[CLSA-2026:1788266471] Fix CVE(s): CVE-2025-58767
Type:
security
Severity:
Moderate
Release date:
2026-09-01 12:41:22 UTC
Description:
* SECURITY UPDATE: denial of service in the bundled REXML gem - CVE-2025-58767: REXML::Parsers::BaseParser accepted an unlimited number of XML declarations per document, so parsing invalid XML containing multiple XML declarations caused increased execution time and memory usage. - added debian/patches/CVE-2025-58767.patch
CVEs fixed:
Updated packages:
  • alt-ruby35_3.5.0~preview1-5_amd64.deb
    sha:26ff8d3292586dfd865a2f8bbab7690a6ccf63c7
  • alt-ruby35-bundled-gems_3.5.0~preview1-5_amd64.deb
    sha:1dee467065000b2d6cc59870923ee5fe75341128
  • alt-ruby35-default-gems_3.5.0~preview1-5_amd64.deb
    sha:546ff1a7feaa9a217c886f02fd0f6a30068339b8
  • alt-ruby35-devel_3.5.0~preview1-5_amd64.deb
    sha:3637e860940509d5dc39dcf25e2d48acc67525e7
  • alt-ruby35-doc_3.5.0~preview1-5_amd64.deb
    sha:be942775325e680efec043910227de9ccd3c2a7d
  • alt-ruby35-libs_3.5.0~preview1-5_amd64.deb
    sha:1bd04a5aadd0f9f7b6abe085e70a229d77a0a8fa
  • alt-ruby35-rubygem-bigdecimal_3.1.9-5_amd64.deb
    sha:eaa6c8b355822bcf56b4046753b05de2a459a999
  • alt-ruby35-rubygem-bundler_2.7.0.dev-5_amd64.deb
    sha:d7c385c48e7e4a391b5fe88204a51c3edab42b44
  • alt-ruby35-rubygem-io-console_0.8.0-5_amd64.deb
    sha:57f6f1cce0540a0c80ecf530588b93ab9b4b2e88
  • alt-ruby35-rubygem-irb_1.15.2-5_amd64.deb
    sha:6929ba58e2de5de0e728bb53987722cf42742f33
  • alt-ruby35-rubygem-json_2.10.2-5_amd64.deb
    sha:d29e82ed89501f66e17a189f1eb464d03e52f64e
  • alt-ruby35-rubygem-minitest_5.25.5-5_amd64.deb
    sha:3f411c43803bceb3f16cba2e428783e44a059abd
  • alt-ruby35-rubygem-power-assert_2.0.5-5_amd64.deb
    sha:ac899196d12deab1cabb57ef86b03c5a417471d2
  • alt-ruby35-rubygem-psych_5.2.3-5_amd64.deb
    sha:ab96a658a8bcb57553c9e7372c5d309b345f1b84
  • alt-ruby35-rubygem-racc_1.8.1-5_amd64.deb
    sha:569c1856127c7acfec98c950e0734f068c5522de
  • alt-ruby35-rubygem-rake_13.2.1-5_amd64.deb
    sha:ed44fd9cc1a26ceb14930a03c19124306b3d2158
  • alt-ruby35-rubygem-rbs_3.9.2-5_amd64.deb
    sha:c93bf1a4be548b01f232f5cb53d4e556981a2c55
  • alt-ruby35-rubygem-rdoc_6.13.1-5_amd64.deb
    sha:ccf1bb72c9bf847128b81c7e153ac88dfb6407d2
  • alt-ruby35-rubygem-rexml_3.4.1-5_amd64.deb
    sha:041bbcc73f06e97852f9cb900f5985cfc99b0a00
  • alt-ruby35-rubygem-rss_0.3.1-5_amd64.deb
    sha:77e8c41bf5026ec048c463c10f8e8e1a64bfd8c7
  • alt-ruby35-rubygem-test-unit_3.6.8-5_amd64.deb
    sha:e3b855c3869750a3cc1f9719619d5e10cddda90a
  • alt-ruby35-rubygem-typeprof_0.30.1-5_amd64.deb
    sha:977371737dde83900cf892dbc01e1cea6743550a
  • alt-ruby35-rubygems_3.7.0.dev-5_amd64.deb
    sha:e47ea7b808d9f6ff9cb2a9168f666e04d77ef855
  • alt-ruby35-rubygems-devel_3.7.0.dev-5_amd64.deb
    sha:8626b08a54badaf2a6a62448e53087cb132e01bf
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.