[CLSA-2026:1789555512] alt-ruby27: Fix of 2 CVEs
Type:
security
Severity:
Important
Release date:
2026-09-16 10:45:22 UTC
Description:
- CVE-2026-80212: resolv memory exhaustion via permanently registered classes for unknown DNS (type, class) pairs. Classes returned by Resource::Generic.create are no longer registered, so getresources(name, Generic.create(type, class)) now yields no records for that unknown type (upstream behaviour). - CVE-2026-80213: resolv hostname validation bypass via unenforced DNS label and name size limits when encoding. - Rewrite the #!/usr/bin/ruby shebang of gem executables to the alt ruby interpreter so no subpackage requires the system ruby (ALTEAPLN-11 QA check).
Updated packages:
  • alt-ruby27-2.7.8-149.el10.x86_64.rpm
    sha:82842cfa010d37f42c183228e84135cb4cc79b34efdeb353dd867cf18a49e7dd
  • alt-ruby27-default-gems-2.7.8-149.el10.noarch.rpm
    sha:cfb3e1168a76d5c9dd3c42f34e43037d4012444b007b39860eb9a06d67cb2eef
  • alt-ruby27-devel-2.7.8-149.el10.x86_64.rpm
    sha:6b778e004c5fa72d5744c7ce0c5590f215de85d54e612b7990fe2cb0b937ab1e
  • alt-ruby27-doc-2.7.8-149.el10.noarch.rpm
    sha:266880beaec97a3b0980db3c1156774f728f2a7c36db01a97a5755a18e384567
  • alt-ruby27-libs-2.7.8-149.el10.x86_64.rpm
    sha:e297de84d980801493eb0a47f0b4d12c4013f73a196b0882fc683febcfaea91a
  • alt-ruby27-rubygem-bigdecimal-2.0.0-149.el10.x86_64.rpm
    sha:628b56c6deb600fd67adf86bc4567ab75a8b7bb7f121c75a581b61cc308bfeb0
  • alt-ruby27-rubygem-bundler-2.2.24-149.el10.noarch.rpm
    sha:c661bfdd247b641a36aaf8a170876780bb4aca30a25c174d876c7e9e23665000
  • alt-ruby27-rubygem-io-console-0.5.6-149.el10.x86_64.rpm
    sha:08c4403b1a2d3b7791666537689678340174078d0b244e13b64c2baa245c81e6
  • alt-ruby27-rubygem-irb-1.2.6-149.el10.noarch.rpm
    sha:f510c7f73ecca7046eccabee8cb90f1b646793d50342ffec24aba007fb10d6c8
  • alt-ruby27-rubygem-json-2.3.0-149.el10.x86_64.rpm
    sha:a19383eba7e4ee7530dc19d540cf7ea13db7dd5bee87654a00b7451082bd7a30
  • alt-ruby27-rubygem-minitest-5.13.0-149.el10.noarch.rpm
    sha:c0ccdd7ad418f0d47b16d3b190c62f92d110a30b5a54505ab4e58f5ce0a79da4
  • alt-ruby27-rubygem-net-telnet-0.2.0-149.el10.noarch.rpm
    sha:79ac663b8d1a95cde710f72d5233fc94f6ab9474b058a5d533340f417c190df8
  • alt-ruby27-rubygem-openssl-2.1.4-149.el10.x86_64.rpm
    sha:6f1790fd38ad01e857519640ca4ac586829aa42129c8493f30edbe016cb0c0e8
  • alt-ruby27-rubygem-power_assert-1.1.7-149.el10.noarch.rpm
    sha:3dc8263210671bb5b49753b4e1fdf604e9a23aa256b5fd643ccdf5d705988738
  • alt-ruby27-rubygem-psych-3.1.0-149.el10.x86_64.rpm
    sha:929c9043d8c65cfabf0c80d9d0f6c5cf36c434cb7de27d53615a9f51b38969dd
  • alt-ruby27-rubygem-rake-13.0.1-149.el10.noarch.rpm
    sha:7b3c4243c409d9199b1e33d86962a87e20997c56313300ff19d0f20d5ed68c47
  • alt-ruby27-rubygem-rdoc-6.2.1.1-149.el10.noarch.rpm
    sha:bd1e197decdb69b6be4b556038588e11736cf97c8a165833f456b42aa45d986a
  • alt-ruby27-rubygem-test-unit-3.3.4-149.el10.noarch.rpm
    sha:802d5938149c20ad87c24cce63f1ca3e12d3d0a96efeee3683795e7f83087524
  • alt-ruby27-rubygem-xmlrpc-0.3.0-149.el10.noarch.rpm
    sha:4b68c81713705dc74a7065abd777773b75ac209c0174722fd5bc1708aaa7e951
  • alt-ruby27-rubygems-3.1.6-149.el10.noarch.rpm
    sha:57af6d51305f1c45805ad662b3f2d1e8e09618223b3444056441c35edc49c0b2
  • alt-ruby27-rubygems-devel-3.1.6-149.el10.noarch.rpm
    sha:370dbbeb082fb5188604e2024676de6a7d684730a3b764e1acf6ba3350643173
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.