gpp_maybe Security update for ruby2.5

SUSE-SLE-Module-Basesystem-15-SP7-2026-1066

This update for ruby2.5 fixes the following issues: - CVE-2024-49761: ReDoS vulnerability in REXML gem (bsc#1232440 bsc#1232441). - CVE-2025-58767: denial of service when parsing XML containing multiple XML declarations (bsc#1250016). - CVE-2026-27820: insufficient checks in `zstream_buffer_ungets` can lead to a buffer overflow (bsc#1259239).

• Release Date
  Mar 26 2026
• References
  Bugzilla: 1232440, 1232441, 1250016, 1259239
  CVEs: CVE-2024-49761, CVE-2025-58767, CVE-2026-27820
• Type
  security
• Severity
  important

cloud_download Downloads

Basesystem Module 15.7 ppc64le

• Packages
  libruby2_5-2_5
  Dynamic runtime library for Ruby

  2.5.9-150700.24.6.1 lock rpm

  ruby2.5
  An Interpreted Object-Oriented Scripting Language

  2.5.9-150700.24.6.1 lock rpm lock src

  ruby2.5-devel
  Development files to link against Ruby

  2.5.9-150700.24.6.1 lock rpm

  ruby2.5-devel-extra
  Special development files of ruby, normally not installed

  2.5.9-150700.24.6.1 lock rpm

  ruby2.5-stdlib
  The Ruby standard library

  2.5.9-150700.24.6.1 lock rpm

Basesystem Module 15.7 aarch64

• Packages
  libruby2_5-2_5
  Dynamic runtime library for Ruby

  2.5.9-150700.24.6.1 lock rpm

  ruby2.5
  An Interpreted Object-Oriented Scripting Language

  2.5.9-150700.24.6.1 lock rpm lock src

  ruby2.5-devel
  Development files to link against Ruby

  2.5.9-150700.24.6.1 lock rpm

  ruby2.5-devel-extra
  Special development files of ruby, normally not installed

  2.5.9-150700.24.6.1 lock rpm

  ruby2.5-stdlib
  The Ruby standard library

  2.5.9-150700.24.6.1 lock rpm

Basesystem Module 15.7 s390x

• Packages
  libruby2_5-2_5
  Dynamic runtime library for Ruby

  2.5.9-150700.24.6.1 lock rpm

  ruby2.5
  An Interpreted Object-Oriented Scripting Language

  2.5.9-150700.24.6.1 lock rpm lock src

  ruby2.5-devel
  Development files to link against Ruby

  2.5.9-150700.24.6.1 lock rpm

  ruby2.5-devel-extra
  Special development files of ruby, normally not installed

  2.5.9-150700.24.6.1 lock rpm

  ruby2.5-stdlib
  The Ruby standard library

  2.5.9-150700.24.6.1 lock rpm

Basesystem Module 15.7 x86_64

• Packages
  libruby2_5-2_5
  Dynamic runtime library for Ruby

  2.5.9-150700.24.6.1 lock rpm

  ruby2.5
  An Interpreted Object-Oriented Scripting Language

  2.5.9-150700.24.6.1 lock rpm lock src

  ruby2.5-devel
  Development files to link against Ruby

  2.5.9-150700.24.6.1 lock rpm

  ruby2.5-devel-extra
  Special development files of ruby, normally not installed

  2.5.9-150700.24.6.1 lock rpm

  ruby2.5-stdlib
  The Ruby standard library

  2.5.9-150700.24.6.1 lock rpm