Release date:
2026-08-31 17:01:17 UTC
Description:
* SECURITY UPDATE: Heap buffer overflow in the bundled zlib extension via
Zlib::GzipReader#ungetc
- debian/patches/CVE-2026-27820.patch: in zstream_buffer_ungets()
(ext/zlib/zlib.c) the output buffer was expanded only when it was
already full (rb_str_capacity(z->buf) <= ZSTREAM_BUF_FILLED(z)), so a
large ungetc payload memmove()'d and wrote past the allocation. Make
the expansion unconditional via zstream_expand_buffer_into(z, len),
which guarantees capacity for filled + len before the memmove. Also
backports the upstream regression test test_ungetc_buffer_underflow.
- CVE-2026-27820
Updated packages:
-
alt-ruby35_3.5.0~preview1-4_amd64.deb
sha:4eb2dfcb1cd8befd45b9fe38f80f7efd5696a99e
-
alt-ruby35-bundled-gems_3.5.0~preview1-4_amd64.deb
sha:132d12c631c5d152d9761b19e635a1ea74a85259
-
alt-ruby35-default-gems_3.5.0~preview1-4_amd64.deb
sha:a0ff54843da3c752adbd40887698525a84e8b5ea
-
alt-ruby35-devel_3.5.0~preview1-4_amd64.deb
sha:e425de691abaca578d07953b3ff31f5aaa485ac7
-
alt-ruby35-doc_3.5.0~preview1-4_amd64.deb
sha:a6c440388a170a1bb7c9f07737a5a20f79b776a8
-
alt-ruby35-libs_3.5.0~preview1-4_amd64.deb
sha:8d17be9c7957fc6b4dc39448ef36a79bdd9177c0
-
alt-ruby35-rubygem-bigdecimal_3.1.9-4_amd64.deb
sha:7e494ed5892078cd672b9caa9501f8c6fe0c93d8
-
alt-ruby35-rubygem-bundler_2.7.0.dev-4_amd64.deb
sha:d257ee8a384ebb52734c8c8c829780f0fa6ac3eb
-
alt-ruby35-rubygem-io-console_0.8.0-4_amd64.deb
sha:967e3ab5e91f250d7423cb018f109c333d868dc5
-
alt-ruby35-rubygem-irb_1.15.2-4_amd64.deb
sha:1b27cec00ee33366b778ac7cb43228aeccbc5d60
-
alt-ruby35-rubygem-json_2.10.2-4_amd64.deb
sha:8675afa4bb267c985f251de1ceafdb6031f5df82
-
alt-ruby35-rubygem-minitest_5.25.5-4_amd64.deb
sha:f03b03dbf3cbd3d2f604c03d220bc269f2d5f915
-
alt-ruby35-rubygem-power-assert_2.0.5-4_amd64.deb
sha:9ec3d7148e1b92897003b0341e47515c691bc7cf
-
alt-ruby35-rubygem-psych_5.2.3-4_amd64.deb
sha:1d603803d8402cfdc324ce16f798ebe0ad24ec02
-
alt-ruby35-rubygem-racc_1.8.1-4_amd64.deb
sha:e6b9c8bc66831217fd0ab7d2e717afedde2d11fa
-
alt-ruby35-rubygem-rake_13.2.1-4_amd64.deb
sha:df95b2252e635b9c79b1cca1b8fd44ea87db4af1
-
alt-ruby35-rubygem-rbs_3.9.2-4_amd64.deb
sha:59616d628b99a9d5d3c1fc95ce2505ebb48328ea
-
alt-ruby35-rubygem-rdoc_6.13.1-4_amd64.deb
sha:9d3a8bead4b056f22954bb0eb3c3a96048a85aee
-
alt-ruby35-rubygem-rexml_3.4.1-4_amd64.deb
sha:51d878eee6a973ce7f75d1bddc04cf4c043ff31d
-
alt-ruby35-rubygem-rss_0.3.1-4_amd64.deb
sha:b59455e3dbe57a8b66d3e23c8e9a710cee0e44cb
-
alt-ruby35-rubygem-test-unit_3.6.8-4_amd64.deb
sha:af0ed3504048d8395ca3f6b47b89d878ec57596d
-
alt-ruby35-rubygem-typeprof_0.30.1-4_amd64.deb
sha:96c50ccbc92e22064340a7489f2cb773eea78b91
-
alt-ruby35-rubygems_3.7.0.dev-4_amd64.deb
sha:b4f4cc95bb695a4edee5a92f88728a74df8f0a4e
-
alt-ruby35-rubygems-devel_3.7.0.dev-4_amd64.deb
sha:38acae76d359222cdc58f4948d25a7cb4a8367b2
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
