[CLSA-2026:1780906981] alt-ruby27: Fix of 2 CVEs
Type:
security
Severity:
Moderate
Release date:
2026-06-08 08:24:45 UTC
Description:
- CVE-2024-35176: rexml dos via attribute value with many `>` characters. - CVE-2024-39908: rexml redos via repeated space characters in ATTLIST.
CVEs fixed:
Updated packages:
  • alt-ruby27-2.7.8-145.el8.x86_64.rpm
    sha:5c4847d4637727b1f4f4c758aa2184b09af92c4e8fa31df7ee394d2cebff32d5
  • alt-ruby27-default-gems-2.7.8-145.el8.noarch.rpm
    sha:8d4d8527dba33beeeb4dacb00428f03322e25050d9f679e81a60ef090b671a2a
  • alt-ruby27-devel-2.7.8-145.el8.x86_64.rpm
    sha:e8d883d8327e6acaaa66fd13e69012756ba4af2aec1847d8e85868483e49e082
  • alt-ruby27-doc-2.7.8-145.el8.noarch.rpm
    sha:57a6a96eee3d624c5b89a20ae4a5e4d4e9720148437effd0543f3b34d5782fe2
  • alt-ruby27-libs-2.7.8-145.el8.x86_64.rpm
    sha:6f689295cb19d199d97d38cb8a543289f6e165578636945ae78f3c98c0738f36
  • alt-ruby27-rubygem-bigdecimal-2.0.0-145.el8.x86_64.rpm
    sha:5498d15e1c502cd8c8feaed41b839b01c73e4a9c943c4a50c69ffa640681f71a
  • alt-ruby27-rubygem-bundler-2.2.24-145.el8.noarch.rpm
    sha:6390543a58ee7facae95f4408b394c5a4292b8195a64b7bfac715281e74af9e5
  • alt-ruby27-rubygem-io-console-0.5.6-145.el8.x86_64.rpm
    sha:a91b881abef5e83497ea2be46c6e93c1303b7c20e56ff7defecabd57033155bf
  • alt-ruby27-rubygem-irb-1.2.6-145.el8.noarch.rpm
    sha:72785608d5517b39ce7b2387b868f658f67ba64305a0f3133222ff97a97dd583
  • alt-ruby27-rubygem-json-2.3.0-145.el8.x86_64.rpm
    sha:3222c04728685fdd0f23dd03494990fa7b1dd213d49365e083f54c9751d5cfd8
  • alt-ruby27-rubygem-minitest-5.13.0-145.el8.noarch.rpm
    sha:dca04fae663294225d26e36d0d02eadbf894ef2caecbe48a8cabcfb008b65d24
  • alt-ruby27-rubygem-net-telnet-0.2.0-145.el8.noarch.rpm
    sha:a8e06691aebe7a9f3af9da3969b38afa743f2580840cd4d3eaaf24e372b37df9
  • alt-ruby27-rubygem-openssl-2.1.4-145.el8.x86_64.rpm
    sha:df68cc1d8a63b1d0c99cccfac5099afe3106642ca7d727fb482c7226b7df50f6
  • alt-ruby27-rubygem-power_assert-1.1.7-145.el8.noarch.rpm
    sha:622145d9f92d259d8f7dab47718532dfed55936858e8202e41c90335f562900d
  • alt-ruby27-rubygem-psych-3.1.0-145.el8.x86_64.rpm
    sha:0449885fa447b20070a9d0ffbe3a9226353e34e73038f49232d34d1b7abbe1e0
  • alt-ruby27-rubygem-rake-13.0.1-145.el8.noarch.rpm
    sha:761112058a2f371d0b05a3814824108004a49791c30fef640d32d3ae26b4a3ff
  • alt-ruby27-rubygem-rdoc-6.2.1.1-145.el8.noarch.rpm
    sha:96c0a151a541a478a376a68b4b85c3c7d128932b69cc9294a7fd3115cc736d99
  • alt-ruby27-rubygem-test-unit-3.3.4-145.el8.noarch.rpm
    sha:84a2a8745b69d133b2ae7dbfdcd1f4c0b4943e594c4721cc4b5479a16ac11101
  • alt-ruby27-rubygem-xmlrpc-0.3.0-145.el8.noarch.rpm
    sha:aec43a4ebe86b884bfca4f38264f013256bd7a4d94cf9d5b2126e713cae967c6
  • alt-ruby27-rubygems-3.1.6-145.el8.noarch.rpm
    sha:a98996c791db6be7c4565bbde57406953df5e21cce678dea02a74c432a1225f0
  • alt-ruby27-rubygems-devel-3.1.6-145.el8.noarch.rpm
    sha:c35c6a0e9c862b0e08665dd2ab2708f3c35ee0417d16cbde1da7cad576035894
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.