[CLSA-2026:1789569472] alt-ruby33: Fix of 2 CVEs
Type:
security
Severity:
Important
Release date:
2026-09-16 14:38:02 UTC
Description:
- CVE-2026-80212: resolv no longer permanently registers a generated class for every unknown DNS (type, class) pair or SvcParamKey, so a malicious response can no longer exhaust memory. Classes returned by Resource::Generic.create are no longer registered, so getresources(name, Generic.create(type, class)) now yields no records for that unknown type (upstream behaviour). - CVE-2026-80213: resolv enforces the 63-octet DNS label and 255-octet encoded-name limits when encoding, so an over-long label can no longer wrap its length octet and resolve a different name than the caller asked for. - Rewrite the #!/usr/bin/ruby shebang of gem executables to the alt ruby interpreter so no subpackage requires the system ruby (ALTEAPLN-11 QA check).
Updated packages:
  • alt-ruby33-3.3.12-12.el8.x86_64.rpm
    sha:8be3c790239c8db8250b7667bfe652507f0fca2466c94e711fcb907c658491f2
  • alt-ruby33-bundled-gems-3.3.12-12.el8.x86_64.rpm
    sha:7d63e77907ef3457a332b284a615655bfd9ed79df9b698e4fb2f83d0f10c5834
  • alt-ruby33-default-gems-3.3.12-12.el8.noarch.rpm
    sha:d94f8b9524b11715157a184da926cfa00c253cea433cd0efbb3f012a4ed041a9
  • alt-ruby33-devel-3.3.12-12.el8.x86_64.rpm
    sha:ad5ce79038a7758dfc7e510d33435b7f5adf9b8ac72757e4b1678952b4df8af4
  • alt-ruby33-doc-3.3.12-12.el8.noarch.rpm
    sha:9077ccd26d6a57752b6e70345bb3f12fbec27ac7b06bd84f4b85dd0ae42d2a88
  • alt-ruby33-libs-3.3.12-12.el8.x86_64.rpm
    sha:6f580ad44b37c0e892496b481dd9c7b207f6ae7581ec7180658c8a0ca406e062
  • alt-ruby33-rubygem-bigdecimal-3.1.5-12.el8.x86_64.rpm
    sha:92a662e2ae8aff73816cb9b27bc7d27b4514c4551b48200caedb95ff578f386e
  • alt-ruby33-rubygem-bundler-2.5.22-12.el8.noarch.rpm
    sha:088325ee928ed57e62ab033e04fd99ae8456f25629829158157859570145e152
  • alt-ruby33-rubygem-io-console-0.7.1-12.el8.x86_64.rpm
    sha:e9bacc4b9746d5979ba6feed07d80f3b6e912cb132dd1b0e2b4528460740a379
  • alt-ruby33-rubygem-irb-1.13.1-12.el8.noarch.rpm
    sha:633cb2ac1c2f0930577dc75790abbe4d6639db2b9d39998b8728952a6458fd49
  • alt-ruby33-rubygem-json-2.7.2-12.el8.x86_64.rpm
    sha:6930b672fd8a1eb6a5ff0c94d277803d5cc8cb78b9f33ec6e45a6f047608265f
  • alt-ruby33-rubygem-minitest-5.20.0-12.el8.noarch.rpm
    sha:c7999026305b82dbd0a2a078a719f268d70b64f873a5d337e45830be4644a43a
  • alt-ruby33-rubygem-power_assert-2.0.3-12.el8.noarch.rpm
    sha:65e3070b8b514b05e25bb0b26232c7b2225502af561bf5e3fdd9aae5c84574ab
  • alt-ruby33-rubygem-psych-5.1.2-12.el8.x86_64.rpm
    sha:bdee87af23a7685d88fd7a599ac58284943bcaab8a35a15bcda4942834f49352
  • alt-ruby33-rubygem-racc-1.7.3-12.el8.x86_64.rpm
    sha:753ad7dae0504e319abcfe1d07ce99042f35f03e2f2a17ae4375eafb8b377ee4
  • alt-ruby33-rubygem-rake-13.1.0-12.el8.noarch.rpm
    sha:4c84d5d603023e5bdc9e13e6dc39630f551bdbe2517c24ccb3791eac2b633171
  • alt-ruby33-rubygem-rbs-3.4.0-12.el8.x86_64.rpm
    sha:522ab98469a06917b55ecb494b64ce300a45bf30ac5ce2816b22c16f646c8d36
  • alt-ruby33-rubygem-rdoc-6.6.3.1-12.el8.noarch.rpm
    sha:4849fda5b07accd16845829190b2cf36d2b29092e086fa606cef9902721e3cd7
  • alt-ruby33-rubygem-rexml-3.4.4-12.el8.noarch.rpm
    sha:03a044d012267d0436dfb9f4cb99de74b77b8b2792879d2895b7fcf7b6dae5f5
  • alt-ruby33-rubygem-rss-0.3.1-12.el8.noarch.rpm
    sha:ed100bb7fae8220e15b9fd97f971589f4c6c3a6a822d3c5f95e525cac6145931
  • alt-ruby33-rubygem-test-unit-3.6.1-12.el8.noarch.rpm
    sha:b935f06bcf348c4c7eb0f3c074756f8310d3bdc69cdf8a94a595cd721042ecee
  • alt-ruby33-rubygem-typeprof-0.21.9-12.el8.noarch.rpm
    sha:58e61ce42b774996cafb4130ac3dbced89a0638d1de63882bf19962dd26b8a95
  • alt-ruby33-rubygems-3.5.22-12.el8.noarch.rpm
    sha:f7a6d2ff7bbeefd6b1f8ab3267eabcd164920f25843aa08da0b9d1a5c705226e
  • alt-ruby33-rubygems-devel-3.5.22-12.el8.noarch.rpm
    sha:70eb924339d4f66212475395c32e5f78285f2ac371ec05937354aa22127c7dbc
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.