[CLSA-2026:1789571199] alt-ruby34: Fix of 2 CVEs
Type:
security
Severity:
Important
Release date:
2026-09-16 15:06:49 UTC
Description:
- CVE-2026-80212: resolv memory exhaustion via permanently registered classes for unknown DNS (type, class) pairs and unknown SvcParamKeys. Classes returned by Resource::Generic.create are no longer registered, so getresources(name, Generic.create(type, class)) now yields no records for that unknown type (upstream behaviour). - CVE-2026-80213: resolv hostname validation bypass via unenforced DNS label and encoded-name size limits when encoding. - Rewrite the #!/usr/bin/ruby shebang of gem executables to the alt ruby interpreter so no subpackage requires the system ruby (ALTEAPLN-11 QA check).
Updated packages:
  • alt-ruby34-3.4.10-10.el8.x86_64.rpm
    sha:460a2b7ebd37ebef4932af3f7db5bc14c8f77c27ac2e2ccc2f8bc61d585fca01
  • alt-ruby34-bundled-gems-3.4.10-10.el8.x86_64.rpm
    sha:af6090be02f98b9cdbb765fce727427d6a8d78a97bf42cdf55918cd7a3c9f0f8
  • alt-ruby34-default-gems-3.4.10-10.el8.noarch.rpm
    sha:f42348b627bd6ea3b97c104db6cbf63e68090a7e8487fbb575e20f168389c975
  • alt-ruby34-devel-3.4.10-10.el8.x86_64.rpm
    sha:a0dfc15c75664cdc0a3ff01c83e6b27391ab19386f29522b7acbeae393d7acdd
  • alt-ruby34-doc-3.4.10-10.el8.noarch.rpm
    sha:4eab88e18e7b60cc519b54461be819dc86ef041675bcd8a865adbc6d6c79c040
  • alt-ruby34-libs-3.4.10-10.el8.x86_64.rpm
    sha:a0bb5fb2339a43de207bfa5bc535080ab2145366e9e9f1a583b43179199d8f4f
  • alt-ruby34-rubygem-bigdecimal-3.1.8-10.el8.x86_64.rpm
    sha:aade6368a3f3d0064c58256cfe1e3eb52b01c4a05fdf8a66e8b220a2fcb7b4b6
  • alt-ruby34-rubygem-bundler-2.6.9-10.el8.noarch.rpm
    sha:bc3b9ae17f8286591dd2211adf93e42456577068cb18100da2cfa6e700f5d551
  • alt-ruby34-rubygem-io-console-0.8.1-10.el8.x86_64.rpm
    sha:b47a0166a4c7c0b51708cd74b54d5eb3fa1abb07a8b6f2713455153bc58788e1
  • alt-ruby34-rubygem-irb-1.14.3-10.el8.noarch.rpm
    sha:50e78309175a16abbf9eb3323149ceb80b423be7f8e9fb05e2e52ec352d15201
  • alt-ruby34-rubygem-json-2.9.1-10.el8.x86_64.rpm
    sha:c8f4623b2e1bf7ac535d9c4247645f5852b2fab5465b5555f2a56f5eb5157879
  • alt-ruby34-rubygem-minitest-5.25.4-10.el8.noarch.rpm
    sha:601388534fea44df7369aafc59a8670a152205fd36da68e368ca10a04ca98066
  • alt-ruby34-rubygem-power_assert-2.0.5-10.el8.noarch.rpm
    sha:4824250b66d28d5bd7b749297dc5c9bf569978f40d64ee42e961eb8f5a042ac0
  • alt-ruby34-rubygem-psych-5.2.2-10.el8.x86_64.rpm
    sha:329c75b5fe145018425e47edcf079de4dd8e6d89fa2be30f4abcce2d7937a40b
  • alt-ruby34-rubygem-racc-1.8.1-10.el8.x86_64.rpm
    sha:2171dbca477639f5f53d10d95f6fe35e6657c6a9ac77741ba957f1b1f5b9b774
  • alt-ruby34-rubygem-rake-13.2.1-10.el8.noarch.rpm
    sha:942e4660336e17597683ab232aefb6f98a9854dda0d314e2a6280efc1b882775
  • alt-ruby34-rubygem-rbs-3.8.0-10.el8.x86_64.rpm
    sha:a3aff38ab67e2f44aba0a741715d04eaefc71dd1fb9a608a9d39d47e1b370d79
  • alt-ruby34-rubygem-rdoc-6.14.0-10.el8.noarch.rpm
    sha:002dcb011549ed9505a9a51fb433647b30c7635b2c7fd8c78abc1811345037d7
  • alt-ruby34-rubygem-rexml-3.4.4-10.el8.noarch.rpm
    sha:ada961e9713a205496a8a83892429683e5a9d628862285b5f2df216d1b1d41fc
  • alt-ruby34-rubygem-rss-0.3.1-10.el8.noarch.rpm
    sha:a81a9c0c7bad4e538ab548796ed8e152b791c181f2b8bb0b30c6a820a66ab1a5
  • alt-ruby34-rubygem-test-unit-3.6.7-10.el8.noarch.rpm
    sha:a601092b155fafb62d3170f6043e5fabdb228f2ec60ea5541dde291c3f36307a
  • alt-ruby34-rubygem-typeprof-0.30.1-10.el8.noarch.rpm
    sha:47db1b5855a923946146ddf08f55fef20db8849ee8e6362d55eb5fc2541070fd
  • alt-ruby34-rubygems-3.6.9-10.el8.noarch.rpm
    sha:eb44d851aad3b50a4228e6b3ced2337f6575b5c6263e86ef3387a81fcffa6971
  • alt-ruby34-rubygems-devel-3.6.9-10.el8.noarch.rpm
    sha:017983ab716dd8f94b010675ea77c4968f4d38d687b66c556bbfc0b1441bd108
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.