[CLSA-2026:1789561860] Fix CVE(s): CVE-2026-80212, CVE-2026-80213
Type:
security
Severity:
Important
Release date:
2026-09-16 12:31:12 UTC
Description:
* SECURITY UPDATE: resolv memory exhaustion via unknown DNS resource types - debian/patches/CVE-2026-80212.patch: stop permanently registering generated Resource::Generic classes (Generic constants and Resource::ClassHash entries) for every unknown DNS (type, class) pair, and compare generic records by TypeValue/ClassValue instead of class identity; backport of upstream ruby/resolv 23f0009 (resolv 0.3.2 / 0.7.2) - Behaviour change inherited from upstream: a class obtained from Resource::Generic.create(type, class) is no longer registered, so Resolv::DNS#getresources(name, Generic.create(type, class)) now returns an empty list where it used to return the matching records; records of unknown types are still decoded as Resource::Generic - CVE-2026-80212 * SECURITY UPDATE: resolv hostname validation bypass via unchecked DNS name limits - debian/patches/CVE-2026-80213.patch: enforce the 63-octet label and 255-octet encoded-name limits when encoding, cap character- strings at 255 octets and report out-of-range length octets as DecodeError, so an over-long label can no longer wrap its length octet and resolve a different name; backport of upstream ruby/resolv b0ddbb5 (resolv 0.3.2 / 0.7.2) - CVE-2026-80213
CVEs fixed:
Updated packages:
  • alt-ruby27_2.7.8-10_amd64.deb
    sha:47f07746ebe6364c9175a1848b7e118c31c49e1c
  • alt-ruby27-default-gems_2.7.8-10_amd64.deb
    sha:0b615fbf84754dab49f2181e57b20612d91695fc
  • alt-ruby27-devel_2.7.8-10_amd64.deb
    sha:681d84c7ed34fdd49ea36d4cce347d2035a93e64
  • alt-ruby27-doc_2.7.8-10_amd64.deb
    sha:496e6c75a63cf6106a172036975fa5d1493b6f62
  • alt-ruby27-libs_2.7.8-10_amd64.deb
    sha:58c98c2680790168964b700935f6c5e5d19dd1d9
  • alt-ruby27-rubygem-bigdecimal_2.0.0-10_amd64.deb
    sha:6734bda14aff34dccf1f9ff4bda515a96b12cc0f
  • alt-ruby27-rubygem-bundler_2.2.24-10_amd64.deb
    sha:6bc1a20dac3b3dc7c3fe8fce4e4ae0a4254e86ae
  • alt-ruby27-rubygem-io-console_0.5.6-10_amd64.deb
    sha:c67d6cbf0ab84b3d4da06f2bf2a1381d10be149e
  • alt-ruby27-rubygem-irb_1.2.6-10_amd64.deb
    sha:d94b48e0f982eb9e5f6bc8f9f5ee9808b1121764
  • alt-ruby27-rubygem-json_2.3.0-10_amd64.deb
    sha:1acd391784cf8b27eee9a826608d8c06fbab7e6d
  • alt-ruby27-rubygem-minitest_5.13.0-10_amd64.deb
    sha:173a54b63b23b720c776b0ad24d66785c085c9e5
  • alt-ruby27-rubygem-net-telnet_0.2.0-10_amd64.deb
    sha:4ace6ac4871ab156de0dbac02b9a8e0686ef9ee8
  • alt-ruby27-rubygem-power-assert_1.1.7-10_amd64.deb
    sha:218f4785ada8aa5c76b1600022d3674f25c9588a
