Release date:
2026-08-31 17:32:07 UTC
Description:
* SECURITY UPDATE: Heap buffer overflow in the bundled zlib extension via
Zlib::GzipReader#ungetc
- debian/patches/CVE-2026-27820.patch: in zstream_buffer_ungets()
(ext/zlib/zlib.c) the output buffer was expanded only when it was
already full (rb_str_capacity(z->buf) <= ZSTREAM_BUF_FILLED(z)), so a
large ungetc payload memmove()'d and wrote past the allocation. Make
the expansion unconditional via zstream_expand_buffer_into(z, len),
which guarantees capacity for filled + len before the memmove. Also
backports the upstream regression test test_ungetc_buffer_underflow.
- CVE-2026-27820
Updated packages:
-
alt-ruby35_3.5.0~preview1-4_amd64.deb
sha:8feb3a77ea91757a8be043c2f330d7b8d597f7d2
-
alt-ruby35-bundled-gems_3.5.0~preview1-4_amd64.deb
sha:59800ca41fabe5fa78de0673750bf2d57358dbee
-
alt-ruby35-default-gems_3.5.0~preview1-4_amd64.deb
sha:5a576dd5c4bff9c0572a15ad9096acdc1dc84e15
-
alt-ruby35-devel_3.5.0~preview1-4_amd64.deb
sha:7fff64c52b29ea448d628948b6b5ae11c4a7eb23
-
alt-ruby35-doc_3.5.0~preview1-4_amd64.deb
sha:8397d3a92964b741f651382ba287451db54299eb
-
alt-ruby35-libs_3.5.0~preview1-4_amd64.deb
sha:459e725e1701f724e8639b10497a877ae2a5451c
-
alt-ruby35-rubygem-bigdecimal_3.1.9-4_amd64.deb
sha:4ce8cbfc83b98ed3c8e23cc322821ac3a3286813
-
alt-ruby35-rubygem-bundler_2.7.0.dev-4_amd64.deb
sha:1fe5a2d97a83436a003b9a4dba4a7a77a3f6bae0
-
alt-ruby35-rubygem-io-console_0.8.0-4_amd64.deb
sha:da6fbbe6c43258d2798b68d85bb8bff96441afbf
-
alt-ruby35-rubygem-irb_1.15.2-4_amd64.deb
sha:002ddbe5a84723631969c2d460f4e6f28162ce9e
-
alt-ruby35-rubygem-json_2.10.2-4_amd64.deb
sha:539b06e55be44c70cb968af71d3b89d009330532
-
alt-ruby35-rubygem-minitest_5.25.5-4_amd64.deb
sha:5dbd8bf6e4fa4a28377bbea264003af46e518d74
-
alt-ruby35-rubygem-power-assert_2.0.5-4_amd64.deb
sha:4b0bcf0b07f5ee76cdb813b0c8f907c2b2bd5a82
-
alt-ruby35-rubygem-psych_5.2.3-4_amd64.deb
sha:2a160e7addce2fa64a999d6e6c4251874ce11cee
-
alt-ruby35-rubygem-racc_1.8.1-4_amd64.deb
sha:0e51b016cd4b626a374d0ce10b268016baec8710
-
alt-ruby35-rubygem-rake_13.2.1-4_amd64.deb
sha:fd24cf5026f2805ba4ee3efeb0ed7182290fd492
-
alt-ruby35-rubygem-rbs_3.9.2-4_amd64.deb
sha:683f5cbc7f41da579e382be92dabcf06424e8775
-
alt-ruby35-rubygem-rdoc_6.13.1-4_amd64.deb
sha:9e57fc0ff689ffd857e6a85bbcc89c70ee19a665
-
alt-ruby35-rubygem-rexml_3.4.1-4_amd64.deb
sha:0fa0511327d2bdb6ec46a30e896cde455c7cdcd9
-
alt-ruby35-rubygem-rss_0.3.1-4_amd64.deb
sha:6494740ffec7bc2f5cc0f306624c7cfb0c04e25d
-
alt-ruby35-rubygem-test-unit_3.6.8-4_amd64.deb
sha:92c33cd3f11143b7aed7b83ca88c4b964af4e74a
-
alt-ruby35-rubygem-typeprof_0.30.1-4_amd64.deb
sha:0e8e2aee7434ef903d75b41764fffa580e0310dd
-
alt-ruby35-rubygems_3.7.0.dev-4_amd64.deb
sha:0157ab17064894358c1decc61573ce04e2b32e89
-
alt-ruby35-rubygems-devel_3.7.0.dev-4_amd64.deb
sha:38ca4c5634c66219983eb0141f8a81809522d886
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
