[CLSA-2026:1781103968] alt-ruby31: Fix of 2 CVEs
Type:
security
Severity:
Critical
Release date:
2026-06-10 15:06:39 UTC
Description:
- CVE-2025-58767: rexml denial of service via multiple xml declarations - CVE-2026-27820: fix heap buffer overflow in Zlib::GzipReader#ungetc by making the gzip output buffer expansion unconditional in zstream_buffer_ungets()
CVEs fixed:
Updated packages:
  • alt-ruby31-3.1.7-10.el8.x86_64.rpm
    sha:cc5cf12688a5e234b5144d811e712b6b73155ed38e5423a72bb0aaf1d6c93fd8
  • alt-ruby31-bundled-gems-3.1.7-10.el8.x86_64.rpm
    sha:4b6c7a4d72282411bf30169d09bbcfc0a07158b5af7d61a918ced6460dd75ce6
  • alt-ruby31-default-gems-3.1.7-10.el8.noarch.rpm
    sha:3d3bf7545d1099f6c2779129495141b5ae970f567088b549124bc4515e87bfd8
  • alt-ruby31-devel-3.1.7-10.el8.x86_64.rpm
    sha:ffe81c44d7334a39bc8587d878d2cf84e40e7b867943d740bfcb4428c0031709
  • alt-ruby31-doc-3.1.7-10.el8.noarch.rpm
    sha:bdb190c63edd946c14b115a941239b0c5281de8b8c2785dec12f962c76067d6d
  • alt-ruby31-libs-3.1.7-10.el8.x86_64.rpm
    sha:879732eb7fbbe60d9a1def4597076437ea5e920c62f9db7d07fe67fca077fa3d
  • alt-ruby31-rubygem-bigdecimal-3.1.1-10.el8.x86_64.rpm
    sha:ff534f6c5f6bd09e5aba1b624e3d12fbf923f2ffaae6107600fe4e0f51315acc
  • alt-ruby31-rubygem-bundler-2.3.27-10.el8.noarch.rpm
    sha:275c3a7de6695d3f4d619a5d66dc74f32fc9ff15770ca0920375c065834b21c1
  • alt-ruby31-rubygem-io-console-0.5.11-10.el8.x86_64.rpm
    sha:5c0ac9e1f5f68d0ec21c13fc446f71b660117eb560107d76c6faefa72539d762
  • alt-ruby31-rubygem-irb-1.4.1-10.el8.noarch.rpm
    sha:36f1b96be453944a66753c40ae4459389ddbef4580a9f37b75083a4c9871a3be
  • alt-ruby31-rubygem-json-2.6.1-10.el8.x86_64.rpm
    sha:4212a7586c3cb5dc26e075a442b652e0be13af7cb47b10173d65c952df278939
  • alt-ruby31-rubygem-minitest-5.15.0-10.el8.noarch.rpm
    sha:ffadac7f6842cf8e04b8bd49ebbce0e8d5b44dc62318a38d546c3ed3577edb5f
  • alt-ruby31-rubygem-power_assert-2.0.1-10.el8.noarch.rpm
    sha:7e98b03a293bc80a04b60116ea77a640b475f718cd5b0708c4e2cebbdc065b27
  • alt-ruby31-rubygem-psych-4.0.4-10.el8.x86_64.rpm
    sha:d4e688af89ba53abbc8ba34ead500834ab7230e8f9153e8f75ea03897208ad78
  • alt-ruby31-rubygem-rake-13.0.6-10.el8.noarch.rpm
    sha:a80a6bd3446cae37930612a7ed23fe98d8a26996cfb9372a364bcf8ee7776415
  • alt-ruby31-rubygem-rbs-2.7.0-10.el8.x86_64.rpm
    sha:4ca0affdcfea50d2def9350c76a191c4997183b4ebfb64e89383932fc7c2c61b
  • alt-ruby31-rubygem-rdoc-6.4.1.1-10.el8.noarch.rpm
    sha:2fa4465e748503abcacaad58616b74a5fe5b302fec71da3c6ce3bf9804637eda
  • alt-ruby31-rubygem-rexml-3.3.9-10.el8.noarch.rpm
    sha:bf5a03e091449734c578fb2be817c52c7ac30ea71fc545b709102aac2ee8a307
  • alt-ruby31-rubygem-rss-0.3.1-10.el8.noarch.rpm
    sha:eaacfd75c447ac801eff1e94620155a007ba24a9a9789d1380b0d755a1f3c988
  • alt-ruby31-rubygem-test-unit-3.5.3-10.el8.noarch.rpm
    sha:ed03c0562ef328641d5326c04d9c92ae58d656f311f9e77b92c59df822f43eca
  • alt-ruby31-rubygem-typeprof-0.21.3-10.el8.noarch.rpm
    sha:cad8293b2600fc274221f10534c72df2eba581df98cec8ecfa1d73634a719edc
  • alt-ruby31-rubygems-3.3.27-10.el8.noarch.rpm
    sha:d560ce5910600df142898f9f7f343902b36e728cb08836f44c9b854d4510183a
  • alt-ruby31-rubygems-devel-3.3.27-10.el8.noarch.rpm
    sha:27d86efb2583f56397bf985e48886eec63cb60572742dd6571a8ff656a458b83
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.