Release date:
2026-08-31 17:17:20 UTC
Description:
* SECURITY UPDATE: Heap buffer overflow in the bundled zlib extension via
Zlib::GzipReader#ungetc
- debian/patches/CVE-2026-27820.patch: in zstream_buffer_ungets()
(ext/zlib/zlib.c) the output buffer was expanded only when it was
already full (rb_str_capacity(z->buf) <= ZSTREAM_BUF_FILLED(z)), so a
large ungetc payload memmove()'d and wrote past the allocation. Make
the expansion unconditional via zstream_expand_buffer_into(z, len),
which guarantees capacity for filled + len before the memmove. Also
backports the upstream regression test test_ungetc_buffer_underflow.
- CVE-2026-27820
Updated packages:
-
alt-ruby35_3.5.0~preview1-4_amd64.deb
sha:f749e6e89e69cfdf84636a7c9b8f0b706728de04
-
alt-ruby35-bundled-gems_3.5.0~preview1-4_amd64.deb
sha:fe9cb764a72280391d0f4c4876ea06bd9ec34222
-
alt-ruby35-default-gems_3.5.0~preview1-4_amd64.deb
sha:7f67f8f8496894adf5c645e3cb8a061af450113d
-
alt-ruby35-devel_3.5.0~preview1-4_amd64.deb
sha:b493886460b3e6a75959ffef9f35397fa40aab61
-
alt-ruby35-doc_3.5.0~preview1-4_amd64.deb
sha:c64b28ce1e35b8b803903dcba6b95e037640d248
-
alt-ruby35-libs_3.5.0~preview1-4_amd64.deb
sha:e117470ffa8910dbb7c3fdb98d06c3112ec98090
-
alt-ruby35-rubygem-bigdecimal_3.1.9-4_amd64.deb
sha:506fd852f2d2ce111ccd0dae6d35265e5578a5da
-
alt-ruby35-rubygem-bundler_2.7.0.dev-4_amd64.deb
sha:48da5da1a6b69cf182d54ab140f0fea04fdf8732
-
alt-ruby35-rubygem-io-console_0.8.0-4_amd64.deb
sha:6ec6c298c165d4ad7c5e1b668bd4be44d05a847b
-
alt-ruby35-rubygem-irb_1.15.2-4_amd64.deb
sha:cdd9dbb129e35d2dcc227d2c20afbd51098b73f1
-
alt-ruby35-rubygem-json_2.10.2-4_amd64.deb
sha:68f4d59ce627d7c73d35d1d2eaf98fc2a9f85da8
-
alt-ruby35-rubygem-minitest_5.25.5-4_amd64.deb
sha:198aac56b111202056efb157d3ec0714a73dd435
-
alt-ruby35-rubygem-power-assert_2.0.5-4_amd64.deb
sha:fbdb02bced7638a864e335a2224ec95918302066
-
alt-ruby35-rubygem-psych_5.2.3-4_amd64.deb
sha:4ab0ec2a0d0c73ab4020ab5d34f026308686093d
-
alt-ruby35-rubygem-racc_1.8.1-4_amd64.deb
sha:b60c62b360f81d3358eb15ad8ea3a612c2134b02
-
alt-ruby35-rubygem-rake_13.2.1-4_amd64.deb
sha:734c7f03103e5fecd81c6406b687716256fb52a8
-
alt-ruby35-rubygem-rbs_3.9.2-4_amd64.deb
sha:95fea3c41c46873dc2bada31bd1dec21037b27ec
-
alt-ruby35-rubygem-rdoc_6.13.1-4_amd64.deb
sha:58f6b9199dcd863ee27aacea4abd159efd3a9973
-
alt-ruby35-rubygem-rexml_3.4.1-4_amd64.deb
sha:b463e448b3b518c2064787e00299f25a52d98055
-
alt-ruby35-rubygem-rss_0.3.1-4_amd64.deb
sha:d9571024252b95c0243ab5822b81a8bcedb1190e
-
alt-ruby35-rubygem-test-unit_3.6.8-4_amd64.deb
sha:75131ff179a668db14a649667992d2f10b72b2ec
-
alt-ruby35-rubygem-typeprof_0.30.1-4_amd64.deb
sha:ef5591f04535d9100c15eaf9c3dd9e32f7b5c488
-
alt-ruby35-rubygems_3.7.0.dev-4_amd64.deb
sha:baa273c1308c13404c71f58e85a1849203e2c61f
-
alt-ruby35-rubygems-devel_3.7.0.dev-4_amd64.deb
sha:cc036265678eef40859af1b3210bc52c147098a2
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
