Tuxcare Errata System 0.0.1 5.10 2026-09-02T08:40:21 Community Enterprise Operating System 9 - CVE-2024-49761: rexml redos via leading-zero hex character reference. - CVE-2024-43398: rexml dos via deep same-local-name attributes. - CVE-2024-41946: rexml dos via entity expansion in sax/pull parsers. - CVE-2024-41123: rexml dos via slow processing-instruction parsing. Important TuxCare License Agreement CVE-2024-49761 CVE-2024-43398 CVE-2024-41946 CVE-2024-41123 cpe:/o:centos:centos:9 Community Enterprise Operating System 9 - CVE-2021-43809: bundler argument injection via leading-dash gemfile git url. Important TuxCare License Agreement CVE-2021-43809 CVE-2024-49761 CVE-2024-43398 CVE-2024-41946 CVE-2024-41123 cpe:/o:centos:centos:9 Community Enterprise Operating System 9 - CVE-2024-35176: rexml dos via attribute value with many `>` characters. - CVE-2024-39908: rexml redos via repeated space characters in ATTLIST. Moderate TuxCare License Agreement CVE-2024-35176 CVE-2024-39908 cpe:/o:centos:centos:9 Community Enterprise Operating System 9 - CVE-2024-35176: rexml dos via many less-than characters in an attribute value. - CVE-2024-39908: rexml redos via repeated zeros in a character reference. Moderate TuxCare License Agreement CVE-2024-35176 CVE-2024-39908 cpe:/o:centos:centos:9 Community Enterprise Operating System 9 - CVE-2026-27820: heap buffer overflow in bundled zlib via Zlib::GzipReader#ungetc. Critical TuxCare License Agreement CVE-2026-27820 cpe:/o:centos:centos:9 Community Enterprise Operating System 9 - CVE-2025-58767: rexml denial of service via multiple xml declarations - CVE-2026-27820: fix heap buffer overflow in Zlib::GzipReader#ungetc by making the gzip output buffer expansion unconditional in zstream_buffer_ungets() Critical TuxCare License Agreement CVE-2026-27820 CVE-2025-58767 cpe:/o:centos:centos:9 Community Enterprise Operating System 9 - CVE-2026-27820: heap buffer overflow in the bundled zlib extension via Zlib::GzipReader#ungetc. Critical TuxCare License Agreement CVE-2026-27820 cpe:/o:centos:centos:9 Community Enterprise Operating System 9 - CVE-2025-27219: cgi DoS via super-linear cookie merge in CGI::Cookie.parse. - CVE-2025-27220: cgi ReDoS in CGI::Util#escapeElement / #unescapeElement. - CVE-2025-61594: uri credential leak when combining URIs with + (CVE-2025-27221 bypass). Important TuxCare License Agreement CVE-2025-61594 CVE-2025-27220 CVE-2025-27219 cpe:/o:centos:centos:9 Community Enterprise Operating System 9 - CVE-2025-27219: cgi dos via super-linear CGI::Cookie.parse cookie merge. - CVE-2025-27220: cgi redos in CGI::Util#escapeElement element matcher. - CVE-2025-61594: uri password leak when combining URIs (CVE-2025-27221 bypass). Important TuxCare License Agreement CVE-2025-61594 CVE-2025-27220 CVE-2025-27219 cpe:/o:centos:centos:9 Community Enterprise Operating System 9 - CVE-2025-61594: fix credential leak in bundled uri library when combining