  • alt-ruby27-rubygem-psych_3.1.0-10_amd64.deb
    sha:14b238c018dafb4113ad4d573ab0d01f105e2c39
  • alt-ruby27-rubygem-rake_13.0.1-10_amd64.deb
    sha:8c3a94bbed1de84a163d267c7fc9d8c15a9047af
  • alt-ruby27-rubygem-rdoc_6.2.1.1-10_amd64.deb
    sha:5409cef957c303f4e914605fd5cd836b66b6b84f
  • alt-ruby27-rubygem-test-unit_3.3.4-10_amd64.deb
    sha:87edecc0bc06fa94d2cbc724b108abf857057254
  • alt-ruby27-rubygem-xmlrpc_0.3.0-10_amd64.deb
    sha:b7b66dc41a979f2acfab4123c9a3614b260129ae
  • alt-ruby27-rubygems_3.1.6-10_amd64.deb
    sha:499401454973283fc3d6c06cf82c6933bf986f7a
  • alt-ruby27-rubygems-devel_3.1.6-10_amd64.deb
    sha:04499647eaa44bda0cc37d3d6e88bca638b4cedb
  • alt-ruby27_2.7.8-10_arm64.deb
    sha:8ff766afae66bb56c85812a6a01899192db631e3
  • alt-ruby27-default-gems_2.7.8-10_arm64.deb
    sha:c29798fcef4313b3d6b54efcfbf501dca2ebd0db
  • alt-ruby27-devel_2.7.8-10_arm64.deb
    sha:50dcfcc5724c8f187d2ae324605605137621882f
  • alt-ruby27-doc_2.7.8-10_arm64.deb
    sha:ef692a46a6036e90d4299c22031863573bb85d07
  • alt-ruby27-libs_2.7.8-10_arm64.deb
    sha:c866e139734964dcf29bdca81e2729c9e0a6adb3
  • alt-ruby27-rubygem-bigdecimal_2.0.0-10_arm64.deb
    sha:085d577942b7d49bd9858bc25fe3fd4bac530c07
  • alt-ruby27-rubygem-bundler_2.2.24-10_arm64.deb
    sha:d27370ef687a35f962ffec878a6f8534594af481
  • alt-ruby27-rubygem-io-console_0.5.6-10_arm64.deb
    sha:e1785b6e7bf6db47416f07bee52fced4474339de
  • alt-ruby27-rubygem-irb_1.2.6-10_arm64.deb
    sha:d38b99c2c0dbfa042504da1e5778b361a3a86ad0
  • alt-ruby27-rubygem-json_2.3.0-10_arm64.deb
    sha:e0ad21851419d2c737cb65317c30d5af175b998e
  • alt-ruby27-rubygem-minitest_5.13.0-10_arm64.deb
    sha:78831bcda56c99e84f04b23a6ceb0b33e7ee776d
  • alt-ruby27-rubygem-net-telnet_0.2.0-10_arm64.deb
    sha:3ae939d4d26441ec554d031e83a45b341bddbc46
  • alt-ruby27-rubygem-power-assert_1.1.7-10_arm64.deb
    sha:76ddd6c8a41a9327f75c94a1b2812ba32594951c
  • alt-ruby27-rubygem-psych_3.1.0-10_arm64.deb
    sha:0f371cf7412341cb95bfdcf8be269350c48f0467
  • alt-ruby27-rubygem-rake_13.0.1-10_arm64.deb
    sha:b6c54f1d91021f3e07d0624e31824fcbd7399a0e
  • alt-ruby27-rubygem-rdoc_6.2.1.1-10_arm64.deb
    sha:3aec237fb4b6fba3102f54bcde777534cf50bd19
  • alt-ruby27-rubygem-test-unit_3.3.4-10_arm64.deb
    sha:5798154d7f3cacbfb9935cb9db3b5c9a965d406d
  • alt-ruby27-rubygem-xmlrpc_0.3.0-10_arm64.deb
    sha:148b071e001299ca7f581714213928d3715b8b88
  • alt-ruby27-rubygems_3.1.6-10_arm64.deb
    sha:79fea06b368f296804b0f8b5c0394959f0f60eb0
  • alt-ruby27-rubygems-devel_3.1.6-10_arm64.deb
    sha:f20d26150c171d546ae95e03a9c4a4283792a559
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.