els2.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-27820" }, { "category": "external", "summary": "https://github.com/ruby/zlib/security/advisories/GHSA-g857-hhfv-j68w", "url": "https://github.com/ruby/zlib/security/advisories/GHSA-g857-hhfv-j68w" }, { "category": "external", "summary": "https://hackerone.com/reports/3467067", "url": "https://hackerone.com/reports/3467067" } ], "release_date": "2026-04-16T18:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-05T10:18:09.127648Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1791195487", "product_ids": [ "AlmaLinux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:ruby-default-gems-0:3.0.7-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:ruby-doc-0:3.0.7-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:rubygem-bundler-0:2.2.33-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:rubygem-irb-0:1.3.5-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:rubygem-minitest-0:5.14.2-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-power_assert-0:1.2.1-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:rubygem-rake-0:13.0.3-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-rbs-0:1.4.0-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-rdoc-0:6.3.4.1-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-rexml-0:3.2.5-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-rss-0:0.2.9-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-test-unit-0:3.3.7-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-typeprof-0:0.15.2-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygems-0:3.2.33-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygems-devel-0:3.2.33-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:ruby-default-gems-0:3.0.7-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:ruby-doc-0:3.0.7-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:rubygem-bundler-0:2.2.33-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:rubygem-irb-0:1.3.5-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:rubygem-minitest-0:5.14.2-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-power_assert-0:1.2.1-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:rubygem-rake-0:13.0.3-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-rbs-0:1.4.0-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-rdoc-0:6.3.4.1-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-rexml-0:3.2.5-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-rss-0:0.2.9-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-test-unit-0:3.3.7-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-typeprof-0:0.15.2-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygems-0:3.2.33-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygems-devel-0:3.2.33-168.el9_8.tuxcare.els2.noarch" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1791195487" } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2025-58767", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "notes": [ { "category": "description", "text": "REXML is an XML toolkit for Ruby. The REXML gems from 3.3.3 to 3.4.1 has a DoS vulnerability when parsing XML containing multiple XML declarations. If you need to parse untrusted XMLs, you may be impacted to these vulnerabilities. The REXML gem 3.4.2 or later include the patches to fix these vulnerabilities.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:ruby-default-gems-0:3.0.7-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:ruby-doc-0:3.0.7-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:rubygem-bundler-0:2.2.33-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:rubygem-irb-0:1.3.5-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:rubygem-minitest-0:5.14.2-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-power_assert-0:1.2.1-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:rubygem-rake-0:13.0.3-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-rbs-0:1.4.0-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-rdoc-0:6.3.4.1-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-rexml-0:3.2.5-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-rss-0:0.2.9-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-test-unit-0:3.3.7-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-typeprof-0:0.15.2-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygems-0:3.2.33-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygems-devel-0:3.2.33-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:ruby-default-gems-0:3.0.7-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:ruby-doc-0:3.0.7-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:rubygem-bundler-0:2.2.33-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:rubygem-irb-0:1.3.5-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:rubygem-minitest-0:5.14.2-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-power_assert-0:1.2.1-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:rubygem-rake-0:13.0.3-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-rbs-0:1.4.0-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-rdoc-0:6.3.4.1-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-rexml-0:3.2.5-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-rss-0:0.2.9-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-test-unit-0:3.3.7-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-typeprof-0:0.15.2-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygems-0:3.2.33-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygems-devel-0:3.2.33-168.el9_8.tuxcare.els2.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-58767" }, { "category": "external", "summary": "https://github.com/ruby/rexml/commit/5859bdeac792687eaf93d8e8f0b7e3c1e2ed5c23", "url": "https://github.com/ruby/rexml/commit/5859bdeac792687eaf93d8e8f0b7e3c1e2ed5c23" }, { "category": "external", "summary": "https://github.com/ruby/rexml/security/advisories/GHSA-c2f4-jgmc-q2r5", "url": "https://github.com/ruby/rexml/security/advisories/GHSA-c2f4-jgmc-q2r5" } ], "release_date": "2025-09-17T18:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-05T10:18:09.127648Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1791195487", "product_ids": [ "AlmaLinux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:ruby-default-gems-0:3.0.7-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:ruby-doc-0:3.0.7-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:rubygem-bundler-0:2.2.33-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:rubygem-irb-0:1.3.5-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:rubygem-minitest-0:5.14.2-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-power_assert-0:1.2.1-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:rubygem-rake-0:13.0.3-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-rbs-0:1.4.0-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-rdoc-0:6.3.4.1-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-rexml-0:3.2.5-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-rss-0:0.2.9-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-test-unit-0:3.3.7-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-typeprof-0:0.15.2-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygems-0:3.2.33-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygems-devel-0:3.2.33-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:ruby-default-gems-0:3.0.7-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:ruby-doc-0:3.0.7-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:rubygem-bundler-0:2.2.33-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:rubygem-irb-0:1.3.5-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:rubygem-minitest-0:5.14.2-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-power_assert-0:1.2.1-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:rubygem-rake-0:13.0.3-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-rbs-0:1.4.0-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-rdoc-0:6.3.4.1-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-rexml-0:3.2.5-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-rss-0:0.2.9-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-test-unit-0:3.3.7-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-typeprof-0:0.15.2-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygems-0:3.2.33-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygems-devel-0:3.2.33-168.el9_8.tuxcare.els2.noarch" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1791195487" } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2025-27221", "cwe": { "id": "CWE-212", "name": "Improper Removal of Sensitive Information Before Storage or Transfer" }, "notes": [ { "category": "description", "text": "In the URI gem before 1.0.3 for Ruby, the URI handling methods (URI.join, URI#merge, URI#+) have an inadvertent leakage of authentication credentials because userinfo is retained even after changing the host.