[CLSA-2026:1788338284] alt-ruby26: Fix of 17 CVEs
Type:
security
Severity:
Critical
Release date:
2026-09-02 08:38:27 UTC
Description:
- CVE-2023-28755: uri ReDoS in the RFC3986 parser via a crafted long URI. - CVE-2023-36617: uri ReDoS remaining in both parsers after the incomplete CVE-2023-28755 fix (rfc3986 PORT component, rfc2396 ABS_URI/REL_URI). - CVE-2024-27280: stringio buffer overread in ungetc/ungetbyte. - CVE-2024-27281: rdoc code execution via .rdoc_options and the ri cache. - CVE-2024-27282: regexp arbitrary heap read via unbounded reg->dmin in the Onigmo search.
Updated packages:
  • alt-ruby26-2.6.10-18.el9.x86_64.rpm
    sha:b387286cc2d3ce34ef755435605a02279b48d44f51b518190878810f1d11149d
  • alt-ruby26-devel-2.6.10-18.el9.x86_64.rpm
    sha:f41c8adb7d237863bb1136a8eccc1f65937a6b56c71be163f1860cfe23e72a44
  • alt-ruby26-devel-doc-2.6.10-18.el9.x86_64.rpm
    sha:eef55ac20547f17d2f2b868ab5302d09bc57ab239af45d8691a76fed0016e7b3
  • alt-ruby26-doc-2.6.10-18.el9.noarch.rpm
    sha:6c227f6c0ba3f8c507902e6f7382ed0c8152d8e4720eb748552bdad80a2fcfd5
  • alt-ruby26-libs-2.6.10-18.el9.x86_64.rpm
    sha:422a006b8667eee03f111768a72ac4039c541f77cca38f68d30f902ddd1e45d6
  • alt-ruby26-rubygem-bigdecimal-1.4.1.0-18.el9.x86_64.rpm
    sha:865b90bf279dd02acd9be50c989ddbcc5669eb898ab4e744a6cab0e55ea884c8
  • alt-ruby26-rubygem-did_you_mean-1.3.0-18.el9.x86_64.rpm
    sha:a3ce76ca707ee75c981ccd9aa8eb47d32a85f59d07859afc9d32c9b94fa0204a
  • alt-ruby26-rubygem-io-console-0.4.7-18.el9.x86_64.rpm
    sha:012c3b2b5e014a41f26c1694213e2416ae8b40984952bfb1cd4e4e54e31dac1e
  • alt-ruby26-rubygem-json-2.1.0-18.el9.x86_64.rpm
    sha:e6ebf28b4003cc4eddace569658dd1f0dd14571f2a8c891e600ed33ce1e29e02
  • alt-ruby26-rubygem-minitest-5.11.3-18.el9.x86_64.rpm
    sha:37086b30dae47e4a46f9bb3f3cfb2d6b81712e41917ebda5ef19e5c110dc6961
  • alt-ruby26-rubygem-net-telnet-0.2.0-18.el9.x86_64.rpm
    sha:95885306fda23418d78ba8e92bbae7378ef21d3e9c6ecb90abe4de0366de5046
  • alt-ruby26-rubygem-openssl-2.1.2-18.el9.x86_64.rpm
    sha:b33d6b51629b15f87950297bbedce37e3a176a0189126a4c6c75809213415eb7
  • alt-ruby26-rubygem-power_assert-1.1.3-18.el9.x86_64.rpm
    sha:d2505c417b18b184ee8be5eb7f3d6189de86149f8548ec21dc40c75d3f85db04
  • alt-ruby26-rubygem-psych-3.1.0-18.el9.x86_64.rpm
    sha:ae6ac08a8c0190c108803b6bce4d0c0aed726bd723398815e2b87a370a6d9c01
  • alt-ruby26-rubygem-rake-12.3.3-18.el9.x86_64.rpm
    sha:36f85fa5b6a2863860f52cf61ffa5a223b14a0586fbaf8f14a882cd4c1ccb0e5
  • alt-ruby26-rubygem-rdoc-6.1.2.1.0-18.el9.x86_64.rpm
    sha:002f6da99a3192b7e94e51361d6c8d202d69acebe005161a6ce8a5a3f3bb8518
  • alt-ruby26-rubygem-test-unit-3.2.9-18.el9.x86_64.rpm
    sha:dec6a024cec04687b7fd8a3a506e32c61ac1c1b055a0ebf46f97f2865f88e597
  • alt-ruby26-rubygem-xmlrpc-0.3.0-18.el9.x86_64.rpm
    sha:c2667b478dc9e7b798afccc2daf8a0797fac4e1b9bc59503dda55412535d17cd
  • alt-ruby26-rubygems-3.0.3.1-18.el9.x86_64.rpm
    sha:18dfdc35ec4eb68ed1d90b5d6c27fed7d7f486d14bfcfcaa788ed1dd0229b841
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.