[CLSA-2026:1788267168] Fix CVE(s): CVE-2025-58767
Type:
security
Severity:
Moderate
Release date:
2026-09-01 12:53:00 UTC
Description:
* SECURITY UPDATE: denial of service in the bundled REXML gem - CVE-2025-58767: REXML::Parsers::BaseParser accepted an unlimited number of XML declarations per document, so parsing invalid XML containing multiple XML declarations caused increased execution time and memory usage. - added debian/patches/CVE-2025-58767.patch
CVEs fixed:
Updated packages:
  • alt-ruby35_3.5.0~preview1-5_amd64.deb
    sha:306eab2ac4a7df4a5767a57938d9135ce4b4233a
  • alt-ruby35-bundled-gems_3.5.0~preview1-5_amd64.deb
    sha:eff3f0c7e5922f999d5c10ea83334cff47d2b299
  • alt-ruby35-default-gems_3.5.0~preview1-5_amd64.deb
    sha:eb44ace3c23addf98b0f8b8e0f491b271f7fbcbc
  • alt-ruby35-devel_3.5.0~preview1-5_amd64.deb
    sha:dd57e42e907a60b2f4ee2e7cf0d6c2db332b019a
  • alt-ruby35-doc_3.5.0~preview1-5_amd64.deb
    sha:986b0dd4bad51f32a69a3811b67e621fff254aca
  • alt-ruby35-libs_3.5.0~preview1-5_amd64.deb
    sha:bc39a488d3e6815fbc8b58b0437df54292538484
  • alt-ruby35-rubygem-bigdecimal_3.1.9-5_amd64.deb
    sha:d604a0ce681fe5e01cdbd80f68e7ca0be28f7cf8
  • alt-ruby35-rubygem-bundler_2.7.0.dev-5_amd64.deb
    sha:7438de47982c791697ae321017f79addec76e4a7
  • alt-ruby35-rubygem-io-console_0.8.0-5_amd64.deb
    sha:67de4e43c8fbfef23a72df320b801c0df1cd7824
  • alt-ruby35-rubygem-irb_1.15.2-5_amd64.deb
    sha:e2090bacfd8fa98a8dd69726d230aac8530aa164
  • alt-ruby35-rubygem-json_2.10.2-5_amd64.deb
    sha:1544e32eea280b257ce11d0732b67b3b52a2b15f
  • alt-ruby35-rubygem-minitest_5.25.5-5_amd64.deb
    sha:1954e183f07e2990207bda0c05e09ab10a851d93
  • alt-ruby35-rubygem-power-assert_2.0.5-5_amd64.deb
    sha:ed5581010a8575c486632bb5d244783f4b398e83
  • alt-ruby35-rubygem-psych_5.2.3-5_amd64.deb
    sha:4c28856aeef35a3a273709752aef7c462533522d
  • alt-ruby35-rubygem-racc_1.8.1-5_amd64.deb
    sha:47ded6290d7e148b8e2af1943fc0db607081e4d2
  • alt-ruby35-rubygem-rake_13.2.1-5_amd64.deb
    sha:c50fa9750ab72d8e9373a934da0dbbc99fb4b4b2
  • alt-ruby35-rubygem-rbs_3.9.2-5_amd64.deb
    sha:e17b1d24534b5daa02ed17036d53f69725ff63b3
  • alt-ruby35-rubygem-rdoc_6.13.1-5_amd64.deb
    sha:44c588a76bfe955455c46f35b523fad614fad418
  • alt-ruby35-rubygem-rexml_3.4.1-5_amd64.deb
    sha:058c19f1148a5bec47cf3985624f0e7d47c9fddb
  • alt-ruby35-rubygem-rss_0.3.1-5_amd64.deb
    sha:5cd6c83841f85e8e187e84b640c81594706aa1c5
  • alt-ruby35-rubygem-test-unit_3.6.8-5_amd64.deb
    sha:e92eeb64666d844128ac715abe9c47e9e4a2e1bc
  • alt-ruby35-rubygem-typeprof_0.30.1-5_amd64.deb
    sha:c0cf242fb5c10a2f4baf85828cfdb2f6525ac9f4
  • alt-ruby35-rubygems_3.7.0.dev-5_amd64.deb
    sha:34b51ec793b4537ebee97971563d4db5cbeb9809
  • alt-ruby35-rubygems-devel_3.7.0.dev-5_amd64.deb
    sha:858141ff5066ca65373534681d716aa301e29836
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.