ALSA-2025:8131
- Source
- https://errata.almalinux.org/10/ALSA-2025-8131.html
- Import Source
- https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2025:8131.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/ALSA-2025:8131
- Related
- Published
- 2025-05-26T00:00:00Z
- Modified
- 2025-05-29T10:13:10Z
- Summary
- Moderate: ruby security update
- Details
-
Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.
Security Fix(es):
- net-imap: Net::IMAP vulnerable to possible DoS by memory exhaustion (CVE-2025-25186)
- CGI: Denial of Service in CGI::Cookie.parse (CVE-2025-27219)
- uri: userinfo leakage in URI#join, URI#merge and URI#+ (CVE-2025-27221)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- References
-
- https://access.redhat.com/errata/RHSA-2025:8131
- https://access.redhat.com/security/cve/CVE-2025-25186
- https://access.redhat.com/security/cve/CVE-2025-27219
- https://access.redhat.com/security/cve/CVE-2025-27221
- https://bugzilla.redhat.com/2344680
- https://bugzilla.redhat.com/2349699
- https://bugzilla.redhat.com/2349700
- https://errata.almalinux.org/10/ALSA-2025-8131.html
Affected packages
AlmaLinux:10 / ruby
Package
- Name
- ruby
- Purl
- pkg:rpm/almalinux/ruby
AlmaLinux:10 / ruby-bundled-gems
Package
- Name
- ruby-bundled-gems
- Purl
- pkg:rpm/almalinux/ruby-bundled-gems
AlmaLinux:10 / ruby-default-gems
Package
- Name
- ruby-default-gems
- Purl
- pkg:rpm/almalinux/ruby-default-gems
AlmaLinux:10 / ruby-devel
Package
- Name
- ruby-devel
- Purl
- pkg:rpm/almalinux/ruby-devel
AlmaLinux:10 / ruby-doc
Package
- Name
- ruby-doc
- Purl
- pkg:rpm/almalinux/ruby-doc
AlmaLinux:10 / ruby-libs
Package
- Name
- ruby-libs
- Purl
- pkg:rpm/almalinux/ruby-libs
AlmaLinux:10 / rubygem-bigdecimal
Package
- Name
- rubygem-bigdecimal
- Purl
- pkg:rpm/almalinux/rubygem-bigdecimal
AlmaLinux:10 / rubygem-bundler
Package
- Name
- rubygem-bundler
- Purl
- pkg:rpm/almalinux/rubygem-bundler
AlmaLinux:10 / rubygem-io-console
Package
- Name
- rubygem-io-console
- Purl
- pkg:rpm/almalinux/rubygem-io-console
AlmaLinux:10 / rubygem-irb
Package
- Name
- rubygem-irb
- Purl
- pkg:rpm/almalinux/rubygem-irb
AlmaLinux:10 / rubygem-json
Package
- Name
- rubygem-json
- Purl
- pkg:rpm/almalinux/rubygem-json
AlmaLinux:10 / rubygem-minitest
Package
- Name
- rubygem-minitest
- Purl
- pkg:rpm/almalinux/rubygem-minitest
AlmaLinux:10 / rubygem-power_assert
Package
- Name
- rubygem-power_assert
- Purl
- pkg:rpm/almalinux/rubygem-power_assert
AlmaLinux:10 / rubygem-psych
Package
- Name
- rubygem-psych
- Purl
- pkg:rpm/almalinux/rubygem-psych
AlmaLinux:10 / rubygem-racc
Package
- Name
- rubygem-racc
- Purl
- pkg:rpm/almalinux/rubygem-racc
AlmaLinux:10 / rubygem-rake
Package
- Name
- rubygem-rake
- Purl
- pkg:rpm/almalinux/rubygem-rake
AlmaLinux:10 / rubygem-rbs
Package
- Name
- rubygem-rbs
- Purl
- pkg:rpm/almalinux/rubygem-rbs
AlmaLinux:10 / rubygem-rdoc
Package
- Name
- rubygem-rdoc
- Purl
- pkg:rpm/almalinux/rubygem-rdoc
AlmaLinux:10 / rubygem-rexml
Package
- Name
- rubygem-rexml
- Purl
- pkg:rpm/almalinux/rubygem-rexml
AlmaLinux:10 / rubygem-rss
Package
- Name
- rubygem-rss
- Purl
- pkg:rpm/almalinux/rubygem-rss
AlmaLinux:10 / rubygem-test-unit
Package
- Name
- rubygem-test-unit
- Purl
- pkg:rpm/almalinux/rubygem-test-unit
AlmaLinux:10 / rubygem-typeprof
Package
- Name
- rubygem-typeprof
- Purl
- pkg:rpm/almalinux/rubygem-typeprof
AlmaLinux:10 / rubygems
Package
- Name
- rubygems
- Purl
- pkg:rpm/almalinux/rubygems