[CLSA-2026:1788336420] alt-ruby26: Fix of 17 CVEs
Type:
security
Severity:
Critical
Release date:
2026-09-02 08:07:23 UTC
Description:
- CVE-2023-28755: uri ReDoS in the RFC3986 parser via a crafted long URI. - CVE-2023-36617: uri ReDoS remaining in both parsers after the incomplete CVE-2023-28755 fix (rfc3986 PORT component, rfc2396 ABS_URI/REL_URI). - CVE-2024-27280: stringio buffer overread in ungetc/ungetbyte. - CVE-2024-27281: rdoc code execution via .rdoc_options and the ri cache. - CVE-2024-27282: regexp arbitrary heap read via unbounded reg->dmin in the Onigmo search.
Updated packages:
  • alt-ruby26-2.6.10-18.el10.x86_64.rpm
    sha:70a0a0b8303b497ea0421c72b543731768102e48dcf77d52d1eaa24bf43c8450
  • alt-ruby26-devel-2.6.10-18.el10.x86_64.rpm
    sha:8ef4268962bf480f946782fb2723bed26adb3e21125548798d972fca599eb8b5
  • alt-ruby26-devel-doc-2.6.10-18.el10.x86_64.rpm
    sha:18d16545bb000528768cc4277d61c7fa840e508d7192d1b1f36fde8ef2bf7286
  • alt-ruby26-doc-2.6.10-18.el10.noarch.rpm
    sha:875b935ce25d3f775a69829ab152e0bca7174a322ad7dd3574acfa5f504ff32d
  • alt-ruby26-libs-2.6.10-18.el10.x86_64.rpm
    sha:ea807c69464ad22da14fa5836ae1decb357289d03c091816fecd0aa6907e0f4b
  • alt-ruby26-rubygem-bigdecimal-1.4.1.0-18.el10.x86_64.rpm
    sha:9eedcb37e9313b85bffac2fb2f575242640f730b1b4b129bf0239caaaa44e1bd
  • alt-ruby26-rubygem-did_you_mean-1.3.0-18.el10.x86_64.rpm
    sha:fb5017229809bad1a267bf1c005cab947b322c4a1618fc6a90275884a6abf2fb
  • alt-ruby26-rubygem-io-console-0.4.7-18.el10.x86_64.rpm
    sha:00343cfd053beca837f8c3dbcc662e930a4005eeaa6079b61447ec394b5d972d
  • alt-ruby26-rubygem-json-2.1.0-18.el10.x86_64.rpm
    sha:6e53b2ff24391a76c5db868cb8f1a29d0ca52a27d4891f7d7e4aeda798d4997b
  • alt-ruby26-rubygem-minitest-5.11.3-18.el10.x86_64.rpm
    sha:4fe630c01f0e38a85675156a4c7e7e3e019dd90954c35453560d5f1b3b10e6ef
  • alt-ruby26-rubygem-net-telnet-0.2.0-18.el10.x86_64.rpm
    sha:be2083e45c1f15356a42e88eb032f36a393391d15f2890f8989dbe13fd084988
  • alt-ruby26-rubygem-openssl-2.1.2-18.el10.x86_64.rpm
    sha:27a028c0cf24b7c22df429f27e79398da3b1686419c3c209e3551a7361c8b8f4
  • alt-ruby26-rubygem-power_assert-1.1.3-18.el10.x86_64.rpm
    sha:0055d336342ca9c654102210c93fcefa3de616a78bfe32f49849a1cc03e07516
  • alt-ruby26-rubygem-psych-3.1.0-18.el10.x86_64.rpm
    sha:2997bd6a697698e5a3a60bc31bdd9f15d24bafc1447cd25e24f69dfece0e70e1
  • alt-ruby26-rubygem-rake-12.3.3-18.el10.x86_64.rpm
    sha:effe8bf5803546a8c8a9819127b127087de8504eb376d69daba5f7dae6f51fa9
  • alt-ruby26-rubygem-rdoc-6.1.2.1.0-18.el10.x86_64.rpm
    sha:e9431fdce66613119858ae65772a792457680863b278dfee6fd80fffd4d44183
  • alt-ruby26-rubygem-test-unit-3.2.9-18.el10.x86_64.rpm
    sha:7064fdc0ed6b4b4d7bd9542d93479905afa5da3674d1ad8eb7af7556a1379a2f
  • alt-ruby26-rubygem-xmlrpc-0.3.0-18.el10.x86_64.rpm
    sha:9dbe7ae6e1d313cbc06804205b1f0bbc498a418c48dbc521fb2c1e05fd021659
  • alt-ruby26-rubygems-3.0.3.1-18.el10.x86_64.rpm
    sha:0b7ccd933712164049a6d8a10bc96cd76073d8f3439e2752f0d3aeeb1f610faf
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.