[CLSA-2026:1781715157] Fix CVE(s): CVE-2025-61594
Type:
security
Severity:
Important
Release date:
2026-06-17 16:52:52 UTC
Description:
* SECURITY UPDATE: credential leak in bundled uri when combining URIs - debian/patches/CVE-2025-61594.patch: clear stale userinfo when setting authority components and replace authority atomically on merge in the bundled uri 0.12.4 (lib/uri/generic.rb), so combining URIs with + / merge no longer re-attaches the base URI's password; backport of upstream uri 0.12.5 (commit d3116ca). Bypass of the CVE-2025-27221 fix. - CVE-2025-61594
CVEs fixed:
Updated packages:
  • alt-ruby31_3.1.7-11_amd64.deb
    sha:30a65a881c29bc4c8d9eaa132c28ada2e9283bad
  • alt-ruby31-bundled-gems_3.1.7-11_amd64.deb
    sha:fb976c9c22277130d7a3c9d64707d4c192243f6f
  • alt-ruby31-default-gems_3.1.7-11_amd64.deb
    sha:d1b1b641ff08031a86792d02f9264fe658666c49
  • alt-ruby31-devel_3.1.7-11_amd64.deb
    sha:2d032e3c762ddfa2f7e720aad58b113aa0670241
  • alt-ruby31-doc_3.1.7-11_amd64.deb
    sha:4c94ba3c54d733ee15a065088666b266691822f7
  • alt-ruby31-libs_3.1.7-11_amd64.deb
    sha:59c575ff8421ab98c01c38d853b1fd5e5f067cf1
  • alt-ruby31-rubygem-bigdecimal_3.1.1-11_amd64.deb
    sha:6a30ed74ce8aa22725039b906249c4e151f7a808
  • alt-ruby31-rubygem-bundler_2.3.27-11_amd64.deb
    sha:ca4e346b83169e508f7c5057f063b49a73b4b5fe
  • alt-ruby31-rubygem-io-console_0.5.11-11_amd64.deb
    sha:a62da8c70ddc899410ffb60d9f8bc2c0d71b12e3
  • alt-ruby31-rubygem-irb_1.4.1-11_amd64.deb
    sha:fa1c0dce401a28bd526fb27b7c9e056f93d35922
  • alt-ruby31-rubygem-json_2.6.1-11_amd64.deb
    sha:26a1e3004a7b7111eb038a4d71bf8fea81d1576a
  • alt-ruby31-rubygem-minitest_5.15.0-11_amd64.deb
    sha:05bb9f84e8834d0b1638dc3046e2a92af013f00a
  • alt-ruby31-rubygem-power-assert_2.0.1-11_amd64.deb
    sha:29b58498595c572f115aa131df1a00aee0241f5c
  • alt-ruby31-rubygem-psych_4.0.4-11_amd64.deb
    sha:11c0439bab21ee64c389a073be7e6620e320ed7c
  • alt-ruby31-rubygem-rake_13.0.6-11_amd64.deb
    sha:fd86a1813ff13d5d3ed14defc8ebd77457a1fa12
  • alt-ruby31-rubygem-rbs_2.7.0-11_amd64.deb
    sha:ae0638cdca73caf2b7e025facb6125bb6ed56a21
  • alt-ruby31-rubygem-rdoc_6.4.1.1-11_amd64.deb
    sha:25eafe1adcf4a17c850eef72034063be80410ef8
  • alt-ruby31-rubygem-rexml_3.3.9-11_amd64.deb
    sha:39e414489eecb43effcbb4757a6f58ed937a1e54
  • alt-ruby31-rubygem-rss_0.3.1-11_amd64.deb
    sha:dcbd40a389fc8f637f5d9acc697f97afc3fb9f27
  • alt-ruby31-rubygem-test-unit_3.5.3-11_amd64.deb
    sha:fa3ff559db3452248c6c79dc42993ae70adbe5de