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:ruby-default-gems-0:3.0.7-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:ruby-doc-0:3.0.7-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:rubygem-bundler-0:2.2.33-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:rubygem-irb-0:1.3.5-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:rubygem-minitest-0:5.14.2-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-power_assert-0:1.2.1-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:rubygem-rake-0:13.0.3-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-rbs-0:1.4.0-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-rdoc-0:6.3.4.1-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-rexml-0:3.2.5-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-rss-0:0.2.9-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-test-unit-0:3.3.7-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-typeprof-0:0.15.2-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygems-0:3.2.33-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygems-devel-0:3.2.33-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:ruby-default-gems-0:3.0.7-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:ruby-doc-0:3.0.7-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:rubygem-bundler-0:2.2.33-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:rubygem-irb-0:1.3.5-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:rubygem-minitest-0:5.14.2-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-power_assert-0:1.2.1-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:rubygem-rake-0:13.0.3-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-rbs-0:1.4.0-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-rdoc-0:6.3.4.1-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-rexml-0:3.2.5-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-rss-0:0.2.9-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-test-unit-0:3.3.7-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-typeprof-0:0.15.2-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygems-0:3.2.33-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygems-devel-0:3.2.33-168.el9_8.tuxcare.els2.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-27221" }, { "category": "external", "summary": "https://github.com/rubysec/ruby-advisory-db/blob/master/gems/uri/CVE-2025-27221.yml", "url": "https://github.com/rubysec/ruby-advisory-db/blob/master/gems/uri/CVE-2025-27221.yml" }, { "category": "external", "summary": "https://hackerone.com/reports/2957667", "url": "https://hackerone.com/reports/2957667" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/03/msg00008.html", "url": "https://lists.debian.org/debian-lts-announce/2025/03/msg00008.html" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/05/msg00015.html", "url": "https://lists.debian.org/debian-lts-announce/2025/05/msg00015.html" } ], "release_date": "2025-03-04T00:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-05T10:18:09.127648Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1791195487", "product_ids": [ "AlmaLinux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:ruby-default-gems-0:3.0.7-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:ruby-doc-0:3.0.7-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:rubygem-bundler-0:2.2.33-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:rubygem-irb-0:1.3.5-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:rubygem-minitest-0:5.14.2-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-power_assert-0:1.2.1-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:rubygem-rake-0:13.0.3-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-rbs-0:1.4.0-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-rdoc-0:6.3.4.1-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-rexml-0:3.2.5-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-rss-0:0.2.9-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-test-unit-0:3.3.7-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-typeprof-0:0.15.2-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygems-0:3.2.33-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygems-devel-0:3.2.33-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:ruby-default-gems-0:3.0.7-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:ruby-doc-0:3.0.7-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:rubygem-bundler-0:2.2.33-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:rubygem-irb-0:1.3.5-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:rubygem-minitest-0:5.14.2-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-power_assert-0:1.2.1-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:rubygem-rake-0:13.0.3-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-rbs-0:1.4.0-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-rdoc-0:6.3.4.1-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-rexml-0:3.2.5-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-rss-0:0.2.9-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-test-unit-0:3.3.7-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-typeprof-0:0.15.2-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygems-0:3.2.33-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygems-devel-0:3.2.33-168.el9_8.tuxcare.els2.noarch" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1791195487" } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2025-61594", "cwe": { "id": "CWE-200", "name": "Exposure of Sensitive Information to an Unauthorized Actor" }, "notes": [ { "category": "description", "text": "URI is a module providing classes to handle Uniform Resource Identifiers. In versions 0.12.4 and earlier (bundled in Ruby 3.2 series) 0.13.2 and earlier (bundled in Ruby 3.3 series), 1.0.3 and earlier (bundled in Ruby 3.4 series), when using the + operator to combine URIs, sensitive information like passwords from the original URI can be leaked, violating RFC3986 and making applications vulnerable to credential exposure. This is a a bypass for the fix to CVE-2025-27221 that can expose user credentials. This issue has been fixed in versions 0.12.5, 0.13.3 and 1.0.4.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:ruby-default-gems-0:3.0.7-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:ruby-doc-0:3.0.7-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:rubygem-bundler-0:2.2.33-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:rubygem-irb-0:1.3.5-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:rubygem-minitest-0:5.14.2-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-power_assert-0:1.2.1-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:rubygem-rake-0:13.0.3-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-rbs-0:1.4.0-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-rdoc-0:6.3.4.1-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-rexml-0:3.2.5-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-rss-0:0.2.9-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-test-unit-0:3.3.7-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-typeprof-0:0.15.2-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygems-0:3.2.33-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygems-devel-0:3.2.33-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:ruby-default-gems-0:3.0.7-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:ruby-doc-0:3.0.7-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:rubygem-bundler-0:2.2.33-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:rubygem-irb-0:1.3.5-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:rubygem-minitest-0:5.14.2-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-power_assert-0:1.2.1-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:rubygem-rake-0:13.0.3-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-rbs-0:1.4.0-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-rdoc-0:6.3.4.1-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-rexml-0:3.2.5-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-rss-0:0.2.9-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-test-unit-0:3.3.7-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-typeprof-0:0.15.2-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygems-0:3.2.33-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygems-devel-0:3.2.33-168.el9_8.tuxcare.els2.