Tuxcare Errata System 0.0.1 5.10 2026-09-02T08:52:40 Community Enterprise Operating System 7 - CVE-2026-27820: heap buffer overflow in the bundled zlib extension via Zlib::GzipReader#ungetc. Critical TuxCare License Agreement CVE-2026-27820 cpe:/o:centos:centos:7 Community Enterprise Operating System 7 - CVE-2025-58767: fix denial of service in the bundled REXML gem when parsing invalid XML that contains multiple XML declarations. Moderate TuxCare License Agreement CVE-2025-58767 cpe:/o:centos:centos:7 Community Enterprise Operating System 7 - CVE-2023-28755: uri redos in the vendored Bundler::URI RFC3986 parser. The same patch also carries the CVE-2023-36617 follow-up hardening (upstream ruby/uri 9d7bcef, 9010ee2): the rfc3986 PORT and rfc2396 ABS_URI / REL_URI leading quantifiers become possessive in every uri copy. No ELSLANG ticket exists for CVE-2023-36617, so it is not listed as a tracked id. - CVE-2024-27280: stringio buffer over-read in ungetc/ungetbyte. - CVE-2024-27281: rdoc code execution via unrestricted yaml and marshal loads. - CVE-2024-27282: regexp arbitrary heap read via unbounded reg->dmin. Critical TuxCare License Agreement CVE-2024-27281 CVE-2026-27820 CVE-2023-28755 CVE-2024-49761 CVE-2024-27280 CVE-2025-61594 CVE-2024-27282 CVE-2025-27220 CVE-2024-35176 CVE-2025-27219 CVE-2024-43398 CVE-2024-41946 CVE-2024-41123 CVE-2024-39908 cpe:/o:centos:centos:7 Community Enterprise Operating System 7 - CVE-2023-28755: uri ReDoS in the RFC3986 parser via a crafted long URI. - CVE-2023-36617: uri ReDoS remaining in both parsers after the incomplete CVE-2023-28755 fix (rfc3986 PORT component, rfc2396 ABS_URI/REL_URI). - CVE-2024-27280: stringio buffer overread in ungetc/ungetbyte. - CVE-2024-27281: rdoc code execution via .rdoc_options and the ri cache. - CVE-2024-27282: regexp arbitrary heap read via unbounded reg->dmin in the Onigmo search. Critical TuxCare License Agreement CVE-2024-27281 CVE-2026-27820 CVE-2023-28756 CVE-2023-28755 CVE-2021-33621 CVE-2021-43809 CVE-2024-49761 CVE-2024-27280 CVE-2025-61594 CVE-2024-27282 CVE-2025-27220 CVE-2024-35176 CVE-2025-27219 CVE-2024-43398 CVE-2024-41946 CVE-2024-41123 CVE-2024-39908 cpe:/o:centos:centos:7 Community Enterprise Operating System 7 - CVE-2025-27219: cgi DoS via super-linear cookie merge in CGI::Cookie.parse. - CVE-2025-27220: cgi ReDoS in CGI::Util#escapeElement / #unescapeElement. - CVE-2025-61594: uri credential leak when combining URIs with + (CVE-2025-27221 bypass). Critical TuxCare License Agreement CVE-2026-27820 CVE-2025-61594 CVE-2025-27220 CVE-2024-35176 CVE-2025-27219 CVE-2024-43398 CVE-2024-41946 CVE-2024-41123 CVE-2024-39908 cpe:/o:centos:centos:7 Community Enterprise Operating System 7 - CVE-2023-28755: fix ReDoS in the bundler-vendored uri RFC3986 parser (lib/bundler/vendor/uri/lib/uri/rfc3986_parser.rb, Bundler::URI 0.10.1) by clamping the unbounded quantifiers in RFC3986_URI and RFC3986_relative_ref to their possessive forms; backport of upstream ruby commit 14f025a7 (URI 0.10.0.2 for bundler) - The same patch carries the two-part follow-up hardening that upstream ships