Release date:
2026-09-16 16:44:24 UTC
Description:
- CVE-2026-80212: memory exhaustion in the bundled resolv gem - decoding a
response with unknown DNS (type, class) pairs or unknown SvcParamKeys
permanently registered a generated class for each one.
Classes returned by Resource::Generic.create are no longer registered, so
getresources(name, Generic.create(type, class)) now yields no records for
that unknown type (upstream behaviour).
- CVE-2026-80213: hostname validation bypass in the bundled resolv gem - DNS
label and encoded-name size limits were not enforced when encoding, so an
over-long label wrapped its length octet and resolved a different name.
- Rewrite the #!/usr/bin/ruby shebang of gem executables to the alt ruby
interpreter so no subpackage requires the system ruby (ALTEAPLN-11 QA check).
Updated packages:
-
alt-ruby35-3.5.0-0.4.preview1.el7.x86_64.rpm
sha:d39dec6938491845f663849e22cb68a91c905c3d17546998e6b7b8c907b8bb73
-
alt-ruby35-bundled-gems-3.5.0-0.4.preview1.el7.x86_64.rpm
sha:832bce063d62d8660def3735be8c2db0929179b174ddd7aa286d57fa899a89dc
-
alt-ruby35-default-gems-3.5.0-0.4.preview1.el7.noarch.rpm
sha:3a8505eebc840159945298706caab307653cd744630825649ebb3120fcd96298
-
alt-ruby35-devel-3.5.0-0.4.preview1.el7.x86_64.rpm
sha:2e7f6c0e32d0a4b7011e0bcd525fc6332816112d96e4bbe890e4b10cb086eba1
-
alt-ruby35-doc-3.5.0-0.4.preview1.el7.noarch.rpm
sha:216205ba98db01ff8b739fc023e93deb0c7908f9836cff1ac2a58673ef56a5e0
-
alt-ruby35-libs-3.5.0-0.4.preview1.el7.x86_64.rpm
sha:fcce09e246a23f98277b1c5b4b9ce3b8f32e3f0df0da24a5b874d8e9b6479880
-
alt-ruby35-rubygem-bigdecimal-3.1.9-0.4.preview1.el7.x86_64.rpm
sha:0d39a850304771a4ac02a6a048246b7fbfb9ed23c145ff5190b9d999b7d073ff
-
alt-ruby35-rubygem-bundler-2.7.0.dev-0.4.preview1.el7.noarch.rpm
sha:7989d81d70edf48307a99a398a048115751dccd17942acb6f67502b375f8c6d2
-
alt-ruby35-rubygem-io-console-0.8.0-0.4.preview1.el7.x86_64.rpm
sha:85a0694fa01b1b8692262be743edcfdf5980790886850ee77667c396cd51a02e
-
alt-ruby35-rubygem-irb-1.15.2-0.4.preview1.el7.noarch.rpm
sha:f656ea95e9ef0a66de7ef6fcca0da2dda083fb3350933b04a2b9b9d2e837bce5
-
alt-ruby35-rubygem-json-2.10.2-0.4.preview1.el7.x86_64.rpm
sha:0f7c0d3ea202afcb803e915b10bd9b135a7f852959138e30173bd64b03a34a49
-
alt-ruby35-rubygem-minitest-5.25.5-0.4.preview1.el7.noarch.rpm
sha:761211d9229a0feda7b5dcc2f7457ca64793070d562b07ea7d5072f17bd95ad8
-
alt-ruby35-rubygem-power_assert-2.0.5-0.4.preview1.el7.noarch.rpm
sha:9fbc37fafc3424d3de5d8a58f7eb18b0db5b442dfe3d96f1562f742299398113
-
alt-ruby35-rubygem-psych-5.2.3-0.4.preview1.el7.x86_64.rpm
sha:aafad881319fff6a32312a210d963a20485b663077a029cf4138dc4ef80e8bff
-
alt-ruby35-rubygem-racc-1.8.1-0.4.preview1.el7.x86_64.rpm
sha:baf17ed680f846bb8c93722de21d2c69d0e8a5f2b752fdf2cb6b5a16b4b68499
-
alt-ruby35-rubygem-rake-13.2.1-0.4.preview1.el7.noarch.rpm
sha:c8739f67922a755c21e941c15c9bfe4b1db6f143d1fc077522e1704ea2ea28f5
-
alt-ruby35-rubygem-rbs-3.9.2-0.4.preview1.el7.x86_64.rpm
sha:4e72512e33f2356b9812140121b593b1d902a5e37ad72fda5652858209f6ecf2
-
alt-ruby35-rubygem-rdoc-6.13.1-0.4.preview1.el7.noarch.rpm
sha:ca3523cf5f6a896bffd2e3525290e81e1fb093a5617198108b3f37fbe998e634
-
alt-ruby35-rubygem-rexml-3.4.1-0.4.preview1.el7.noarch.rpm
sha:5f062b7f9ec4526ca8c018669f9f421cb85ca15d60a4f0cc762182bea0f5b06a
-
alt-ruby35-rubygem-rss-0.3.1-0.4.preview1.el7.noarch.rpm
sha:ead24927b168a36716b089b137bd4e07f5ee12c7c5c5627de8f5ed1c241d46b2
-
alt-ruby35-rubygem-test-unit-3.6.8-0.4.preview1.el7.noarch.rpm
sha:abed2d35297c67e08b910d4d4c583d5627e9304e3f2b463b0744f319c9cd01aa
-
alt-ruby35-rubygem-typeprof-0.30.1-0.4.preview1.el7.noarch.rpm
sha:28f7288eff6c7a13b341fa5849025592aa9d7411e0036f0f3fb41d7c6755f973
-
alt-ruby35-rubygems-3.7.0.dev-0.4.preview1.el7.noarch.rpm
sha:171f88630a9b1b809abed73559022c778a76eabf53d3bb5ce9e6c4cc99c5ac90
-
alt-ruby35-rubygems-devel-3.7.0.dev-0.4.preview1.el7.noarch.rpm
sha:ea38716d6b57afd0c5927076c244b480d70df142e7763005085ad633093207ba
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
