[CLSA-2026:1789567510] alt-ruby30: Fix of 2 CVEs
Type:
security
Severity:
Important
Release date:
2026-09-16 14:05:20 UTC
Description:
- CVE-2026-80212: resolv memory exhaustion via permanently registered classes for unknown DNS (type, class) pairs. Classes returned by Resource::Generic.create are no longer registered, so getresources(name, Generic.create(type, class)) now yields no records for that unknown type (upstream behaviour). - CVE-2026-80213: resolv hostname validation bypass via unenforced DNS label and name size limits when encoding. - Rewrite the #!/usr/bin/ruby shebang of gem executables to the alt ruby interpreter so no subpackage requires the system ruby (ALTEAPLN-11 QA check).
Updated packages:
  • alt-ruby30-3.0.7-173.el8.x86_64.rpm
    sha:94d4185a163e73a7d1e05abd3cb56466e677d6090b8de977cc0df13e532f9b95
  • alt-ruby30-default-gems-3.0.7-173.el8.noarch.rpm
    sha:e1e4d8b08e0dfac1c2a4fa0c05912876318d66d79fbc5413d91b06b87b68af6b
  • alt-ruby30-devel-3.0.7-173.el8.x86_64.rpm
    sha:60e30010cadf6df6fad855519283af7cc674e900b147ef5527a5fcac79bd3e93
  • alt-ruby30-doc-3.0.7-173.el8.noarch.rpm
    sha:42a161b174f3b69891af4a0c10ea1d521522ca1b82f68a98bc99f9ed54733ced
  • alt-ruby30-libs-3.0.7-173.el8.x86_64.rpm
    sha:cf9dfeda739d4b37af9d8c9aec0cc53bf2924fec762ff735067ac909bb4f4c3e
  • alt-ruby30-rubygem-bigdecimal-3.0.0-173.el8.x86_64.rpm
    sha:c7df5215a4ae027ac60337ed37d2e2bef21be2ac3e25262f673235ece4b9b0f6
  • alt-ruby30-rubygem-bundler-2.2.33-173.el8.noarch.rpm
    sha:773c55b498e68f44d7c276123eacf7fa017657d2e19e64ffe8bbe5c730e58a75
  • alt-ruby30-rubygem-io-console-0.5.7-173.el8.x86_64.rpm
    sha:b37ee495c766ed32247e4c53fe4ce37beb1686d72fec8d4ec1ee9ee0676330e0
  • alt-ruby30-rubygem-irb-1.3.5-173.el8.noarch.rpm
    sha:26c9c1d7ac85831aaafc0e248a87ee7e8ffcc68c14317fd1ac0885e570f9ddcf
  • alt-ruby30-rubygem-json-2.5.1-173.el8.x86_64.rpm
    sha:45041c69977b23e0a9d28d5d08f91cae07e3ffac4d26cc37cc8cace99702855f
  • alt-ruby30-rubygem-minitest-5.14.2-173.el8.noarch.rpm
    sha:d8da4aeae5aa759566685a9f1f18f9d50812b06cb6381890502d6f0c7c2645dd
  • alt-ruby30-rubygem-power_assert-1.2.1-173.el8.noarch.rpm
    sha:5b1ec407415ceee4ea992ba7ed42ead3f3d5f5fe4666a8dedc7a99ba2c08e5db
  • alt-ruby30-rubygem-psych-3.3.2-173.el8.x86_64.rpm
    sha:da08234a53c8740d9c8689c28e8f48b6407900c5ca8352218b37b57bc03a067b
  • alt-ruby30-rubygem-rake-13.0.3-173.el8.noarch.rpm
    sha:aff806f241ea6c79d50b596b9b4551a128d2fad364a9407f9f167e9c17725af9
  • alt-ruby30-rubygem-rbs-1.4.0-173.el8.noarch.rpm
    sha:4b1e358cca92a325d6605e11f485d8b9801905a5b60c22179556b0acceca1172
  • alt-ruby30-rubygem-rdoc-6.3.4.1-173.el8.noarch.rpm
    sha:3e46aa2d2407e79335fc61d9311b030b460fdce78036ffe83569687f9064dd45
  • alt-ruby30-rubygem-rexml-3.2.5-173.el8.noarch.rpm
    sha:8d1f51c824f398367881a63b8c750bbe523228e6bca45df3e62875b30b67736b
  • alt-ruby30-rubygem-rss-0.2.9-173.el8.noarch.rpm
    sha:ca2c70c1b1ac79c3c50897bccdfe9c55976362918173ea421ad48ecaa100c0e3
  • alt-ruby30-rubygem-test-unit-3.3.7-173.el8.noarch.rpm
    sha:363740346943e18e05762d8aa820ea825dae62084b8b7bee4f14f31d88847d28
  • alt-ruby30-rubygem-typeprof-0.15.2-173.el8.noarch.rpm
    sha:3cac10912a2dc1a320c0d15aa1f4095978755d484d4bc1f0dc327e0bcaa16dcd
  • alt-ruby30-rubygems-3.2.33-173.el8.noarch.rpm
    sha:0c16c0bd4ac42e2770ebab23080770c3a195c6a89d4baf8448c73cbb8cf7aaca
  • alt-ruby30-rubygems-devel-3.2.33-173.el8.noarch.rpm
    sha:ad5d1f5fac4a5e8b650869ca7489ba4ffcef507ff4cf36c945f70dfe84006d66
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.