[CLSA-2026:1791195487] ruby: Fix of 11 CVEs
Type:
security
Severity:
Critical
Release date:
2026-10-14 18:48:53 UTC
Description:
- CVE-2024-41123: rexml: fix ReDoS in REXML::Source when parsing input with many >]/]]> sequences or without a terminator - CVE-2024-41946: rexml: enforce the entity expansion limit in the SAX2 and pull parsers - CVE-2024-43398: rexml: fix DoS in the tree parser on deep elements with same-local-name namespaced attributes (the affected bundled rexml 3.2.5 parser/source files are synced with rexml 3.3.9, which carries these fixes and their prerequisites) - CVE-2025-58767: rexml: fix DoS when parsing XML with multiple XML declarations; only one well-formed XML declaration is accepted
Updated packages:
  • ruby-3.0.7-168.el9_8.tuxcare.els2.aarch64.rpm
    sha:50246ad913fda5e8fad821284039004f8f89ee100ee39b937f58591367910790
  • ruby-3.0.7-168.el9_8.tuxcare.els2.i686.rpm
    sha:c70270bfa4ce3316547b847834eef198e6d28ab11ae7fba257a0278f4b20ec06
  • ruby-3.0.7-168.el9_8.tuxcare.els2.x86_64.rpm
    sha:a61f48cb6deeca1059e082edd674bff5d666df5b58f3d4188b2ac1bd2830eafb
  • ruby-default-gems-3.0.7-168.el9_8.tuxcare.els2.noarch.rpm
    sha:bc5a8a9bf723a594b2a10954dacce0d1ea1b055d76b87a311da3cce44084720f
  • ruby-devel-3.0.7-168.el9_8.tuxcare.els2.aarch64.rpm
    sha:3e84ea96683a3407898d5156875b206ed0426988e06cf445afbc0b308c366972
  • ruby-devel-3.0.7-168.el9_8.tuxcare.els2.i686.rpm
    sha:b9d6776577f021d385ab440c6e61174bb692b5e36d00535f49ba4da4a57027e2
  • ruby-devel-3.0.7-168.el9_8.tuxcare.els2.x86_64.rpm
    sha:4281c26f289eb487a3602f8be72ed2420f82561856ad99a966d0ffd742a20f9c
  • ruby-doc-3.0.7-168.el9_8.tuxcare.els2.noarch.rpm
    sha:172b5445bafd756cf8cf30a0f4b8eafaf704dd1213088f8cff51662ae956bb92
  • ruby-libs-3.0.7-168.el9_8.tuxcare.els2.aarch64.rpm
    sha:c9621c9dea5c5ac74ee527f236588e2b970925b5f89d46807a4214c57725f5d6
  • ruby-libs-3.0.7-168.el9_8.tuxcare.els2.i686.rpm
    sha:44dacdcfe3f3cca5ebdba37ed1629b6f802fa5720f6b68604aec91a98f881148
  • ruby-libs-3.0.7-168.el9_8.tuxcare.els2.x86_64.rpm
    sha:e6f9e26f5db0c7ae2d70cf1f86282a00c9eec15e39be9cb1575b3dd73cd8238a
  • rubygem-bigdecimal-3.0.0-168.el9_8.tuxcare.els2.aarch64.rpm
    sha:03124ccfde08a95766e777e9ba0f55a96d9aaf9ce943402d7d21720fb5a7c367
  • rubygem-bigdecimal-3.0.0-168.el9_8.tuxcare.els2.i686.rpm
    sha:b396c522156fd1235b8397ef3fbae1a81ad9e4fe0258f27fda80fbd7cbf25736
  • rubygem-bigdecimal-3.0.0-168.el9_8.tuxcare.els2.x86_64.rpm
    sha:66dae29fa205e07073f95772c97ae14517be95ef4739d12784c3132f34066110
  • rubygem-bundler-2.2.33-168.el9_8.tuxcare.els2.noarch.rpm
    sha:63ab215df19bb84b3c8ab2b2cbe7ebf0cd3402a2a92b3a594dbce008f1887221
  • rubygem-io-console-0.5.7-168.el9_8.tuxcare.els2.aarch64.rpm
