[CLSA-2026:1789559364] alt-ruby26: Fix of 2 CVEs
Type:
security
Severity:
Important
Release date:
2026-09-16 11:49:35 UTC
Description:
- CVE-2026-80212: resolv memory exhaustion via permanently registered classes for unknown DNS (type, class) pairs. Classes returned by Resource::Generic.create are no longer registered, so getresources(name, Generic.create(type, class)) now yields no records for that unknown type (upstream behaviour). - CVE-2026-80213: resolv hostname validation bypass via unenforced DNS label and name size limits when encoding. - Rewrite the #!/usr/bin/ruby shebang of gem executables to the alt ruby interpreter so no subpackage requires the system ruby (ALTEAPLN-11 QA check).
Updated packages:
  • alt-ruby26-2.6.10-19.el7.x86_64.rpm
    sha:dd5630b8285d676bef333c0ed483cc686648b97343f177b77d278beb78e70dcb
  • alt-ruby26-devel-2.6.10-19.el7.x86_64.rpm
    sha:ef8bd381b7dd26f9a0c44c8fb0d69eed987ced66a214b20e31dc48dec64ebef8
  • alt-ruby26-devel-doc-2.6.10-19.el7.x86_64.rpm
    sha:79a39a68e5c3e24601afb6ca23e3bcb67be76165c617661a1eab4341cc8342f8
  • alt-ruby26-doc-2.6.10-19.el7.noarch.rpm
    sha:b51a1fe8b6ba4e1413e49f34ec6ace401c87b0fef47b6dd846a54457c837e070
  • alt-ruby26-libs-2.6.10-19.el7.x86_64.rpm
    sha:5b06b49baf78bf7544a1db5d765f01438867ab20998a3b6f03c910b43f1bdede
  • alt-ruby26-rubygem-bigdecimal-1.4.1.0-19.el7.x86_64.rpm
    sha:f15b397408bcca52fb9c30ef89dfe878d48040cc257df27bb23c4177695ec932
  • alt-ruby26-rubygem-did_you_mean-1.3.0-19.el7.x86_64.rpm
    sha:3a29a7852149a4b04e049f98404a1b6d762c45def14dbdbb3c967bb9a96ba1f0
  • alt-ruby26-rubygem-io-console-0.4.7-19.el7.x86_64.rpm
    sha:96aa78b522ab39c25bbcc6b977658320512ed28464393c8ea390819f08434270
  • alt-ruby26-rubygem-json-2.1.0-19.el7.x86_64.rpm
    sha:8f6d51e65e8727d3728e021b905231ebdb09bffb445d516e990b12a4e250f4cc
  • alt-ruby26-rubygem-minitest-5.11.3-19.el7.x86_64.rpm
    sha:ffb74d7a301b2b0184d352aa5470a92f520ba8de6a8e0a0cb8d6cb5d422aaa4a
  • alt-ruby26-rubygem-net-telnet-0.2.0-19.el7.x86_64.rpm
    sha:a2b31ab34ec0b777c764e073b432b65d447a149e9aa9ceb521efd16b61bf43f8
  • alt-ruby26-rubygem-openssl-2.1.2-19.el7.x86_64.rpm
    sha:f4b06affd9536e4244e3440b0bb397a0a037457b2813b65e480444ade655054c
  • alt-ruby26-rubygem-power_assert-1.1.3-19.el7.x86_64.rpm
    sha:e03f673dd74fdc10c89ca3c7509d7245b1d8da27f92ccea5677b72659e726616
  • alt-ruby26-rubygem-psych-3.1.0-19.el7.x86_64.rpm
    sha:85a64313e4ad3e6cbc549198d1a17e3e8eddbe41e57636707ef119ed8e435a80
  • alt-ruby26-rubygem-rake-12.3.3-19.el7.x86_64.rpm
    sha:3c16f6efbcbf26636446d26b3940aac09346d7eee5a0d0d9feeaa839740094bb
  • alt-ruby26-rubygem-rdoc-6.1.2.1.0-19.el7.x86_64.rpm
    sha:990106da6d7890c0265d41c948d9e4bec72c9fa272defa10b6293508a91303ce
  • alt-ruby26-rubygem-test-unit-3.2.9-19.el7.x86_64.rpm
    sha:6f41ee0c5f7b815c9cf8377f4151e2e3c6d22e5ff29bd75de4faa7fe935c6f9a
  • alt-ruby26-rubygem-xmlrpc-0.3.0-19.el7.x86_64.rpm
    sha:aa47cac3a1e6c281767a6f588f511b84b02ed83ac9499a796c959a86ebe6de2b
  • alt-ruby26-rubygems-3.0.3.1-19.el7.x86_64.rpm
    sha:94e248242d740abc91b90a9e27bbe5543edfc0e852c2834da952a79d35e05930
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.