  • alt-ruby31-rubygem-typeprof_0.21.3-11_amd64.deb
    sha:936e29178a13aabdadf26806f271d61a732ff2ee
  • alt-ruby31-rubygems_3.3.27-11_amd64.deb
    sha:bc484e173eb9a675e39884fb5a432a50438b40f5
  • alt-ruby31-rubygems-devel_3.3.27-11_amd64.deb
    sha:2fd45f5fb47379915b41cec7cc2354c8f7d1ca1d
  • alt-ruby31_3.1.7-11_arm64.deb
    sha:37900f7309f7a97430d39ab9d57a4ea210158d0d
  • alt-ruby31-bundled-gems_3.1.7-11_arm64.deb
    sha:96a138bcc4a56eac7d7d3b3cea1bbf2acc5d07ce
  • alt-ruby31-default-gems_3.1.7-11_arm64.deb
    sha:2f5b7cd8b8e917386b6fdabc3b96e56cb534fd41
  • alt-ruby31-devel_3.1.7-11_arm64.deb
    sha:de67df272b18937cef151c47a34c4bc347983227
  • alt-ruby31-doc_3.1.7-11_arm64.deb
    sha:b938b9c1626c143d86fc4d4e9dab777007c9ba92
  • alt-ruby31-libs_3.1.7-11_arm64.deb
    sha:e413eebe983a0c5a8bd9755e549fcd0acee30286
  • alt-ruby31-rubygem-bigdecimal_3.1.1-11_arm64.deb
    sha:f79308cbe56c6f36270e092725bc17aa02585d04
  • alt-ruby31-rubygem-bundler_2.3.27-11_arm64.deb
    sha:132bf4c199680204c5f0ca1337f3933210be1312
  • alt-ruby31-rubygem-io-console_0.5.11-11_arm64.deb
    sha:e0cfc52a4a6de58289ae3a6c60bfd11051e21356
  • alt-ruby31-rubygem-irb_1.4.1-11_arm64.deb
    sha:f3ddfa5c51bafa7268d942e217b9c0056c24221e
  • alt-ruby31-rubygem-json_2.6.1-11_arm64.deb
    sha:31e7c4e0ca0c8ea4e8141cba4b353af21bcc1d96
  • alt-ruby31-rubygem-minitest_5.15.0-11_arm64.deb
    sha:8acd4b10dfb8a5baa89ead3f47fc7316078a1fe2
  • alt-ruby31-rubygem-power-assert_2.0.1-11_arm64.deb
    sha:9ac03dd7c9174319025f8317a7edd3c0f33c5c34
  • alt-ruby31-rubygem-psych_4.0.4-11_arm64.deb
    sha:2871c99e2f8fadce457bf07afe461b5d77922871
  • alt-ruby31-rubygem-rake_13.0.6-11_arm64.deb
    sha:deb71cc0c635ef615c6ce3aadedd5b730f0c919c
  • alt-ruby31-rubygem-rbs_2.7.0-11_arm64.deb
    sha:385e6d38d7152ebc7a4fecfb5180e50476f42e15
  • alt-ruby31-rubygem-rdoc_6.4.1.1-11_arm64.deb
    sha:4c5ca9b8f30a87df6e406f024d817ff85ae1e9e8
  • alt-ruby31-rubygem-rexml_3.3.9-11_arm64.deb
    sha:06c330a659f2ab684352a7efd4d24c1c4d1fb7fe
  • alt-ruby31-rubygem-rss_0.3.1-11_arm64.deb
    sha:2fabafc2ea3669daeba848f98213cfc2eb112170
  • alt-ruby31-rubygem-test-unit_3.5.3-11_arm64.deb
    sha:175448190fa5c8c6f4f93babf17b5984a0532379
  • alt-ruby31-rubygem-typeprof_0.21.3-11_arm64.deb
    sha:9cae926eccec1e97f329941f7d909db01f947aad
  • alt-ruby31-rubygems_3.3.27-11_arm64.deb
    sha:d2dde00f1b06a2df3aef81958fda67860bb01100
  • alt-ruby31-rubygems-devel_3.3.27-11_arm64.deb
    sha:3dc4629d81d57340cb5ce8bde434ebbfad192580
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.