[CLSA-2026:1787908991] alt-ruby30: Fix of CVE-2025-61594
Type:
security
Severity:
Important
Release date:
2026-08-28 09:23:21 UTC
Description:
- CVE-2025-27219: cgi DoS via super-linear cookie merge in CGI::Cookie.parse. - CVE-2025-27220: cgi ReDoS in CGI::Util#escapeElement / #unescapeElement. - CVE-2025-61594: uri credential leak when combining URIs with + (CVE-2025-27221 bypass).
CVEs fixed:
Updated packages:
  • alt-ruby30-3.0.7-172.el7.x86_64.rpm
    sha:4a841fd84d0dcede9260d657644ce2f718135a367045d66b91c7f5219f990d88
  • alt-ruby30-default-gems-3.0.7-172.el7.noarch.rpm
    sha:89ca800b08ea21f73854eed080cc6ea04307458f8ce123ca85ea0452fb6d5c95
  • alt-ruby30-devel-3.0.7-172.el7.x86_64.rpm
    sha:5b41f389b3917f742435a07bd06889133740f8c06adfb03d681be458d623de29
  • alt-ruby30-doc-3.0.7-172.el7.noarch.rpm
    sha:4221deb819e2bba3451d886830ed98c4e017cb034c25dbce8fe5142ff70ed2cf
  • alt-ruby30-libs-3.0.7-172.el7.x86_64.rpm
    sha:89b7672c4fe23e52fa92f57828f4dbbb872c5066f7ba5f6eb02c377cc9ddb488
  • alt-ruby30-rubygem-bigdecimal-3.0.0-172.el7.x86_64.rpm
    sha:70a42affba14421720e61bf5e5b1391f35927576582fa347a5dd6bf75e426d27
  • alt-ruby30-rubygem-bundler-2.2.33-172.el7.noarch.rpm
    sha:3c4dfdb16aa30ee49cfb7a1b14dbc844c1892d2229a9ba1000ffbe46adae838a
  • alt-ruby30-rubygem-io-console-0.5.7-172.el7.x86_64.rpm
    sha:f814eb5d2e6854b6a03d3fe5cd1fd67779c0555fbb126f30491f9176e89617c0
  • alt-ruby30-rubygem-irb-1.3.5-172.el7.noarch.rpm
    sha:902821af95bdc68dc1153b4b384de99347ae03606fb96f799f1884768d4fdce1
  • alt-ruby30-rubygem-json-2.5.1-172.el7.x86_64.rpm
    sha:61c9065515f9320c10fecb7d7d0bd81deb551643741c2b870dc519e3b89da994
  • alt-ruby30-rubygem-minitest-5.14.2-172.el7.noarch.rpm
    sha:b563e27884630ac4ac9004545500e6a793d5f56746e7486cf54f80c5a9908ad0
  • alt-ruby30-rubygem-power_assert-1.2.1-172.el7.noarch.rpm
    sha:891a01b9798ff925f8899a997821b9b0fb0d395e71fa5761ab7ff79e3c365b1d
  • alt-ruby30-rubygem-psych-3.3.2-172.el7.x86_64.rpm
    sha:0e15fcc01c5daa5152f4ccece827b66ddd4fd95ef5bd2f94a077bef20a367f41
  • alt-ruby30-rubygem-rake-13.0.3-172.el7.noarch.rpm
    sha:6c59931a0cc97495fa753f3bdc0eb9bea7c1c1b27e1e8028957e2f93c27687a0
  • alt-ruby30-rubygem-rbs-1.4.0-172.el7.noarch.rpm
    sha:77af9b5404c7257c831d07648d8b377621a40d86ab359ff2f5eadb97a176b94f
  • alt-ruby30-rubygem-rdoc-6.3.4.1-172.el7.noarch.rpm
    sha:bb4773a9873a0ad09c45afa9414c710f52646d6ed8de01fa35c76ace67ee25e9
  • alt-ruby30-rubygem-rexml-3.2.5-172.el7.noarch.rpm
    sha:f639ec2afe40bc6e91d3100a0f044e8e4ce90f1eea18cab8787e02a24447405f
  • alt-ruby30-rubygem-rss-0.2.9-172.el7.noarch.rpm
    sha:b5cd4a404f2b37d9f8fbc4c7efab209784e8ec4c63146dd05b6c3b32ecb26999
  • alt-ruby30-rubygem-test-unit-3.3.7-172.el7.noarch.rpm
    sha:8eaa1e969cdeec56a0847e6538ceb3da9bf160a6252aa33d90ec88ead5fd43c7
  • alt-ruby30-rubygem-typeprof-0.15.2-172.el7.noarch.rpm
    sha:de2836f522ce619e56ca13acc09c321fd65b39755099d15d843720b41af5ff33
  • alt-ruby30-rubygems-3.2.33-172.el7.noarch.rpm
    sha:2a29ddb8dd135cb7da3818af77feec93b5b05dfe26b5b4360394713fb06093b1
  • alt-ruby30-rubygems-devel-3.2.33-172.el7.noarch.rpm
    sha:1c0241881f5f1c501c080c0ab8eab9851a14ba14e2ace876bbfee96dd7e8bee1
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.