[CLSA-2026:1780908964] alt-ruby30: Fix of 2 CVEs
Type:
security
Severity:
Moderate
Release date:
2026-06-08 08:56:23 UTC
Description:
- CVE-2024-35176: rexml dos via many less-than characters in an attribute value. - CVE-2024-39908: rexml redos via repeated zeros in a character reference.
CVEs fixed:
Updated packages:
  • alt-ruby30-3.0.7-170.el8.x86_64.rpm
    sha:9e0b6bc8d859822e63a90d022ba29669059f995a02fe03d752268abcab132063
  • alt-ruby30-default-gems-3.0.7-170.el8.noarch.rpm
    sha:90c5d88780b7845049d6adab303a4d503b3eb8b33592f5df17e6b08f66e4fd54
  • alt-ruby30-devel-3.0.7-170.el8.x86_64.rpm
    sha:c268c270dd1e2cf9cf753f8cd6279d5ad89b783f723512623683587037651376
  • alt-ruby30-doc-3.0.7-170.el8.noarch.rpm
    sha:b7b80c4b5ba18f4a68617a5e75b2a0d5c96c2150181354b36ced14b266ff66ad
  • alt-ruby30-libs-3.0.7-170.el8.x86_64.rpm
    sha:d0f068a5a543b5a1ef33a795b57020b2e7b2267155fa0ded69b0cd2fd5442a47
  • alt-ruby30-rubygem-bigdecimal-3.0.0-170.el8.x86_64.rpm
    sha:8559c01973a54a3c1a5eeaf9aeb2f23a45777b55a32aab12ddbead4ac3375976
  • alt-ruby30-rubygem-bundler-2.2.33-170.el8.noarch.rpm
    sha:e738d1b38a6b77970e9c9bc35564f9e89fecaf4adab96c313ad0cc89176c6ad4
  • alt-ruby30-rubygem-io-console-0.5.7-170.el8.x86_64.rpm
    sha:e3a08ae33cb375021c7dfe4a45867cdbf0f7a1513d452655cbe39c1b8db12b66
  • alt-ruby30-rubygem-irb-1.3.5-170.el8.noarch.rpm
    sha:bb9feeb1852dccab7ce883afd4d925865c058b6862de93b824a06c33c0fb16bf
  • alt-ruby30-rubygem-json-2.5.1-170.el8.x86_64.rpm
    sha:0132660ca865dd0f08c2a0725f24efacdeb510bbd63497c23d541b0c9ce2e0bc
  • alt-ruby30-rubygem-minitest-5.14.2-170.el8.noarch.rpm
    sha:8ab0cb86247973aad63be049a26097e9e4f2e737f2de79f15075c59583e680d0
  • alt-ruby30-rubygem-power_assert-1.2.1-170.el8.noarch.rpm
    sha:e93a8c7698fc7fb2a681e3ea1bf6b0df884e402efd56a315e4df0823c310f9c6
  • alt-ruby30-rubygem-psych-3.3.2-170.el8.x86_64.rpm
    sha:87b122b11b66d19df53126bb2ad3bc7dfe1892e5887d006ca8664f83dde9e8cf
  • alt-ruby30-rubygem-rake-13.0.3-170.el8.noarch.rpm
    sha:1e7ea9aab908671e2bc6321eabf88bbe82e5cfc16153f4e9f2eab35bb3cbf6e5
  • alt-ruby30-rubygem-rbs-1.4.0-170.el8.noarch.rpm
    sha:7288796a198447c25710fe318f0a24d2246ae8b6958617db46da2012b4d227d8
  • alt-ruby30-rubygem-rdoc-6.3.4.1-170.el8.noarch.rpm
    sha:141f8ea51206c2ea15bf43c3331fb17cf4b9af8d7313ae37ebe917c10b41f4f4
  • alt-ruby30-rubygem-rexml-3.2.5-170.el8.noarch.rpm
    sha:5ba588580faf380cbd914028b7cdbf20c2fea4d4e578463af29e05f1655596a5
  • alt-ruby30-rubygem-rss-0.2.9-170.el8.noarch.rpm
    sha:e39de779eb5b24d1fd49428e173634f3ad44707b792c1e2b89d4f0efab46d29e
  • alt-ruby30-rubygem-test-unit-3.3.7-170.el8.noarch.rpm
    sha:1172f0828d600727b7e27abe9c5ff75f6659daad8588d19a2bb3a43a275b7d6d
  • alt-ruby30-rubygem-typeprof-0.15.2-170.el8.noarch.rpm
    sha:65f8e9ce03971d276f02014ae9423b077477440335dfc5ef2122d25bb58dbe34
  • alt-ruby30-rubygems-3.2.33-170.el8.noarch.rpm
    sha:13dda05bc005833278b0b8c1d62af4ed3c204cd8876a8d1cb91836886426ea03
  • alt-ruby30-rubygems-devel-3.2.33-170.el8.noarch.rpm
    sha:484d6a3f03df0087a745cab77b3f4feb83ef81b5986460ee0c1467f7694c5919
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.