[CLSA-2026:1789572008] alt-ruby35: Fix of 2 CVEs
Type:
security
Severity:
Important
Release date:
2026-09-16 15:20:18 UTC
Description:
- CVE-2026-80212: memory exhaustion in the bundled resolv gem - decoding a response with unknown DNS (type, class) pairs or unknown SvcParamKeys permanently registered a generated class for each one. Classes returned by Resource::Generic.create are no longer registered, so getresources(name, Generic.create(type, class)) now yields no records for that unknown type (upstream behaviour). - CVE-2026-80213: hostname validation bypass in the bundled resolv gem - DNS label and encoded-name size limits were not enforced when encoding, so an over-long label wrapped its length octet and resolved a different name. - Rewrite the #!/usr/bin/ruby shebang of gem executables to the alt ruby interpreter so no subpackage requires the system ruby (ALTEAPLN-11 QA check).
CVEs fixed:
Updated packages:
  • alt-ruby35-3.5.0-0.4.preview1.el8.x86_64.rpm
    sha:407e93f0ef710b00d8bf8bae9b92c1fe15ca256ba5e96370363512ecc42bc832
  • alt-ruby35-bundled-gems-3.5.0-0.4.preview1.el8.x86_64.rpm
    sha:ef5d800f673f0caf970ebc90d910f5b56738125e11d5a852666433a0438e8bbf
  • alt-ruby35-default-gems-3.5.0-0.4.preview1.el8.noarch.rpm
    sha:9e4ad56ce603e2262a5b1fd2ba5535b83e3c126dc16562079d9c036ec612d8b0
  • alt-ruby35-devel-3.5.0-0.4.preview1.el8.x86_64.rpm
    sha:fc12102316ce8e9e181768338fd4f117e6bd66e24ddfc1e8af15a0faa535111a
  • alt-ruby35-doc-3.5.0-0.4.preview1.el8.noarch.rpm
    sha:dd1052e1209b0dc97f4e21d5f154897138232a04de30d75d94d7e3d58a367088
  • alt-ruby35-libs-3.5.0-0.4.preview1.el8.x86_64.rpm
    sha:b14283559a0025796096ea48fce0856b9ab8ea5bfc92a78f89af80f92288738d
  • alt-ruby35-rubygem-bigdecimal-3.1.9-0.4.preview1.el8.x86_64.rpm
    sha:48ddf4c7c5775f29323d4c28557978653cc1faa85948d7804698f9b3f192c81a
  • alt-ruby35-rubygem-bundler-2.7.0.dev-0.4.preview1.el8.noarch.rpm
    sha:20a77d3b5f6fae708a0657f90ee84733de5db728c8d7dba676bff0e0e708ca1c
  • alt-ruby35-rubygem-io-console-0.8.0-0.4.preview1.el8.x86_64.rpm
    sha:f20af128bd8827533e0bd24fda84b79287e5cef70f97356300bc1dbe200ac7be
  • alt-ruby35-rubygem-irb-1.15.2-0.4.preview1.el8.noarch.rpm
    sha:f7339dd2a147bd919739cbc77b149da98b91c6ff46f042e1f0e2031d0af8b9da
  • alt-ruby35-rubygem-json-2.10.2-0.4.preview1.el8.x86_64.rpm
    sha:f15dbcd55f76a8266a2291f235646b9dc1a954c42f9b4b8b4e2e7284c31ac2b5
  • alt-ruby35-rubygem-minitest-5.25.5-0.4.preview1.el8.noarch.rpm
    sha:97e9e6a48064e952c1f7772674929c3663242c531ccdad376ae7ba6c2b2edf13
  • alt-ruby35-rubygem-power_assert-2.0.5-0.4.preview1.el8.noarch.rpm
    sha:871a107a8baff3f10b1b30803b8efe1872fd5f3dace455532cb934f82e6cfc8b
  • alt-ruby35-rubygem-psych-5.2.3-0.4.preview1.el8.x86_64.rpm
    sha:ef4086e8db923734288356fd1e25ac5c7c351fbfa301d2a832bcdc5db8ef8d5a
  • alt-ruby35-rubygem-racc-1.8.1-0.4.preview1.el8.x86_64.rpm
    sha:00c4f2f2a9d940a549d115915aaa320a4aa3e374138c41d14e8133744d6049fe
  • alt-ruby35-rubygem-rake-13.2.1-0.4.preview1.el8.noarch.rpm
    sha:671687d3e02bdfeeefc037c17dd375d502afd2c90681874e511560457ffa6180
  • alt-ruby35-rubygem-rbs-3.9.2-0.4.preview1.el8.x86_64.rpm
    sha:5d1d21950b23881feb6c37f2a53d269c5eb859d00b16de509196bebfe6e4e88c
  • alt-ruby35-rubygem-rdoc-6.13.1-0.4.preview1.el8.noarch.rpm
    sha:04f877ce361be0406c342ee3e70c0d615df73f36335475fb2ec9859c4bcf3673
  • alt-ruby35-rubygem-rexml-3.4.1-0.4.preview1.el8.noarch.rpm
    sha:b07480c84737847a19d3d51937c4f923c4c2fe2db2d601e7c2ebd9def39b98b6
  • alt-ruby35-rubygem-rss-0.3.1-0.4.preview1.el8.noarch.rpm
    sha:4a78793c6d283d82d841c7f60e87e1eae9943afd29832f39aa56da0ea40e58d8
  • alt-ruby35-rubygem-test-unit-3.6.8-0.4.preview1.el8.noarch.rpm
    sha:2779763eefaea27e9ff7635f5c7ab6523849931848ae6662482ff8bd1441dacc
  • alt-ruby35-rubygem-typeprof-0.30.1-0.4.preview1.el8.noarch.rpm
    sha:269e1f20d9452e6858391cdab9fdeb425388f6de3990c2615518c09cfa6aec8a
  • alt-ruby35-rubygems-3.7.0.dev-0.4.preview1.el8.noarch.rpm
    sha:3ccdf30beafcbdd5e055ff256093aa169eb670676dae3278629303a3d5d7e2db
  • alt-ruby35-rubygems-devel-3.7.0.dev-0.4.preview1.el8.noarch.rpm
    sha:b7c0daf081ee42370ee2f3aef0e5cada34b9a004c1ef4f4b8e3166ef0219e86f
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.