[CLSA-2026:1789554265] alt-ruby27: Fix of 2 CVEs
Type:
security
Severity:
Important
Release date:
2026-09-16 10:24:36 UTC
Description:
- CVE-2026-80212: resolv memory exhaustion via permanently registered classes for unknown DNS (type, class) pairs. Classes returned by Resource::Generic.create are no longer registered, so getresources(name, Generic.create(type, class)) now yields no records for that unknown type (upstream behaviour). - CVE-2026-80213: resolv hostname validation bypass via unenforced DNS label and name size limits when encoding. - Rewrite the #!/usr/bin/ruby shebang of gem executables to the alt ruby interpreter so no subpackage requires the system ruby (ALTEAPLN-11 QA check).
Updated packages:
  • alt-ruby27-2.7.8-149.el9.x86_64.rpm
    sha:1069ecf876cc73c1301ccc7798073ebf8d544bd74bf4aa2438b787878cc45e4e
  • alt-ruby27-default-gems-2.7.8-149.el9.noarch.rpm
    sha:c29daf0995045573893326779f32dd2fab3d1e450948ea4af11f35ceec3c288f
  • alt-ruby27-devel-2.7.8-149.el9.x86_64.rpm
    sha:04b89b88eef78d1405d8b085ad728196d7936b509316a225d623498dc284fc7f
  • alt-ruby27-doc-2.7.8-149.el9.noarch.rpm
    sha:c7dbfca44c0d4caa132eaf4aba858e79270300b45159c3015bc7e255609e9417
  • alt-ruby27-libs-2.7.8-149.el9.x86_64.rpm
    sha:e1d58406fda1282169270e579e79b8ac85ab570abba37d778f34fdfc57f03ee2
  • alt-ruby27-rubygem-bigdecimal-2.0.0-149.el9.x86_64.rpm
    sha:8908de3c26e7f411ca902fc2d548d08ff2913c410c9da1bd773130e7e876784f
  • alt-ruby27-rubygem-bundler-2.2.24-149.el9.noarch.rpm
    sha:18f5d106aebcefe97e3b20120efa18283112db7f580d56df2b106ed77cfa9f9e
  • alt-ruby27-rubygem-io-console-0.5.6-149.el9.x86_64.rpm
    sha:473a3541145d28b86750c2a30ec677ebc872e61fa58825ec22517d8bde0bc819
  • alt-ruby27-rubygem-irb-1.2.6-149.el9.noarch.rpm
    sha:3436103bfb752a900546bfbb1b4fbc510ffb04a7cca3d1a41bd24251c19bb4a1
  • alt-ruby27-rubygem-json-2.3.0-149.el9.x86_64.rpm
    sha:baf6cdb4f6dc6b6772efb304a7119703d146713a654ffd58011b0491cd01a80d
  • alt-ruby27-rubygem-minitest-5.13.0-149.el9.noarch.rpm
    sha:8c0223b284327261907df415d563718c512b246cab8810ded8b23bb99920b31f
  • alt-ruby27-rubygem-net-telnet-0.2.0-149.el9.noarch.rpm
    sha:1cdb2bbe62ba686e78c8ce1b4588e7080eb05ad08998b67096632d8cd35f0c35
  • alt-ruby27-rubygem-openssl-2.1.4-149.el9.x86_64.rpm
    sha:73020f344bc1437d8916917de0e4770ce40e64c9b467cd931e531c1694385072
  • alt-ruby27-rubygem-power_assert-1.1.7-149.el9.noarch.rpm
    sha:e748374948d75e04a37f8fde41e1276f26c1951bd15b92560d2b8631ac5f9dfd
  • alt-ruby27-rubygem-psych-3.1.0-149.el9.x86_64.rpm
    sha:3c1cba91c1fd10fc63e550ea9be648a6ac4c47c169964dd9f2b524be077c8d59
  • alt-ruby27-rubygem-rake-13.0.1-149.el9.noarch.rpm
    sha:c7174b447d9f093138776011739e992f510939f9b3784959503059430e6344b7
  • alt-ruby27-rubygem-rdoc-6.2.1.1-149.el9.noarch.rpm
    sha:2dff50825b9a15f5b1eb208cc620546e21ba02e1998ab14764c47a573fe59b63
  • alt-ruby27-rubygem-test-unit-3.3.4-149.el9.noarch.rpm
    sha:5b78dae211604bd01a00b6c50feb051cb412317e76765b57ebba83d6c673e52b
  • alt-ruby27-rubygem-xmlrpc-0.3.0-149.el9.noarch.rpm
    sha:6ebdc12005ac270e0026fa71fb113d40ec304feea4fbc1d3bea25085a9cccc7a
  • alt-ruby27-rubygems-3.1.6-149.el9.noarch.rpm
    sha:c5f4acb145ec086a6d94dfa4ed32b66e48d62d42721999fdf045b017c2930efd
  • alt-ruby27-rubygems-devel-3.1.6-149.el9.noarch.rpm
    sha:d037c9d4467fa60918b0478fb2a714b24695a848fea15ca76c8fbb29be30d4fc
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.