[CLSA-2026:1788267678] Fix CVE(s): CVE-2025-58767
Type:
security
Severity:
Moderate
Release date:
2026-09-01 13:53:55 UTC
Description:
* SECURITY UPDATE: denial of service in the bundled REXML gem - CVE-2025-58767: REXML::Parsers::BaseParser accepted an unlimited number of XML declarations per document, so parsing invalid XML containing multiple XML declarations caused increased execution time and memory usage. - added debian/patches/CVE-2025-58767.patch
CVEs fixed:
Updated packages:
  • alt-ruby35_3.5.0~preview1-5_amd64.deb
    sha:267c2db92445328a22341202f70e1ad8b763302e
  • alt-ruby35-bundled-gems_3.5.0~preview1-5_amd64.deb
    sha:ef9ea0556a8bafc1cf9b4b58f27c0c77be725ec3
  • alt-ruby35-default-gems_3.5.0~preview1-5_amd64.deb
    sha:eb44ace3c23addf98b0f8b8e0f491b271f7fbcbc
  • alt-ruby35-devel_3.5.0~preview1-5_amd64.deb
    sha:e9bbae7c228a70e5e2e3d3b29f15608a07ff1572
  • alt-ruby35-doc_3.5.0~preview1-5_amd64.deb
    sha:986b0dd4bad51f32a69a3811b67e621fff254aca
  • alt-ruby35-libs_3.5.0~preview1-5_amd64.deb
    sha:680cfe208ec902a7a3b905fe6ea57b8e8f840a4f
  • alt-ruby35-rubygem-bigdecimal_3.1.9-5_amd64.deb
    sha:c4a64e010aadd7188c4d290f635ae74cf0132c9e
  • alt-ruby35-rubygem-bundler_2.7.0.dev-5_amd64.deb
    sha:7438de47982c791697ae321017f79addec76e4a7
  • alt-ruby35-rubygem-io-console_0.8.0-5_amd64.deb
    sha:bcd0b17d5743f270a4bde5f75c811a8c213b2a41
  • alt-ruby35-rubygem-irb_1.15.2-5_amd64.deb
    sha:e2090bacfd8fa98a8dd69726d230aac8530aa164
  • alt-ruby35-rubygem-json_2.10.2-5_amd64.deb
    sha:0878acdedfe4e8b8083dddb4f0a4bfb8045fc52a
  • alt-ruby35-rubygem-minitest_5.25.5-5_amd64.deb
    sha:1954e183f07e2990207bda0c05e09ab10a851d93
  • alt-ruby35-rubygem-power-assert_2.0.5-5_amd64.deb
    sha:ed5581010a8575c486632bb5d244783f4b398e83
  • alt-ruby35-rubygem-psych_5.2.3-5_amd64.deb
    sha:bfdf91628525ef249e92a6ce49ca3cf8d046654a
  • alt-ruby35-rubygem-racc_1.8.1-5_amd64.deb
    sha:5db5e1f573f86ea0a33bdef94ed697082e286b7c
  • alt-ruby35-rubygem-rake_13.2.1-5_amd64.deb
    sha:c50fa9750ab72d8e9373a934da0dbbc99fb4b4b2
  • alt-ruby35-rubygem-rbs_3.9.2-5_amd64.deb
    sha:aa1a5da1742652f0a26c499313ff2f43029e29cd
  • alt-ruby35-rubygem-rdoc_6.13.1-5_amd64.deb
    sha:44c588a76bfe955455c46f35b523fad614fad418
  • alt-ruby35-rubygem-rexml_3.4.1-5_amd64.deb
    sha:058c19f1148a5bec47cf3985624f0e7d47c9fddb
  • alt-ruby35-rubygem-rss_0.3.1-5_amd64.deb
    sha:5cd6c83841f85e8e187e84b640c81594706aa1c5
  • alt-ruby35-rubygem-test-unit_3.6.8-5_amd64.deb
    sha:e92eeb64666d844128ac715abe9c47e9e4a2e1bc
  • alt-ruby35-rubygem-typeprof_0.30.1-5_amd64.deb
    sha:c0cf242fb5c10a2f4baf85828cfdb2f6525ac9f4
  • alt-ruby35-rubygems_3.7.0.dev-5_amd64.deb
    sha:34b51ec793b4537ebee97971563d4db5cbeb9809
  • alt-ruby35-rubygems-devel_3.7.0.dev-5_amd64.deb
    sha:858141ff5066ca65373534681d716aa301e29836
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.