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-61594" }, { "category": "external", "summary": "https://github.com/advisories/GHSA-22h5-pq3x-2gf2", "url": "https://github.com/advisories/GHSA-22h5-pq3x-2gf2" }, { "category": "external", "summary": "https://github.com/ruby/uri/security/advisories/GHSA-j4pr-3wm6-xx2r", "url": "https://github.com/ruby/uri/security/advisories/GHSA-j4pr-3wm6-xx2r" }, { "category": "external", "summary": "https://hackerone.com/reports/2957667", "url": "https://hackerone.com/reports/2957667" }, { "category": "external", "summary": "https://www.ruby-lang.org/en/news/2025/02/26/security-advisories", "url": "https://www.ruby-lang.org/en/news/2025/02/26/security-advisories" } ], "release_date": "2025-12-30T21:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-05T10:18:09.127648Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1791195487", "product_ids": [ "AlmaLinux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:ruby-default-gems-0:3.0.7-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:ruby-doc-0:3.0.7-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:rubygem-bundler-0:2.2.33-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:rubygem-irb-0:1.3.5-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:rubygem-minitest-0:5.14.2-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-power_assert-0:1.2.1-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:rubygem-rake-0:13.0.3-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-rbs-0:1.4.0-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-rdoc-0:6.3.4.1-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-rexml-0:3.2.5-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-rss-0:0.2.9-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-test-unit-0:3.3.7-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-typeprof-0:0.15.2-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygems-0:3.2.33-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygems-devel-0:3.2.33-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:ruby-default-gems-0:3.0.7-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:ruby-doc-0:3.0.7-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:rubygem-bundler-0:2.2.33-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:rubygem-irb-0:1.3.5-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:rubygem-minitest-0:5.14.2-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-power_assert-0:1.2.1-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:rubygem-rake-0:13.0.3-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-rbs-0:1.4.0-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-rdoc-0:6.3.4.1-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-rexml-0:3.2.5-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-rss-0:0.2.9-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-test-unit-0:3.3.7-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-typeprof-0:0.15.2-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygems-0:3.2.33-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygems-devel-0:3.2.33-168.el9_8.tuxcare.els2.noarch" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1791195487" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-42257", "cwe": { "id": "CWE-77", "name": "Improper Neutralization of Special Elements used in a Command ('Command Injection')" }, "notes": [ { "category": "description", "text": "Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby. Prior to versions 0.4.24, 0.5.14, and 0.6.4, several Net::IMAP commands accept a raw string argument that is sent to the server without validation or escaping. If this string is derived from user-controlled input, it may contain contain CRLF sequences, which an attacker can use to inject arbitrary IMAP commands. This issue has been patched in versions 0.4.24, 0.5.14, and 0.6.4.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:ruby-default-gems-0:3.0.7-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:ruby-doc-0:3.0.7-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:rubygem-bundler-0:2.2.33-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:rubygem-irb-0:1.3.5-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:rubygem-minitest-0:5.14.2-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-power_assert-0:1.2.1-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:rubygem-rake-0:13.0.3-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-rbs-0:1.4.0-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-rdoc-0:6.3.4.1-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-rexml-0:3.2.5-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-rss-0:0.2.9-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-test-unit-0:3.3.7-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-typeprof-0:0.15.2-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygems-0:3.2.33-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygems-devel-0:3.2.33-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:ruby-default-gems-0:3.0.7-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:ruby-doc-0:3.0.7-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:rubygem-bundler-0:2.2.33-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:rubygem-irb-0:1.3.5-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:rubygem-minitest-0:5.14.2-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-power_assert-0:1.2.1-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:rubygem-rake-0:13.0.3-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-rbs-0:1.4.0-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-rdoc-0:6.3.4.1-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-rexml-0:3.2.5-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-rss-0:0.2.9-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-test-unit-0:3.3.7-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-typeprof-0:0.15.2-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygems-0:3.2.33-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygems-devel-0:3.2.33-168.el9_8.tuxcare.els2.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-42257" }, { "category": "external", "summary": "https://github.com/ruby/net-imap/releases/tag/v0.4.24", "url": "https://github.com/ruby/net-imap/releases/tag/v0.4.24" }, { "category": "external", "summary": "https://github.com/ruby/net-imap/releases/tag/v0.5.14", "url": "https://github.com/ruby/net-imap/releases/tag/v0.5.14" }, { "category": "external", "summary": "https://github.com/ruby/net-imap/releases/tag/v0.6.4", "url": "https://github.com/ruby/net-imap/releases/tag/v0.6.4" }, { "category": "external", "summary": "https://github.com/ruby/net-imap/security/advisories/GHSA-hm49-wcqc-g2xg", "url": "https://github.com/ruby/net-imap/security/advisories/GHSA-hm49-wcqc-g2xg" } ], "release_date": "2026-05-09T20:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-05T10:18:09.127648Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1791195487", "product_ids": [ "AlmaLinux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:ruby-default-gems-0:3.0.7-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:ruby-doc-0:3.0.7-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:rubygem-bundler-0:2.2.33-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:rubygem-irb-0:1.3.5-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:rubygem-minitest-0:5.14.2-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-power_assert-0:1.2.1-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:rubygem-rake-0:13.0.3-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-rbs-0:1.4.0-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-rdoc-0:6.3.4.1-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-rexml-0:3.2.5-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-rss-0:0.2.9-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-test-unit-0:3.3.7-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-typeprof-0:0.15.2-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygems-0:3.2.33-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygems-devel-0:3.2.33-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:ruby-default-gems-0:3.0.7-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:ruby-doc-0:3.0.7-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:rubygem-bundler-0:2.2.33-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:rubygem-irb-0:1.3.5-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:rubygem-minitest-0:5.14.2-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-power_assert-0:1.2.1-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:rubygem-rake-0:13.0.3-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-rbs-0:1.4.0-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-rdoc-0:6.3.4.1-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-rexml-0:3.2.5-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-rss-0:0.2.9-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-test-unit-0:3.3.7-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-typeprof-0:0.15.2-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygems-0:3.2.33-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygems-devel-0:3.2.33-168.el9_8.tuxcare.els2.noarch" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1791195487" } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2024-35176", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "notes": [ { "category": "description", "text": " REXML is an XML toolkit for Ruby. The REXML gem before 3.2.6 has a denial of service vulnerability when it parses an XML that has many `<`s in an attribute value. Those who need to parse untrusted XMLs may be impacted to this vulnerability. The REXML gem 3.2.7 or later include the patch to fix this vulnerability. As a workaround, don't parse untrusted XMLs.