[CLSA-2026:1789573099] alt-ruby31: Fix of 2 CVEs
Type:
security
Severity:
Important
Release date:
2026-09-16 15:38:29 UTC
Description:
- CVE-2026-80212: resolv memory exhaustion via permanently registered classes for unknown DNS (type, class) pairs. Classes returned by Resource::Generic.create are no longer registered, so getresources(name, Generic.create(type, class)) now yields no records for that unknown type (upstream behaviour). - CVE-2026-80213: resolv hostname validation bypass via unenforced DNS label and name size limits when encoding. - Rewrite the #!/usr/bin/ruby shebang of gem executables to the alt ruby interpreter so no subpackage requires the system ruby (ALTEAPLN-11 QA check).
Updated packages:
  • alt-ruby31-3.1.7-13.el9.x86_64.rpm
    sha:98cc42cd74a33854a415d1c482f0c2abd46debe9547082387f21d2d50eab459c
  • alt-ruby31-bundled-gems-3.1.7-13.el9.x86_64.rpm
    sha:ac8dc47acaffb5a72d12e21fe817803b08eea26728193084bdac48741355c2e6
  • alt-ruby31-default-gems-3.1.7-13.el9.noarch.rpm
    sha:1527c73d5e012bac492d7439554ae690c634ee40ec85dbb6f51f9f98af74420a
  • alt-ruby31-devel-3.1.7-13.el9.x86_64.rpm
    sha:6463a8abb390b7a888ccd8ec9c3d92cc79d7b09a4f097cf75a0fa237eaf3deb4
  • alt-ruby31-doc-3.1.7-13.el9.noarch.rpm
    sha:26558e2595997952547db621d0703b59fc23984a88795ce0af90c95279f67f55
  • alt-ruby31-libs-3.1.7-13.el9.x86_64.rpm
    sha:d4af1351431ed4d59e6234645153862dc9ff20295eb9bc97224601e155c12e0b
  • alt-ruby31-rubygem-bigdecimal-3.1.1-13.el9.x86_64.rpm
    sha:5328bf442f5045841c020665d5a26d67964dc721c32b8c0ef23925bbaabe351a
  • alt-ruby31-rubygem-bundler-2.3.27-13.el9.noarch.rpm
    sha:afc87c033777b94fbaa740f986ca9594b18a6d6c5d16f436a348e1f7c81bef7a
  • alt-ruby31-rubygem-io-console-0.5.11-13.el9.x86_64.rpm
    sha:b4bbf845c93aa8573991aa7ba1f183725dbab5b351932dbcea37bbdfcbe5aa03
  • alt-ruby31-rubygem-irb-1.4.1-13.el9.noarch.rpm
    sha:92ef70f4647ad460d7bf63cb8077f3825ca78457bb7c54c4b18a2af327c65dce
  • alt-ruby31-rubygem-json-2.6.1-13.el9.x86_64.rpm
    sha:b950e092c90583c7651fbb3fa32620dea2a92b7daca26c2727068cda7ff5371a
  • alt-ruby31-rubygem-minitest-5.15.0-13.el9.noarch.rpm
    sha:6ae530c45a53b8d9a2448791744d6568683fc1fcfefe8319819d6ba1846f638a
  • alt-ruby31-rubygem-power_assert-2.0.1-13.el9.noarch.rpm
    sha:7da2412e0fda0cf6f03f54ed133301b20cccd1e6420d699c02c5e1f067dd9dbd
  • alt-ruby31-rubygem-psych-4.0.4-13.el9.x86_64.rpm
    sha:1161231389c0b335e4c9d8a33bd4ebeaaf3de76ef6fd07f870b228537497be34
  • alt-ruby31-rubygem-rake-13.0.6-13.el9.noarch.rpm
    sha:9c8b9590916f3a96f6cd7cda7eb8c4ec3a114afbbec5f1677ed2baf7ee44a4bc
  • alt-ruby31-rubygem-rbs-2.7.0-13.el9.x86_64.rpm
    sha:29b1a125af8c5cc0c83809948ec7d7bfff0348a6799944ab9dc5ecf60044a76b
  • alt-ruby31-rubygem-rdoc-6.4.1.1-13.el9.noarch.rpm
    sha:dcc367002d3fb5f7d7f29a2ca380a0a29a4e6528dc4dd44fbbe3c70f1b551a43
  • alt-ruby31-rubygem-rexml-3.3.9-13.el9.noarch.rpm
    sha:857d889074f0cfb58b2bdb4c4314d3d1e6a50f1eff202a7dd93ce33b97fb6fe7
  • alt-ruby31-rubygem-rss-0.3.1-13.el9.noarch.rpm
    sha:54521037eed28598b8eab4e6f49a657c0a796ff072376d71fffceaf604dc50ba
  • alt-ruby31-rubygem-test-unit-3.5.3-13.el9.noarch.rpm
    sha:c094dee72c02be2dfc76292df296bf180f0bfbd90edf028054ea471de873f43e
  • alt-ruby31-rubygem-typeprof-0.21.3-13.el9.noarch.rpm
    sha:bd85d704cda6745e0a28acdaaca68708ebff7380cc82afd6062ba9f926d6b45d
  • alt-ruby31-rubygems-3.3.27-13.el9.noarch.rpm
    sha:4755e0e07528a158593a0f3f1f656e21b900e1e6a1d03e4e7f2910c4ba192e0c
  • alt-ruby31-rubygems-devel-3.3.27-13.el9.noarch.rpm
    sha:d615b5f7abeed0be31d5058cdb064d0f4e035356ebbf96c12efc98a61dd185be
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.