Release date:
2026-09-16 12:18:26 UTC
Description:
* SECURITY UPDATE: resolv memory exhaustion via unknown DNS resource types
- debian/patches/CVE-2026-80212.patch: stop permanently registering
generated Resource::Generic classes (Generic constants and
Resource::ClassHash entries) for every unknown DNS (type, class)
pair, and the same for SvcParam::Generic classes and unknown
SvcParamKeys, and compare generic records by TypeValue/ClassValue
instead of class identity; backport of upstream ruby/resolv 23f0009
(resolv 0.3.2 / 0.7.2)
- Behaviour change inherited from upstream: a class obtained from
Resource::Generic.create(type, class) is no longer registered, so
Resolv::DNS#getresources(name, Generic.create(type, class)) now
returns an empty list where it used to return the matching records;
records of unknown types are still decoded as Resource::Generic
- CVE-2026-80212
* SECURITY UPDATE: resolv hostname validation bypass via unchecked DNS name limits
- debian/patches/CVE-2026-80213.patch: enforce the 63-octet label
and 255-octet encoded-name limits when encoding, cap character-
strings at 255 octets and report out-of-range length octets as
DecodeError, so an over-long label can no longer wrap its length
octet and resolve a different name; backport of upstream
ruby/resolv b0ddbb5 (resolv 0.3.2 / 0.7.2)
- CVE-2026-80213
Updated packages:
-
alt-ruby33_3.3.12-14_amd64.deb
sha:7ed06279942112f7104c4e3d28283a68997b3e07
-
alt-ruby33-bundled-gems_3.3.12-14_amd64.deb
sha:39b8727e459d7cf2c2dc403524b5164d0633665f
-
alt-ruby33-default-gems_3.3.12-14_amd64.deb
sha:bf4f9d6675b3fdf681a5c329b61bbefeee3bfa23
-
alt-ruby33-devel_3.3.12-14_amd64.deb
sha:43c3b1ada131cfc2d88bbdd5a28fe725cac8e1be
-
alt-ruby33-doc_3.3.12-14_amd64.deb
sha:5da6a5f7786969afb83acaeeefdf3bb8038aff2f
-
alt-ruby33-libs_3.3.12-14_amd64.deb
sha:23e512a13ab83bfa33196c0b0c8ee45e4826fec7
-
alt-ruby33-rubygem-bigdecimal_3.1.5-14_amd64.deb
sha:e4438ce6a05508d97cd474e5e22f6ba9dbc23315
-
alt-ruby33-rubygem-bundler_2.5.22-14_amd64.deb
sha:2b1b8b12c86f056ca7af7c4be89424d29165a721
-
alt-ruby33-rubygem-io-console_0.7.1-14_amd64.deb
sha:33538d925779cf1161467a30925b5827e6527452
-
alt-ruby33-rubygem-irb_1.13.1-14_amd64.deb
sha:f2cb4c5daa6767c5d56009102bcc300c31c3a8ff
-
alt-ruby33-rubygem-json_2.7.2-14_amd64.deb
sha:31a2de259bacd2377eb05bad9ff43cef06757d8a
-
alt-ruby33-rubygem-minitest_5.20.0-14_amd64.deb
sha:91daa4214adee33c868ac5f4fd4b6106ee54e7e3
-
alt-ruby33-rubygem-power-assert_2.0.3-14_amd64.deb
sha:482f6d6d4a30f036e8dc76aa8bbdbf7ae4da4815
-
alt-ruby33-rubygem-psych_5.1.2-14_amd64.deb
sha:877fb9194ab7ae5755c83b311cc2415799e53ba0
-
alt-ruby33-rubygem-racc_1.7.3-14_amd64.deb
sha:4fbd26164fcfbe7f660e838f601ef0ab568aa32b
-
alt-ruby33-rubygem-rake_13.1.0-14_amd64.deb
sha:e661501243a791066de3ae5d945e0046a99ff354
-
alt-ruby33-rubygem-rbs_3.4.0-14_amd64.deb
sha:e6bf2fa66cb7b92bcd63ea5af7cf5ccd9864a900
