Release date:
2026-08-31 17:08:01 UTC
Description:
* SECURITY UPDATE: Heap buffer overflow in the bundled zlib extension via
Zlib::GzipReader#ungetc
- debian/patches/CVE-2026-27820.patch: in zstream_buffer_ungets()
(ext/zlib/zlib.c) the output buffer was expanded only when it was
already full (rb_str_capacity(z->buf) <= ZSTREAM_BUF_FILLED(z)), so a
large ungetc payload memmove()'d and wrote past the allocation. Make
the expansion unconditional via zstream_expand_buffer_into(z, len),
which guarantees capacity for filled + len before the memmove. Also
backports the upstream regression test test_ungetc_buffer_underflow.
- CVE-2026-27820
Updated packages:
-
alt-ruby35_3.5.0~preview1-4_amd64.deb
sha:9244f6c9c98224db6ebd81618eaa95c37553b743
-
alt-ruby35-bundled-gems_3.5.0~preview1-4_amd64.deb
sha:024a02f015ce2bd0dcec3d929c21b12140ce8fb3
-
alt-ruby35-default-gems_3.5.0~preview1-4_amd64.deb
sha:44e2a8a82c17fb6c9685338e9f834511920392c0
-
alt-ruby35-devel_3.5.0~preview1-4_amd64.deb
sha:eebcb46799c28e1e91ac07b8a5095a71d8467ae7
-
alt-ruby35-doc_3.5.0~preview1-4_amd64.deb
sha:39d0b59eae7105619dbbdfd6aa7579e459992254
-
alt-ruby35-libs_3.5.0~preview1-4_amd64.deb
sha:a440c01f11e103d4514f56e88501013d236392d4
-
alt-ruby35-rubygem-bigdecimal_3.1.9-4_amd64.deb
sha:d09893a16ba5ae40d2dff7683b645c605c5b89f9
-
alt-ruby35-rubygem-bundler_2.7.0.dev-4_amd64.deb
sha:ae5c8fd53f4f3ef22f5e8b11315a031d8a8d407f
-
alt-ruby35-rubygem-io-console_0.8.0-4_amd64.deb
sha:8bb887e01ef663b26c6241c6f704c008b944de9c
-
alt-ruby35-rubygem-irb_1.15.2-4_amd64.deb
sha:700637ce778460eb4021d013ae8ddab6a8161758
-
alt-ruby35-rubygem-json_2.10.2-4_amd64.deb
sha:baa16b9b8a908ddc13b7f34079cd76567bec9e2c
-
alt-ruby35-rubygem-minitest_5.25.5-4_amd64.deb
sha:ae571b1ae43e97d9fa6e7ca8601a8715713f5540
-
alt-ruby35-rubygem-power-assert_2.0.5-4_amd64.deb
sha:67c78606f5eb5c9fbafcf2f9e1e58c24a4b8bd96
-
alt-ruby35-rubygem-psych_5.2.3-4_amd64.deb
sha:b00d23b5b96634633a9b8ad871151ffd1bed312e
-
alt-ruby35-rubygem-racc_1.8.1-4_amd64.deb
sha:8d90cef921244b76b7a70c825f0b94a2402e0040
-
alt-ruby35-rubygem-rake_13.2.1-4_amd64.deb
sha:05a7f4bdd38b31715760e71fef29225b84d06fab
-
alt-ruby35-rubygem-rbs_3.9.2-4_amd64.deb
sha:0e0ecb9177472b83d25a85aab1d9b4bc36197869
-
alt-ruby35-rubygem-rdoc_6.13.1-4_amd64.deb
sha:1d845f3debc0cd58cf6d6561fea53e9dc50a869d
-
alt-ruby35-rubygem-rexml_3.4.1-4_amd64.deb
sha:e144b245fa43abeb777dd50e63ae936460624a52
-
alt-ruby35-rubygem-rss_0.3.1-4_amd64.deb
sha:60e8e8f8278c38db89bad6c7037dcd41bc539d6e
-
alt-ruby35-rubygem-test-unit_3.6.8-4_amd64.deb
sha:142118fce231affecc168a4ad8facc9f6930c9da
-
alt-ruby35-rubygem-typeprof_0.30.1-4_amd64.deb
sha:5d5e165616abfc58b3a987d5e7b09f53677dff8a
-
alt-ruby35-rubygems_3.7.0.dev-4_amd64.deb
sha:191a86728e127b8ab1005f19f90eb551eec1320e
-
alt-ruby35-rubygems-devel_3.7.0.dev-4_amd64.deb
sha:65ffaf6f40f52d409a3b5cacf3d43be484965bf0
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
