[CLSA-2026:1789555027] Fix CVE(s): CVE-2026-80212, CVE-2026-80213
Type:
security
Severity:
Important
Release date:
2026-09-16 10:37:23 UTC
Description:
* SECURITY UPDATE: resolv memory exhaustion via unknown DNS resource types - debian/patches/CVE-2026-80212.patch: stop permanently registering generated Resource::Generic classes (Generic constants and Resource::ClassHash entries) for every unknown DNS (type, class) pair, and compare generic records by TypeValue/ClassValue instead of class identity; backport of upstream ruby/resolv 23f0009 (resolv 0.3.2 / 0.7.2) - Behaviour change inherited from upstream: a class obtained from Resource::Generic.create(type, class) is no longer registered, so Resolv::DNS#getresources(name, Generic.create(type, class)) now returns an empty list where it used to return the matching records; records of unknown types are still decoded as Resource::Generic - CVE-2026-80212 * SECURITY UPDATE: resolv hostname validation bypass via unchecked DNS name limits - debian/patches/CVE-2026-80213.patch: enforce the 63-octet label and 255-octet encoded-name limits when encoding, cap character- strings at 255 octets and report out-of-range length octets as DecodeError, so an over-long label can no longer wrap its length octet and resolve a different name; backport of upstream ruby/resolv b0ddbb5 (resolv 0.3.2 / 0.7.2) - CVE-2026-80213
CVEs fixed:
Updated packages:
  • alt-ruby30_3.0.7-176_amd64.deb
    sha:b862987b14683363168772b7d9865740b2f37872
  • alt-ruby30-default-gems_3.0.7-176_amd64.deb
    sha:7cb8c9ce8de8e7860eec877d16094e321758dc2e
  • alt-ruby30-devel_3.0.7-176_amd64.deb
    sha:2b41c78b603f33f4755ad7fbb1676afa2d79edc4
  • alt-ruby30-doc_3.0.7-176_amd64.deb
    sha:03f77b099416301ebfda964aa184cf806441e67b
  • alt-ruby30-libs_3.0.7-176_amd64.deb
    sha:8b51c8aeb705418178dfccae0ff927047e843362
  • alt-ruby30-rubygem-bigdecimal_3.0.0-176_amd64.deb
    sha:efde65a90936898c7d616aaad8d7a6c23884fb7b
  • alt-ruby30-rubygem-bundler_2.2.33-176_amd64.deb
    sha:e1fada957fa06118e9a0e7378083c2b3cac4da9c
  • alt-ruby30-rubygem-io-console_0.5.7-176_amd64.deb
    sha:bdc990550458f535f8d4c760349a8c1f11fd759c
  • alt-ruby30-rubygem-irb_1.3.5-176_amd64.deb
    sha:b5b63e42ead98618be63f9f687df35a4d9c21e9c
  • alt-ruby30-rubygem-json_2.5.1-176_amd64.deb
    sha:d50768861e7e8676e3231915d9cf0b7ca0a8765e
  • alt-ruby30-rubygem-minitest_5.14.2-176_amd64.deb
    sha:fded76b01a5bed1cd939b11834985d240fc8b4ba
  • alt-ruby30-rubygem-power-assert_1.2.1-176_amd64.deb
    sha:78c7b48ab22ef3577efc50c15f3efea742959b9c
  • alt-ruby30-rubygem-psych_3.3.2-176_amd64.deb
    sha:7a118a109f862890cba2b4a50be64e36c8c6a70a
  • alt-ruby30-rubygem-rake_13.0.3-176_amd64.deb
    sha:4c3c697e71a63dc181643d5f0a223afcf5122e0a
  • alt-ruby30-rubygem-rbs_1.4.0-176_amd64.deb
    sha:5e30722f725f06d51ee41db6c1f83eda2b5455c2