together (both dated 2023-04-22, HackerOne #1958260), covering the per-component validation regexps the first fix left unclamped: rfc3986_parser.rb gets a possessive leading whitespace run in default_regexp's PORT entry (upstream ruby/uri commit 9d7bcef1), so an attacker-supplied port assigned via Bundler::URI::Generic#port= (check_port) no longer goes quadratic; and rfc2396_parser.rb gets a possessive leading whitespace quantifier on the ABS_URI and REL_URI patterns, '\A\s*' -> '\A\s*+' (upstream ruby/uri commit 9010ee25), so Bundler::URI::RFC2396_Parser#split / #parse -- reached via the public Bundler::URI::DEFAULT_PARSER and Bundler::URI::Parser constants -- no longer go quadratic on crafted input with a long run of leading whitespace. Both parsers of a uri copy are hardened together; patching only one would leave the copy half-fixed - The primary uri default gem (0.12.4) was already hardened upstream in both parsers and is untouched, and the vendored VERSION_CODE stays 001001 so the build-time %{bundler_uri_version} assertion keeps passing Critical TuxCare License Agreement CVE-2026-27820 CVE-2023-28755 CVE-2025-58767 CVE-2025-61594 cpe:/o:centos:centos:7 alt-ruby35 alt-ruby35-bundled-gems alt-ruby35-default-gems alt-ruby35-devel alt-ruby35-doc alt-ruby35-libs alt-ruby35-rubygem-bigdecimal alt-ruby35-rubygem-bundler alt-ruby35-rubygem-io-console alt-ruby35-rubygem-irb alt-ruby35-rubygem-json alt-ruby35-rubygem-minitest alt-ruby35-rubygem-power_assert alt-ruby35-rubygem-psych alt-ruby35-rubygem-racc alt-ruby35-rubygem-rake alt-ruby35-rubygem-rbs alt-ruby35-rubygem-rdoc alt-ruby35-rubygem-rexml alt-ruby35-rubygem-rss alt-ruby35-rubygem-test-unit alt-ruby35-rubygem-typeprof alt-ruby35-rubygems alt-ruby35-rubygems-devel alt-ruby27 alt-ruby27-default-gems alt-ruby27-devel alt-ruby27-doc alt-ruby27-libs alt-ruby27-rubygem-bigdecimal alt-ruby27-rubygem-bundler alt-ruby27-rubygem-io-console alt-ruby27-rubygem-irb alt-ruby27-rubygem-json alt-ruby27-rubygem-minitest alt-ruby27-rubygem-net-telnet alt-ruby27-rubygem-openssl alt-ruby27-rubygem-power_assert alt-ruby27-rubygem-psych alt-ruby27-rubygem-rake alt-ruby27-rubygem-rdoc alt-ruby27-rubygem-test-unit alt-ruby27-rubygem-xmlrpc alt-ruby27-rubygems alt-ruby27-rubygems-devel alt-ruby26 alt-ruby26-devel alt-ruby26-devel-doc alt-ruby26-doc alt-ruby26-libs alt-ruby26-rubygem-bigdecimal alt-ruby26-rubygem-did_you_mean alt-ruby26-rubygem-io-console alt-ruby26-rubygem-json alt-ruby26-rubygem-minitest alt-ruby26-rubygem-net-telnet alt-ruby26-rubygem-openssl alt-ruby26-rubygem-power_assert alt-ruby26-rubygem-psych alt-ruby26-rubygem-rake alt-ruby26-rubygem-rdoc alt-ruby26-rubygem-test-unit alt-ruby26-rubygem-xmlrpc alt-ruby26-rubygems alt-ruby30 alt-ruby30-default-gems alt-ruby30-devel alt-ruby30-doc alt-ruby30-libs alt-ruby30-rubygem-bigdecimal alt-ruby30-rubygem-bundler alt-ruby30-rubygem-io-console alt-ruby30-rubygem-irb alt-ruby30-rubygem-json alt-ruby30-rubygem-minitest alt-ruby30-rubygem-power_assert alt-ruby30-rubygem-psych alt-ruby30-rubygem-rake alt-ruby30-rubygem-rbs alt-ruby30-rubygem-rdoc