[CLSA-2026:1788266885] Fix CVE(s): CVE-2025-58767
Type:
security
Severity:
Moderate
Release date:
2026-09-01 12:48:16 UTC
Description:
* SECURITY UPDATE: denial of service in the bundled REXML gem - CVE-2025-58767: REXML::Parsers::BaseParser accepted an unlimited number of XML declarations per document, so parsing invalid XML containing multiple XML declarations caused increased execution time and memory usage. - added debian/patches/CVE-2025-58767.patch
CVEs fixed:
Updated packages:
  • alt-ruby35_3.5.0~preview1-5_amd64.deb
    sha:ac5844289163702660c52c989629b99cbbd582ff
  • alt-ruby35-bundled-gems_3.5.0~preview1-5_amd64.deb
    sha:9b9332bde5f03bbe302d6604be585a6f2b4aea9f
  • alt-ruby35-default-gems_3.5.0~preview1-5_amd64.deb
    sha:b77e97e54a807ddcd6a98e58a1a139298d6f3b6f
  • alt-ruby35-devel_3.5.0~preview1-5_amd64.deb
    sha:eaba1844728c2130fc25f47f7d877530d49b4ff4
  • alt-ruby35-doc_3.5.0~preview1-5_amd64.deb
    sha:fb10d8effa689b4974e6f26b328b85d1e43262c7
  • alt-ruby35-libs_3.5.0~preview1-5_amd64.deb
    sha:d2cca66be2d0d1fd30761447432d92ed8a2ba060
  • alt-ruby35-rubygem-bigdecimal_3.1.9-5_amd64.deb
    sha:38e8ad1560c32186f13883de4e86091b3287e62b
  • alt-ruby35-rubygem-bundler_2.7.0.dev-5_amd64.deb
    sha:3d1a0ed0b30f6d69ce6d390f03c1e93598857792
  • alt-ruby35-rubygem-io-console_0.8.0-5_amd64.deb
    sha:1daaae7dcc27221ff95089f3b365b56b1dcd4aae
  • alt-ruby35-rubygem-irb_1.15.2-5_amd64.deb
    sha:5b7ee2c253e613439e1c2e607180f72d747896f3
  • alt-ruby35-rubygem-json_2.10.2-5_amd64.deb
    sha:f2bb381a103eec5d45eadcf988f9f939fe9a0d82
  • alt-ruby35-rubygem-minitest_5.25.5-5_amd64.deb
    sha:1b7b5698e00ee19e1468fd56ffc598b072fac9ca
  • alt-ruby35-rubygem-power-assert_2.0.5-5_amd64.deb
    sha:2d696cb8004d50150f97cc7a27c7fe7dab4eb066
  • alt-ruby35-rubygem-psych_5.2.3-5_amd64.deb
    sha:fa30837a240aae3d26ccadc9e9d095a9dcaf90ad
  • alt-ruby35-rubygem-racc_1.8.1-5_amd64.deb
    sha:1bbfeb6cc70c5ae8e118cb4a1646bfbd436dece9
  • alt-ruby35-rubygem-rake_13.2.1-5_amd64.deb
    sha:ee6c32a53f62fb0ff299b97ae6828330779c66d9
  • alt-ruby35-rubygem-rbs_3.9.2-5_amd64.deb
    sha:76021d878ddb5f9f7239f8cd80bb752092fbdceb
  • alt-ruby35-rubygem-rdoc_6.13.1-5_amd64.deb
    sha:27ac65ff844aad6ba786ec5c39f7ad204aa46700
  • alt-ruby35-rubygem-rexml_3.4.1-5_amd64.deb
    sha:8e116d974eb689a9919f7626f3e924fc763a42dc
  • alt-ruby35-rubygem-rss_0.3.1-5_amd64.deb
    sha:f303d420523a22e8fccc915725dbd8a52e41c3e1
  • alt-ruby35-rubygem-test-unit_3.6.8-5_amd64.deb
    sha:d7bc3d028c2c3b8d4aea1602f5d36670c91bc38d
  • alt-ruby35-rubygem-typeprof_0.30.1-5_amd64.deb
    sha:7a1b3f1aaf82de353fe9f01503b80620763f8c86
  • alt-ruby35-rubygems_3.7.0.dev-5_amd64.deb
    sha:d05192f9be7ceddb46f388bedff8afb82e1088f0
  • alt-ruby35-rubygems-devel_3.7.0.dev-5_amd64.deb
    sha:b266e2ddd55863a2d75528ea29bc2d6126352f19
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.