[CLSA-2026:1789599949] alt-ruby34: Fix of 2 CVEs
Type:
security
Severity:
Important
Release date:
2026-09-16 23:06:02 UTC
Description:
- CVE-2026-80212: resolv memory exhaustion via permanently registered classes for unknown DNS (type, class) pairs and unknown SvcParamKeys. Classes returned by Resource::Generic.create are no longer registered, so getresources(name, Generic.create(type, class)) now yields no records for that unknown type (upstream behaviour). - CVE-2026-80213: resolv hostname validation bypass via unenforced DNS label and encoded-name size limits when encoding. - Rewrite the #!/usr/bin/ruby shebang of gem executables to the alt ruby interpreter so no subpackage requires the system ruby (ALTEAPLN-11 QA check).
Updated packages:
  • alt-ruby34-3.4.10-10.el9.x86_64.rpm
    sha:24978bc521c7b696c86529e82a10b6fc9473df81083bb33f4add97b0747b6f52
  • alt-ruby34-bundled-gems-3.4.10-10.el9.x86_64.rpm
    sha:f682a94632dd1061f41a6a3cc974a50c0f75f9804093a8721703c1ab6aeeb6c5
  • alt-ruby34-default-gems-3.4.10-10.el9.noarch.rpm
    sha:04bb364d2bfbefd124b4e0a31ec4df527b988781e2a988444e65a8fc36ad1421
  • alt-ruby34-devel-3.4.10-10.el9.x86_64.rpm
    sha:2d5874f1a8944bf61604fe3660d34044d06169f2ea7f75752ba710c621c4ab9c
  • alt-ruby34-doc-3.4.10-10.el9.noarch.rpm
    sha:9089e8666edaacfdd0d7a8928f143d21a2728f1ff830ee24b825583c2c2b367a
  • alt-ruby34-libs-3.4.10-10.el9.x86_64.rpm
    sha:4b6049a2199b4d041b73a055f7bea0332eac8158574ca3bac1d706f76fef1d40
  • alt-ruby34-rubygem-bigdecimal-3.1.8-10.el9.x86_64.rpm
    sha:77128e85000a694f3cd9b5c19a1cda9df63afcbdbfea0cc8273635d68b421c1e
  • alt-ruby34-rubygem-bundler-2.6.9-10.el9.noarch.rpm
    sha:0a713f80b5947a15674fd06bf083a580d9e8c5c096eecde7cbef2161cd8fb0da
  • alt-ruby34-rubygem-io-console-0.8.1-10.el9.x86_64.rpm
    sha:bcd98ca32236d603994f909140a43d0e05525d0966718f4e930f87fb4dbbb8e9
  • alt-ruby34-rubygem-irb-1.14.3-10.el9.noarch.rpm
    sha:f04914fec845aa3ed27a2f98f4a395dfd6dcaac51717d17dce0863946e2c11da
  • alt-ruby34-rubygem-json-2.9.1-10.el9.x86_64.rpm
    sha:d7b086120bb9c04bf73cefd4d23e9b9b8d763adc558c0c4909c17d7d55b11390
  • alt-ruby34-rubygem-minitest-5.25.4-10.el9.noarch.rpm
    sha:65c601506f16ec8595d529e28eaf8f37335276266707a3c7067475ee35cde3ba
  • alt-ruby34-rubygem-power_assert-2.0.5-10.el9.noarch.rpm
    sha:c95cd55c6fc3dec2cf19f12a2c8ea6c4eefd18968caddbbec7fb94a60335e15b
  • alt-ruby34-rubygem-psych-5.2.2-10.el9.x86_64.rpm
    sha:5b9ab9f30e1066aa3bda72590c746c2bfeaf24971233d475b8674e35133e0a48
  • alt-ruby34-rubygem-racc-1.8.1-10.el9.x86_64.rpm
    sha:cb59a45d2e43bfa527967f7007372956bc21eb8185a8befc9b644f3c1c813fe3
  • alt-ruby34-rubygem-rake-13.2.1-10.el9.noarch.rpm
    sha:52eba8df88717c58554a27a95a2a3a6002437ee74d61b9f8f2cf495ff12900a2
  • alt-ruby34-rubygem-rbs-3.8.0-10.el9.x86_64.rpm
    sha:9a825f487abf395b25580599e4ae7b70c55ed787b333e31b14cb796e48aa7850
  • alt-ruby34-rubygem-rdoc-6.14.0-10.el9.noarch.rpm
    sha:d7c6a651b3a3fb37cca4a4b1702377f0476037f1b760c64f6ec78ba23cc8a951
  • alt-ruby34-rubygem-rexml-3.4.4-10.el9.noarch.rpm
    sha:fd865c7df6df44fef9e7251fc056fa874df79ae89ae6837b171c8ce9d9877247
  • alt-ruby34-rubygem-rss-0.3.1-10.el9.noarch.rpm
    sha:e8ce10954ac137688788386ba349244283daf1778a963f1fae578e7209c33ff0
  • alt-ruby34-rubygem-test-unit-3.6.7-10.el9.noarch.rpm
    sha:86c0518363299f4a910206350897007a6e6296792e0b0e0185e28becc0b6bf1b
  • alt-ruby34-rubygem-typeprof-0.30.1-10.el9.noarch.rpm
    sha:7eb289a437c0d8cb91a17ff7b5afd6300701cb16ad3c6e45af745b1096fa480c
  • alt-ruby34-rubygems-3.6.9-10.el9.noarch.rpm
    sha:63d88aa4cb21640c49a10a953871053704f7156d5aee3f7288e77731b0f139a1
  • alt-ruby34-rubygems-devel-3.6.9-10.el9.noarch.rpm
    sha:472cc2d1c6f0d72543b0e3db7332bf9376f359b65af11ea4193cc42f056073f5
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.