[CLSA-2026:1789572631] alt-ruby35: Fix of 2 CVEs
Type:
security
Severity:
Important
Release date:
2026-09-16 15:30:41 UTC
Description:
- CVE-2026-80212: memory exhaustion in the bundled resolv gem - decoding a response with unknown DNS (type, class) pairs or unknown SvcParamKeys permanently registered a generated class for each one. Classes returned by Resource::Generic.create are no longer registered, so getresources(name, Generic.create(type, class)) now yields no records for that unknown type (upstream behaviour). - CVE-2026-80213: hostname validation bypass in the bundled resolv gem - DNS label and encoded-name size limits were not enforced when encoding, so an over-long label wrapped its length octet and resolved a different name. - Rewrite the #!/usr/bin/ruby shebang of gem executables to the alt ruby interpreter so no subpackage requires the system ruby (ALTEAPLN-11 QA check).
CVEs fixed:
Updated packages:
  • alt-ruby35-3.5.0-0.4.preview1.el9.x86_64.rpm
    sha:6bd02e09da9167a934e3f4d2acda44876048d050047785815593cec516ba33b2
  • alt-ruby35-bundled-gems-3.5.0-0.4.preview1.el9.x86_64.rpm
    sha:f6cb3168fcf660a901c40c63da0c1dbe91c743ceda9fb606d490a917f7db2329
  • alt-ruby35-default-gems-3.5.0-0.4.preview1.el9.noarch.rpm
    sha:46ee7e4c99c3c821243d5034733445349af5709a608929f37e5100f251dfa39c
  • alt-ruby35-devel-3.5.0-0.4.preview1.el9.x86_64.rpm
    sha:43cd7960d4da91f2ec0a0f9589b21f719cfcb2e837021911897f01278321795c
  • alt-ruby35-doc-3.5.0-0.4.preview1.el9.noarch.rpm
    sha:a19c217df65de0c9a4fd7b8265ee5863140e092b6c0285f7d023a232d177a357
  • alt-ruby35-libs-3.5.0-0.4.preview1.el9.x86_64.rpm
    sha:ebc3d9c383c76b59baab539aefbe9116569bbf416b1e928dd495db97607cb606
  • alt-ruby35-rubygem-bigdecimal-3.1.9-0.4.preview1.el9.x86_64.rpm
    sha:8570059be001fa63786e5ca09a2c989744778587481e51c354942222d2297ad4
  • alt-ruby35-rubygem-bundler-2.7.0.dev-0.4.preview1.el9.noarch.rpm
    sha:3724d7ca3a01c8f9d5b3860843f22a3d39d9decbc5b065415a9d3d4e08de5d9b
  • alt-ruby35-rubygem-io-console-0.8.0-0.4.preview1.el9.x86_64.rpm
    sha:af36e1c83e2107e0eb17dbc902d4ef7203ab765b38ab79d99b37e25af8bdf2b5
  • alt-ruby35-rubygem-irb-1.15.2-0.4.preview1.el9.noarch.rpm
    sha:640c2e7c8be58871f4fee8df9237595b9a1075b2c92a8aed4f7f882d28987170
  • alt-ruby35-rubygem-json-2.10.2-0.4.preview1.el9.x86_64.rpm
    sha:188a36984f4ab3a0fd87f5546b7296abffa4d4320dc526cc92cfd928b8871f60
  • alt-ruby35-rubygem-minitest-5.25.5-0.4.preview1.el9.noarch.rpm
    sha:97c4daba2753f92bb7dc7f965ac37c0d0b4361c047b0b0bb52e06028ed47ebaa
  • alt-ruby35-rubygem-power_assert-2.0.5-0.4.preview1.el9.noarch.rpm
    sha:a9dab72f2d1dbe95c273114675b28495c07b6288973b8dcff1a8ac2e7d99107d
  • alt-ruby35-rubygem-psych-5.2.3-0.4.preview1.el9.x86_64.rpm
    sha:59fc1b4f26e906b7b7bb64c562b2465130b1d7ccd40ba6516909543b792e1501
  • alt-ruby35-rubygem-racc-1.8.1-0.4.preview1.el9.x86_64.rpm
    sha:b483fd3b576fccd8f17467014571374323d6b7ee0c469e116a453985ff191fd3
  • alt-ruby35-rubygem-rake-13.2.1-0.4.preview1.el9.noarch.rpm
    sha:ffad5c856371965b51c6d8ca8093b8880711c2323e52374814c2a7e1aa894504
  • alt-ruby35-rubygem-rbs-3.9.2-0.4.preview1.el9.x86_64.rpm
    sha:75737ccfb38cdd34d62552f6c9109322f140c871ca39801f86d5e16ad546b069
  • alt-ruby35-rubygem-rdoc-6.13.1-0.4.preview1.el9.noarch.rpm
    sha:fd7292de30c9796a5bab01b353ddbaa06b5e0130e035d7d6425ffbbc76b6016c
  • alt-ruby35-rubygem-rexml-3.4.1-0.4.preview1.el9.noarch.rpm
    sha:f15310c770042c5332ae794234652631ecb128c472be4a90f8c2af37d062d241
  • alt-ruby35-rubygem-rss-0.3.1-0.4.preview1.el9.noarch.rpm
    sha:8166751ee1ae67fef1b9fd20a7e8e3b43d69c4f16e52277b8c4102d208b1cb41
  • alt-ruby35-rubygem-test-unit-3.6.8-0.4.preview1.el9.noarch.rpm
    sha:f17a53a603fb5335baec72a5e172d9f0a8f9d7cae2c3b6019b7f8f6ed233d5db
  • alt-ruby35-rubygem-typeprof-0.30.1-0.4.preview1.el9.noarch.rpm
    sha:0dbf258fe1a25430895fea5d47f971cc46c30320926bdf287ead4131e81c3e44
  • alt-ruby35-rubygems-3.7.0.dev-0.4.preview1.el9.noarch.rpm
    sha:f09ee6e2d5d5ec5e2f99706f91c68852314ea230b1ea0a96e856ae25cdb2bcf8
  • alt-ruby35-rubygems-devel-3.7.0.dev-0.4.preview1.el9.noarch.rpm
    sha:58410cf130d2c2d3aa8a47643ed460929fcbe0ee5630c09b92d63d6875aa7ef1
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.