[CLSA-2026:1789565299] alt-ruby30: Fix of 2 CVEs
Type:
security
Severity:
Important
Release date:
2026-09-16 13:28:31 UTC
Description:
- CVE-2026-80212: resolv memory exhaustion via permanently registered classes for unknown DNS (type, class) pairs. Classes returned by Resource::Generic.create are no longer registered, so getresources(name, Generic.create(type, class)) now yields no records for that unknown type (upstream behaviour). - CVE-2026-80213: resolv hostname validation bypass via unenforced DNS label and name size limits when encoding. - Rewrite the #!/usr/bin/ruby shebang of gem executables to the alt ruby interpreter so no subpackage requires the system ruby (ALTEAPLN-11 QA check).
Updated packages:
  • alt-ruby30-3.0.7-173.el7.x86_64.rpm
    sha:f21e74930842b87a6576076fb5077513d1e3314b37689faffdda4794b74a1995
  • alt-ruby30-default-gems-3.0.7-173.el7.noarch.rpm
    sha:e79e5e99d71d4723682f021ff28d8677793415ff9273a9a51c59d13a53bf5ab0
  • alt-ruby30-devel-3.0.7-173.el7.x86_64.rpm
    sha:0ec129c1bb7d83ea7cb218d7376ac43a431fd0427a5fb30e4b57230bdb9dbdc4
  • alt-ruby30-doc-3.0.7-173.el7.noarch.rpm
    sha:bd0a4fdc023a4db69d64b8fa69d8c88e2a180056c60690f480cb39f4bd45af40
  • alt-ruby30-libs-3.0.7-173.el7.x86_64.rpm
    sha:5ff43c55591e5b9bdb24c65296a6a5a7b97ead534e43dff21b2d38d906bbab5c
  • alt-ruby30-rubygem-bigdecimal-3.0.0-173.el7.x86_64.rpm
    sha:42d0bd789ef8f5376d6ba0c696695f9a04e9b40eb84585960625265b096ea93d
  • alt-ruby30-rubygem-bundler-2.2.33-173.el7.noarch.rpm
    sha:991edca8ba5fbc9e9e2787db73b9f4705e981101c3fbcfa70c2440aa374a5ea0
  • alt-ruby30-rubygem-io-console-0.5.7-173.el7.x86_64.rpm
    sha:84216f3d86c53ced72431d1f6ca069c3cb5dced94d8fc793d8071ecc95bc529c
  • alt-ruby30-rubygem-irb-1.3.5-173.el7.noarch.rpm
    sha:08bbe68ebd0d111755ce30c61dce8c5609028ae0701fee3a7d45a0a26468c13f
  • alt-ruby30-rubygem-json-2.5.1-173.el7.x86_64.rpm
    sha:08fc980c61b63bad38a25f9eaac0f6810eff4f1400471e199067625eb3225936
  • alt-ruby30-rubygem-minitest-5.14.2-173.el7.noarch.rpm
    sha:d55ee99f5568ff978606ea93a3bc3ea69e5f700f16acd74743158f3ca05a90da
  • alt-ruby30-rubygem-power_assert-1.2.1-173.el7.noarch.rpm
    sha:8f153a5ea3e94406e0314f20dbb47c96c8fc1ba51241efa6732d1bca2457558b
  • alt-ruby30-rubygem-psych-3.3.2-173.el7.x86_64.rpm
    sha:a53fdb7f8cd51576df0e10749543fb0f069f035c3c8c1762f9bdc1c29f97c4f3
  • alt-ruby30-rubygem-rake-13.0.3-173.el7.noarch.rpm
    sha:0813435a4204f3459ecc3a211bca60b6cf3a609da97572e73d8067563f2c508d
  • alt-ruby30-rubygem-rbs-1.4.0-173.el7.noarch.rpm
    sha:777a3be58447d8b2216a568232aa5131ca88276ae266f7e75bf11eb5eccac618
  • alt-ruby30-rubygem-rdoc-6.3.4.1-173.el7.noarch.rpm
    sha:547ff73fbf1dc0555b4cfcc7076387f1e7d4f1411bd464822d6fbbe7525d6564
  • alt-ruby30-rubygem-rexml-3.2.5-173.el7.noarch.rpm
    sha:74ce42e62520d2621932b11db148cf7a6b2236c1a2e81991b7e82191920da9f5
  • alt-ruby30-rubygem-rss-0.2.9-173.el7.noarch.rpm
    sha:5170c2284f49674a7b73b7fc82ed2884c8f94a0829bddb8c346a931da13a7797
  • alt-ruby30-rubygem-test-unit-3.3.7-173.el7.noarch.rpm
    sha:23193288aa853099f3c8dde7757ed27d304172b98168611320fb1b7567a8de86
  • alt-ruby30-rubygem-typeprof-0.15.2-173.el7.noarch.rpm
    sha:06ce5e20dcc5612a702eba06a3f93b7733ceac99177eee89dafffda42753c8bc
  • alt-ruby30-rubygems-3.2.33-173.el7.noarch.rpm
    sha:563d11c3a21ab9ec9f83199bce4e3eadbcfc5c3f44aa8fca782367f796d41389
  • alt-ruby30-rubygems-devel-3.2.33-173.el7.noarch.rpm
    sha:9d1f243b1ea1c98af203d5b0d6c2b5329d103f30ae0303868252f9008c1e417e
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.