    sha:8b5249c8a60d8aec125ecec284cffff44825ef9a630b031ad61359c2eead8406
  • rubygem-io-console-0.5.7-168.el9_8.tuxcare.els2.i686.rpm
    sha:16ee5cb34463ac5b1f9eb40b43bba676ca9314b2f2cf78515b8d4b5b4ab9c44c
  • rubygem-io-console-0.5.7-168.el9_8.tuxcare.els2.x86_64.rpm
    sha:3109162859d172b8eb4098ea751b6a6400eeb530cd5c10380f22f60c71cede32
  • rubygem-irb-1.3.5-168.el9_8.tuxcare.els2.noarch.rpm
    sha:5bc70b3c9966a89e4e7afedd4849449160e804fe48b6cc5ea83d382071cf3095
  • rubygem-json-2.5.1-168.el9_8.tuxcare.els2.aarch64.rpm
    sha:c143aa2860f1fc6efffd3a5da08e33678e219f7c9ecdcdae5554cc0e75d9e441
  • rubygem-json-2.5.1-168.el9_8.tuxcare.els2.i686.rpm
    sha:3733837f7e39117f01d98475f59b0084fe6c6ba646807b524ba70e55cbbe3098
  • rubygem-json-2.5.1-168.el9_8.tuxcare.els2.x86_64.rpm
    sha:36ea78982b54a441d94748420d1a7edde2de0c66309202340c789e27e6f33b78
  • rubygem-minitest-5.14.2-168.el9_8.tuxcare.els2.noarch.rpm
    sha:fb51541d2ad4c6a2de4dd890effbfb4efb3727199966132a30a124c7a7073f4b
  • rubygem-power_assert-1.2.1-168.el9_8.tuxcare.els2.noarch.rpm
    sha:86271d4027d8c3c0c461f00a1267652fff3066f497a5bccc8f33e1dc5b022ee5
  • rubygem-psych-3.3.2-168.el9_8.tuxcare.els2.aarch64.rpm
    sha:28846937c2797d763a45d723e30d475815a35984e175d7650a8a9f4ea2486e18
  • rubygem-psych-3.3.2-168.el9_8.tuxcare.els2.i686.rpm
    sha:8dc404b282c961d0cd61547479ee2d9aed3643a91830319d96e90aa1edec854e
  • rubygem-psych-3.3.2-168.el9_8.tuxcare.els2.x86_64.rpm
    sha:6795c72a32e8237262a2bb603c7f15d34ccd983c86146bf0f620c96214c6fa9d
  • rubygem-rake-13.0.3-168.el9_8.tuxcare.els2.noarch.rpm
    sha:9f99d937b669dff20a27ac6abc9d34447db3c04d3da01f5b3d0b76ec8334fbc4
  • rubygem-rbs-1.4.0-168.el9_8.tuxcare.els2.noarch.rpm
    sha:ff83c30693f420c88e3dcc6416aba3572230d980e3fe047de329bd8adfd0302c
  • rubygem-rdoc-6.3.4.1-168.el9_8.tuxcare.els2.noarch.rpm
    sha:35f2adb74607a47bfea3d2d538943cda990b3cf1c7abf04a0f44f747891bf8f0
  • rubygem-rexml-3.2.5-168.el9_8.tuxcare.els2.noarch.rpm
    sha:09ff1214a3ff9daefc44d715ef5fc5684b6663af2f16d46c77580ee038ecacee
  • rubygem-rss-0.2.9-168.el9_8.tuxcare.els2.noarch.rpm
    sha:e82afd6f59422e3b8d52073f7b8d46e5be03a4e6ca0fa510f9d97fb4ac5fa147
  • rubygem-test-unit-3.3.7-168.el9_8.tuxcare.els2.noarch.rpm
    sha:4183259714088321523853a48a3b9dfc0c96e00d4fee401fd9890d82aa0c1972
  • rubygem-typeprof-0.15.2-168.el9_8.tuxcare.els2.noarch.rpm
    sha:3ad9e2e4427379480c9f5e293a490e4ff46f3729466802d89f2061befe757ee0
  • rubygems-3.2.33-168.el9_8.tuxcare.els2.noarch.rpm
    sha:550564ddf2e15ab74a62afd5be987b9d00771442ff1e787de8e0a8b331236b19
  • rubygems-devel-3.2.33-168.el9_8.tuxcare.els2.noarch.rpm
    sha:345b38f04d05151a605b05b4b08ab4a21cd3f51037f3c642d31dd7980c303ae7
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.