[CLSA-2026:1781274103] alt-ruby30: Fix of 3 CVEs
Type:
security
Severity:
Important
Release date:
2026-06-12 14:22:15 UTC
Description:
- CVE-2025-27219: cgi DoS via super-linear cookie merge in CGI::Cookie.parse. - CVE-2025-27220: cgi ReDoS in CGI::Util#escapeElement / #unescapeElement. - CVE-2025-61594: uri credential leak when combining URIs with + (CVE-2025-27221 bypass).
CVEs fixed:
Updated packages:
  • alt-ruby30-3.0.7-172.el10.x86_64.rpm
    sha:35d5b01a635d771902fd9ffb74272bafa349c8b145c1e3bcc57db412d6e89a6f
  • alt-ruby30-default-gems-3.0.7-172.el10.noarch.rpm
    sha:1c1e2de4a0a64de26de7c5dd2386fca730a97529f1358cb33c3d660227be7de4
  • alt-ruby30-devel-3.0.7-172.el10.x86_64.rpm
    sha:979eceb46c1a108caa2f32d6a015bd0eff6fb37d9f97b94b7bb6c29e05a26fce
  • alt-ruby30-doc-3.0.7-172.el10.noarch.rpm
    sha:80260dd107402e5e84343d28b5f7eb492feeb4512cc20915748a719d12d0ef03
  • alt-ruby30-libs-3.0.7-172.el10.x86_64.rpm
    sha:2e72c8f6522a5bf70f9f6872d5fe4cca9e38d9c649f705d1cb4cc57000d591d1
  • alt-ruby30-rubygem-bigdecimal-3.0.0-172.el10.x86_64.rpm
    sha:62d26ad3da3b009ce961c14c69855c3938e9498e86da5b84be43492a26c83f20
  • alt-ruby30-rubygem-bundler-2.2.33-172.el10.noarch.rpm
    sha:a44ece438ce0c0c732a80c9673aa72a29878549347e711e6536cebd445f25395
  • alt-ruby30-rubygem-io-console-0.5.7-172.el10.x86_64.rpm
    sha:753ea72a47db7a14f2829acbef9f9098f6837b9411530c66ed5174099c6d28d0
  • alt-ruby30-rubygem-irb-1.3.5-172.el10.noarch.rpm
    sha:84ea6f64a38245b0e8dc19e037391f412328dd55b9c13774f33ec3a41ca02913
  • alt-ruby30-rubygem-json-2.5.1-172.el10.x86_64.rpm
    sha:74fe953a2dc265ece2eeb212223d113f82e9e22eb1b289e7bb564193637d3bfe
  • alt-ruby30-rubygem-minitest-5.14.2-172.el10.noarch.rpm
    sha:fb407deba2dce37abe6622c5713025d320579241ec12f74beaa5276be02f1eb0
  • alt-ruby30-rubygem-power_assert-1.2.1-172.el10.noarch.rpm
    sha:0fd219b99b12be2da92bea6d3c99a0b9651b3ff3c2a5770d770928e366e67dfd
  • alt-ruby30-rubygem-psych-3.3.2-172.el10.x86_64.rpm
    sha:fa6a956b32dbb53c7c80de0584bba50dcf7e6eb770736cc1479c8be3a81891e1
  • alt-ruby30-rubygem-rake-13.0.3-172.el10.noarch.rpm
    sha:f068d6351836507604b6e7d7e2ca462059769fd4c8a1673f00de0d3768afd5fd
  • alt-ruby30-rubygem-rbs-1.4.0-172.el10.noarch.rpm
    sha:5f8fb07fc14ed4ce42fa4232916972dc752bf77c7b3d2eae66a351579d29bb5b
  • alt-ruby30-rubygem-rdoc-6.3.4.1-172.el10.noarch.rpm
    sha:eabc0b83ca532b51766b26a47689a6ebc8c580afc453999b109c1b84e472cd32
  • alt-ruby30-rubygem-rexml-3.2.5-172.el10.noarch.rpm
    sha:7c4e5c48bbe15eccf10862c22a5454948f327daef2cdcd5b1840bceac8904f64
  • alt-ruby30-rubygem-rss-0.2.9-172.el10.noarch.rpm
    sha:1813b16b587899f40ca3a2c2e2eb948747db2ef692be89d206d3f714d3ace1a3
  • alt-ruby30-rubygem-test-unit-3.3.7-172.el10.noarch.rpm
    sha:27677b3e7050985cfda9e652ecc1bee8e494003cda7482447d17c07005813794
  • alt-ruby30-rubygem-typeprof-0.15.2-172.el10.noarch.rpm
    sha:83175e635ce92710c20a1709d2ca7624488c66a9b1b0bedf8617e2c74cd678ac
  • alt-ruby30-rubygems-3.2.33-172.el10.noarch.rpm
    sha:6c3b0a56df2cb2ce235bd7484d22a655ef946958ff16644be5d33c97864e27a7
  • alt-ruby30-rubygems-devel-3.2.33-172.el10.noarch.rpm
    sha:9498305b304205e4d92587b1e0c2d5d948f484501dee661b72e5527d72671152
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.