[CLSA-2026:1789579386] alt-ruby35: Fix of 2 CVEs
Type:
security
Severity:
Important
Release date:
2026-09-16 17:23:17 UTC
Description:
- CVE-2026-80212: memory exhaustion in the bundled resolv gem - decoding a response with unknown DNS (type, class) pairs or unknown SvcParamKeys permanently registered a generated class for each one. Classes returned by Resource::Generic.create are no longer registered, so getresources(name, Generic.create(type, class)) now yields no records for that unknown type (upstream behaviour). - CVE-2026-80213: hostname validation bypass in the bundled resolv gem - DNS label and encoded-name size limits were not enforced when encoding, so an over-long label wrapped its length octet and resolved a different name. - Rewrite the #!/usr/bin/ruby shebang of gem executables to the alt ruby interpreter so no subpackage requires the system ruby (ALTEAPLN-11 QA check).
CVEs fixed:
Updated packages:
  • alt-ruby35-3.5.0-0.4.preview1.el10.x86_64.rpm
    sha:66320c93479d1ee276ba8d45097a37d32f228faf7f5aeda05392a5009954d473
  • alt-ruby35-bundled-gems-3.5.0-0.4.preview1.el10.x86_64.rpm
    sha:4cd7c8522e321c24e7e8e5ce8a958dc50161726482b588663754e1ac4960a3a8
  • alt-ruby35-default-gems-3.5.0-0.4.preview1.el10.noarch.rpm
    sha:05126481da0a54025d77b30fe5903344d016a567980eaf76f4a76cbb4b276e5d
  • alt-ruby35-devel-3.5.0-0.4.preview1.el10.x86_64.rpm
    sha:dda81e1e819226e7af8407969d64b7e6185ea4ccf2637d533fc6d46cf5d4f052
  • alt-ruby35-doc-3.5.0-0.4.preview1.el10.noarch.rpm
    sha:20898eacbddd7df712aba8757e37d0ec56bdc287f75ed1cb254d28d68ab50580
  • alt-ruby35-libs-3.5.0-0.4.preview1.el10.x86_64.rpm
    sha:3511c08f47e2d9d23cd7b786b2baa02a50e781295682b9192ec1ca207e82afbf
  • alt-ruby35-rubygem-bigdecimal-3.1.9-0.4.preview1.el10.x86_64.rpm
    sha:c7befbe9bbde9d46a425bdcbbc9dcb24e337fd16be1669c135b82f449bd401cf
  • alt-ruby35-rubygem-bundler-2.7.0.dev-0.4.preview1.el10.noarch.rpm
    sha:304e77c920a22d2169d31b606bb50e10bce30d1ebf933292deb9558f58b9284b
  • alt-ruby35-rubygem-io-console-0.8.0-0.4.preview1.el10.x86_64.rpm
    sha:02e14e643763dc28390387003acbcc7253c01aeb1b5bc93879cf72424ed6a020
  • alt-ruby35-rubygem-irb-1.15.2-0.4.preview1.el10.noarch.rpm
    sha:58484df59a23e8033c074584c20345681e6718b0ac35d06f9221a1c6c45d8cb0
  • alt-ruby35-rubygem-json-2.10.2-0.4.preview1.el10.x86_64.rpm
    sha:1c0e2c24eff06661b42761e7a925da8d16b093d48f05bc81874af688b217db3d
  • alt-ruby35-rubygem-minitest-5.25.5-0.4.preview1.el10.noarch.rpm
    sha:3ccd7ec6f8a752c0e2656bca4e07bd5ad5dd7029b82c775202266b6956ea7ec4
  • alt-ruby35-rubygem-power_assert-2.0.5-0.4.preview1.el10.noarch.rpm
    sha:696c95ef777c71af152aaa3f12eb3c31de45ec24d60f71d630aa1008caf9f7d3
  • alt-ruby35-rubygem-psych-5.2.3-0.4.preview1.el10.x86_64.rpm
    sha:b81a43f8ea7fbcf21020e0ba2e41aeae395f0467cc75a43824fd11ab7917ee06
  • alt-ruby35-rubygem-racc-1.8.1-0.4.preview1.el10.x86_64.rpm
    sha:baa825fd709791f0aa9f1e90feaaa340638401d2440bfc607d9cddd47304335c
  • alt-ruby35-rubygem-rake-13.2.1-0.4.preview1.el10.noarch.rpm
    sha:a36f9d6fad111d8264078c9c2b91788c91ef643413d9435f11ae7ea9cd2c681a
  • alt-ruby35-rubygem-rbs-3.9.2-0.4.preview1.el10.x86_64.rpm
    sha:f55c15c92d22967f0b993a0361a90427a0872d425be88c334b3ece93933d4c96
  • alt-ruby35-rubygem-rdoc-6.13.1-0.4.preview1.el10.noarch.rpm
    sha:5336a1ff71d9d638674f5c26d557735a8a8ce6faa8eecdf52f70602adad23f3e
  • alt-ruby35-rubygem-rexml-3.4.1-0.4.preview1.el10.noarch.rpm
    sha:184cb37a1fa96f2cfcd824ae57c384897e1e14c1baa3403f937e0f3c706da8e5
  • alt-ruby35-rubygem-rss-0.3.1-0.4.preview1.el10.noarch.rpm
    sha:26663c2b6c32ccb43513e92fb2cf03f26922bdf607ef62a01cf4d1a9cc72704e
  • alt-ruby35-rubygem-test-unit-3.6.8-0.4.preview1.el10.noarch.rpm
    sha:4ea5e27367d6d2e63820567a82d65e814fa57582c74873a4b69630c7ef07b652
  • alt-ruby35-rubygem-typeprof-0.30.1-0.4.preview1.el10.noarch.rpm
    sha:9e8bc1fc81f199ccfec74b2be9fa9aa2e8dcc2a2d1a5f6b4acb2cfd0c0dc09f7
  • alt-ruby35-rubygems-3.7.0.dev-0.4.preview1.el10.noarch.rpm
    sha:3af48461ab5cad6eb549a84fcd1a9329a36fd299ae6e4c068b100db5b4a08461
  • alt-ruby35-rubygems-devel-3.7.0.dev-0.4.preview1.el10.noarch.rpm
    sha:5dde29a3515cca32e752e577b3a0f847ef71da28e52931650d65a2af50abb03e
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.