URIs with + / merge (set_userinfo/set_user/host=/port= clearing and atomic authority replacement in lib/uri/generic.rb); backport of upstream uri 0.12.5 Important TuxCare License Agreement CVE-2025-61594 cpe:/o:centos:centos:9 Community Enterprise Operating System 9 - CVE-2023-28755: uri redos in the vendored Bundler::URI RFC3986 parser. The same patch also carries the CVE-2023-36617 follow-up hardening (upstream ruby/uri 9d7bcef, 9010ee2): the rfc3986 PORT and rfc2396 ABS_URI / REL_URI leading quantifiers become possessive in every uri copy. No ELSLANG ticket exists for CVE-2023-36617, so it is not listed as a tracked id. - CVE-2024-27280: stringio buffer over-read in ungetc/ungetbyte. - CVE-2024-27281: rdoc code execution via unrestricted yaml and marshal loads. - CVE-2024-27282: regexp arbitrary heap read via unbounded reg->dmin. Moderate TuxCare License Agreement CVE-2024-27281 CVE-2023-28755 CVE-2024-27280 CVE-2024-27282 cpe:/o:centos:centos:9 Community Enterprise Operating System 9 - CVE-2023-28755: fix ReDoS in the bundler-vendored uri RFC3986 parser (lib/bundler/vendor/uri/lib/uri/rfc3986_parser.rb, Bundler::URI 0.10.1) by clamping the unbounded quantifiers in RFC3986_URI and RFC3986_relative_ref to their possessive forms; backport of upstream ruby commit 14f025a7 (URI 0.10.0.2 for bundler) - The same patch carries the two-part follow-up hardening that upstream ships together (both dated 2023-04-22, HackerOne #1958260), covering the per-component validation regexps the first fix left unclamped: rfc3986_parser.rb gets a possessive leading whitespace run in default_regexp's PORT entry (upstream ruby/uri commit 9d7bcef1), so an attacker-supplied port assigned via Bundler::URI::Generic#port= (check_port) no longer goes quadratic; and rfc2396_parser.rb gets a possessive leading whitespace quantifier on the ABS_URI and REL_URI patterns, '\A\s*' -> '\A\s*+' (upstream ruby/uri commit 9010ee25), so Bundler::URI::RFC2396_Parser#split / #parse -- reached via the public Bundler::URI::DEFAULT_PARSER and Bundler::URI::Parser constants -- no longer go quadratic on crafted input with a long run of leading whitespace. Both parsers of a uri copy are hardened together; patching only one would leave the copy half-fixed - The primary uri default gem (0.12.4) was already hardened upstream in both parsers and is untouched, and the vendored VERSION_CODE stays 001001 so the build-time %{bundler_uri_version} assertion keeps passing Moderate TuxCare License Agreement CVE-2023-28755 cpe:/o:centos:centos:9 Community Enterprise Operating System 9 - CVE-2026-27820: heap buffer overflow in the bundled zlib extension via Zlib::GzipReader#ungetc. Critical TuxCare License Agreement CVE-2026-27820 cpe:/o:centos:centos:9 Community Enterprise Operating System 9 - CVE-2025-58767: fix denial of service in the bundled REXML gem when parsing invalid XML that contains multiple XML declarations. Moderate TuxCare