[CLSA-2026:1789560237] Fix CVE(s): CVE-2026-80212, CVE-2026-80213
Type:
security
Severity:
Important
Release date:
2026-09-16 12:04:07 UTC
Description:
* SECURITY UPDATE: resolv memory exhaustion via unknown DNS resource types - debian/patches/CVE-2026-80212.patch: stop permanently registering generated Resource::Generic classes (Generic constants and Resource::ClassHash entries) for every unknown DNS (type, class) pair, and compare generic records by TypeValue/ClassValue instead of class identity; backport of upstream ruby/resolv 23f0009 (resolv 0.3.2 / 0.7.2) - Behaviour change inherited from upstream: a class obtained from Resource::Generic.create(type, class) is no longer registered, so Resolv::DNS#getresources(name, Generic.create(type, class)) now returns an empty list where it used to return the matching records; records of unknown types are still decoded as Resource::Generic - CVE-2026-80212 * SECURITY UPDATE: resolv hostname validation bypass via unchecked DNS name limits - debian/patches/CVE-2026-80213.patch: enforce the 63-octet label and 255-octet encoded-name limits when encoding, cap character- strings at 255 octets and report out-of-range length octets as DecodeError, so an over-long label can no longer wrap its length octet and resolve a different name; backport of upstream ruby/resolv b0ddbb5 (resolv 0.3.2 / 0.7.2) - CVE-2026-80213
Updated packages:
  • alt-ruby32_3.2.11-15_amd64.deb
    sha:abe3f851163c1b483878fc0cbaac5fb68e63ce80
  • alt-ruby32-bundled-gems_3.2.11-15_amd64.deb
    sha:7187f18d8286ca619419500cd10fd843f40162c5
  • alt-ruby32-default-gems_3.2.11-15_amd64.deb
    sha:41641ee72736ea768dd0defb9ab104ae772efb6d
  • alt-ruby32-devel_3.2.11-15_amd64.deb
    sha:650527c8fe799efc2148f39000a1a022a152ec42
  • alt-ruby32-doc_3.2.11-15_amd64.deb
    sha:8e562f4ae1d01a90766ea8d26c49f4fc9de31db1
  • alt-ruby32-libs_3.2.11-15_amd64.deb
    sha:6c59643b6e3cb1e63b2cdc599bcee6b4a301fee9
  • alt-ruby32-rubygem-bigdecimal_3.1.3-15_amd64.deb
    sha:a4bfca925b774e76d0eac85d00e64c13dbe1b284
  • alt-ruby32-rubygem-bundler_2.4.19-15_amd64.deb
    sha:e17dacb0495ed3204081a246f41ef99a6897987a
  • alt-ruby32-rubygem-io-console_0.6.0-15_amd64.deb
    sha:9fa00300b683e4bcfc77e265bf10bed5759bd68d
  • alt-ruby32-rubygem-irb_1.6.2-15_amd64.deb
    sha:c538377b8b773b332e280fe9641b5ad42cbb2509
  • alt-ruby32-rubygem-json_2.6.3-15_amd64.deb
    sha:1b6f50d99a6f37a7052773944ed2ba19bfb764be
  • alt-ruby32-rubygem-minitest_5.25.1-15_amd64.deb
    sha:f398b0e908f663a5470ea99e0a8fe8d50b3035af
  • alt-ruby32-rubygem-power-assert_2.0.3-15_amd64.deb
    sha:a612577557bce1a91e426199d38d6f53a1745bbd
  • alt-ruby32-rubygem-psych_5.0.1-15_amd64.deb
    sha:52cfcbf43eecdba50fa47c571ce096747084fd94
  • alt-ruby32-rubygem-rake_13.0.6-15_amd64.deb
    sha:7fb7e161527b8b016c44ca628509608156e6b883
  • alt-ruby32-rubygem-rbs_2.8.2-15_amd64.deb
    sha:3c6fe04295f35cd55bdbf09d8a42c7ede76da177
