Release date:
2026-09-16 12:55:48 UTC
Description:
* SECURITY UPDATE: resolv memory exhaustion via unknown DNS resource types
- debian/patches/CVE-2026-80212.patch: stop permanently registering
generated Resource::Generic classes (Generic constants and
Resource::ClassHash entries) for every unknown DNS (type, class)
pair, and the same for SvcParam::Generic classes and unknown
SvcParamKeys, and compare generic records by TypeValue/ClassValue
instead of class identity; backport of upstream ruby/resolv 23f0009
(resolv 0.3.2 / 0.7.2)
- Behaviour change inherited from upstream: a class obtained from
Resource::Generic.create(type, class) is no longer registered, so
Resolv::DNS#getresources(name, Generic.create(type, class)) now
returns an empty list where it used to return the matching records;
records of unknown types are still decoded as Resource::Generic
- CVE-2026-80212
* SECURITY UPDATE: resolv hostname validation bypass via unchecked DNS name limits
- debian/patches/CVE-2026-80213.patch: enforce the 63-octet label
and 255-octet encoded-name limits when encoding, cap character-
strings at 255 octets and report out-of-range length octets as
DecodeError, so an over-long label can no longer wrap its length
octet and resolve a different name; backport of upstream
ruby/resolv b0ddbb5 (resolv 0.3.2 / 0.7.2)
- CVE-2026-80213
Updated packages:
-
alt-ruby33_3.3.12-14_amd64.deb
sha:4cea754624523f4e77769ce89c7a6644de66638c
-
alt-ruby33-bundled-gems_3.3.12-14_amd64.deb
sha:42aacdbe83e4c49e90b5570fcedc2d012f53d600
-
alt-ruby33-default-gems_3.3.12-14_amd64.deb
sha:bf4f9d6675b3fdf681a5c329b61bbefeee3bfa23
-
alt-ruby33-devel_3.3.12-14_amd64.deb
sha:359e91c8c2dbc4f3b475ca561634fbbdc01f9961
-
alt-ruby33-doc_3.3.12-14_amd64.deb
sha:3d57983fc0be1029c29a4d92ec8b9280d01f9da4
-
alt-ruby33-libs_3.3.12-14_amd64.deb
sha:30c20f7d14d20dc3c4e202e9a2e50335d4afd4b5
-
alt-ruby33-rubygem-bigdecimal_3.1.5-14_amd64.deb
sha:cd00004cf13eef98839c2539911b544322405a7f
-
alt-ruby33-rubygem-bundler_2.5.22-14_amd64.deb
sha:2b1b8b12c86f056ca7af7c4be89424d29165a721
-
alt-ruby33-rubygem-io-console_0.7.1-14_amd64.deb
sha:867d690a507d7bc6b2474160db04aaa6541d1f5a
-
alt-ruby33-rubygem-irb_1.13.1-14_amd64.deb
sha:f2cb4c5daa6767c5d56009102bcc300c31c3a8ff
-
alt-ruby33-rubygem-json_2.7.2-14_amd64.deb
sha:eab7572692443c2d298d9331a7a01cb471c6c852
-
alt-ruby33-rubygem-minitest_5.20.0-14_amd64.deb
sha:91daa4214adee33c868ac5f4fd4b6106ee54e7e3
-
alt-ruby33-rubygem-power-assert_2.0.3-14_amd64.deb
sha:482f6d6d4a30f036e8dc76aa8bbdbf7ae4da4815
-
alt-ruby33-rubygem-psych_5.1.2-14_amd64.deb
sha:c4577c1c2bfa951d4821f8b61fdb5c39b10c6622
-
alt-ruby33-rubygem-racc_1.7.3-14_amd64.deb
sha:a95cd5827610bd820686d65602a0d744cf5e9611
-
alt-ruby33-rubygem-rake_13.1.0-14_amd64.deb
sha:e661501243a791066de3ae5d945e0046a99ff354
-
alt-ruby33-rubygem-rbs_3.4.0-14_amd64.deb
sha:5cdb4de9931fa0219661816aa5d6a390429df227