License Agreement CVE-2025-58767 cpe:/o:centos:centos:9 Community Enterprise Operating System 9 - CVE-2023-28755: uri ReDoS in the RFC3986 parser via a crafted long URI. - CVE-2023-36617: uri ReDoS remaining in both parsers after the incomplete CVE-2023-28755 fix (rfc3986 PORT component, rfc2396 ABS_URI/REL_URI). - CVE-2024-27280: stringio buffer overread in ungetc/ungetbyte. - CVE-2024-27281: rdoc code execution via .rdoc_options and the ri cache. - CVE-2024-27282: regexp arbitrary heap read via unbounded reg->dmin in the Onigmo search. Critical TuxCare License Agreement CVE-2024-27281 CVE-2026-27820 CVE-2023-28756 CVE-2023-28755 CVE-2021-33621 CVE-2021-43809 CVE-2024-49761 CVE-2024-27280 CVE-2025-61594 CVE-2024-27282 CVE-2025-27220 CVE-2024-35176 CVE-2025-27219 CVE-2024-43398 CVE-2024-41946 CVE-2024-41123 CVE-2024-39908 cpe:/o:centos:centos:9 alt-ruby30 alt-ruby30-default-gems alt-ruby30-devel alt-ruby30-doc alt-ruby30-libs alt-ruby30-rubygem-bigdecimal alt-ruby30-rubygem-bundler alt-ruby30-rubygem-io-console alt-ruby30-rubygem-irb alt-ruby30-rubygem-json alt-ruby30-rubygem-minitest alt-ruby30-rubygem-power_assert alt-ruby30-rubygem-psych alt-ruby30-rubygem-rake alt-ruby30-rubygem-rbs alt-ruby30-rubygem-rdoc alt-ruby30-rubygem-rexml alt-ruby30-rubygem-rss alt-ruby30-rubygem-test-unit alt-ruby30-rubygem-typeprof alt-ruby30-rubygems alt-ruby30-rubygems-devel alt-ruby27 alt-ruby27-default-gems alt-ruby27-devel alt-ruby27-doc alt-ruby27-libs alt-ruby27-rubygem-bigdecimal alt-ruby27-rubygem-bundler alt-ruby27-rubygem-io-console alt-ruby27-rubygem-irb alt-ruby27-rubygem-json alt-ruby27-rubygem-minitest alt-ruby27-rubygem-net-telnet alt-ruby27-rubygem-openssl alt-ruby27-rubygem-power_assert alt-ruby27-rubygem-psych alt-ruby27-rubygem-rake alt-ruby27-rubygem-rdoc alt-ruby27-rubygem-test-unit alt-ruby27-rubygem-xmlrpc alt-ruby27-rubygems alt-ruby27-rubygems-devel alt-ruby31 alt-ruby31-bundled-gems alt-ruby31-default-gems alt-ruby31-devel alt-ruby31-doc alt-ruby31-libs alt-ruby31-rubygem-bigdecimal alt-ruby31-rubygem-bundler alt-ruby31-rubygem-io-console alt-ruby31-rubygem-irb alt-ruby31-rubygem-json alt-ruby31-rubygem-minitest alt-ruby31-rubygem-power_assert alt-ruby31-rubygem-psych alt-ruby31-rubygem-rake alt-ruby31-rubygem-rbs alt-ruby31-rubygem-rdoc alt-ruby31-rubygem-rexml alt-ruby31-rubygem-rss alt-ruby31-rubygem-test-unit alt-ruby31-rubygem-typeprof alt-ruby31-rubygems alt-ruby31-rubygems-devel alt-ruby35 alt-ruby35-bundled-gems alt-ruby35-default-gems alt-ruby35-devel alt-ruby35-doc alt-ruby35-libs alt-ruby35-rubygem-bigdecimal alt-ruby35-rubygem-bundler alt-ruby35-rubygem-io-console alt-ruby35-rubygem-irb alt-ruby35-rubygem-json alt-ruby35-rubygem-minitest alt-ruby35-rubygem-power_assert alt-ruby35-rubygem-psych alt-ruby35-rubygem-racc alt-ruby35-rubygem-rake alt-ruby35-rubygem-rbs alt-ruby35-rubygem-rdoc alt-ruby35-rubygem-rexml alt-ruby35-rubygem-rss alt-ruby35-rubygem-test-unit