Release date:
2026-08-31 17:24:57 UTC
Description:
* SECURITY UPDATE: Heap buffer overflow in the bundled zlib extension via
Zlib::GzipReader#ungetc
- debian/patches/CVE-2026-27820.patch: in zstream_buffer_ungets()
(ext/zlib/zlib.c) the output buffer was expanded only when it was
already full (rb_str_capacity(z->buf) <= ZSTREAM_BUF_FILLED(z)), so a
large ungetc payload memmove()'d and wrote past the allocation. Make
the expansion unconditional via zstream_expand_buffer_into(z, len),
which guarantees capacity for filled + len before the memmove. Also
backports the upstream regression test test_ungetc_buffer_underflow.
- CVE-2026-27820
Updated packages:
-
alt-ruby35_3.5.0~preview1-4_amd64.deb
sha:5f302b95ea4f51cc3a0857423bdb4e3645fa9ef4
-
alt-ruby35-bundled-gems_3.5.0~preview1-4_amd64.deb
sha:92aa5180dc7a29a19e1c717f2d496c421068512d
-
alt-ruby35-default-gems_3.5.0~preview1-4_amd64.deb
sha:eb8e9d582396a436743a361b97e7a19bc8afbc80
-
alt-ruby35-devel_3.5.0~preview1-4_amd64.deb
sha:a5fbb72634fcef69bdf38cc5e5a5edcdcb6fa01b
-
alt-ruby35-doc_3.5.0~preview1-4_amd64.deb
sha:13fb8387db5f274892091174b4f31be0fad3c430
-
alt-ruby35-libs_3.5.0~preview1-4_amd64.deb
sha:d89922eb518d9799eb68d4591194ac473b485cbb
-
alt-ruby35-rubygem-bigdecimal_3.1.9-4_amd64.deb
sha:0ebe5e0f96c72a7dc119c377eff1c37911bb7e6e
-
alt-ruby35-rubygem-bundler_2.7.0.dev-4_amd64.deb
sha:944fbd24b7c9c9176cf3f38982222aee124dd32d
-
alt-ruby35-rubygem-io-console_0.8.0-4_amd64.deb
sha:6408e341ccea435ab4395c0c56407d7ba8156f70
-
alt-ruby35-rubygem-irb_1.15.2-4_amd64.deb
sha:c41fd576250b9b703a1e34ad4cf0639ee2d6448c
-
alt-ruby35-rubygem-json_2.10.2-4_amd64.deb
sha:034cb7c4958b7358bcd1c90c4b7d1d339a4a1d93
-
alt-ruby35-rubygem-minitest_5.25.5-4_amd64.deb
sha:df5ec3212d09447e20bada5bcef5f4168d1e0431
-
alt-ruby35-rubygem-power-assert_2.0.5-4_amd64.deb
sha:0dd3afc0a0c919fb900c976493fa7befc10bda2b
-
alt-ruby35-rubygem-psych_5.2.3-4_amd64.deb
sha:c0941c69c37c2c3daefe2bfa9a83e30b57345d29
-
alt-ruby35-rubygem-racc_1.8.1-4_amd64.deb
sha:10fcbff3b794814eabcbb972efb11338eebec06c
-
alt-ruby35-rubygem-rake_13.2.1-4_amd64.deb
sha:3b141c479dd7fd9031fb794e340d2ef56b89fbfd
-
alt-ruby35-rubygem-rbs_3.9.2-4_amd64.deb
sha:9de3783f24f9f9d358f38bd1e5eb4a770f5f142f
-
alt-ruby35-rubygem-rdoc_6.13.1-4_amd64.deb
sha:f4a5305b4b6513a5eff30db2dfad3d677537232b
-
alt-ruby35-rubygem-rexml_3.4.1-4_amd64.deb
sha:7e57dae4bd5be8e9d5e9bb60430fe842345455d4
-
alt-ruby35-rubygem-rss_0.3.1-4_amd64.deb
sha:4ddd4866f4ce8a23cc7ab90a4de6ad1c1894f922
-
alt-ruby35-rubygem-test-unit_3.6.8-4_amd64.deb
sha:bdf9583ba6b50c0f2f7105eb1c81007c6b257d1f
-
alt-ruby35-rubygem-typeprof_0.30.1-4_amd64.deb
sha:e672cffaa025eb58b51df75f17e136cd5710e0ec
-
alt-ruby35-rubygems_3.7.0.dev-4_amd64.deb
sha:a08badf92b86aa01daa4dc7e5575e9939baf1e7d
-
alt-ruby35-rubygems-devel_3.7.0.dev-4_amd64.deb
sha:bd80d96f63e3b85a0449116b89673a44cb4bc685
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
