Release date:
2026-09-01 13:39:34 UTC
Description:
- CVE-2023-28755: uri redos in the vendored Bundler::URI RFC3986 parser. The
same patch also carries the CVE-2023-36617 follow-up hardening (upstream
ruby/uri 9d7bcef, 9010ee2): the rfc3986 PORT and rfc2396 ABS_URI / REL_URI
leading quantifiers become possessive in every uri copy. No ELSLANG ticket
exists for CVE-2023-36617, so it is not listed as a tracked id.
- CVE-2024-27280: stringio buffer over-read in ungetc/ungetbyte.
- CVE-2024-27281: rdoc code execution via unrestricted yaml and marshal loads.
- CVE-2024-27282: regexp arbitrary heap read via unbounded reg->dmin.
Updated packages:
-
alt-ruby27-2.7.8-148.el7.x86_64.rpm
sha:7d8d730c64fd4e2e513969715957ab5bac220e9b3c598cf5c8b768699fde8b90
-
alt-ruby27-default-gems-2.7.8-148.el7.noarch.rpm
sha:e7bb6827563aacc56966c359d8366aa4a778d637a38a628ea28228d6410c9195
-
alt-ruby27-devel-2.7.8-148.el7.x86_64.rpm
sha:eacc0560e341c625d6342e7a4f48092dd67b5d820b8afe2b4b8a33e9f4c5c4b8
-
alt-ruby27-doc-2.7.8-148.el7.noarch.rpm
sha:11490bbb1690f93dd1bafb324f7066a5181619fcb84e93f625d0f1c733e0e077
-
alt-ruby27-libs-2.7.8-148.el7.x86_64.rpm
sha:bddd7aaa9a2549186c5b3b7fb2a77afec3809180b25e8598355b2101da54c5c3
-
alt-ruby27-rubygem-bigdecimal-2.0.0-148.el7.x86_64.rpm
sha:8ce7ac05bfde5015d932430d8154ec05cef1a734b30ddf74dafd4132d3701621
-
alt-ruby27-rubygem-bundler-2.2.24-148.el7.noarch.rpm
sha:857ee54698161a84ce49d9502049a327e51392982fadc9cd1738977e2d8a33fe
-
alt-ruby27-rubygem-io-console-0.5.6-148.el7.x86_64.rpm
sha:05539782e2b07a70ff8cf2e8d2d881bce0a895ec2ac88918ad330633b75a7b91
-
alt-ruby27-rubygem-irb-1.2.6-148.el7.noarch.rpm
sha:d2bcd4dbdfa492c37acd5212f2f44aa2c0752a0fb7ae1516ae567ea1a4bdf071
-
alt-ruby27-rubygem-json-2.3.0-148.el7.x86_64.rpm
sha:ec108c65016cbe6fe8fc891d9d59061f7cd646ffd22a98f472c33cc153e6fc52
-
alt-ruby27-rubygem-minitest-5.13.0-148.el7.noarch.rpm
sha:44ad2bdcc903c626dbdd9cc638e2f9e11d82502bffc619179a8af4c59279c746
-
alt-ruby27-rubygem-net-telnet-0.2.0-148.el7.noarch.rpm
sha:c08f83716a9c9f2bcd7a793a0de56bc0ed9c3957cba8e41f81e5f3ceff824d95
-
alt-ruby27-rubygem-openssl-2.1.4-148.el7.x86_64.rpm
sha:8a81a092ec755e5b175cda51ab721c251fe5808a096f5fe8c13400f616351a0b
-
alt-ruby27-rubygem-power_assert-1.1.7-148.el7.noarch.rpm
sha:e50603cfc047d769f5cbf6b66099680c9b71825cd412efb722e73ab52d510fa4
-
alt-ruby27-rubygem-psych-3.1.0-148.el7.x86_64.rpm
sha:69448e1cdf21fe2854e74c9508115f2f91d45dfb9f172cb53ccb33d44db12b3a
-
alt-ruby27-rubygem-rake-13.0.1-148.el7.noarch.rpm
sha:ba4554377c382d4aea0db1b0a64c493074f130cae3019724366afc019a9c3584
-
alt-ruby27-rubygem-rdoc-6.2.1.1-148.el7.noarch.rpm
sha:4859411b2ef00344aa72dd613c2fb0a1c940f8c15fa85f62b76463c9eb5e6e0b
-
alt-ruby27-rubygem-test-unit-3.3.4-148.el7.noarch.rpm
sha:609cad08b216b48ffc5a3eb46d8e471a03dd5975daedb4c82d281803013d2dce
-
alt-ruby27-rubygem-xmlrpc-0.3.0-148.el7.noarch.rpm
sha:954704794912a754c3afe038ea67a5366c1739eb04415823f2c46f62df32d42a
-
alt-ruby27-rubygems-3.1.6-148.el7.noarch.rpm
sha:0a270c6d1085fd398a79e7806069d5dbe854524fe6fde8c063719c41c39f73d5
-
alt-ruby27-rubygems-devel-3.1.6-148.el7.noarch.rpm
sha:3ddf814dbc1b3ab5c7ff87e180e5f29038c5aac2a43953d4c59c7f437d6e25c7
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