alt-ruby35-rubygem-typeprof alt-ruby35-rubygems alt-ruby35-rubygems-devel alt-ruby26 alt-ruby26-devel alt-ruby26-devel-doc alt-ruby26-doc alt-ruby26-libs alt-ruby26-rubygem-bigdecimal alt-ruby26-rubygem-did_you_mean alt-ruby26-rubygem-io-console alt-ruby26-rubygem-json alt-ruby26-rubygem-minitest alt-ruby26-rubygem-net-telnet alt-ruby26-rubygem-openssl alt-ruby26-rubygem-power_assert alt-ruby26-rubygem-psych alt-ruby26-rubygem-rake alt-ruby26-rubygem-rdoc alt-ruby26-rubygem-test-unit alt-ruby26-rubygem-xmlrpc alt-ruby26-rubygems x86_64 0:3.0.7-169.el9 d07bf2a08d50eb66 0:3.0.7-169.el9 x86_64 0:3.0.0-169.el9 0:2.2.33-169.el9 x86_64 0:0.5.7-169.el9 0:1.3.5-169.el9 x86_64 0:2.5.1-169.el9 0:5.14.2-169.el9 0:1.2.1-169.el9 x86_64 0:3.3.2-169.el9 0:13.0.3-169.el9 0:1.4.0-169.el9 0:6.3.4.1-169.el9 0:3.2.5-169.el9 0:0.2.9-169.el9 0:3.3.7-169.el9 0:0.15.2-169.el9 0:3.2.33-169.el9 x86_64 0:2.7.8-144.el9 0:2.7.8-144.el9 x86_64 0:2.0.0-144.el9 0:2.2.24-144.el9 x86_64 0:0.5.6-144.el9 0:1.2.6-144.el9 x86_64 0:2.3.0-144.el9 0:5.13.0-144.el9 1:0.2.0-144.el9 x86_64 0:2.1.4-144.el9 0:1.1.7-144.el9 x86_64 0:3.1.0-144.el9 0:13.0.1-144.el9 0:6.2.1.1-144.el9 0:3.3.4-144.el9 0:0.3.0-144.el9 0:3.1.6-144.el9 x86_64 0:2.7.8-145.el9 0:2.7.8-145.el9 x86_64 0:2.0.0-145.el9 0:2.2.24-145.el9 x86_64 0:0.5.6-145.el9 0:1.2.6-145.el9 x86_64 0:2.3.0-145.el9 0:5.13.0-145.el9 1:0.2.0-145.el9 x86_64 0:2.1.4-145.el9 0:1.1.7-145.el9 x86_64 0:3.1.0-145.el9 0:13.0.1-145.el9 0:6.2.1.1-145.el9 0:3.3.4-145.el9 0:0.3.0-145.el9 0:3.1.6-145.el9 x86_64 0:3.0.7-170.el9 0:3.0.7-170.el9 x86_64 0:3.0.0-170.el9 0:2.2.33-170.el9 x86_64 0:0.5.7-170.el9 0:1.3.5-170.el9 x86_64 0:2.5.1-170.el9 0:5.14.2-170.el9 0:1.2.1-170.el9 x86_64 0:3.3.2-170.el9 0:13.0.3-170.el9 0:1.4.0-170.el9 0:6.3.4.1-170.el9 0:3.2.5-170.el9 0:0.2.9-170.el9 0:3.3.7-170.el9 0:0.15.2-170.el9 0:3.2.33-170.el9 x86_64 0:2.7.8-146.el9 0:2.7.8-146.el9 x86_64 0:2.0.0-146.el9 0:2.2.24-146.el9 x86_64 0:0.5.6-146.el9 0:1.2.6-146.el9 x86_64 0:2.3.0-146.el9 0:5.13.0-146.el9 1:0.2.0-146.el9 x86_64 0:2.1.4-146.el9 0:1.1.7-146.el9 x86_64 0:3.1.0-146.el9 0:13.0.1-146.el9 0:6.2.1.1-146.el9 0:3.3.4-146.el9 0:0.3.0-146.el9 0:3.1.6-146.el9 x86_64 0:3.1.7-10.el9 0:3.1.7-10.el9 x86_64 0:3.1.1-10.el9 0:2.3.27-10.el9 x86_64 0:0.5.11-10.el9 0:1.4.1-10.el9 x86_64 0:2.6.1-10.el9 0:5.15.0-10.el9 0:2.0.1-10.el9 x86_64 0:4.0.4-10.el9 0:13.0.6-10.el9 x86_64 0:2.7.0-10.el9 0:6.4.1.1-10.el9 0:3.3.9-10.el9 0:0.3.1-10.el9 0:3.5.3-10.el9 0:0.21.3-10.el9 0:3.3.27-10.el9 x86_64 0:3.0.7-171.el9 0:3.0.7-171.el9 x86_64 0:3.0.0-171.el9 0:2.2.33-171.el9 x86_64 0:0.5.7-171.el9 0:1.3.5-171.el9 x86_64 0:2.5.1-171.el9 0:5.14.2-171.el9 0:1.2.1-171.el9 x86_64 0:3.3.2-171.el9 0:13.0.3-171.el9 0:1.4.0-171.el9 0:6.3.4.1-171.el9 0:3.2.5-171.el9 0:0.2.9-171.el9 0:3.3.7-171.el9 0:0.15.2-171.el9 0:3.2.33-171.el9 x86_64 0:3.0.7-172.el9 0:3.0.7-172.el9 x86_64 0:3.0.0-172.el9 0:2.2.33-172.el9 x86_64 0:0.5.7-172.el9 