[CLSA-2026:1780922980] alt-ruby30: Fix of 2 CVEs
Type:
security
Severity:
Moderate
Release date:
2026-06-08 17:41:26 UTC
Description:
- CVE-2024-35176: rexml dos via many less-than characters in an attribute value. - CVE-2024-39908: rexml redos via repeated zeros in a character reference.
CVEs fixed:
Updated packages:
  • alt-ruby30-3.0.7-170.el10.x86_64.rpm
    sha:b136dc7954a999c38c244eee3e7b506ab26e8fbbb36e51779dc36e0bfd287131
  • alt-ruby30-default-gems-3.0.7-170.el10.noarch.rpm
    sha:0de0a92db6d10091370d794fd08ab68f02e515b0e3b52f03bd9798696dd6de1d
  • alt-ruby30-devel-3.0.7-170.el10.x86_64.rpm
    sha:ac4f514b16300b5717b923339c3a51fcb732d9785a0add3804a0f76927495e6a
  • alt-ruby30-doc-3.0.7-170.el10.noarch.rpm
    sha:a169cec0516db12e940b8f494afcb7bca176d43f2fc81ed3375042600106ac86
  • alt-ruby30-libs-3.0.7-170.el10.x86_64.rpm
    sha:58433a7232f543e033bf906c961d6b85798db0df62a638f4f06d4c5613881df1
  • alt-ruby30-rubygem-bigdecimal-3.0.0-170.el10.x86_64.rpm
    sha:ebadd37fa0709b2017a156a8a8831a2241b44aeb80c3b7e11932382cae0f00ab
  • alt-ruby30-rubygem-bundler-2.2.33-170.el10.noarch.rpm
    sha:02d78168a5c192d76938d4e34975053c7dd3dbf709524402d3969cddbbc0a983
  • alt-ruby30-rubygem-io-console-0.5.7-170.el10.x86_64.rpm
    sha:298dfefc5cfc7cfc4b4f4404b2227fe91d15098034b0ef93742d4933948d0748
  • alt-ruby30-rubygem-irb-1.3.5-170.el10.noarch.rpm
    sha:33ba47e83e671e7097be471d867d9cd64c75950c43a63113cf764a13c2163bd2
  • alt-ruby30-rubygem-json-2.5.1-170.el10.x86_64.rpm
    sha:113fd7983a4516cbf99e04a7d2b3cccd25d2c009cfbbb1a7da121a62f39e0c27
  • alt-ruby30-rubygem-minitest-5.14.2-170.el10.noarch.rpm
    sha:1da0676a54295e161ad87b934f0e8356ba7473fd31fd6e667b6ca65370b42306
  • alt-ruby30-rubygem-power_assert-1.2.1-170.el10.noarch.rpm
    sha:ffdcb1fc8a51f93d08420f0b7969b91e2eb1a888106c224df804c70c9d4dadc5
  • alt-ruby30-rubygem-psych-3.3.2-170.el10.x86_64.rpm
    sha:bfd916a7c18c83588276b290eba5109239e3fd6ce5adfc14d6c8a7438722c3c9
  • alt-ruby30-rubygem-rake-13.0.3-170.el10.noarch.rpm
    sha:b799de039d42a7fc91d0e28c35f12876717fc9333ea7f88956846d9fc204e834
  • alt-ruby30-rubygem-rbs-1.4.0-170.el10.noarch.rpm
    sha:c4ba131e7f7283e4198ac6cbd504f18caf247c0d14782b072c1f1d71949039d7
  • alt-ruby30-rubygem-rdoc-6.3.4.1-170.el10.noarch.rpm
    sha:af7158178aff7a1ba880735d3d13d18dc412bd140a8ed023e41bace97eb136d4
  • alt-ruby30-rubygem-rexml-3.2.5-170.el10.noarch.rpm
    sha:5bc0d7e1f844817845f7ba1f6137be10c26fe4c2981c79e698229c0851448b84
  • alt-ruby30-rubygem-rss-0.2.9-170.el10.noarch.rpm
    sha:066e9c9d3776595766c23abc1711f44cd8c2ee527c7d16e47d554ac53486a78d
  • alt-ruby30-rubygem-test-unit-3.3.7-170.el10.noarch.rpm
    sha:c4dbe2a33f733866e9fc8c9da0313bde6a05ecd21922e26f5a52bb5de3d123df
  • alt-ruby30-rubygem-typeprof-0.15.2-170.el10.noarch.rpm
    sha:ac89ebe3f5f8b7128e09fe3a21729599dcbe9868d31c54a39742152980075906
  • alt-ruby30-rubygems-3.2.33-170.el10.noarch.rpm
    sha:e74a75c028494ca2cf39ec26abead90e11187b76522a81583f93e4b196a7c51e
  • alt-ruby30-rubygems-devel-3.2.33-170.el10.noarch.rpm
    sha:d17febd43d5c5dc243183a730fd2e87d04c5c7744e269ee4d1cd46082c208deb
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.