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:ruby-default-gems-0:3.0.7-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:ruby-doc-0:3.0.7-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:rubygem-bundler-0:2.2.33-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:rubygem-irb-0:1.3.5-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:rubygem-minitest-0:5.14.2-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-power_assert-0:1.2.1-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:rubygem-rake-0:13.0.3-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-rbs-0:1.4.0-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-rdoc-0:6.3.4.1-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-rexml-0:3.2.5-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-rss-0:0.2.9-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-test-unit-0:3.3.7-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-typeprof-0:0.15.2-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygems-0:3.2.33-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygems-devel-0:3.2.33-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:ruby-default-gems-0:3.0.7-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:ruby-doc-0:3.0.7-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:rubygem-bundler-0:2.2.33-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:rubygem-irb-0:1.3.5-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:rubygem-minitest-0:5.14.2-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-power_assert-0:1.2.1-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:rubygem-rake-0:13.0.3-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-rbs-0:1.4.0-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-rdoc-0:6.3.4.1-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-rexml-0:3.2.5-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-rss-0:0.2.9-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-test-unit-0:3.3.7-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-typeprof-0:0.15.2-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygems-0:3.2.33-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygems-devel-0:3.2.33-168.el9_8.tuxcare.els2.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2024-35176" }, { "category": "external", "summary": "https://github.com/ruby/rexml/commit/4325835f92f3f142ebd91a3fdba4e1f1ab7f1cfb", "url": "https://github.com/ruby/rexml/commit/4325835f92f3f142ebd91a3fdba4e1f1ab7f1cfb" }, { "category": "external", "summary": "https://github.com/ruby/rexml/security/advisories/GHSA-vg3r-rm7w-2xgh", "url": "https://github.com/ruby/rexml/security/advisories/GHSA-vg3r-rm7w-2xgh" }, { "category": "external", "summary": "https://www.ruby-lang.org/en/news/2024/05/16/dos-rexml-cve-2024-35176", "url": "https://www.ruby-lang.org/en/news/2024/05/16/dos-rexml-cve-2024-35176" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/01/msg00011.html", "url": "https://lists.debian.org/debian-lts-announce/2025/01/msg00011.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20250306-0001/", "url": "https://security.netapp.com/advisory/ntap-20250306-0001/" } ], "release_date": "2024-05-16T16:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-05T10:18:09.127648Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1791195487", "product_ids": [ "AlmaLinux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:ruby-default-gems-0:3.0.7-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:ruby-doc-0:3.0.7-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:rubygem-bundler-0:2.2.33-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:rubygem-irb-0:1.3.5-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:rubygem-minitest-0:5.14.2-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-power_assert-0:1.2.1-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:rubygem-rake-0:13.0.3-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-rbs-0:1.4.0-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-rdoc-0:6.3.4.1-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-rexml-0:3.2.5-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-rss-0:0.2.9-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-test-unit-0:3.3.7-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-typeprof-0:0.15.2-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygems-0:3.2.33-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygems-devel-0:3.2.33-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:ruby-default-gems-0:3.0.7-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:ruby-doc-0:3.0.7-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:rubygem-bundler-0:2.2.33-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:rubygem-irb-0:1.3.5-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:rubygem-minitest-0:5.14.2-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-power_assert-0:1.2.1-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:rubygem-rake-0:13.0.3-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-rbs-0:1.4.0-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-rdoc-0:6.3.4.1-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-rexml-0:3.2.5-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-rss-0:0.2.9-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-test-unit-0:3.3.7-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-typeprof-0:0.15.2-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygems-0:3.2.33-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygems-devel-0:3.2.33-168.el9_8.tuxcare.els2.noarch" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1791195487" } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2026-47241", "cwe": { "id": "CWE-162", "name": "Improper Neutralization of Trailing Special Elements" }, "notes": [ { "category": "description", "text": "Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby. Prior to 0.6.5 and 0.5.15, several Net::IMAP commands accept a raw string argument which is only validated to prevent CRLF injection and then sent verbatim. If this string is derived from user-controlled input, an attacker can force the next command to be absorbed as a continuation of the first command. This will cause the first command to eventually fail, but also prevents it from returning until another command is sent (from another thread). That other command will not return until the connection is closed. This vulnerability is fixed in 0.6.5 and 0.5.15.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:ruby-default-gems-0:3.0.7-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:ruby-doc-0:3.0.7-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:rubygem-bundler-0:2.2.33-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:rubygem-irb-0:1.3.5-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:rubygem-minitest-0:5.14.2-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-power_assert-0:1.2.1-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:rubygem-rake-0:13.0.3-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-rbs-0:1.4.0-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-rdoc-0:6.3.4.1-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-rexml-0:3.2.5-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-rss-0:0.2.9-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-test-unit-0:3.3.7-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-typeprof-0:0.15.2-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygems-0:3.2.33-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygems-devel-0:3.2.33-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:ruby-default-gems-0:3.0.7-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:ruby-doc-0:3.0.7-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:rubygem-bundler-0:2.2.33-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:rubygem-irb-0:1.3.5-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:rubygem-minitest-0:5.14.2-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-power_assert-0:1.2.1-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:rubygem-rake-0:13.0.3-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-rbs-0:1.4.0-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-rdoc-0:6.3.4.1-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-rexml-0:3.2.5-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-rss-0:0.2.9-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-test-unit-0:3.3.7-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-typeprof-0:0.15.2-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygems-0:3.2.33-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygems-devel-0:3.2.33-168.el9_8.tuxcare.els2.