[CLSA-2026:1789558662] alt-ruby27: Fix of 2 CVEs
Type:
security
Severity:
Important
Release date:
2026-09-16 11:37:53 UTC
Description:
- CVE-2026-80212: resolv memory exhaustion via permanently registered classes for unknown DNS (type, class) pairs. Classes returned by Resource::Generic.create are no longer registered, so getresources(name, Generic.create(type, class)) now yields no records for that unknown type (upstream behaviour). - CVE-2026-80213: resolv hostname validation bypass via unenforced DNS label and name size limits when encoding. - Rewrite the #!/usr/bin/ruby shebang of gem executables to the alt ruby interpreter so no subpackage requires the system ruby (ALTEAPLN-11 QA check).
Updated packages:
  • alt-ruby27-2.7.8-149.el7.x86_64.rpm
    sha:b9f3b173b08dd8447382d6d1a8eed181da68da1a6d16afba6e30f394eba2dbc3
  • alt-ruby27-default-gems-2.7.8-149.el7.noarch.rpm
    sha:0114f761e667c88910d8651169fca7c87ce09fdc5b861c873aa9b530e9001ca5
  • alt-ruby27-devel-2.7.8-149.el7.x86_64.rpm
    sha:0966c33eec0f31d9fba3adf2357e775e8fdba49e9e22ff5e32e1e42685ba7994
  • alt-ruby27-doc-2.7.8-149.el7.noarch.rpm
    sha:cd9659e7817e5cc26a3a21d27ca7bd53c557e73787538619e371f027461fed46
  • alt-ruby27-libs-2.7.8-149.el7.x86_64.rpm
    sha:cd64e9452ec0c707f4e264d1a4fa431e415e187b6085145d0c8e0f70c97e6305
  • alt-ruby27-rubygem-bigdecimal-2.0.0-149.el7.x86_64.rpm
    sha:f370347f5dff6cf0700e5aa57bc85ed294483351d097b8c98550878777cf41d4
  • alt-ruby27-rubygem-bundler-2.2.24-149.el7.noarch.rpm
    sha:292be01d93109bff67621aa0c45963c2e39e82ea9bb13c31c5b43bfcbc51cb8c
  • alt-ruby27-rubygem-io-console-0.5.6-149.el7.x86_64.rpm
    sha:ed27ac709be92493ca0f319c5ac36ae6f67fea19f91f942a3e491da91cbbe12f
  • alt-ruby27-rubygem-irb-1.2.6-149.el7.noarch.rpm
    sha:54eb67d83b9acfdc7e39dfbe94a19cf4a0643d4c8b80393d50be0934ad9114be
  • alt-ruby27-rubygem-json-2.3.0-149.el7.x86_64.rpm
    sha:19c3f4fba434c162e5203e32a35d52a0de9f4963f7636e6cf174b995ce481d56
  • alt-ruby27-rubygem-minitest-5.13.0-149.el7.noarch.rpm
    sha:47889119ae434dbbc3ec28475a052e3ccea557bac69f10e12da1230e4d0fca31
  • alt-ruby27-rubygem-net-telnet-0.2.0-149.el7.noarch.rpm
    sha:1d313fe48fcd775fa8df556df3029a048392c54e129ae5b98554428efe722754
  • alt-ruby27-rubygem-openssl-2.1.4-149.el7.x86_64.rpm
    sha:7294dc9d759e68cf567288af0b2384251248ddefd86d694eb3aa1ef1277d88a4
  • alt-ruby27-rubygem-power_assert-1.1.7-149.el7.noarch.rpm
    sha:639368e7bb7fe5491c7f9b2a45e5d91f4a02e44b08d83d26a6959e1a6e6b717e
  • alt-ruby27-rubygem-psych-3.1.0-149.el7.x86_64.rpm
    sha:5fbbd75eeada7b834106f44c966a457bf1e99a81a33c806022068d9b6cfe19c7
  • alt-ruby27-rubygem-rake-13.0.1-149.el7.noarch.rpm
    sha:66a62845a6ff1651fdbf331c72c2ed3e53bf1f3b83fe6a4d8ff91e3d7d58827f
  • alt-ruby27-rubygem-rdoc-6.2.1.1-149.el7.noarch.rpm
    sha:029448319026bb132f2db4a875961c1d96a754efde03f0c2427bdc78266390fa
  • alt-ruby27-rubygem-test-unit-3.3.4-149.el7.noarch.rpm
    sha:ddf0d87f5f1a623df0036802baeb6292ac32e7c62dae94aa4f2dddead447e768
  • alt-ruby27-rubygem-xmlrpc-0.3.0-149.el7.noarch.rpm
    sha:30298cefaec58c059ec016676ed33ac6d58de6de4c7ec579584231d8b197eee6
  • alt-ruby27-rubygems-3.1.6-149.el7.noarch.rpm
    sha:a14e2ea4e1ccdb886a6817c4db165f8e07d9cb9f2091afef318b4a5f902c0b7b
  • alt-ruby27-rubygems-devel-3.1.6-149.el7.noarch.rpm
    sha:2e9c1df7327d9dd78fec73596a36596115d00ae73ab9caf50d59d147a82c2156
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.