Release date:
2026-08-05 08:37:08 UTC
Description:
- CVE-2023-28755: uri redos in the vendored Bundler::URI RFC3986 parser. The
same patch also carries the CVE-2023-36617 follow-up hardening (upstream
ruby/uri 9d7bcef, 9010ee2): the rfc3986 PORT and rfc2396 ABS_URI / REL_URI
leading quantifiers become possessive in every uri copy. No ELSLANG ticket
exists for CVE-2023-36617, so it is not listed as a tracked id.
- CVE-2024-27280: stringio buffer over-read in ungetc/ungetbyte.
- CVE-2024-27281: rdoc code execution via unrestricted yaml and marshal loads.
- CVE-2024-27282: regexp arbitrary heap read via unbounded reg->dmin.
Updated packages:
-
alt-ruby27-2.7.8-148.el10.x86_64.rpm
sha:795d2a6eed0253785860423ae4ce3218d1a2e3a5fe4216b8ea41b451f2c1e8af
-
alt-ruby27-default-gems-2.7.8-148.el10.noarch.rpm
sha:636bb06bb28dac7891d99d5532ba0f94510da73bd842bdc982a0ecd19ebfd70b
-
alt-ruby27-devel-2.7.8-148.el10.x86_64.rpm
sha:a75822b0ba45e1f9b1202336e1ce258fb8c2a3749b120284dae9add09cea1dce
-
alt-ruby27-doc-2.7.8-148.el10.noarch.rpm
sha:57d5ab7bede6c4970beeba1c33a6517f14f821e01a13300f5f304777418f9ffe
-
alt-ruby27-libs-2.7.8-148.el10.x86_64.rpm
sha:5db3a9cb3f03d40c34be086b87d4fe5a55fee764d3d06edf2f88e38cefa57833
-
alt-ruby27-rubygem-bigdecimal-2.0.0-148.el10.x86_64.rpm
sha:4ca4acbfd8e9cd7e4426239340a9d794284b95b98c659d0eb6f802428de78787
-
alt-ruby27-rubygem-bundler-2.2.24-148.el10.noarch.rpm
sha:18d78f8d2c9792b9299dec8eff4cdac93595d46e303986a2dbb7f9320399eacc
-
alt-ruby27-rubygem-io-console-0.5.6-148.el10.x86_64.rpm
sha:520e8373595fc1be0ced3ca9de2e6026cc07b8d96dfe8b3febe9bb7452e16858
-
alt-ruby27-rubygem-irb-1.2.6-148.el10.noarch.rpm
sha:8d82886a2b3dae6181dd5864ce9409ea87f51840597b89662b518d47489f50f6
-
alt-ruby27-rubygem-json-2.3.0-148.el10.x86_64.rpm
sha:2dc6b41e7eb973bd5b3254c0996158da5b059152346b56c7c2639c7250d9fa05
-
alt-ruby27-rubygem-minitest-5.13.0-148.el10.noarch.rpm
sha:ddb5a6066979430e5281d2c8683f00a428a5dca98c42d0d4ce82e1363011f7fb
-
alt-ruby27-rubygem-net-telnet-0.2.0-148.el10.noarch.rpm
sha:1d90a9d0d5c98545f62ad6052f1f7e826187ada601fb6f4e5d7e254672c374cf
-
alt-ruby27-rubygem-openssl-2.1.4-148.el10.x86_64.rpm
sha:370ae2f09f7121d93f22f5a5454f1db42161a1c6ba77cbdd3215ded8ca662585
-
alt-ruby27-rubygem-power_assert-1.1.7-148.el10.noarch.rpm
sha:84a4c06ad1a66433e69e8eac7c3685f3f6160fe250b27124830186c4adcd8c1c
-
alt-ruby27-rubygem-psych-3.1.0-148.el10.x86_64.rpm
sha:86e5274f9d17bcdac692333a4ca1ecb0fa40039cdb1377b9181a1ce325035b1d
-
alt-ruby27-rubygem-rake-13.0.1-148.el10.noarch.rpm
sha:587c7d4e7aeb574734e6084bae54349e6712f507e8f6f3dea54127d0d17de3f1
-
alt-ruby27-rubygem-rdoc-6.2.1.1-148.el10.noarch.rpm
sha:a7b5b39bc714a54ccd92c59b1c17e7239e071d3df42e658dee6f10b3be015d3e
-
alt-ruby27-rubygem-test-unit-3.3.4-148.el10.noarch.rpm
sha:1063246919eea389f302180feed9e4268e706e65e32e02afb089ffe68f7d5aa8
-
alt-ruby27-rubygem-xmlrpc-0.3.0-148.el10.noarch.rpm
sha:8c1962dc785105a2609c2673c677b71a0fe251709c10d8eaa634644b5e16cc86
-
alt-ruby27-rubygems-3.1.6-148.el10.noarch.rpm
sha:3821eed407a7cc876593f70ea7eb1b02562a0f22aab91ba7b51717491f425e15
-
alt-ruby27-rubygems-devel-3.1.6-148.el10.noarch.rpm
sha:b5ec7f8b0a67039c22ee31a4efddacd943a100068605bb6abf408eabc060251a
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