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-47241" }, { "category": "external", "summary": "https://github.com/ruby/net-imap/security/advisories/GHSA-c4fp-cxrr-mj66", "url": "https://github.com/ruby/net-imap/security/advisories/GHSA-c4fp-cxrr-mj66" } ], "release_date": "2026-06-22T21:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-05T10:18:09.127648Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1791195487", "product_ids": [ "AlmaLinux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:ruby-default-gems-0:3.0.7-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:ruby-doc-0:3.0.7-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:rubygem-bundler-0:2.2.33-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:rubygem-irb-0:1.3.5-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:rubygem-minitest-0:5.14.2-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-power_assert-0:1.2.1-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:rubygem-rake-0:13.0.3-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-rbs-0:1.4.0-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-rdoc-0:6.3.4.1-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-rexml-0:3.2.5-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-rss-0:0.2.9-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-test-unit-0:3.3.7-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-typeprof-0:0.15.2-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygems-0:3.2.33-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygems-devel-0:3.2.33-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:ruby-default-gems-0:3.0.7-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:ruby-doc-0:3.0.7-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:rubygem-bundler-0:2.2.33-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:rubygem-irb-0:1.3.5-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:rubygem-minitest-0:5.14.2-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-power_assert-0:1.2.1-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:rubygem-rake-0:13.0.3-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-rbs-0:1.4.0-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-rdoc-0:6.3.4.1-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-rexml-0:3.2.5-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-rss-0:0.2.9-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-test-unit-0:3.3.7-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-typeprof-0:0.15.2-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygems-0:3.2.33-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygems-devel-0:3.2.33-168.el9_8.tuxcare.els2.noarch" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1791195487" } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2024-43398", "cwe": { "id": "CWE-776", "name": "Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')" }, "notes": [ { "category": "description", "text": "REXML is an XML toolkit for Ruby. The REXML gem before 3.3.6 has a DoS vulnerability when it parses an XML that has many deep elements that have same local name attributes. If you need to parse untrusted XMLs with tree parser API like REXML::Document.new, you may be impacted to this vulnerability. If you use other parser APIs such as stream parser API and SAX2 parser API, this vulnerability is not affected. The REXML gem 3.3.6 or later include the patch to fix the vulnerability.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:ruby-default-gems-0:3.0.7-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:ruby-doc-0:3.0.7-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:rubygem-bundler-0:2.2.33-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:rubygem-irb-0:1.3.5-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:rubygem-minitest-0:5.14.2-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-power_assert-0:1.2.1-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:rubygem-rake-0:13.0.3-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-rbs-0:1.4.0-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-rdoc-0:6.3.4.1-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-rexml-0:3.2.5-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-rss-0:0.2.9-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-test-unit-0:3.3.7-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-typeprof-0:0.15.2-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygems-0:3.2.33-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygems-devel-0:3.2.33-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:ruby-default-gems-0:3.0.7-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:ruby-doc-0:3.0.7-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:rubygem-bundler-0:2.2.33-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:rubygem-irb-0:1.3.5-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:rubygem-minitest-0:5.14.2-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-power_assert-0:1.2.1-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:rubygem-rake-0:13.0.3-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-rbs-0:1.4.0-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-rdoc-0:6.3.4.1-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-rexml-0:3.2.5-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-rss-0:0.2.9-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-test-unit-0:3.3.7-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-typeprof-0:0.15.2-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygems-0:3.2.33-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygems-devel-0:3.2.33-168.el9_8.tuxcare.els2.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2024-43398" }, { "category": "external", "summary": "https://github.com/ruby/rexml/releases/tag/v3.3.6", "url": "https://github.com/ruby/rexml/releases/tag/v3.3.6" }, { "category": "external", "summary": "https://github.com/ruby/rexml/security/advisories/GHSA-vmwr-mc7x-5vc3", "url": "https://github.com/ruby/rexml/security/advisories/GHSA-vmwr-mc7x-5vc3" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/01/msg00011.html", "url": "https://lists.debian.org/debian-lts-announce/2025/01/msg00011.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20250103-0006/", "url": "https://security.netapp.com/advisory/ntap-20250103-0006/" } ], "release_date": "2024-08-22T15:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-05T10:18:09.127648Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1791195487", "product_ids": [ "AlmaLinux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:ruby-default-gems-0:3.0.7-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:ruby-doc-0:3.0.7-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:rubygem-bundler-0:2.2.33-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:rubygem-irb-0:1.3.5-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:rubygem-minitest-0:5.14.2-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-power_assert-0:1.2.1-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:rubygem-rake-0:13.0.3-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-rbs-0:1.4.0-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-rdoc-0:6.3.4.1-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-rexml-0:3.2.5-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-rss-0:0.2.9-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-test-unit-0:3.3.7-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-typeprof-0:0.15.2-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygems-0:3.2.33-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygems-devel-0:3.2.33-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:ruby-default-gems-0:3.0.7-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:ruby-doc-0:3.0.7-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:rubygem-bundler-0:2.2.33-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:rubygem-irb-0:1.3.5-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:rubygem-minitest-0:5.14.2-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-power_assert-0:1.2.1-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:rubygem-rake-0:13.0.3-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-rbs-0:1.4.0-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-rdoc-0:6.3.4.1-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-rexml-0:3.2.5-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-rss-0:0.2.9-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-test-unit-0:3.3.7-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-typeprof-0:0.15.2-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygems-0:3.2.33-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygems-devel-0:3.2.33-168.el9_8.tuxcare.els2.noarch" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1791195487" } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2024-41946", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "notes": [ { "category": "description", "text": "REXML is an XML toolkit for Ruby. The REXML gem 3.3.2 has a DoS vulnerability when it parses an XML that has many entity expansions with SAX2 or pull parser API. The REXML gem 3.3.3 or later include the patch to fix the vulnerability.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:ruby-default-gems-0:3.0.7-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:ruby-doc-0:3.0.7-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:rubygem-bundler-0:2.2.33-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:rubygem-irb-0:1.3.5-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:rubygem-minitest-0:5.14.2-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-power_assert-0:1.2.1-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:rubygem-rake-0:13.0.3-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-rbs-0:1.4.0-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-rdoc-0:6.3.4.1-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-rexml-0:3.2.5-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-rss-0:0.2.9-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-test-unit-0:3.3.7-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-typeprof-0:0.15.2-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygems-0:3.2.33-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygems-devel-0:3.2.33-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:ruby-default-gems-0:3.0.7-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:ruby-doc-0:3.0.7-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:rubygem-bundler-0:2.2.33-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:rubygem-irb-0:1.3.5-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:rubygem-minitest-0:5.14.2-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-power_assert-0:1.2.1-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:rubygem-rake-0:13.0.3-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-rbs-0:1.4.0-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-rdoc-0:6.3.4.1-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-rexml-0:3.2.5-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-rss-0:0.2.9-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-test-unit-0:3.3.7-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-typeprof-0:0.15.2-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygems-0:3.2.33-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygems-devel-0:3.2.33-168.el9_8.tuxcare.els2.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2024-41946" }, { "category": "external", "summary": "https://github.com/ruby/rexml/commit/033d1909a8f259d5a7c53681bcaf14f13bcf0368", "url": "https://github.com/ruby/rexml/commit/033d1909a8f259d5a7c53681bcaf14f13bcf0368" }, { "category": "external", "summary": "https://github.com/ruby/rexml/security/advisories/GHSA-5866-49gr-22v4", "url": "https://github.com/ruby/rexml/security/advisories/GHSA-5866-49gr-22v4" }, { "category": "external", "summary": "https://www.ruby-lang.org/en/news/2008/08/23/dos-vulnerability-in-rexml", "url": "https://www.ruby-lang.org/en/news/2008/08/23/dos-vulnerability-in-rexml" }, { "category": "external", "summary": "https://www.ruby-lang.org/en/news/2024/08/01/dos-rexml-cve-2024-41946", "url": "https://www.ruby-lang.org/en/news/2024/08/01/dos-rexml-cve-2024-41946" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/01/msg00011.html", "url": "https://lists.debian.org/debian-lts-announce/2025/01/msg00011.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20250117-0007/", "url": "https://security.netapp.com/advisory/ntap-20250117-0007/" } ], "release_date": "2024-08-01T15:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-05T10:18:09.127648Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1791195487", "product_ids": [ "AlmaLinux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:ruby-default-gems-0:3.0.7-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:ruby-doc-0:3.0.7-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:rubygem-bundler-0:2.2.33-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:rubygem-irb-0:1.3.5-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:rubygem-minitest-0:5.14.2-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-power_assert-0:1.2.1-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:rubygem-rake-0:13.0.3-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-rbs-0:1.4.0-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-rdoc-0:6.3.4.1-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-rexml-0:3.2.5-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-rss-0:0.2.9-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-test-unit-0:3.3.7-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-typeprof-0:0.15.2-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygems-0:3.2.33-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygems-devel-0:3.2.33-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:ruby-default-gems-0:3.0.7-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:ruby-doc-0:3.0.7-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:rubygem-bundler-0:2.2.33-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:rubygem-irb-0:1.3.5-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:rubygem-minitest-0:5.14.2-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-power_assert-0:1.2.1-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:rubygem-rake-0:13.0.3-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-rbs-0:1.4.0-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-rdoc-0:6.3.4.1-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-rexml-0:3.2.5-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-rss-0:0.2.9-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-test-unit-0:3.3.7-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-typeprof-0:0.15.2-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygems-0:3.2.33-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygems-devel-0:3.2.33-168.el9_8.tuxcare.els2.noarch" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1791195487" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-47240", "cwe": { "id": "CWE-77", "name": "Improper Neutralization of Special Elements used in a Command ('Command Injection')" }, "notes": [ { "category": "description", "text": "Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby. Prior to 0.6.5 and 0.5.15, several Net::IMAP commands accept a \"raw data\" argument that is sent verbatim after validation to prevent command injection. However, if a server does not support non-synchronizing literals, it may still be possible to inject arbitrary IMAP commands inside non-synchronizing literals. A server without support for non-synchronizing literals may interpret the \"+}\\r\\n\" as the end of a malformed command line and respond with a tagged BAD. In that case, the contents of the literal will be interpreted as one or more new pipelined commands, allowing a CRLF command injection attack to succeed. This affects criteria for #search and #uid_search; search_keys for #sort, #thread, #uid_sort, and #uid_thread; and attr for #fetch and #uid_fetch. This vulnerability is fixed in 0.6.5 and 0.5.15.