[CLSA-2026:1789578347] alt-ruby32: Fix of 2 CVEs
Type:
security
Severity:
Important
Release date:
2026-09-16 17:05:58 UTC
Description:
- CVE-2026-80212: resolv memory exhaustion via permanently registered classes for unknown DNS (type, class) pairs. Classes returned by Resource::Generic.create are no longer registered, so getresources(name, Generic.create(type, class)) now yields no records for that unknown type (upstream behaviour). - CVE-2026-80213: resolv hostname validation bypass via unenforced DNS label and name size limits when encoding. - Rewrite the #!/usr/bin/ruby shebang of gem executables to the alt ruby interpreter so no subpackage requires the system ruby (ALTEAPLN-11 QA check).
Updated packages:
  • alt-ruby32-3.2.11-14.el10.x86_64.rpm
    sha:997b89eb0bdb4181be721684f63807d3ba5c0d7d126a31dc511fcdbbcdb76a98
  • alt-ruby32-bundled-gems-3.2.11-14.el10.x86_64.rpm
    sha:47e87e917150e212823c3355487bfa26dc22f7e6386067db1bf86dc620c331e5
  • alt-ruby32-default-gems-3.2.11-14.el10.noarch.rpm
    sha:bd148039817f98c89f1f3041c616ab44b4afef4fad33302803c226802f0f8d15
  • alt-ruby32-devel-3.2.11-14.el10.x86_64.rpm
    sha:47544cba7cfb8c590a6540b75799c88843d6c47d8695ee247484a28877604966
  • alt-ruby32-doc-3.2.11-14.el10.noarch.rpm
    sha:5e9e48febf4f8f84d28acd7e99664333f91bea2c1b742b085560a54c993c9f2a
  • alt-ruby32-libs-3.2.11-14.el10.x86_64.rpm
    sha:aea06fc616d85d53438d4e54e13c9106d1e62b1ae23d407cecbfc506d3710939
  • alt-ruby32-rubygem-bigdecimal-3.1.3-14.el10.x86_64.rpm
    sha:0e42afed7da78e36a044cbbe53510f4c8a9fb31ee72899d129c94b6df5ecd743
  • alt-ruby32-rubygem-bundler-2.4.19-14.el10.noarch.rpm
    sha:ba066b7faedc6b7c0ea80f4e76950fbb2e485a7489ef86c73efaf561df6a3666
  • alt-ruby32-rubygem-io-console-0.6.0-14.el10.x86_64.rpm
    sha:b58a65312e56d8bbcbed458e9eb5826bece223c1111379103659f110e89dae6f
  • alt-ruby32-rubygem-irb-1.6.2-14.el10.noarch.rpm
    sha:e8ead442e4b91b2b3330a17bccaf8b4cd35d64665056658a98fd6c2c23d72584
  • alt-ruby32-rubygem-json-2.6.3-14.el10.x86_64.rpm
    sha:2508c68560ca54e9ea8afbb2a3185da5cd57d1b0ca9baae081522b04c89dcb9a
  • alt-ruby32-rubygem-minitest-5.25.1-14.el10.noarch.rpm
    sha:7913237b69d4ecb48aa2098b19ded0b1fd755d22b2196e735b52ef08e89f1bf0
  • alt-ruby32-rubygem-power_assert-2.0.3-14.el10.noarch.rpm
    sha:98d69afc04f0aea8e48ce2a373de2f4804dd8cfef7f637963f7a01ec73bd67d0
  • alt-ruby32-rubygem-psych-5.0.1-14.el10.x86_64.rpm
    sha:65f0b7c1fb2cfde99b49749d7d13f660fe96ebc00c06e7919ee4ee08f5a18c84
  • alt-ruby32-rubygem-rake-13.0.6-14.el10.noarch.rpm
    sha:37be06db3972e9f8c502fee77e4b06abf8ac925fb0c56cecfd42814f54dfecb5
  • alt-ruby32-rubygem-rbs-2.8.2-14.el10.x86_64.rpm
    sha:d9daaea791b2d8b5b48b2c12a6891f6d180fc672d094ef03d1dc864c7749e121
  • alt-ruby32-rubygem-rdoc-6.5.1.1-14.el10.noarch.rpm
    sha:0927eed982c59abb22c4a73ba2a92f5177e1c41d895512cdd21a9a2d81c9f85f
  • alt-ruby32-rubygem-rexml-3.4.4-14.el10.noarch.rpm
    sha:28342fca6412102d1df97fa22ffb67c882023a6731bf09f4c5a32b229b39b23f
  • alt-ruby32-rubygem-rss-0.3.1-14.el10.noarch.rpm
    sha:9822022fb5f4a691eb1f9bce8cebcf30bd12c10f6c8a1d257143e230b323dc88
  • alt-ruby32-rubygem-test-unit-3.5.7-14.el10.noarch.rpm
    sha:d4505cf5e151415174cce8aaa78051570b1e38d64621a0898643b7be15508fae
  • alt-ruby32-rubygem-typeprof-0.21.3-14.el10.noarch.rpm
    sha:8f6392f5eafb806e7808c8ac33c7d7e7d3803a5bfb125aab6500440b76e02205
  • alt-ruby32-rubygems-3.4.19-14.el10.noarch.rpm
    sha:38c674feea7cacb3139c20069947eb3db83ef4368a827d8266653a31f9a8c42b
  • alt-ruby32-rubygems-devel-3.4.19-14.el10.noarch.rpm
    sha:fdc304afa9cf583d1864bf759069d96027710e5b6468a8a265240e6408ca7a02
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.