  • alt-ruby30-rubygem-rdoc_6.3.4.1-176_amd64.deb
    sha:f34fb3d7dbbe77fb395c2fd6555e544dd2e5cf9b
  • alt-ruby30-rubygem-rexml_3.2.5-176_amd64.deb
    sha:6f9b6c82fe28d041136b1f0959afd36903716b74
  • alt-ruby30-rubygem-rss_0.2.9-176_amd64.deb
    sha:8ddb67e05c27d7d87a60da3e191939cd92c611f5
  • alt-ruby30-rubygem-test-unit_3.3.7-176_amd64.deb
    sha:3c2034d464afe7c9c45e1ed7d0f4a8aae93bdca1
  • alt-ruby30-rubygem-typeprof_0.15.2-176_amd64.deb
    sha:409d325f19ec7cb869809315bb7dc371cf21aef7
  • alt-ruby30-rubygems_3.2.33-176_amd64.deb
    sha:34c2596de5b2a42191cc98378d55c961c691cf24
  • alt-ruby30-rubygems-devel_3.2.33-176_amd64.deb
    sha:4e561ac6584ac89e190983f3bcc046b07659946b
  • alt-ruby30_3.0.7-176_arm64.deb
    sha:fe52cc32d5c595328d66ce5f4ab148539a7d757d
  • alt-ruby30-default-gems_3.0.7-176_arm64.deb
    sha:b48a2cf1bfac2fece1f816fbba101efb02f62319
  • alt-ruby30-devel_3.0.7-176_arm64.deb
    sha:6901b86485e40e6d7d7d73b92146f83ef32d69d5
  • alt-ruby30-doc_3.0.7-176_arm64.deb
    sha:0f87e05b6657966002e4e28c8878bd0ae5c3e687
  • alt-ruby30-libs_3.0.7-176_arm64.deb
    sha:ab2877a9960f785be8d9f40c1d96b8744ca772a5
  • alt-ruby30-rubygem-bigdecimal_3.0.0-176_arm64.deb
    sha:256aa335b26a53d89dfba3e19053cdb91a2bcebb
  • alt-ruby30-rubygem-bundler_2.2.33-176_arm64.deb
    sha:833ceba01ba3123d04b89c6b1d021f1f64f9713e
  • alt-ruby30-rubygem-io-console_0.5.7-176_arm64.deb
    sha:2be413eee2c6b5fd123016ccb1a3936956cf75ab
  • alt-ruby30-rubygem-irb_1.3.5-176_arm64.deb
    sha:682afde60d56cd0093d61af6ec98f06285f51854
  • alt-ruby30-rubygem-json_2.5.1-176_arm64.deb
    sha:4aeb06122b8d043ff5691c6864e6ee0c50117661
  • alt-ruby30-rubygem-minitest_5.14.2-176_arm64.deb
    sha:280485109d8a100bfe594e4e58bb5134592b9e2d
  • alt-ruby30-rubygem-power-assert_1.2.1-176_arm64.deb
    sha:a88de2dd1153511093ac875777e82c6106b6ca5f
  • alt-ruby30-rubygem-psych_3.3.2-176_arm64.deb
    sha:a4e50e8eac6065443baf300490e9befc25e1ced3
  • alt-ruby30-rubygem-rake_13.0.3-176_arm64.deb
    sha:b2f861d4325e953044c0762cf4138ebfd8995d1a
  • alt-ruby30-rubygem-rbs_1.4.0-176_arm64.deb
    sha:2f370e56b472651dcdfe0012224668d0c910a6dc
  • alt-ruby30-rubygem-rdoc_6.3.4.1-176_arm64.deb
    sha:513ec48a9156fecd5bf5a33e536698d7e6e66289
  • alt-ruby30-rubygem-rexml_3.2.5-176_arm64.deb
    sha:7b99e5dff73141ebc98a342eb6efdddf594e9e42
  • alt-ruby30-rubygem-rss_0.2.9-176_arm64.deb
    sha:d52fdd5e69b97581f9ecc2dbbfa76372610ada62
  • alt-ruby30-rubygem-test-unit_3.3.7-176_arm64.deb
    sha:d341e378de36ce064452257382753e18739c7156
  • alt-ruby30-rubygem-typeprof_0.15.2-176_arm64.deb
    sha:f4df3eef559035d22b5c3c32c97b972ebb01095b
  • alt-ruby30-rubygems_3.2.33-176_arm64.deb
    sha:b21af506be8077bfcbc99c9ab9bbd46d26c33e80
  • alt-ruby30-rubygems-devel_3.2.33-176_arm64.deb
    sha:95c4c57c209ac361a26e46aaf9339a735020f437
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.