  • alt-ruby32-rubygem-rdoc_6.5.1.1-15_amd64.deb
    sha:513a971b0a6e70d4115db47aee35b373e0e01536
  • alt-ruby32-rubygem-rexml_3.4.4-15_amd64.deb
    sha:66a48336e80ca8fe164dbc25ff88e89d89892250
  • alt-ruby32-rubygem-rss_0.3.1-15_amd64.deb
    sha:c83557373b77a1c2c5b74cc778f958e4a74c14fd
  • alt-ruby32-rubygem-test-unit_3.5.7-15_amd64.deb
    sha:cd3fd03da4fdb5109db3f865be05734033c44443
  • alt-ruby32-rubygem-typeprof_0.21.3-15_amd64.deb
    sha:e06961137968ef855d675abc529d6b5cc6135a3c
  • alt-ruby32-rubygems_3.4.19-15_amd64.deb
    sha:d1a26e05f9904708e52f07298232f4be978499fb
  • alt-ruby32-rubygems-devel_3.4.19-15_amd64.deb
    sha:04c711f154c92fca019d89e31f69076ca7239e77
  • alt-ruby32_3.2.11-15_arm64.deb
    sha:ad76b2befecf5756c282db21915a66dc667f6fff
  • alt-ruby32-bundled-gems_3.2.11-15_arm64.deb
    sha:829f5e9a42c1df7c2f6f2d98f6e42838c85d32a1
  • alt-ruby32-default-gems_3.2.11-15_arm64.deb
    sha:b6497dfd6052ef606b3246305d31cd15424b8860
  • alt-ruby32-devel_3.2.11-15_arm64.deb
    sha:b945b5aae9d64127ba0dccaed2bb8e6061f6d54b
  • alt-ruby32-doc_3.2.11-15_arm64.deb
    sha:30bf0c553a6e292c38cd323d18affa450b2dcb0f
  • alt-ruby32-libs_3.2.11-15_arm64.deb
    sha:fbbb97b37adb1e50d0fd94ccd655972f1314741c
  • alt-ruby32-rubygem-bigdecimal_3.1.3-15_arm64.deb
    sha:7cb53a5b4cd5f1b505a712464e18a9bee2d6bb21
  • alt-ruby32-rubygem-bundler_2.4.19-15_arm64.deb
    sha:fb155e067745bad7775feaae638c1a44c181a916
  • alt-ruby32-rubygem-io-console_0.6.0-15_arm64.deb
    sha:4fa24cab87cb50d0847baf2ebb54f6e42f1f9a68
  • alt-ruby32-rubygem-irb_1.6.2-15_arm64.deb
    sha:b651621cd7157af68c22129e2bf07663b8725895
  • alt-ruby32-rubygem-json_2.6.3-15_arm64.deb
    sha:9bae33f8b85dc64fc5ebb6cfced3d912f407bc77
  • alt-ruby32-rubygem-minitest_5.25.1-15_arm64.deb
    sha:671d24fd83f756cb225c623d129095fe38303c18
  • alt-ruby32-rubygem-power-assert_2.0.3-15_arm64.deb
    sha:8e3dde47ad0ffbeffe01c960a53f99b418335674
  • alt-ruby32-rubygem-psych_5.0.1-15_arm64.deb
    sha:07c4d5f44619ae17490bcfa54bc6ac9506281c6c
  • alt-ruby32-rubygem-rake_13.0.6-15_arm64.deb
    sha:a9f1238c5d2edf8a2649954614b44c303683a1cd
  • alt-ruby32-rubygem-rbs_2.8.2-15_arm64.deb
    sha:c98b07eb7d6173e23ac17bff82ce362f93071a47
  • alt-ruby32-rubygem-rdoc_6.5.1.1-15_arm64.deb
    sha:9904331031f8b2a4b48e15ca38e6f8d7418985ef
  • alt-ruby32-rubygem-rexml_3.4.4-15_arm64.deb
    sha:17f5bd8968f84a3fe0379ef1120114ee55b95e0c
  • alt-ruby32-rubygem-rss_0.3.1-15_arm64.deb
    sha:bc253e495377fa8968dc0f127296cef343d9dcf2
  • alt-ruby32-rubygem-test-unit_3.5.7-15_arm64.deb
    sha:0beec12d9e488e0f0baf334b9b5beaa4379adfd2
  • alt-ruby32-rubygem-typeprof_0.21.3-15_arm64.deb
    sha:1172a74154c5b8884727d18db685975483a1694f
  • alt-ruby32-rubygems_3.4.19-15_arm64.deb
    sha:1a866de4e3e9e04e33d830ff6afd5b59db52f567
  • alt-ruby32-rubygems-devel_3.4.19-15_arm64.deb
    sha:492d05d6f9369dee09f602196213686a77df412d
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.