[CLSA-2026:1789574165] Fix CVE(s): CVE-2026-80212, CVE-2026-80213
Type:
security
Severity:
Important
Release date:
2026-09-16 15:56:16 UTC
Description:
* SECURITY UPDATE: resolv memory exhaustion via unknown DNS resource types - debian/patches/CVE-2026-80212.patch: stop permanently registering generated Resource::Generic classes (Generic constants and Resource::ClassHash entries) for every unknown DNS (type, class) pair, and compare generic records by TypeValue/ClassValue instead of class identity; backport of upstream ruby/resolv 23f0009 (resolv 0.3.2 / 0.7.2) - Behaviour change inherited from upstream: a class obtained from Resource::Generic.create(type, class) is no longer registered, so Resolv::DNS#getresources(name, Generic.create(type, class)) now returns an empty list where it used to return the matching records; records of unknown types are still decoded as Resource::Generic - CVE-2026-80212 * SECURITY UPDATE: resolv hostname validation bypass via unchecked DNS name limits - debian/patches/CVE-2026-80213.patch: enforce the 63-octet label and 255-octet encoded-name limits when encoding, cap character- strings at 255 octets and report out-of-range length octets as DecodeError, so an over-long label can no longer wrap its length octet and resolve a different name; backport of upstream ruby/resolv b0ddbb5 (resolv 0.3.2 / 0.7.2) - CVE-2026-80213
CVEs fixed:
Updated packages:
  • alt-ruby31_3.1.7-14_amd64.deb
    sha:cf284b8632a2e85dbeb09e70425829b2560251e2
  • alt-ruby31-bundled-gems_3.1.7-14_amd64.deb
    sha:b9274e78c20b56d1e6d07b32ac7ccf137343daac
  • alt-ruby31-default-gems_3.1.7-14_amd64.deb
    sha:3012031ac78e3fa5feeddfafc467e2ea3f96a9c4
  • alt-ruby31-devel_3.1.7-14_amd64.deb
    sha:8ee9c9588c1a886195f38e9172d002e3baadf04c
  • alt-ruby31-doc_3.1.7-14_amd64.deb
    sha:8cb55925d4082f32b09de7efef6c8c1f81c41d35
  • alt-ruby31-libs_3.1.7-14_amd64.deb
    sha:69d26e2dc6f7bffdb18de0ae27710ff277c4f0db
  • alt-ruby31-rubygem-bigdecimal_3.1.1-14_amd64.deb
    sha:52e993de07dc224f7100522c327c098afd1407df
  • alt-ruby31-rubygem-bundler_2.3.27-14_amd64.deb
    sha:b2650bab24a2e9fdeb9788c6ac22e43b8cef2ba3
  • alt-ruby31-rubygem-io-console_0.5.11-14_amd64.deb
    sha:82517a9d998b1b37531a728706983e83569ee06a
  • alt-ruby31-rubygem-irb_1.4.1-14_amd64.deb
    sha:b2919afca31d1f5812de1d8f0e1a131a6be9f323
  • alt-ruby31-rubygem-json_2.6.1-14_amd64.deb
    sha:c4625c52965ec77b5171491743d9d5f14f44ae24
  • alt-ruby31-rubygem-minitest_5.15.0-14_amd64.deb
    sha:79a059d2019da15d7f7149b89cef407b630983a6
  • alt-ruby31-rubygem-power-assert_2.0.1-14_amd64.deb
    sha:f04a6291209d6883b4ad5e7b9a1c65cf29e2c3e8
  • alt-ruby31-rubygem-psych_4.0.4-14_amd64.deb
    sha:11675244f275f9cd01033661fc0fcb1f3b4aeba6
  • alt-ruby31-rubygem-rake_13.0.6-14_amd64.deb
    sha:88c1fdc420d55ddf10658105ae289511adf9f0ab
  • alt-ruby31-rubygem-rbs_2.7.0-14_amd64.deb
    sha:7bc410f48eaf6f01130abb8f6bc00da38a752ed6
