[CLSA-2026:1789608131] alt-ruby33: Fix of 2 CVEs
Type:
security
Severity:
Important
Release date:
2026-09-17 01:22:24 UTC
Description:
- CVE-2026-80212: resolv no longer permanently registers a generated class for every unknown DNS (type, class) pair or SvcParamKey, so a malicious response can no longer exhaust memory. Classes returned by Resource::Generic.create are no longer registered, so getresources(name, Generic.create(type, class)) now yields no records for that unknown type (upstream behaviour). - CVE-2026-80213: resolv enforces the 63-octet DNS label and 255-octet encoded-name limits when encoding, so an over-long label can no longer wrap its length octet and resolve a different name than the caller asked for. - Rewrite the #!/usr/bin/ruby shebang of gem executables to the alt ruby interpreter so no subpackage requires the system ruby (ALTEAPLN-11 QA check).
Updated packages:
  • alt-ruby33-3.3.12-12.el7.x86_64.rpm
    sha:037e58e3140f7322720dc51b2df4bf88206c7299727682978013066534728c7c
  • alt-ruby33-bundled-gems-3.3.12-12.el7.x86_64.rpm
    sha:70f615e63011ec03348254e2821c91edcbf1cae57431ff4d535cc3471462eb20
  • alt-ruby33-default-gems-3.3.12-12.el7.noarch.rpm
    sha:ec621e303b25fdcd7f24e4418e586da963e4bf385fce4bf737ccfaae82cd51ad
  • alt-ruby33-devel-3.3.12-12.el7.x86_64.rpm
    sha:893ca896cc2cc4c040988c961761d2bef2c46cb230c49da183f2a707f672ef2b
  • alt-ruby33-doc-3.3.12-12.el7.noarch.rpm
    sha:8d0bc2f63d162c701c48f73e29f5826156a90c58539ab08ec5e864e6d6eb75f8
  • alt-ruby33-libs-3.3.12-12.el7.x86_64.rpm
    sha:fa027c4c2edb48be5ddf0baacb0ae2e4ac06ff3cb37f66367cd53677b1778438
  • alt-ruby33-rubygem-bigdecimal-3.1.5-12.el7.x86_64.rpm
    sha:3f62595cf67a57e5be3e659843b013a96c0cc12a8abcf382a5853bb146e47226
  • alt-ruby33-rubygem-bundler-2.5.22-12.el7.noarch.rpm
    sha:19505cb87cd909f97fbf06a13607d620ca6b038f22eea8799843396ba2c64095
  • alt-ruby33-rubygem-io-console-0.7.1-12.el7.x86_64.rpm
    sha:b6d765e183eade8c58a8b6980ae8897f3e3223a0bf498037c66c8b74b0b5a706
  • alt-ruby33-rubygem-irb-1.13.1-12.el7.noarch.rpm
    sha:578b5a4a42410d178480281b007005252f58c3b56ec96bef1ac3bb968a8e7f3a
  • alt-ruby33-rubygem-json-2.7.2-12.el7.x86_64.rpm
    sha:9e9364ce15a9e54519c6f784985195756f2d83c2365ed5c4ed56148639533dc3
  • alt-ruby33-rubygem-minitest-5.20.0-12.el7.noarch.rpm
    sha:3820c94521a5137b314e269d68c6d912fd99a972ecd1bbc89ddbec1c5e6f3c5c
  • alt-ruby33-rubygem-power_assert-2.0.3-12.el7.noarch.rpm
    sha:886b8b0ac8660c005984daf6b6630e3db722dd9828789d48c21e29a65f34172e
  • alt-ruby33-rubygem-psych-5.1.2-12.el7.x86_64.rpm
    sha:6de6a70db339b811cfb990dfce414a7c1b9fc1124bc622f9c60b3f3d226cbd94
  • alt-ruby33-rubygem-racc-1.7.3-12.el7.x86_64.rpm
    sha:3e9bc03a5331b5778f05112d426d1667c9454b1f6066305b837d8443345c5379
  • alt-ruby33-rubygem-rake-13.1.0-12.el7.noarch.rpm
    sha:3c7cbc26b855b51a664a1494329ca32b718aef2f2e9abcb21d14fa5e2f545c2e
  • alt-ruby33-rubygem-rbs-3.4.0-12.el7.x86_64.rpm
    sha:162dcdce420beac63a437880995547b0e8dee8cee067ff49d3ab7d7add7751ef
  • alt-ruby33-rubygem-rdoc-6.6.3.1-12.el7.noarch.rpm
    sha:20c55c7b264c8f0b3040da7aa3d9cca3a7fa9c28db28166e1bb4eab13c9936b9
  • alt-ruby33-rubygem-rexml-3.4.4-12.el7.noarch.rpm
    sha:c90e75b4a21202114db63a332a424c1039aab6eaab5d7f00cd09283f91f1b6fb
  • alt-ruby33-rubygem-rss-0.3.1-12.el7.noarch.rpm
    sha:efbcd2828e01fdf72ec42218f68093670acf9167b61e41e9bd647ef44c8ad475
  • alt-ruby33-rubygem-test-unit-3.6.1-12.el7.noarch.rpm
    sha:d6e764e7d88e2e2caf53f86f417a0691fdbc77864180c837c12e34c4b166e941
  • alt-ruby33-rubygem-typeprof-0.21.9-12.el7.noarch.rpm
    sha:e7c02e94d4dd70d850f2f5d4e754f955a37d2332cd2d4d821b988a68c8b80247
  • alt-ruby33-rubygems-3.5.22-12.el7.noarch.rpm
    sha:038928078084daf27a6be04dbce1e38529b8b961c5b6beb35cd1dcb9d6cad934
  • alt-ruby33-rubygems-devel-3.5.22-12.el7.noarch.rpm
    sha:066cf1b9ff7b8bd56ef65ca823c846efb0b865c144766c636fc434474561c227
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.