[CLSA-2026:1789559904] alt-ruby31: Fix of 2 CVEs
Type:
security
Severity:
Important
Release date:
2026-09-16 11:58:33 UTC
Description:
- CVE-2026-80212: resolv memory exhaustion via permanently registered classes for unknown DNS (type, class) pairs. Classes returned by Resource::Generic.create are no longer registered, so getresources(name, Generic.create(type, class)) now yields no records for that unknown type (upstream behaviour). - CVE-2026-80213: resolv hostname validation bypass via unenforced DNS label and name size limits when encoding. - Rewrite the #!/usr/bin/ruby shebang of gem executables to the alt ruby interpreter so no subpackage requires the system ruby (ALTEAPLN-11 QA check).
Updated packages:
  • alt-ruby31-3.1.7-13.el7.x86_64.rpm
    sha:6271110e8b12cca36e666b5a947be086f7f5bb1481aa2c84a2d4b0b4263353e3
  • alt-ruby31-bundled-gems-3.1.7-13.el7.x86_64.rpm
    sha:ba967cc353785424e160ad75176c394f00dc42c086435350c396520ee93347c3
  • alt-ruby31-default-gems-3.1.7-13.el7.noarch.rpm
    sha:b9e8ada328d3291ed928fdc6d12b65816ea6760b268d1192ff46882bf6ecd974
  • alt-ruby31-devel-3.1.7-13.el7.x86_64.rpm
    sha:73cfda43329801116a654b455e7f5eb9d18ca6d830282fdc56dfe2fcf77f8cf3
  • alt-ruby31-doc-3.1.7-13.el7.noarch.rpm
    sha:2a3db2f1bf69aa2ea0665d3f578503b545b6a8d4afbbde1ce9365733cc375f1d
  • alt-ruby31-libs-3.1.7-13.el7.x86_64.rpm
    sha:433d140763bfa258a22b1e678a1413a68abd9ddc1e05cdac0d748cda5bd33fda
  • alt-ruby31-rubygem-bigdecimal-3.1.1-13.el7.x86_64.rpm
    sha:f29a59abbada09be5adaa8ca0f8abbfdaab345ba15765fcb9c988d1bc5811bcd
  • alt-ruby31-rubygem-bundler-2.3.27-13.el7.noarch.rpm
    sha:aeeaa80ea017a257ca731d6b562366cfc49f703b3e4c6970decab56a32ddfb55
  • alt-ruby31-rubygem-io-console-0.5.11-13.el7.x86_64.rpm
    sha:1d36dc77af602cdb81802db763b5e82b62d5fbc2dabc121b3eda6d57194251b9
  • alt-ruby31-rubygem-irb-1.4.1-13.el7.noarch.rpm
    sha:1fc753f863e34e363ad63142f66653b9bed5d14218acfb979acef96c774c7671
  • alt-ruby31-rubygem-json-2.6.1-13.el7.x86_64.rpm
    sha:176c3bfd455d52ae4ccf78042a3a4bc7f177262b3f10df19f923e1d6036e053e
  • alt-ruby31-rubygem-minitest-5.15.0-13.el7.noarch.rpm
    sha:711d26a16ee7aaa6bbb187442251badaf377fd9392cdc3cdcae11244a7536c37
  • alt-ruby31-rubygem-power_assert-2.0.1-13.el7.noarch.rpm
    sha:1d73c04ae30587992861f12ec4859c517b6000ade016a37a4897aa3ed3559559
  • alt-ruby31-rubygem-psych-4.0.4-13.el7.x86_64.rpm
    sha:b500cb5d837718c3bc8d34d07ccc864ef5a885c445d1a09556f13d1200416221
  • alt-ruby31-rubygem-rake-13.0.6-13.el7.noarch.rpm
    sha:2776ac1ccbae26b24edd9f4018645ac62b21b21d0f2db0179e631b2a6822ae18
  • alt-ruby31-rubygem-rbs-2.7.0-13.el7.x86_64.rpm
    sha:2db147f1fd5e911529e5d11971d5f10d2cfd437c42f671f7a95f33e9aa8a595e
  • alt-ruby31-rubygem-rdoc-6.4.1.1-13.el7.noarch.rpm
    sha:7037b969b3e1defd8fc7bbf42dac00c5f1c151a5271029e9b846401e9454b437
  • alt-ruby31-rubygem-rexml-3.3.9-13.el7.noarch.rpm
    sha:a21d933995128a17c4e2ee032a8248c94477ac299e29b97b9acce6fa2f862b04
  • alt-ruby31-rubygem-rss-0.3.1-13.el7.noarch.rpm
    sha:0e2d486dbc60d68fa03219db264728e4fec1600dabe441619624f5656e433acd
  • alt-ruby31-rubygem-test-unit-3.5.3-13.el7.noarch.rpm
    sha:a620e51a2eac1c3253ba2c1e918d9d01af473827bbcd81f8bf5b7d915ab3adea
  • alt-ruby31-rubygem-typeprof-0.21.3-13.el7.noarch.rpm
    sha:3cf059be443b24cb76cfb812fc7615599cea4caa8272ce3347e0467bd54994a6
  • alt-ruby31-rubygems-3.3.27-13.el7.noarch.rpm
    sha:fa0c73d072825529ffb09cb64bf4357c5f51931c2785737262c05fa764706aeb
  • alt-ruby31-rubygems-devel-3.3.27-13.el7.noarch.rpm
    sha:9065693308a916d2bd79ae84e82efd9c381ae7b95e8166077fccace67f53cdd5
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.