-
alt-ruby33-rubygem-rdoc_6.6.3.1-14_amd64.deb
sha:7deebf7210888ed77c467ed0b52f0465578c155d
-
alt-ruby33-rubygem-rexml_3.4.4-14_amd64.deb
sha:5765114a3905d3ebc18304604a64e40a58859617
-
alt-ruby33-rubygem-rss_0.3.1-14_amd64.deb
sha:0dc8edb224d1cc140f547f325f83c236316616ab
-
alt-ruby33-rubygem-test-unit_3.6.1-14_amd64.deb
sha:a3e9451fe57f592f8c200c00c40e612e93f1d643
-
alt-ruby33-rubygem-typeprof_0.21.9-14_amd64.deb
sha:1c6e2ec870f1d54e535f53c735ca9e2e7e1245d4
-
alt-ruby33-rubygems_3.5.22-14_amd64.deb
sha:923544617746701e9e1e76515c0bb1cf4f530a88
-
alt-ruby33-rubygems-devel_3.5.22-14_amd64.deb
sha:c4e8eb5fdb9180b85244a18cacc846ddf05eb37c
-
alt-ruby33_3.3.12-14_arm64.deb
sha:54e9f5c3b12e7923b7cffb1c2ee6129e37c9a39d
-
alt-ruby33-bundled-gems_3.3.12-14_arm64.deb
sha:f78edc74bc511bb6228fe9a91f1cc319c0df4c2c
-
alt-ruby33-default-gems_3.3.12-14_arm64.deb
sha:2cf480b8bca9ccb9e84dbed4dec69c9fda0d95c2
-
alt-ruby33-devel_3.3.12-14_arm64.deb
sha:cbfcb25bf8effcf3f89b5965f9112c0b920eb565
-
alt-ruby33-doc_3.3.12-14_arm64.deb
sha:32194362d8c39f6c2991f637c319f14e4db68276
-
alt-ruby33-libs_3.3.12-14_arm64.deb
sha:f16b3312cb9684bae99d5c767646b9ce4da0eb6b
-
alt-ruby33-rubygem-bigdecimal_3.1.5-14_arm64.deb
sha:4bffacb910cd13f59aa21b4fe944c30e1bdffdb6
-
alt-ruby33-rubygem-bundler_2.5.22-14_arm64.deb
sha:e35094343869abffabe623a3974f55930f2f0bba
-
alt-ruby33-rubygem-io-console_0.7.1-14_arm64.deb
sha:658c83af99c58fc0ca1f60c090f965d7935908df
-
alt-ruby33-rubygem-irb_1.13.1-14_arm64.deb
sha:5c0ea4b2a533a4d347fabf5eff915792576d7142
-
alt-ruby33-rubygem-json_2.7.2-14_arm64.deb
sha:cabb5f99bf5e748f53b5a8ea281e21fa2680bbfb
-
alt-ruby33-rubygem-minitest_5.20.0-14_arm64.deb
sha:d7f37a777c5123734cdc6755d915564ea6528290
-
alt-ruby33-rubygem-power-assert_2.0.3-14_arm64.deb
sha:112e27ac6d287f448b50feef5e20dcb85e4eb145
-
alt-ruby33-rubygem-psych_5.1.2-14_arm64.deb
sha:96d590898120fdc523581582ad7b01b4f1c9b3a3
-
alt-ruby33-rubygem-racc_1.7.3-14_arm64.deb
sha:afc97ad9bdb4f1cfcd644684b3e2c79e75dfe73f
-
alt-ruby33-rubygem-rake_13.1.0-14_arm64.deb
sha:0a10dbe501dc84e7cafd5510701dad65f8d0da37
-
alt-ruby33-rubygem-rbs_3.4.0-14_arm64.deb
sha:12ed2f3ca049254b14cc8dc0b485901a427fb262
-
alt-ruby33-rubygem-rdoc_6.6.3.1-14_arm64.deb
sha:95a454c687319da30a5cd1af234a53e51b7d80cf
-
alt-ruby33-rubygem-rexml_3.4.4-14_arm64.deb
sha:9a96e81d0173f334e85c4248fa334dd3b4b1d3c1
-
alt-ruby33-rubygem-rss_0.3.1-14_arm64.deb
sha:f4a5421f912af35634718c3904de4bec8602a527
-
alt-ruby33-rubygem-test-unit_3.6.1-14_arm64.deb
sha:841d5bbb314eeef9f5a08227226b384def992065
-
alt-ruby33-rubygem-typeprof_0.21.9-14_arm64.deb
sha:7c55cf4882c098329df5d879132aadc737ffcb91
-
alt-ruby33-rubygems_3.5.22-14_arm64.deb
sha:4fa342b6607a87a5bca6c9287ae6f2a14af769e6
-
alt-ruby33-rubygems-devel_3.5.22-14_arm64.deb
sha:9efd320a5458eb4d028b19f9b87d257ef466cad1
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
