[CLSA-2026:1789562333] alt-ruby31: Fix of 2 CVEs
Type:
security
Severity:
Important
Release date:
2026-09-16 12:39:03 UTC
Description:
- CVE-2026-80212: resolv memory exhaustion via permanently registered classes for unknown DNS (type, class) pairs. Classes returned by Resource::Generic.create are no longer registered, so getresources(name, Generic.create(type, class)) now yields no records for that unknown type (upstream behaviour). - CVE-2026-80213: resolv hostname validation bypass via unenforced DNS label and name size limits when encoding. - Rewrite the #!/usr/bin/ruby shebang of gem executables to the alt ruby interpreter so no subpackage requires the system ruby (ALTEAPLN-11 QA check).
Updated packages:
  • alt-ruby31-3.1.7-13.el10.x86_64.rpm
    sha:4c32e92222a47309f6e9de31a0f143a058517315c9a88f87effa2d6bc86550ad
  • alt-ruby31-bundled-gems-3.1.7-13.el10.x86_64.rpm
    sha:34bd9de348a5082240817cad06a4496d233dbb5ff76a80b9c565179de13518d0
  • alt-ruby31-default-gems-3.1.7-13.el10.noarch.rpm
    sha:3c4433edfb494d5b173a389a8955dee250e1193f1135ce290b44c3a68dc49b51
  • alt-ruby31-devel-3.1.7-13.el10.x86_64.rpm
    sha:e9a515b765b00e622444565bc2c6b33d098fa3ed01c8a204892fc9de2bf9c4d8
  • alt-ruby31-doc-3.1.7-13.el10.noarch.rpm
    sha:7d15d94933677b31fc63c96acf03e70d3dd6a6d9e535f7d98ce4ac26901e0f26
  • alt-ruby31-libs-3.1.7-13.el10.x86_64.rpm
    sha:8ddfb552f47f4647237bedc1cff27d2dbbd3758e59911d1897ea66ef6ec39dbd
  • alt-ruby31-rubygem-bigdecimal-3.1.1-13.el10.x86_64.rpm
    sha:8df9204c138563a03aa8c9e6134c4c9898a33faa4e737bd3f2dac194dc204479
  • alt-ruby31-rubygem-bundler-2.3.27-13.el10.noarch.rpm
    sha:d00e122d511d35f0afe5c12c7f46d8f350b3872a5640a00cef4a6556b0e6ec2a
  • alt-ruby31-rubygem-io-console-0.5.11-13.el10.x86_64.rpm
    sha:c6d651bca4b553ca33bcade8f2a84327429b76d435256241695009b85662cceb
  • alt-ruby31-rubygem-irb-1.4.1-13.el10.noarch.rpm
    sha:9d72e39c80f247db9bdc74cbca549860a068ce5157864ca2f38a08901de5dceb
  • alt-ruby31-rubygem-json-2.6.1-13.el10.x86_64.rpm
    sha:5fbd0d806357f9ebf741838e5d741d1b3a3799876a772b91f6de5d68089a6d71
  • alt-ruby31-rubygem-minitest-5.15.0-13.el10.noarch.rpm
    sha:e7e0c7d4823e2417d33840be00fdd5bd542d806e105321e2318d477c883fe968
  • alt-ruby31-rubygem-power_assert-2.0.1-13.el10.noarch.rpm
    sha:3330d6d7ecb0c8a33f253cb363c1c822bee1d29ed17ce656ec44d3046a550238
  • alt-ruby31-rubygem-psych-4.0.4-13.el10.x86_64.rpm
    sha:06b7ee1ab68fe7ad7173e485a60dfa1d4ce72ac3636ccd0315ffa88b5e9405bd
  • alt-ruby31-rubygem-rake-13.0.6-13.el10.noarch.rpm
    sha:769d922b5608ab97116eb059d0a272574b3602876dde826e04700a5e7ec672ba
  • alt-ruby31-rubygem-rbs-2.7.0-13.el10.x86_64.rpm
    sha:d8aafeab52acfebf8f7817cdd27a32f3c9dda4670fb891dd348ffac6ffcfdc98
  • alt-ruby31-rubygem-rdoc-6.4.1.1-13.el10.noarch.rpm
    sha:5895ab676bd97a3918b6f5ab71068c3ed432ad0da9aa948114abbbb6329130ee
  • alt-ruby31-rubygem-rexml-3.3.9-13.el10.noarch.rpm
    sha:e3c941e40929daffc6a59fd4477f59213a674aa7faf56f4773947aca4f49a043
  • alt-ruby31-rubygem-rss-0.3.1-13.el10.noarch.rpm
    sha:6af34264aed3dd44a7ced066860f2a9c0dd59a6f9c05972d3fe6d7f2f8f54c7f
  • alt-ruby31-rubygem-test-unit-3.5.3-13.el10.noarch.rpm
    sha:e16ff5e5e8cea7ae7fbc5e9a39216d89aceff801ded6942ac919a4423d87ea84
  • alt-ruby31-rubygem-typeprof-0.21.3-13.el10.noarch.rpm
    sha:a4f81fbb16fba60c7081702982619465363b6c68a66735c94b161f3f2ac237c4
  • alt-ruby31-rubygems-3.3.27-13.el10.noarch.rpm
    sha:85ef0a53ef37fa0eed5ee91859aafca7de7c8792af340b1183e9c2c45bb18361
  • alt-ruby31-rubygems-devel-3.3.27-13.el10.noarch.rpm
    sha:4d41343295608442dc0219e798c02da66861ced4c401b293ac67bef759d580b1
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.