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:ruby-default-gems-0:3.0.7-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:ruby-doc-0:3.0.7-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:rubygem-bundler-0:2.2.33-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:rubygem-irb-0:1.3.5-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:rubygem-minitest-0:5.14.2-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-power_assert-0:1.2.1-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:rubygem-rake-0:13.0.3-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-rbs-0:1.4.0-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-rdoc-0:6.3.4.1-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-rexml-0:3.2.5-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-rss-0:0.2.9-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-test-unit-0:3.3.7-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-typeprof-0:0.15.2-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygems-0:3.2.33-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygems-devel-0:3.2.33-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:ruby-default-gems-0:3.0.7-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:ruby-doc-0:3.0.7-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:rubygem-bundler-0:2.2.33-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:rubygem-irb-0:1.3.5-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:rubygem-minitest-0:5.14.2-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-power_assert-0:1.2.1-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:rubygem-rake-0:13.0.3-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-rbs-0:1.4.0-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-rdoc-0:6.3.4.1-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-rexml-0:3.2.5-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-rss-0:0.2.9-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-test-unit-0:3.3.7-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-typeprof-0:0.15.2-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygems-0:3.2.33-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygems-devel-0:3.2.33-168.el9_8.tuxcare.els2.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-47240" }, { "category": "external", "summary": "https://github.com/ruby/net-imap/security/advisories/GHSA-8p34-64r3-mwg8", "url": "https://github.com/ruby/net-imap/security/advisories/GHSA-8p34-64r3-mwg8" } ], "release_date": "2026-06-22T21:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-05T10:18:09.127648Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1791195487", "product_ids": [ "AlmaLinux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:ruby-default-gems-0:3.0.7-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:ruby-doc-0:3.0.7-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:rubygem-bundler-0:2.2.33-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:rubygem-irb-0:1.3.5-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:rubygem-minitest-0:5.14.2-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-power_assert-0:1.2.1-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:rubygem-rake-0:13.0.3-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-rbs-0:1.4.0-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-rdoc-0:6.3.4.1-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-rexml-0:3.2.5-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-rss-0:0.2.9-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-test-unit-0:3.3.7-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-typeprof-0:0.15.2-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygems-0:3.2.33-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygems-devel-0:3.2.33-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:ruby-default-gems-0:3.0.7-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:ruby-doc-0:3.0.7-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:rubygem-bundler-0:2.2.33-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:rubygem-irb-0:1.3.5-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:rubygem-minitest-0:5.14.2-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-power_assert-0:1.2.1-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:rubygem-rake-0:13.0.3-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-rbs-0:1.4.0-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-rdoc-0:6.3.4.1-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-rexml-0:3.2.5-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-rss-0:0.2.9-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-test-unit-0:3.3.7-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-typeprof-0:0.15.2-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygems-0:3.2.33-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygems-devel-0:3.2.33-168.el9_8.tuxcare.els2.noarch" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1791195487" } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2024-41123", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "notes": [ { "category": "description", "text": "REXML is an XML toolkit for Ruby. The REXML gem before 3.3.2 has some DoS vulnerabilities when it parses an XML that has many specific characters such as whitespace character, `>]` and `]>`. The REXML gem 3.3.3 or later include the patches to fix these vulnerabilities.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:ruby-default-gems-0:3.0.7-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:ruby-doc-0:3.0.7-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:rubygem-bundler-0:2.2.33-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:rubygem-irb-0:1.3.5-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:rubygem-minitest-0:5.14.2-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-power_assert-0:1.2.1-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:rubygem-rake-0:13.0.3-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-rbs-0:1.4.0-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-rdoc-0:6.3.4.1-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-rexml-0:3.2.5-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-rss-0:0.2.9-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-test-unit-0:3.3.7-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-typeprof-0:0.15.2-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygems-0:3.2.33-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygems-devel-0:3.2.33-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:ruby-default-gems-0:3.0.7-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:ruby-doc-0:3.0.7-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:rubygem-bundler-0:2.2.33-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:rubygem-irb-0:1.3.5-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:rubygem-minitest-0:5.14.2-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-power_assert-0:1.2.1-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:rubygem-rake-0:13.0.3-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-rbs-0:1.4.0-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-rdoc-0:6.3.4.1-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-rexml-0:3.2.5-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-rss-0:0.2.9-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-test-unit-0:3.3.7-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-typeprof-0:0.15.2-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygems-0:3.2.33-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygems-devel-0:3.2.33-168.el9_8.tuxcare.els2.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2024-41123" }, { "category": "external", "summary": "https://github.com/ruby/rexml/security/advisories/GHSA-4xqq-m2hx-25v8", "url": "https://github.com/ruby/rexml/security/advisories/GHSA-4xqq-m2hx-25v8" }, { "category": "external", "summary": "https://github.com/ruby/rexml/security/advisories/GHSA-r55c-59qm-vjw6", "url": "https://github.com/ruby/rexml/security/advisories/GHSA-r55c-59qm-vjw6" }, { "category": "external", "summary": "https://github.com/ruby/rexml/security/advisories/GHSA-vg3r-rm7w-2xgh", "url": "https://github.com/ruby/rexml/security/advisories/GHSA-vg3r-rm7w-2xgh" }, { "category": "external", "summary": "https://www.ruby-lang.org/en/news/2024/08/01/dos-rexml-cve-2024-41123", "url": "https://www.ruby-lang.org/en/news/2024/08/01/dos-rexml-cve-2024-41123" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/01/msg00011.html", "url": "https://lists.debian.org/debian-lts-announce/2025/01/msg00011.