[CLSA-2026:1781104369] alt-ruby31: Fix of 2 CVEs
Type:
security
Severity:
Critical
Release date:
2026-06-10 15:13:10 UTC
Description:
- CVE-2025-58767: rexml denial of service via multiple xml declarations - CVE-2026-27820: fix heap buffer overflow in Zlib::GzipReader#ungetc by making the gzip output buffer expansion unconditional in zstream_buffer_ungets()
CVEs fixed:
Updated packages:
  • alt-ruby31-3.1.7-10.el9.x86_64.rpm
    sha:c7edeb50e2745b4026d3e46453ca06f1dc70ae6cf3bdd8aaeeb3b258344bd194
  • alt-ruby31-bundled-gems-3.1.7-10.el9.x86_64.rpm
    sha:f5b1d147b35f8280c8611aeb809b5f3dcde4078394f183c1c7e18566856b229a
  • alt-ruby31-default-gems-3.1.7-10.el9.noarch.rpm
    sha:09951734de3786727474b94ce7c8721cc91ac53ef587b2e54043df716d441f44
  • alt-ruby31-devel-3.1.7-10.el9.x86_64.rpm
    sha:8c6e7d631c42a7fb19da5304a72f1310002a41636a3b8dffb4fc59c1aa9b175d
  • alt-ruby31-doc-3.1.7-10.el9.noarch.rpm
    sha:331aed3be976fbb3dc4e0b115e4b140dba53b1b28de5dc3c9969bdcaac59c6b1
  • alt-ruby31-libs-3.1.7-10.el9.x86_64.rpm
    sha:20cad5e3fa0a3c178602a1bee9beff4e1609d1ca77a9a795f2cb55fa9442e181
  • alt-ruby31-rubygem-bigdecimal-3.1.1-10.el9.x86_64.rpm
    sha:1740ccdfc150c91cceb8fb2127404b234af45490ad0a13ae4d56a504c874a9e3
  • alt-ruby31-rubygem-bundler-2.3.27-10.el9.noarch.rpm
    sha:e703b4a7166a5d9771ff080c8943038c3ed4d960319394d845441bf15b4c7abd
  • alt-ruby31-rubygem-io-console-0.5.11-10.el9.x86_64.rpm
    sha:53dd4c80b62e72b34aaa0eb6ab333690729b15682e7664561e825552206021fe
  • alt-ruby31-rubygem-irb-1.4.1-10.el9.noarch.rpm
    sha:1391fe5fa037edb871e32ac87e1117f5583675767d563610ff55e34c702dbb27
  • alt-ruby31-rubygem-json-2.6.1-10.el9.x86_64.rpm
    sha:93b1b5c6cc4af3d4bc7a12cf2170a63a92ef6458e21c3aae817d49b8800cdb6d
  • alt-ruby31-rubygem-minitest-5.15.0-10.el9.noarch.rpm
    sha:9339d6654456d8a576f2a27b5e26900aed695a3128baec7dd455f85924ce9e9a
  • alt-ruby31-rubygem-power_assert-2.0.1-10.el9.noarch.rpm
    sha:a79c68c4d05078eaa5813ba048b8145fd97715f6ac83184601b3d7d463d66729
  • alt-ruby31-rubygem-psych-4.0.4-10.el9.x86_64.rpm
    sha:c16287e2188f6656e8850291e630f93adb10e23acc0c526c5564c9f1f7616bc0
  • alt-ruby31-rubygem-rake-13.0.6-10.el9.noarch.rpm
    sha:c88d87a4c5cbb5e4628cc584b48d9c0ab391d46ddc00a3c5b1efdc6710259df7
  • alt-ruby31-rubygem-rbs-2.7.0-10.el9.x86_64.rpm
    sha:95edbe86fa54f6dd647f54e70a5b8962305d7d6068997b47b9ef64a226354cd4
  • alt-ruby31-rubygem-rdoc-6.4.1.1-10.el9.noarch.rpm
    sha:5e58bed422c685c72f11be13cd94c40234d44e5523ba805ca73758fe7394b7a2
  • alt-ruby31-rubygem-rexml-3.3.9-10.el9.noarch.rpm
    sha:263ec19dfcbd5a4525d3af0303a1cd991086572358b1f1443da31ba7752117c3
  • alt-ruby31-rubygem-rss-0.3.1-10.el9.noarch.rpm
    sha:c7703f24266a632d07dfd75a1cf5039373fd9b1d8e3b9c09874a55a7435a0075
  • alt-ruby31-rubygem-test-unit-3.5.3-10.el9.noarch.rpm
    sha:158faf16e7aa7e51025749473df1c48f0f67ceb6915cddfff30a732d5af4405a
  • alt-ruby31-rubygem-typeprof-0.21.3-10.el9.noarch.rpm
    sha:79da690628d9c40e396370482f4c9006d093488b2e291e1852f11be79088471f
  • alt-ruby31-rubygems-3.3.27-10.el9.noarch.rpm
    sha:95a89a548d8d987adb0f35e622426ad3a05f5763b9cafaad6b9791ca92ebb74f
  • alt-ruby31-rubygems-devel-3.3.27-10.el9.noarch.rpm
    sha:f5cb4168b52be3f19ccf0aa297fe6eb9c4c5af9a41481f1a6f8a7f5e7316556a
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.