0:1.3.5-172.el9 x86_64 0:2.5.1-172.el9 0:5.14.2-172.el9 0:1.2.1-172.el9 x86_64 0:3.3.2-172.el9 0:13.0.3-172.el9 0:1.4.0-172.el9 0:6.3.4.1-172.el9 0:3.2.5-172.el9 0:0.2.9-172.el9 0:3.3.7-172.el9 0:0.15.2-172.el9 0:3.2.33-172.el9 x86_64 0:2.7.8-147.el9 0:2.7.8-147.el9 x86_64 0:2.0.0-147.el9 0:2.2.24-147.el9 x86_64 0:0.5.6-147.el9 0:1.2.6-147.el9 x86_64 0:2.3.0-147.el9 0:5.13.0-147.el9 1:0.2.0-147.el9 x86_64 0:2.1.4-147.el9 0:1.1.7-147.el9 x86_64 0:3.1.0-147.el9 0:13.0.1-147.el9 0:6.2.1.1-147.el9 0:3.3.4-147.el9 0:0.3.0-147.el9 0:3.1.6-147.el9 x86_64 0:3.1.7-11.el9 0:3.1.7-11.el9 x86_64 0:3.1.1-11.el9 0:2.3.27-11.el9 x86_64 0:0.5.11-11.el9 0:1.4.1-11.el9 x86_64 0:2.6.1-11.el9 0:5.15.0-11.el9 0:2.0.1-11.el9 x86_64 0:4.0.4-11.el9 0:13.0.6-11.el9 x86_64 0:2.7.0-11.el9 0:6.4.1.1-11.el9 0:3.3.9-11.el9 0:0.3.1-11.el9 0:3.5.3-11.el9 0:0.21.3-11.el9 0:3.3.27-11.el9 x86_64 0:2.7.8-148.el9 0:2.7.8-148.el9 x86_64 0:2.0.0-148.el9 0:2.2.24-148.el9 x86_64 0:0.5.6-148.el9 0:1.2.6-148.el9 x86_64 0:2.3.0-148.el9 0:5.13.0-148.el9 1:0.2.0-148.el9 x86_64 0:2.1.4-148.el9 0:1.1.7-148.el9 x86_64 0:3.1.0-148.el9 0:13.0.1-148.el9 0:6.2.1.1-148.el9 0:3.3.4-148.el9 0:0.3.0-148.el9 0:3.1.6-148.el9 x86_64 0:3.1.7-12.el9 0:3.1.7-12.el9 x86_64 0:3.1.1-12.el9 0:2.3.27-12.el9 x86_64 0:0.5.11-12.el9 0:1.4.1-12.el9 x86_64 0:2.6.1-12.el9 0:5.15.0-12.el9 0:2.0.1-12.el9 x86_64 0:4.0.4-12.el9 0:13.0.6-12.el9 x86_64 0:2.7.0-12.el9 0:6.4.1.1-12.el9 0:3.3.9-12.el9 0:0.3.1-12.el9 0:3.5.3-12.el9 0:0.21.3-12.el9 0:3.3.27-12.el9 x86_64 0:3.5.0-0.2.preview1.el9 0:3.5.0-0.2.preview1.el9 x86_64 0:3.1.9-0.2.preview1.el9 0:2.7.0.dev-0.2.preview1.el9 x86_64 0:0.8.0-0.2.preview1.el9 0:1.15.2-0.2.preview1.el9 x86_64 0:2.10.2-0.2.preview1.el9 0:5.25.5-0.2.preview1.el9 0:2.0.5-0.2.preview1.el9 x86_64 0:5.2.3-0.2.preview1.el9 x86_64 0:1.8.1-0.2.preview1.el9 0:13.2.1-0.2.preview1.el9 x86_64 0:3.9.2-0.2.preview1.el9 0:6.13.1-0.2.preview1.el9 0:3.4.1-0.2.preview1.el9 0:0.3.1-0.2.preview1.el9 0:3.6.8-0.2.preview1.el9 0:0.30.1-0.2.preview1.el9 0:3.7.0.dev-0.2.preview1.el9 x86_64 0:3.5.0-0.3.preview1.el9 0:3.5.0-0.3.preview1.el9 x86_64 0:3.1.9-0.3.preview1.el9 0:2.7.0.dev-0.3.preview1.el9 x86_64 0:0.8.0-0.3.preview1.el9 0:1.15.2-0.3.preview1.el9 x86_64 0:2.10.2-0.3.preview1.el9 0:5.25.5-0.3.preview1.el9 0:2.0.5-0.3.preview1.el9 x86_64 0:5.2.3-0.3.preview1.el9 x86_64 0:1.8.1-0.3.preview1.el9 0:13.2.1-0.3.preview1.el9 x86_64 0:3.9.2-0.3.preview1.el9 0:6.13.1-0.3.preview1.el9 0:3.4.1-0.3.preview1.el9 0:0.3.1-0.3.preview1.el9 0:3.6.8-0.3.preview1.el9 0:0.30.1-0.3.preview1.el9 0:3.7.0.dev-0.3.preview1.el9 x86_64 0:2.6.10-18.el9 0:2.6.10-18.el9 x86_64 0:1.4.1.0-18.el9 x86_64 0:1.3.0-18.el9 x86_64 0:0.4.7-18.el9 x86_64 0:2.1.0-18.el9 x86_64 0:5.11.3-18.el9 x86_64 1:0.2.0-18.el9 x86_64 0:2.1.2-18.el9 x86_64 0:1.1.3-18.el9 x86_64 0:3.1.0-18.el9 x86_64 0:12.3.3-18.el9 x86_64 0:6.1.2.1.0-18.el9 x86_64 0:3.2.9-18.el9 x86_64 0:0.3.0-18.el9 x86_64 0:3.0.3.1-18.el9