[CLSA-2026:1789586253] alt-ruby33: Fix of 2 CVEs
Type:
security
Severity:
Important
Release date:
2026-09-16 19:17:44 UTC
Description:
- CVE-2026-80212: resolv no longer permanently registers a generated class for every unknown DNS (type, class) pair or SvcParamKey, so a malicious response can no longer exhaust memory. Classes returned by Resource::Generic.create are no longer registered, so getresources(name, Generic.create(type, class)) now yields no records for that unknown type (upstream behaviour). - CVE-2026-80213: resolv enforces the 63-octet DNS label and 255-octet encoded-name limits when encoding, so an over-long label can no longer wrap its length octet and resolve a different name than the caller asked for. - Rewrite the #!/usr/bin/ruby shebang of gem executables to the alt ruby interpreter so no subpackage requires the system ruby (ALTEAPLN-11 QA check).
Updated packages:
  • alt-ruby33-3.3.12-12.el9.x86_64.rpm
    sha:1573037ad37d6ec7e4b9fc1143ab726021a323df69f3c3c6067f606565a56c86
  • alt-ruby33-bundled-gems-3.3.12-12.el9.x86_64.rpm
    sha:4f5b1ccad0148fd6b4b76ee5eede7a5107495719cdaaccfa5a288d5f08a855f6
  • alt-ruby33-default-gems-3.3.12-12.el9.noarch.rpm
    sha:35dafa81de22f05e130a382814f9984e071a6d48138e46922dc3358d964583a5
  • alt-ruby33-devel-3.3.12-12.el9.x86_64.rpm
    sha:96426682fb43fad6a3d42835e10c438ca7ceefe405bd728a51144cf345912938
  • alt-ruby33-doc-3.3.12-12.el9.noarch.rpm
    sha:07e6a50d0d14b2ed18da0ba89c44006750ac71a31a0f4149b3e8ff84d0275db3
  • alt-ruby33-libs-3.3.12-12.el9.x86_64.rpm
    sha:6f6939e7333e24c813485b143c01918bc7d3cbe5cda0ccd2356e1edfa5ec7a1a
  • alt-ruby33-rubygem-bigdecimal-3.1.5-12.el9.x86_64.rpm
    sha:68ebd11c2a2ee4d3c6cd9638a6373ad5950298fc00bf0d6187843189cf3700f0
  • alt-ruby33-rubygem-bundler-2.5.22-12.el9.noarch.rpm
    sha:894071f1240445d19a961632f4b074dc22e1cf139836e281098ea40164da6021
  • alt-ruby33-rubygem-io-console-0.7.1-12.el9.x86_64.rpm
    sha:2320b6b416d0125f9752c6c5d63a74d5cec7cffb2de14d27865d66e6d68a6ca0
  • alt-ruby33-rubygem-irb-1.13.1-12.el9.noarch.rpm
    sha:8aa88d2d5c4887cc17d19d4cec911cd62425a82ab6ed2e117929c21942c9ed71
  • alt-ruby33-rubygem-json-2.7.2-12.el9.x86_64.rpm
    sha:60a13a8456b6b977ee377c341003e6e1043f4f1e307b8a245723be8d32ea95b3
  • alt-ruby33-rubygem-minitest-5.20.0-12.el9.noarch.rpm
    sha:fdc601792dab7e8d2cc38d3e37b4c236c276b4a25fa265e0ad20ce44e0a16981
  • alt-ruby33-rubygem-power_assert-2.0.3-12.el9.noarch.rpm
    sha:8513eb42108f71e0cbc740a8e13f2079c01216805d21b5455f6f6c30663b75c9
  • alt-ruby33-rubygem-psych-5.1.2-12.el9.x86_64.rpm
    sha:43377ff4eb211abe15aec08b904033612792a876d490aa2c09e800812d8f9d78
  • alt-ruby33-rubygem-racc-1.7.3-12.el9.x86_64.rpm
    sha:04af76409b647134fe4fb33d428dda098b74eeaa7307c78facbe0f5b32993b12
  • alt-ruby33-rubygem-rake-13.1.0-12.el9.noarch.rpm
    sha:9d30fade27d8893e3a76085c53481510bba38011568679d727f01ad8d7c21334
  • alt-ruby33-rubygem-rbs-3.4.0-12.el9.x86_64.rpm
    sha:d8285b9c208fbb25eb4417ae2f90193e39f0a9ab1200e7557e1f070c8e01bffa
  • alt-ruby33-rubygem-rdoc-6.6.3.1-12.el9.noarch.rpm
    sha:b06cd6446f71f00d396b15bc003e97455b36d72163e1332a633d293cd86b855c
  • alt-ruby33-rubygem-rexml-3.4.4-12.el9.noarch.rpm
    sha:7ea57a30798ca1d6d0238d183c5d2807aab2060191b44a633b2b8a306e894824
  • alt-ruby33-rubygem-rss-0.3.1-12.el9.noarch.rpm
    sha:af073fd2a8cba97316141acff6a08f818e603d8e4bf99ad25f0f7bcc50af1953
  • alt-ruby33-rubygem-test-unit-3.6.1-12.el9.noarch.rpm
    sha:f016bbaa6122509da392b5a29cbcda4c7f5f772614f37e25d877283f056416ef
  • alt-ruby33-rubygem-typeprof-0.21.9-12.el9.noarch.rpm
    sha:291784dc5c16a844a442a0360456e92d04f6fff8422cc8766efa25ca1520415f
  • alt-ruby33-rubygems-3.5.22-12.el9.noarch.rpm
    sha:ac1581b4b14d7cdb9da69d656e934e412b60d111c067d1871bac566065ad4fc4
  • alt-ruby33-rubygems-devel-3.5.22-12.el9.noarch.rpm
    sha:179b5df407a4171a39de614fd9fc3ca41f71fde1c864d612954fbd540d0f497d
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.