-
alt-ruby33-rubygem-rdoc_6.6.3.1-14_amd64.deb
sha:7deebf7210888ed77c467ed0b52f0465578c155d
-
alt-ruby33-rubygem-rexml_3.4.4-14_amd64.deb
sha:5765114a3905d3ebc18304604a64e40a58859617
-
alt-ruby33-rubygem-rss_0.3.1-14_amd64.deb
sha:0dc8edb224d1cc140f547f325f83c236316616ab
-
alt-ruby33-rubygem-test-unit_3.6.1-14_amd64.deb
sha:a3e9451fe57f592f8c200c00c40e612e93f1d643
-
alt-ruby33-rubygem-typeprof_0.21.9-14_amd64.deb
sha:1c6e2ec870f1d54e535f53c735ca9e2e7e1245d4
-
alt-ruby33-rubygems_3.5.22-14_amd64.deb
sha:923544617746701e9e1e76515c0bb1cf4f530a88
-
alt-ruby33-rubygems-devel_3.5.22-14_amd64.deb
sha:c4e8eb5fdb9180b85244a18cacc846ddf05eb37c
-
alt-ruby33_3.3.12-14_arm64.deb
sha:fe33179081e53e2542ac188e10856b4e63944eef
-
alt-ruby33-bundled-gems_3.3.12-14_arm64.deb
sha:20c0dcdcb886562ffc03517061ed29bc6498efa9
-
alt-ruby33-default-gems_3.3.12-14_arm64.deb
sha:2cf480b8bca9ccb9e84dbed4dec69c9fda0d95c2
-
alt-ruby33-devel_3.3.12-14_arm64.deb
sha:a6eeda7c083cf70e5d83e3f1999efd462195cb25
-
alt-ruby33-doc_3.3.12-14_arm64.deb
sha:e003645ca0c2f778ea603d2298f2360b99fedb4d
-
alt-ruby33-libs_3.3.12-14_arm64.deb
sha:f2231a9a61237125491cff19855aefbcc7959480
-
alt-ruby33-rubygem-bigdecimal_3.1.5-14_arm64.deb
sha:3c260bd0147feb79f312d80c2e0e81dfe517935a
-
alt-ruby33-rubygem-bundler_2.5.22-14_arm64.deb
sha:e35094343869abffabe623a3974f55930f2f0bba
-
alt-ruby33-rubygem-io-console_0.7.1-14_arm64.deb
sha:2926e09120b49372d93bbe35048020e883867d3b
-
alt-ruby33-rubygem-irb_1.13.1-14_arm64.deb
sha:5c0ea4b2a533a4d347fabf5eff915792576d7142
-
alt-ruby33-rubygem-json_2.7.2-14_arm64.deb
sha:45f07771efeed5380459fd6d6528f2a5b3952275
-
alt-ruby33-rubygem-minitest_5.20.0-14_arm64.deb
sha:d7f37a777c5123734cdc6755d915564ea6528290
-
alt-ruby33-rubygem-power-assert_2.0.3-14_arm64.deb
sha:112e27ac6d287f448b50feef5e20dcb85e4eb145
-
alt-ruby33-rubygem-psych_5.1.2-14_arm64.deb
sha:01a94624bd6221acca35e7597438ea0745a023e4
-
alt-ruby33-rubygem-racc_1.7.3-14_arm64.deb
sha:1d097e505312fea95e28328a101908f2e096dd4e
-
alt-ruby33-rubygem-rake_13.1.0-14_arm64.deb
sha:0a10dbe501dc84e7cafd5510701dad65f8d0da37
-
alt-ruby33-rubygem-rbs_3.4.0-14_arm64.deb
sha:dcefbe50a511715f6cdf8f9372ea69bdb66677e6
-
alt-ruby33-rubygem-rdoc_6.6.3.1-14_arm64.deb
sha:95a454c687319da30a5cd1af234a53e51b7d80cf
-
alt-ruby33-rubygem-rexml_3.4.4-14_arm64.deb
sha:9a96e81d0173f334e85c4248fa334dd3b4b1d3c1
-
alt-ruby33-rubygem-rss_0.3.1-14_arm64.deb
sha:f4a5421f912af35634718c3904de4bec8602a527
-
alt-ruby33-rubygem-test-unit_3.6.1-14_arm64.deb
sha:841d5bbb314eeef9f5a08227226b384def992065
-
alt-ruby33-rubygem-typeprof_0.21.9-14_arm64.deb
sha:7c55cf4882c098329df5d879132aadc737ffcb91
-
alt-ruby33-rubygems_3.5.22-14_arm64.deb
sha:4fa342b6607a87a5bca6c9287ae6f2a14af769e6
-
alt-ruby33-rubygems-devel_3.5.22-14_arm64.deb
sha:9efd320a5458eb4d028b19f9b87d257ef466cad1
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