alt-ruby30-rubygem-rexml alt-ruby30-rubygem-rss alt-ruby30-rubygem-test-unit alt-ruby30-rubygem-typeprof alt-ruby30-rubygems alt-ruby30-rubygems-devel alt-ruby31 alt-ruby31-bundled-gems alt-ruby31-default-gems alt-ruby31-devel alt-ruby31-doc alt-ruby31-libs alt-ruby31-rubygem-bigdecimal alt-ruby31-rubygem-bundler alt-ruby31-rubygem-io-console alt-ruby31-rubygem-irb alt-ruby31-rubygem-json alt-ruby31-rubygem-minitest alt-ruby31-rubygem-power_assert alt-ruby31-rubygem-psych alt-ruby31-rubygem-rake alt-ruby31-rubygem-rbs alt-ruby31-rubygem-rdoc alt-ruby31-rubygem-rexml alt-ruby31-rubygem-rss alt-ruby31-rubygem-test-unit alt-ruby31-rubygem-typeprof alt-ruby31-rubygems alt-ruby31-rubygems-devel d07bf2a08d50eb66 x86_64 0:3.5.0-0.2.preview1.el7 0:3.5.0-0.2.preview1.el7 x86_64 0:3.1.9-0.2.preview1.el7 0:2.7.0.dev-0.2.preview1.el7 x86_64 0:0.8.0-0.2.preview1.el7 0:1.15.2-0.2.preview1.el7 x86_64 0:2.10.2-0.2.preview1.el7 0:5.25.5-0.2.preview1.el7 0:2.0.5-0.2.preview1.el7 x86_64 0:5.2.3-0.2.preview1.el7 x86_64 0:1.8.1-0.2.preview1.el7 0:13.2.1-0.2.preview1.el7 x86_64 0:3.9.2-0.2.preview1.el7 0:6.13.1-0.2.preview1.el7 0:3.4.1-0.2.preview1.el7 0:0.3.1-0.2.preview1.el7 0:3.6.8-0.2.preview1.el7 0:0.30.1-0.2.preview1.el7 0:3.7.0.dev-0.2.preview1.el7 x86_64 0:3.5.0-0.3.preview1.el7 0:3.5.0-0.3.preview1.el7 x86_64 0:3.1.9-0.3.preview1.el7 0:2.7.0.dev-0.3.preview1.el7 x86_64 0:0.8.0-0.3.preview1.el7 0:1.15.2-0.3.preview1.el7 x86_64 0:2.10.2-0.3.preview1.el7 0:5.25.5-0.3.preview1.el7 0:2.0.5-0.3.preview1.el7 x86_64 0:5.2.3-0.3.preview1.el7 x86_64 0:1.8.1-0.3.preview1.el7 0:13.2.1-0.3.preview1.el7 x86_64 0:3.9.2-0.3.preview1.el7 0:6.13.1-0.3.preview1.el7 0:3.4.1-0.3.preview1.el7 0:0.3.1-0.3.preview1.el7 0:3.6.8-0.3.preview1.el7 0:0.30.1-0.3.preview1.el7 0:3.7.0.dev-0.3.preview1.el7 x86_64 0:2.7.8-148.el7 0:2.7.8-148.el7 x86_64 0:2.0.0-148.el7 0:2.2.24-148.el7 x86_64 0:0.5.6-148.el7 0:1.2.6-148.el7 x86_64 0:2.3.0-148.el7 0:5.13.0-148.el7 1:0.2.0-148.el7 x86_64 0:2.1.4-148.el7 0:1.1.7-148.el7 x86_64 0:3.1.0-148.el7 0:13.0.1-148.el7 0:6.2.1.1-148.el7 0:3.3.4-148.el7 0:0.3.0-148.el7 0:3.1.6-148.el7 x86_64 0:2.6.10-18.el7 0:2.6.10-18.el7 x86_64 0:1.4.1.0-18.el7 x86_64 0:1.3.0-18.el7 x86_64 0:0.4.7-18.el7 x86_64 0:2.1.0-18.el7 x86_64 0:5.11.3-18.el7 x86_64 1:0.2.0-18.el7 x86_64 0:2.1.2-18.el7 x86_64 0:1.1.3-18.el7 x86_64 0:3.1.0-18.el7 x86_64 0:12.3.3-18.el7 x86_64 0:6.1.2.1.0-18.el7 x86_64 0:3.2.9-18.el7 x86_64 0:0.3.0-18.el7 x86_64 0:3.0.3.1-18.el7 x86_64 0:3.0.7-172.el7 0:3.0.7-172.el7 x86_64 0:3.0.0-172.el7 0:2.2.33-172.el7 x86_64 0:0.5.7-172.el7 0:1.3.5-172.el7 x86_64 0:2.5.1-172.el7 0:5.14.2-172.el7 0:1.2.1-172.el7 x86_64 0:3.3.2-172.el7 0:13.0.3-172.el7 0:1.4.0-172.el7 0:6.3.4.1-172.el7 0:3.2.5-172.el7 0:0.2.9-172.el7 0:3.3.7-172.el7 0:0.15.2-172.el7 0:3.2.33-172.el7 x86_64 0:3.1.7-12.el7 0:3.1.7-12.el7 x86_64 0:3.1.1-12.el7 0:2.3.27-12.el7 x86_64 0:0.5.11-12.el7 0:1.4.1-12.el7 x86_64 0:2.6.1-12.el7 0:5.15.0-12.el7 0:2.0.1-12.el7 x86_64 0:4.0.4-12.el7 0:13.0.6-12.el7 x86_64 0:2.7.0-12.el7 0:6.4.1.1-12.el7 0:3.3.9-12.el7 0:0.3.1-12.el7 0:3.5.3-12.el7 0:0.21.3-12.el7 0:3.3.27-12.el7