[CLSA-2026:1789582482] alt-ruby40: Fix of 2 CVEs
Type:
security
Severity:
Important
Release date:
2026-09-16 18:14:59 UTC
Description:
- CVE-2026-80212: resolv memory exhaustion via permanently registered classes for unknown DNS (type, class) pairs and SvcParamKeys. Classes returned by Resource::Generic.create are no longer registered, so getresources(name, Generic.create(type, class)) now yields no records for that unknown type (upstream behaviour). - CVE-2026-80213: resolv hostname validation bypass via unenforced DNS label and name size limits when encoding. - Rewrite the #!/usr/bin/ruby shebang of gem executables to the alt ruby interpreter so no subpackage requires the system ruby (ALTEAPLN-11 QA check).
Updated packages:
  • alt-ruby40-4.0.6-5.el8.x86_64.rpm
    sha:5502bd441680d0e8857f06bcb4656ff86bee1b72d6b1b0d8bc05a17e2441348c
  • alt-ruby40-bundled-gems-4.0.6-5.el8.x86_64.rpm
    sha:211aa46f5b4add777dc08d9b290f781c495a25a3dbe24e7e7ac709f29252e084
  • alt-ruby40-default-gems-4.0.6-5.el8.noarch.rpm
    sha:a763ae94365a6ce3a9fd9cf4a17137cf7437ad54f3133b2a0074e55b29422a8d
  • alt-ruby40-devel-4.0.6-5.el8.x86_64.rpm
    sha:d268be1c159bc5a6a4cd3ed3cf05bf29ad0147124e1e7a32c6c34c066e495ab4
  • alt-ruby40-doc-4.0.6-5.el8.noarch.rpm
    sha:ed65f4990273f020c91d08ad489192ce3a6bbd688fe5d274f2e7ebc4ed358fb0
  • alt-ruby40-libs-4.0.6-5.el8.x86_64.rpm
    sha:d4f08c6041e7091a5c1eddf22017716c8efd1db99bcd90c2b763e72971db9b24
  • alt-ruby40-rubygem-bigdecimal-4.0.1-5.el8.x86_64.rpm
    sha:096c2eaa0c5166d8eb7be9afc5bffd444d9daab0fa58263d1a7c3e0a1c4bdf19
  • alt-ruby40-rubygem-bundler-4.0.16-5.el8.noarch.rpm
    sha:dd76182b75ae828bce7f363bfca59abee41312e2a85e9917d29009290e872beb
  • alt-ruby40-rubygem-io-console-0.8.2-5.el8.x86_64.rpm
    sha:3d8a4b3770470ae7062b5eb79e1312451ea60566b11ef6eaf4b597a2f867e5fb
  • alt-ruby40-rubygem-irb-1.16.0-5.el8.noarch.rpm
    sha:07cb01e6f795e394c6e08b7454f90481d0c6a3800227d8386ef95e203c59e65e
  • alt-ruby40-rubygem-json-2.18.0-5.el8.x86_64.rpm
    sha:ac75a7f90574ba39e9ffe8d28af2914d3b59d8651a59eeec2a36a9ba674d5722
  • alt-ruby40-rubygem-minitest-6.0.0-5.el8.noarch.rpm
    sha:65d234a6e5a2247e948c0e19be2884e1a949b64bbbe410fda1c1cd0701db9945
  • alt-ruby40-rubygem-power_assert-3.0.1-5.el8.noarch.rpm
    sha:68a7312e12ea19be222efc21898cfa83fca62d662423a7b3cf7023cfe5fa7ac1
  • alt-ruby40-rubygem-psych-5.3.1-5.el8.x86_64.rpm
    sha:3e00aa0ad54ae7efbd8f39668cec712201b9eced8c22df0a8f39f55c5fad3e38
  • alt-ruby40-rubygem-racc-1.8.1-5.el8.x86_64.rpm
    sha:1b3bb69350ff12300eba848916e52e0a907d8c933ae63810b450959341692cd9
  • alt-ruby40-rubygem-rake-13.3.1-5.el8.noarch.rpm
    sha:a9a90b91b325bd13e9d62eb3bc466f77cd8ef6f7a6f167eea14e22f1d77bc318
  • alt-ruby40-rubygem-rbs-3.10.0-5.el8.x86_64.rpm
    sha:06bc3b67171833b126c0340df0bbabea2c355508fd9e4a2cced49ecd3e5f9deb
  • alt-ruby40-rubygem-rdoc-7.0.4-5.el8.noarch.rpm
    sha:01dd195f15ef343cb7cb347a0a223ed67638dd99058bfd0468957ca2311c8ccc
  • alt-ruby40-rubygem-rexml-3.4.4-5.el8.noarch.rpm
    sha:3b5a2396d63f7c30c9e11fe3b98838a01e6c2f08db86efb75bad0f4db83f0c94
  • alt-ruby40-rubygem-rss-0.3.2-5.el8.noarch.rpm
    sha:d08755d6ec6d05a8a74db229f2f8a2ad3431b8893856cee80576c73ec2d87588
  • alt-ruby40-rubygem-test-unit-3.7.5-5.el8.noarch.rpm
    sha:9243c97e08d7cfba6bfc87f6730f925cd4a2d64ff5b929dd81579a860f554069
  • alt-ruby40-rubygem-typeprof-0.31.1-5.el8.noarch.rpm
    sha:6b519331918d574a63c287c420f7d63d73a34c64747567cf84c139a6b842b7aa
  • alt-ruby40-rubygems-4.0.16-5.el8.noarch.rpm
    sha:e1f6b015306e97c5bc7e0e7d5e6144df87b0b7e281fc91da6731c4d258c925a3
  • alt-ruby40-rubygems-devel-4.0.16-5.el8.noarch.rpm
    sha:0598c57d35e0bc39ac29c0ad48fee9a4bf5dfd7dccc1975297398c04be0e9c75
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.