[CLSA-2026:1778166928] alt-ruby30: Fix of 4 CVEs
Type:
security
Severity:
Important
Release date:
2026-05-07 15:15:37 UTC
Description:
- CVE-2024-49761: rexml redos via leading-zero hex character reference. - CVE-2024-43398: rexml dos via deep same-local-name attributes. - CVE-2024-41946: rexml dos via entity expansion in sax/pull parsers. - CVE-2024-41123: rexml dos via slow processing-instruction parsing.
Updated packages:
  • alt-ruby30-3.0.7-169.el9.x86_64.rpm
    sha:6ecb5fbe23b1e04f38f19af01184b2b687a0d621dd2bf5accb82d7ef35adb119
  • alt-ruby30-default-gems-3.0.7-169.el9.noarch.rpm
    sha:aec600031d51d8c36bc890750b78e384262c51564f30f506b3691b99200c5445
  • alt-ruby30-devel-3.0.7-169.el9.x86_64.rpm
    sha:70db40c07faf373a63348cc3d647e4ce166fec84205eb1338c743e0d6269709d
  • alt-ruby30-doc-3.0.7-169.el9.noarch.rpm
    sha:3fe9ce7733e19e670a3379806d88f8e37eeb66af1b771fde3019d7dae7c5e06f
  • alt-ruby30-libs-3.0.7-169.el9.x86_64.rpm
    sha:663b88e0f88694ad512ea2a4411a4949c388e086b28582a77c4387075fd76834
  • alt-ruby30-rubygem-bigdecimal-3.0.0-169.el9.x86_64.rpm
    sha:317faa71e729c0eab1666f570cac33fbeee9781894a037f61c8d59120b6d6825
  • alt-ruby30-rubygem-bundler-2.2.33-169.el9.noarch.rpm
    sha:d7280b44bb6fe48a95a0522d3785613d9c94cee0baa1f6ac336d345cd60ca2c4
  • alt-ruby30-rubygem-io-console-0.5.7-169.el9.x86_64.rpm
    sha:572e571745fca28b73ae47f9c94df17e1a6d21c8fd4e11b040c3db4f102d5f53
  • alt-ruby30-rubygem-irb-1.3.5-169.el9.noarch.rpm
    sha:3ae9e5804d90d73e2f77eefdb8a4fe5c0b3c24e45ba63a766478d7fde84077f9
  • alt-ruby30-rubygem-json-2.5.1-169.el9.x86_64.rpm
    sha:f76f6c72250522f9abb95ad17255a88f7fa52880f3381edb29da8e8c23deb401
  • alt-ruby30-rubygem-minitest-5.14.2-169.el9.noarch.rpm
    sha:a141eb08c451ec911ecea6e5c21dba5eaf0f063d3d1349d821f8d7c4b4fc7234
  • alt-ruby30-rubygem-power_assert-1.2.1-169.el9.noarch.rpm
    sha:9eb0d4c7bc34db7e5dca08c37d040cca024c1d3d5f2a64e818a7f43080a142f1
  • alt-ruby30-rubygem-psych-3.3.2-169.el9.x86_64.rpm
    sha:edb01c560eeeb5466f79e2c09d8393474d10cbfb78a13c442b82fceb39852ff6
  • alt-ruby30-rubygem-rake-13.0.3-169.el9.noarch.rpm
    sha:8808caf4252e25dffc062630fd0db92d5657c38906ca37a9e08436dbb29f6bd2
  • alt-ruby30-rubygem-rbs-1.4.0-169.el9.noarch.rpm
    sha:f2fef837348259cf4b4a2be81a7a1349d6321e259a2755120105fac77d357aa5
  • alt-ruby30-rubygem-rdoc-6.3.4.1-169.el9.noarch.rpm
    sha:e7a91bdacb6c61ac0eaa670e100a68069a140fac98d8124fa1d628436450b47a
  • alt-ruby30-rubygem-rexml-3.2.5-169.el9.noarch.rpm
    sha:c0328d2488adea7cf86c58794467faf30127d496d4d0946f62fbd63f5d2b1cb9
  • alt-ruby30-rubygem-rss-0.2.9-169.el9.noarch.rpm
    sha:51321840845ef1757c554e99cc8a223732dc3ecc6627414409e554b112c0eb1f
  • alt-ruby30-rubygem-test-unit-3.3.7-169.el9.noarch.rpm
    sha:708ecba32291a19a9788c93b9a9f1b07de95b6844f0a516cb62ca85018c5f8b4
  • alt-ruby30-rubygem-typeprof-0.15.2-169.el9.noarch.rpm
    sha:49c3664761572061eadcd9e42cbb7800371ba453b0a8c3fc3b61d708fa4e502b
  • alt-ruby30-rubygems-3.2.33-169.el9.noarch.rpm
    sha:0689c89bd97348b346de884f640360df2799ad3ec1f1c071fe0172c15274cec4
  • alt-ruby30-rubygems-devel-3.2.33-169.el9.noarch.rpm
    sha:d365b18fb255df6b3f679749588e3c9795129f20a0e0bd9cab54b2804763e5ac
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.