  • alt-ruby31-rubygem-rdoc_6.4.1.1-14_amd64.deb
    sha:e06f6b9d968264c2d1b75a042483f0299dab8e24
  • alt-ruby31-rubygem-rexml_3.3.9-14_amd64.deb
    sha:0158f3a0ab034024c8a8365c8a537b0c571d1b92
  • alt-ruby31-rubygem-rss_0.3.1-14_amd64.deb
    sha:1c4f051cbb0f349ad4b100456d8f5bff9173cda8
  • alt-ruby31-rubygem-test-unit_3.5.3-14_amd64.deb
    sha:b137e22ff9eb169862fb7f8c471219cbf855c97e
  • alt-ruby31-rubygem-typeprof_0.21.3-14_amd64.deb
    sha:fc7fc9d0169ef3be2ea454df79265e746600f1ff
  • alt-ruby31-rubygems_3.3.27-14_amd64.deb
    sha:d3543bc1ed3efb9f77fd457b6c1971a60343a1aa
  • alt-ruby31-rubygems-devel_3.3.27-14_amd64.deb
    sha:38de9179bd25fa7baa6b8f680ebbec14c0fe833f
  • alt-ruby31_3.1.7-14_arm64.deb
    sha:4eef29517a08d361cbfefb906729e64c92fe9655
  • alt-ruby31-bundled-gems_3.1.7-14_arm64.deb
    sha:702e0474cc58819580040f7c031003479279b07c
  • alt-ruby31-default-gems_3.1.7-14_arm64.deb
    sha:ff1832b376406c6681bbaac321ce9d3ed57c17ec
  • alt-ruby31-devel_3.1.7-14_arm64.deb
    sha:63be9a9b7a144b97352aff43ab934b2671ebc447
  • alt-ruby31-doc_3.1.7-14_arm64.deb
    sha:6019a1b5924e7b0b7c4842681adab8c811779109
  • alt-ruby31-libs_3.1.7-14_arm64.deb
    sha:fe5481134d023806a4e6bd0f76f98f6fa757defd
  • alt-ruby31-rubygem-bigdecimal_3.1.1-14_arm64.deb
    sha:7f200f1f364dcb8a5ad05c9c1bb80f4e5aab5e90
  • alt-ruby31-rubygem-bundler_2.3.27-14_arm64.deb
    sha:faba1b46aa05b0395db88857f8851f019a58a66f
  • alt-ruby31-rubygem-io-console_0.5.11-14_arm64.deb
    sha:5096271ee63d97accd8a4e09c8209d23f4ff5c67
  • alt-ruby31-rubygem-irb_1.4.1-14_arm64.deb
    sha:a82585d0f0eb7737cc08a5614b62e33084b4aed1
  • alt-ruby31-rubygem-json_2.6.1-14_arm64.deb
    sha:50816a2deb87d600624f3323555bf9fc0222067d
  • alt-ruby31-rubygem-minitest_5.15.0-14_arm64.deb
    sha:b332cf095e7f418e9a437e5bd6d9c651bf0e9dd4
  • alt-ruby31-rubygem-power-assert_2.0.1-14_arm64.deb
    sha:71064d937d1024b9038c6a804f636cecafed220b
  • alt-ruby31-rubygem-psych_4.0.4-14_arm64.deb
    sha:8e1e17d86f9aec0d6c54b7f156374c54bf7aa4e0
  • alt-ruby31-rubygem-rake_13.0.6-14_arm64.deb
    sha:7f4748d9d24c0f0ecb99fe787c0fda2be2b7b96a
  • alt-ruby31-rubygem-rbs_2.7.0-14_arm64.deb
    sha:f59299962b6a97834e8cc4e7960ab301556fad12
  • alt-ruby31-rubygem-rdoc_6.4.1.1-14_arm64.deb
    sha:63cc4512540970e5a8a3c1ab16383d283ecdf513
  • alt-ruby31-rubygem-rexml_3.3.9-14_arm64.deb
    sha:cba8fc17986fd37c0c588ebecb9ca3d25e7fbb04
  • alt-ruby31-rubygem-rss_0.3.1-14_arm64.deb
    sha:a878ea394968b64367c682b695470402ebb846e5
  • alt-ruby31-rubygem-test-unit_3.5.3-14_arm64.deb
    sha:f9c9e362236626e3fd57da8bc18b68a50aac52f8
  • alt-ruby31-rubygem-typeprof_0.21.3-14_arm64.deb
    sha:d8134d9deda2c059b6876dd5757f56adca9dce3e
  • alt-ruby31-rubygems_3.3.27-14_arm64.deb
    sha:8f6d07e5d66052ca100731e18300f75688e006ee
  • alt-ruby31-rubygems-devel_3.3.27-14_arm64.deb
    sha:d82f1150c9023dd4f1033ad4234e4fbcfbd73353
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.