Release date:
2026-08-05 12:04:58 UTC
Description:
- CVE-2023-28755: uri redos in the vendored Bundler::URI RFC3986 parser. The
same patch also carries the CVE-2023-36617 follow-up hardening (upstream
ruby/uri 9d7bcef, 9010ee2): the rfc3986 PORT and rfc2396 ABS_URI / REL_URI
leading quantifiers become possessive in every uri copy. No ELSLANG ticket
exists for CVE-2023-36617, so it is not listed as a tracked id.
- CVE-2024-27280: stringio buffer over-read in ungetc/ungetbyte.
- CVE-2024-27281: rdoc code execution via unrestricted yaml and marshal loads.
- CVE-2024-27282: regexp arbitrary heap read via unbounded reg->dmin.
Updated packages:
-
alt-ruby27-2.7.8-148.el8.x86_64.rpm
sha:55baae70563e7dbcd9a6f77677dda09ca8052a0bb976bff4c1c041315a1fbb22
-
alt-ruby27-default-gems-2.7.8-148.el8.noarch.rpm
sha:7a231958ebbad4435e570cdbc6a72b335ffbe280ea9e7a186428cc86b3fef25a
-
alt-ruby27-devel-2.7.8-148.el8.x86_64.rpm
sha:793a0936a91c9cd6ac32fe05bcb402fe6db75d7dd09df76141454e921f5bf9be
-
alt-ruby27-doc-2.7.8-148.el8.noarch.rpm
sha:4284b03416bb1fa930b541e2f64651a1c8a815be191c2acd62c57d853b45911f
-
alt-ruby27-libs-2.7.8-148.el8.x86_64.rpm
sha:5f923f4a99e682094526a161befd6863107c8ffb7e51a424d1f920122d253114
-
alt-ruby27-rubygem-bigdecimal-2.0.0-148.el8.x86_64.rpm
sha:f902affdda2f93e57a169db4cea58309955db50c7a7f4687efe26278afe4948b
-
alt-ruby27-rubygem-bundler-2.2.24-148.el8.noarch.rpm
sha:14b27785940e797ab1ae28db37149c33c814958b90265e30c918edd5e8d88e3d
-
alt-ruby27-rubygem-io-console-0.5.6-148.el8.x86_64.rpm
sha:aa60a23b1472164dd1d5614c5a55017884bd0b6c4cc93a6002539cfdfe460d1e
-
alt-ruby27-rubygem-irb-1.2.6-148.el8.noarch.rpm
sha:63ac0f1b7cb58ff9734e53e43608ca7e611920983bc89b80c3ce84845a6a7254
-
alt-ruby27-rubygem-json-2.3.0-148.el8.x86_64.rpm
sha:d2620d46435746e43aa965d7cd90616c0c638323de97ada8f88f289675bb6829
-
alt-ruby27-rubygem-minitest-5.13.0-148.el8.noarch.rpm
sha:2a499536c72c43fba094dad53e238cf78329761f618506523a7aba9a9aa2f6cd
-
alt-ruby27-rubygem-net-telnet-0.2.0-148.el8.noarch.rpm
sha:5d66a1162c227ed96069fc16b2d76353d81c92c40ab5a104caa8eb46c1ec9791
-
alt-ruby27-rubygem-openssl-2.1.4-148.el8.x86_64.rpm
sha:957c34d256c49e5b008be41d16be34647fbf70180055a6d6f0c1bb4b69f4f332
-
alt-ruby27-rubygem-power_assert-1.1.7-148.el8.noarch.rpm
sha:107cabc61dab05fc29c35344b67af87d07de2b15124ac79397ffaa3e010152eb
-
alt-ruby27-rubygem-psych-3.1.0-148.el8.x86_64.rpm
sha:2919aee0e9366ffcbcfa4aae8ba620fed8ad386af4c9c743d80f53dd7aac8a46
-
alt-ruby27-rubygem-rake-13.0.1-148.el8.noarch.rpm
sha:187b740f730dfd35b70d3d103aa37c0ebf97f02f7512ca5033ad030a3fb3420c
-
alt-ruby27-rubygem-rdoc-6.2.1.1-148.el8.noarch.rpm
sha:b3bf99456d20ba64b9fcd663070e14820ff3ccbea873731060345d3c2e934eeb
-
alt-ruby27-rubygem-test-unit-3.3.4-148.el8.noarch.rpm
sha:4d6f0d0c8fcbc441a1aa2abd189e68eac58fc6cae7cc32979f22cf2c9f5a1835
-
alt-ruby27-rubygem-xmlrpc-0.3.0-148.el8.noarch.rpm
sha:f29e164268488a81b2e9e40890730c4c9993e9c983d3144286fa5887e0539069
-
alt-ruby27-rubygems-3.1.6-148.el8.noarch.rpm
sha:296e64543c15ea63df0c351465863bc6284ce483456b456a16509540cac4637a
-
alt-ruby27-rubygems-devel-3.1.6-148.el8.noarch.rpm
sha:81e05d4d2de33f32436376719a8869414e32484c052ec3b3160a74ea8edcb72e
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
