[CLSA-2026:1789555790] Fix CVE(s): CVE-2026-80212, CVE-2026-80213
Type:
security
Severity:
Important
Release date:
2026-09-16 10:50:03 UTC
Description:
* SECURITY UPDATE: resolv memory exhaustion via unknown DNS resource types - debian/patches/CVE-2026-80212.patch: stop permanently registering generated Resource::Generic classes (Generic constants and Resource::ClassHash entries) for every unknown DNS (type, class) pair, and compare generic records by TypeValue/ClassValue instead of class identity; backport of upstream ruby/resolv 23f0009 (resolv 0.3.2 / 0.7.2) - Behaviour change inherited from upstream: a class obtained from Resource::Generic.create(type, class) is no longer registered, so Resolv::DNS#getresources(name, Generic.create(type, class)) now returns an empty list where it used to return the matching records; records of unknown types are still decoded as Resource::Generic - CVE-2026-80212 * SECURITY UPDATE: resolv hostname validation bypass via unchecked DNS name limits - debian/patches/CVE-2026-80213.patch: enforce the 63-octet label and 255-octet encoded-name limits when encoding, cap character- strings at 255 octets and report out-of-range length octets as DecodeError, so an over-long label can no longer wrap its length octet and resolve a different name; backport of upstream ruby/resolv b0ddbb5 (resolv 0.3.2 / 0.7.2) - CVE-2026-80213
CVEs fixed:
Updated packages:
  • alt-ruby30_3.0.7-176_amd64.deb
    sha:6a17310eba00218824af53d946e0f3bd060efc3d
  • alt-ruby30-default-gems_3.0.7-176_amd64.deb
    sha:7cb8c9ce8de8e7860eec877d16094e321758dc2e
  • alt-ruby30-devel_3.0.7-176_amd64.deb
    sha:a5f51a2a22fa21449946edaf53d315799f67bcb9
  • alt-ruby30-doc_3.0.7-176_amd64.deb
    sha:03f77b099416301ebfda964aa184cf806441e67b
  • alt-ruby30-libs_3.0.7-176_amd64.deb
    sha:d0447e4adeff49d6aea509178bbfbc56f1324cd2
  • alt-ruby30-rubygem-bigdecimal_3.0.0-176_amd64.deb
    sha:5a4ddaa44886893d1cbd3ce6d2114bb1484a2ee6
  • alt-ruby30-rubygem-bundler_2.2.33-176_amd64.deb
    sha:e1fada957fa06118e9a0e7378083c2b3cac4da9c
  • alt-ruby30-rubygem-io-console_0.5.7-176_amd64.deb
    sha:ae75e293a211fd21c46069b56c68550f718b4169
  • alt-ruby30-rubygem-irb_1.3.5-176_amd64.deb
    sha:b5b63e42ead98618be63f9f687df35a4d9c21e9c
  • alt-ruby30-rubygem-json_2.5.1-176_amd64.deb
    sha:cc17854fc36cd1d79e0bd59bcfd3180818c9869a
  • alt-ruby30-rubygem-minitest_5.14.2-176_amd64.deb
    sha:fded76b01a5bed1cd939b11834985d240fc8b4ba
  • alt-ruby30-rubygem-power-assert_1.2.1-176_amd64.deb
    sha:78c7b48ab22ef3577efc50c15f3efea742959b9c
  • alt-ruby30-rubygem-psych_3.3.2-176_amd64.deb
    sha:ecb4ecf22988f960d734bbb623843a1ab5ef4c0c
  • alt-ruby30-rubygem-rake_13.0.3-176_amd64.deb
    sha:4c3c697e71a63dc181643d5f0a223afcf5122e0a
  • alt-ruby30-rubygem-rbs_1.4.0-176_amd64.deb
    sha:5e30722f725f06d51ee41db6c1f83eda2b5455c2
