Release date:
2026-08-05 08:31:30 UTC
Description:
- CVE-2023-28755: uri redos in the vendored Bundler::URI RFC3986 parser. The
same patch also carries the CVE-2023-36617 follow-up hardening (upstream
ruby/uri 9d7bcef, 9010ee2): the rfc3986 PORT and rfc2396 ABS_URI / REL_URI
leading quantifiers become possessive in every uri copy. No ELSLANG ticket
exists for CVE-2023-36617, so it is not listed as a tracked id.
- CVE-2024-27280: stringio buffer over-read in ungetc/ungetbyte.
- CVE-2024-27281: rdoc code execution via unrestricted yaml and marshal loads.
- CVE-2024-27282: regexp arbitrary heap read via unbounded reg->dmin.
Updated packages:
-
alt-ruby27-2.7.8-148.el9.x86_64.rpm
sha:dc47cd7cc0286e3be3dbe1a03952817be015fc98c15e7ec05fcf15e43a3a3543
-
alt-ruby27-default-gems-2.7.8-148.el9.noarch.rpm
sha:a17ac504b166e4296eb659396230cbe513bf3abec5544f7fec5d37854c073c76
-
alt-ruby27-devel-2.7.8-148.el9.x86_64.rpm
sha:015f401be0d6f1635f76705584f1c5798b531179e2a2833ed3ed5c67f06b8262
-
alt-ruby27-doc-2.7.8-148.el9.noarch.rpm
sha:aa36f0ddfc60546b4634106b44cfdff35591b8369c5a5ba3c85e9e63180ca272
-
alt-ruby27-libs-2.7.8-148.el9.x86_64.rpm
sha:d8bd1df486bb4079f4d1686d1b995c4f447cbce149a904a5c4e9d0bae3cd3afd
-
alt-ruby27-rubygem-bigdecimal-2.0.0-148.el9.x86_64.rpm
sha:982e7b896463d192e6b910487e9a9394277b1d08b6f6868b5fa5552b59f4fb42
-
alt-ruby27-rubygem-bundler-2.2.24-148.el9.noarch.rpm
sha:4cc265124bece640d2a68e7029e20c67b6310a5f6574cb3f3b3d38a26a9d34a4
-
alt-ruby27-rubygem-io-console-0.5.6-148.el9.x86_64.rpm
sha:67197ba315673efbd083006e83c8dd5cb3fad31ae371c43c99595c5fea032833
-
alt-ruby27-rubygem-irb-1.2.6-148.el9.noarch.rpm
sha:e1d70615074ebe533faf9c8cc20a4d36d1f481544927e952608b112eba963f05
-
alt-ruby27-rubygem-json-2.3.0-148.el9.x86_64.rpm
sha:cb774b231475646d08ced857f6f62476abf021484ede868a6dda5d2ef345b66e
-
alt-ruby27-rubygem-minitest-5.13.0-148.el9.noarch.rpm
sha:b12bc05f1d0efcb835acdbdd4181d0d5158d28c1edcda5d340a93e8149fe2696
-
alt-ruby27-rubygem-net-telnet-0.2.0-148.el9.noarch.rpm
sha:ed8fdec8f3e8ab6de3a3955e6b7c4c666630289a9910e9dd545c1b173aef43c4
-
alt-ruby27-rubygem-openssl-2.1.4-148.el9.x86_64.rpm
sha:7db656b961447d2aaa29f76182039cf0c3959a0285177254a4326fc2977fbf4c
-
alt-ruby27-rubygem-power_assert-1.1.7-148.el9.noarch.rpm
sha:345ad1e1e3c61e27c601985b6e55fbad8025521e39f1961cff86a5ac83fe32de
-
alt-ruby27-rubygem-psych-3.1.0-148.el9.x86_64.rpm
sha:8fa41cb3a3d1a43696b9b7b656fe03d7295f58851fe73e43967e3f0ebc0da604
-
alt-ruby27-rubygem-rake-13.0.1-148.el9.noarch.rpm
sha:02ee9e199c692a94663c1c809ce4e656c9ad22855d83dd03ee9bdf104c5f22b9
-
alt-ruby27-rubygem-rdoc-6.2.1.1-148.el9.noarch.rpm
sha:a09274a661dc41f71459b488344af8a0155a17559525ef7eb0f4f970f6f1b62c
-
alt-ruby27-rubygem-test-unit-3.3.4-148.el9.noarch.rpm
sha:73569197e200dce9792b867337e508831ef8c11097d4d764512d76645f1f06bc
-
alt-ruby27-rubygem-xmlrpc-0.3.0-148.el9.noarch.rpm
sha:6f20c4fc359255fe9e171f11c0b74733f4e3cf8d386b19ac631013e145344c58
-
alt-ruby27-rubygems-3.1.6-148.el9.noarch.rpm
sha:03f2c4860bd25f23f285bdda1a1ba981929356469901bd2b44ed9d60d8430369
-
alt-ruby27-rubygems-devel-3.1.6-148.el9.noarch.rpm
sha:fb21a017f128bc8f160bbd2eecc1506dba561955dc65613d5ceb918027e3b57b
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