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20241227-0005/", "url": "https://security.netapp.com/advisory/ntap-20241227-0005/" } ], "release_date": "2024-08-01T15:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-05T10:18:09.127648Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1791195487", "product_ids": [ "AlmaLinux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:ruby-default-gems-0:3.0.7-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:ruby-doc-0:3.0.7-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:rubygem-bundler-0:2.2.33-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:rubygem-irb-0:1.3.5-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:rubygem-minitest-0:5.14.2-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-power_assert-0:1.2.1-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:rubygem-rake-0:13.0.3-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-rbs-0:1.4.0-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-rdoc-0:6.3.4.1-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-rexml-0:3.2.5-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-rss-0:0.2.9-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-test-unit-0:3.3.7-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-typeprof-0:0.15.2-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygems-0:3.2.33-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygems-devel-0:3.2.33-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:ruby-default-gems-0:3.0.7-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:ruby-doc-0:3.0.7-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:rubygem-bundler-0:2.2.33-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:rubygem-irb-0:1.3.5-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:rubygem-minitest-0:5.14.2-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-power_assert-0:1.2.1-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:rubygem-rake-0:13.0.3-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-rbs-0:1.4.0-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-rdoc-0:6.3.4.1-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-rexml-0:3.2.5-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-rss-0:0.2.9-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-test-unit-0:3.3.7-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-typeprof-0:0.15.2-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygems-0:3.2.33-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygems-devel-0:3.2.33-168.el9_8.tuxcare.els2.noarch" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1791195487" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2024-39908", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "notes": [ { "category": "description", "text": " REXML is an XML toolkit for Ruby. The REXML gem before 3.3.1 has some DoS vulnerabilities when it parses an XML that has many specific characters such as `<`, `0` and `%>`. If you need to parse untrusted XMLs, you many be impacted to these vulnerabilities. The REXML gem 3.3.2 or later include the patches to fix these vulnerabilities. Users are advised to upgrade. Users unable to upgrade should avoid parsing untrusted XML strings.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:ruby-default-gems-0:3.0.7-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:ruby-doc-0:3.0.7-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:rubygem-bundler-0:2.2.33-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:rubygem-irb-0:1.3.5-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:rubygem-minitest-0:5.14.2-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-power_assert-0:1.2.1-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:rubygem-rake-0:13.0.3-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-rbs-0:1.4.0-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-rdoc-0:6.3.4.1-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-rexml-0:3.2.5-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-rss-0:0.2.9-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-test-unit-0:3.3.7-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-typeprof-0:0.15.2-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygems-0:3.2.33-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygems-devel-0:3.2.33-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:ruby-default-gems-0:3.0.7-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:ruby-doc-0:3.0.7-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:rubygem-bundler-0:2.2.33-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:rubygem-irb-0:1.3.5-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:rubygem-minitest-0:5.14.2-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-power_assert-0:1.2.1-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:rubygem-rake-0:13.0.3-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-rbs-0:1.4.0-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-rdoc-0:6.3.4.1-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-rexml-0:3.2.5-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-rss-0:0.2.9-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-test-unit-0:3.3.7-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-typeprof-0:0.15.2-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygems-0:3.2.33-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygems-devel-0:3.2.33-168.el9_8.tuxcare.els2.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2024-39908" }, { "category": "external", "summary": "https://github.com/ruby/rexml/security/advisories/GHSA-4xqq-m2hx-25v8", "url": "https://github.com/ruby/rexml/security/advisories/GHSA-4xqq-m2hx-25v8" }, { "category": "external", "summary": "https://www.ruby-lang.org/en/news/2024/07/16/dos-rexml-cve-2024-39908", "url": "https://www.ruby-lang.org/en/news/2024/07/16/dos-rexml-cve-2024-39908" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/01/msg00011.html", "url": "https://lists.debian.org/debian-lts-announce/2025/01/msg00011.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20250117-0008/", "url": "https://security.netapp.com/advisory/ntap-20250117-0008/" } ], "release_date": "2024-07-16T18:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-05T10:18:09.127648Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1791195487", "product_ids": [ "AlmaLinux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:ruby-default-gems-0:3.0.7-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:ruby-doc-0:3.0.7-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:rubygem-bundler-0:2.2.33-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:rubygem-irb-0:1.3.5-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:rubygem-minitest-0:5.14.2-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-power_assert-0:1.2.1-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:rubygem-rake-0:13.0.3-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-rbs-0:1.4.0-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-rdoc-0:6.3.4.1-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-rexml-0:3.2.5-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-rss-0:0.2.9-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-test-unit-0:3.3.7-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygem-typeprof-0:0.15.2-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygems-0:3.2.33-168.el9_8.tuxcare.els2.noarch", "AlmaLinux-9.8:rubygems-devel-0:3.2.33-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:ruby-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:ruby-default-gems-0:3.0.7-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:ruby-devel-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:ruby-doc-0:3.0.7-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:ruby-libs-0:3.0.7-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:rubygem-bigdecimal-0:3.0.0-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:rubygem-bundler-0:2.2.33-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:rubygem-io-console-0:0.5.7-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:rubygem-irb-0:1.3.5-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:rubygem-json-0:2.5.1-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:rubygem-minitest-0:5.14.2-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-power_assert-0:1.2.1-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:rubygem-psych-0:3.3.2-168.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:rubygem-rake-0:13.0.3-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-rbs-0:1.4.0-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-rdoc-0:6.3.4.1-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-rexml-0:3.2.5-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-rss-0:0.2.9-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-test-unit-0:3.3.7-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygem-typeprof-0:0.15.2-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygems-0:3.2.33-168.el9_8.tuxcare.els2.noarch", "Rocky Linux-9.8:rubygems-devel-0:3.2.33-168.el9_8.tuxcare.els2.noarch" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1791195487" } ], "threats": [ { "category": "impact", "details": "Critical" } ] } ] }