  • alt-ruby30-rubygem-rdoc_6.3.4.1-176_amd64.deb
    sha:f34fb3d7dbbe77fb395c2fd6555e544dd2e5cf9b
  • alt-ruby30-rubygem-rexml_3.2.5-176_amd64.deb
    sha:6f9b6c82fe28d041136b1f0959afd36903716b74
  • alt-ruby30-rubygem-rss_0.2.9-176_amd64.deb
    sha:8ddb67e05c27d7d87a60da3e191939cd92c611f5
  • alt-ruby30-rubygem-test-unit_3.3.7-176_amd64.deb
    sha:3c2034d464afe7c9c45e1ed7d0f4a8aae93bdca1
  • alt-ruby30-rubygem-typeprof_0.15.2-176_amd64.deb
    sha:409d325f19ec7cb869809315bb7dc371cf21aef7
  • alt-ruby30-rubygems_3.2.33-176_amd64.deb
    sha:34c2596de5b2a42191cc98378d55c961c691cf24
  • alt-ruby30-rubygems-devel_3.2.33-176_amd64.deb
    sha:4e561ac6584ac89e190983f3bcc046b07659946b
  • alt-ruby30_3.0.7-176_arm64.deb
    sha:eef599542336c14201398891afa7593a562a3782
  • alt-ruby30-default-gems_3.0.7-176_arm64.deb
    sha:b48a2cf1bfac2fece1f816fbba101efb02f62319
  • alt-ruby30-devel_3.0.7-176_arm64.deb
    sha:8ec859c31e220b49a0d32ee806a94b1e56bbeee3
  • alt-ruby30-doc_3.0.7-176_arm64.deb
    sha:0f87e05b6657966002e4e28c8878bd0ae5c3e687
  • alt-ruby30-libs_3.0.7-176_arm64.deb
    sha:394215ecfa6151d3134d97870e53b32875ec723f
  • alt-ruby30-rubygem-bigdecimal_3.0.0-176_arm64.deb
    sha:6a612346fe62b9898a742f5ea67200b3704e33f9
  • alt-ruby30-rubygem-bundler_2.2.33-176_arm64.deb
    sha:833ceba01ba3123d04b89c6b1d021f1f64f9713e
  • alt-ruby30-rubygem-io-console_0.5.7-176_arm64.deb
    sha:3648a5b797a07b37d0b697eeb34c3ce0ded7e57f
  • alt-ruby30-rubygem-irb_1.3.5-176_arm64.deb
    sha:682afde60d56cd0093d61af6ec98f06285f51854
  • alt-ruby30-rubygem-json_2.5.1-176_arm64.deb
    sha:66f3f52484342960c0e4a5230b5ba6b8f1f49157
  • alt-ruby30-rubygem-minitest_5.14.2-176_arm64.deb
    sha:280485109d8a100bfe594e4e58bb5134592b9e2d
  • alt-ruby30-rubygem-power-assert_1.2.1-176_arm64.deb
    sha:a88de2dd1153511093ac875777e82c6106b6ca5f
  • alt-ruby30-rubygem-psych_3.3.2-176_arm64.deb
    sha:5687a557f71c5c405eb60722b5d83c0a766e5012
  • alt-ruby30-rubygem-rake_13.0.3-176_arm64.deb
    sha:b2f861d4325e953044c0762cf4138ebfd8995d1a
  • alt-ruby30-rubygem-rbs_1.4.0-176_arm64.deb
    sha:2f370e56b472651dcdfe0012224668d0c910a6dc
  • alt-ruby30-rubygem-rdoc_6.3.4.1-176_arm64.deb
    sha:513ec48a9156fecd5bf5a33e536698d7e6e66289
  • alt-ruby30-rubygem-rexml_3.2.5-176_arm64.deb
    sha:7b99e5dff73141ebc98a342eb6efdddf594e9e42
  • alt-ruby30-rubygem-rss_0.2.9-176_arm64.deb
    sha:d52fdd5e69b97581f9ecc2dbbfa76372610ada62
  • alt-ruby30-rubygem-test-unit_3.3.7-176_arm64.deb
    sha:d341e378de36ce064452257382753e18739c7156
  • alt-ruby30-rubygem-typeprof_0.15.2-176_arm64.deb
    sha:f4df3eef559035d22b5c3c32c97b972ebb01095b
  • alt-ruby30-rubygems_3.2.33-176_arm64.deb
    sha:b21af506be8077bfcbc99c9ab9bbd46d26c33e80
  • alt-ruby30-rubygems-devel_3.2.33-176_arm64.deb
    sha:95c4c57c209ac361a26e46aaf9339a735020f437
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.