Release date:
2026-09-16 13:09:28 UTC
Description:
* SECURITY UPDATE: resolv memory exhaustion via unknown DNS resource types
- debian/patches/CVE-2026-80212.patch: stop permanently registering
generated Resource::Generic classes (Generic constants and
Resource::ClassHash entries) for every unknown DNS (type, class)
pair, and compare generic records by TypeValue/ClassValue instead
of class identity; backport of upstream ruby/resolv 23f0009
(resolv 0.3.2 / 0.7.2)
- Behaviour change inherited from upstream: a class obtained from
Resource::Generic.create(type, class) is no longer registered, so
Resolv::DNS#getresources(name, Generic.create(type, class)) now
returns an empty list where it used to return the matching records;
records of unknown types are still decoded as Resource::Generic
- CVE-2026-80212
* SECURITY UPDATE: resolv hostname validation bypass via unchecked DNS name limits
- debian/patches/CVE-2026-80213.patch: enforce the 63-octet label
and 255-octet encoded-name limits when encoding, cap character-
strings at 255 octets and report out-of-range length octets as
DecodeError, so an over-long label can no longer wrap its length
octet and resolve a different name; backport of upstream
ruby/resolv b0ddbb5 (resolv 0.3.2 / 0.7.2)
- CVE-2026-80213
Updated packages:
-
alt-ruby27_2.7.8-10_amd64.deb
sha:d1a2c27ea2a7a03544fa12c347065849e8b03453
-
alt-ruby27-default-gems_2.7.8-10_amd64.deb
sha:0b615fbf84754dab49f2181e57b20612d91695fc
-
alt-ruby27-devel_2.7.8-10_amd64.deb
sha:5e825e65bb0fd1f15fecfc8f80318ec0040bf6d3
-
alt-ruby27-doc_2.7.8-10_amd64.deb
sha:496e6c75a63cf6106a172036975fa5d1493b6f62
-
alt-ruby27-libs_2.7.8-10_amd64.deb
sha:ada40d9e1297060098305d10914c8d8cf44203c2
-
alt-ruby27-rubygem-bigdecimal_2.0.0-10_amd64.deb
sha:bffbec025ba9b7d2f23b013f6acdd91ab86a24a7
-
alt-ruby27-rubygem-bundler_2.2.24-10_amd64.deb
sha:6bc1a20dac3b3dc7c3fe8fce4e4ae0a4254e86ae
-
alt-ruby27-rubygem-io-console_0.5.6-10_amd64.deb
sha:eca6adf4b76ca27a8f3b60af1a598dc36c56bfc3
-
alt-ruby27-rubygem-irb_1.2.6-10_amd64.deb
sha:d94b48e0f982eb9e5f6bc8f9f5ee9808b1121764
-
alt-ruby27-rubygem-json_2.3.0-10_amd64.deb
sha:867b23f617bdaf834e4027afa749aa7198095b5a
-
alt-ruby27-rubygem-minitest_5.13.0-10_amd64.deb
sha:173a54b63b23b720c776b0ad24d66785c085c9e5
-
alt-ruby27-rubygem-net-telnet_0.2.0-10_amd64.deb
sha:4ace6ac4871ab156de0dbac02b9a8e0686ef9ee8
-
alt-ruby27-rubygem-power-assert_1.1.7-10_amd64.deb
sha:218f4785ada8aa5c76b1600022d3674f25c9588a
-
alt-ruby27-rubygem-psych_3.1.0-10_amd64.deb
sha:17eaa88269692afd98a48abb0dad614845131369
-
alt-ruby27-rubygem-rake_13.0.1-10_amd64.deb
sha:8c3a94bbed1de84a163d267c7fc9d8c15a9047af
-
alt-ruby27-rubygem-rdoc_6.2.1.1-10_amd64.deb
sha:5409cef957c303f4e914605fd5cd836b66b6b84f
-
alt-ruby27-rubygem-test-unit_3.3.4-10_amd64.deb
sha:87edecc0bc06fa94d2cbc724b108abf857057254
-
alt-ruby27-rubygem-xmlrpc_0.3.0-10_amd64.deb
sha:b7b66dc41a979f2acfab4123c9a3614b260129ae
-
alt-ruby27-rubygems_3.1.6-10_amd64.deb
sha:499401454973283fc3d6c06cf82c6933bf986f7a
-
alt-ruby27-rubygems-devel_3.1.6-10_amd64.deb
sha:04499647eaa44bda0cc37d3d6e88bca638b4cedb
-
alt-ruby27_2.7.8-10_arm64.deb
sha:102c1e38d650f90ae5f2ca97a1b1192655f07a0e
-
alt-ruby27-default-gems_2.7.8-10_arm64.deb
sha:c29798fcef4313b3d6b54efcfbf501dca2ebd0db
-
alt-ruby27-devel_2.7.8-10_arm64.deb
sha:b246bde8443a6a0fdf9054f0428a00b9d58c9798
-
alt-ruby27-doc_2.7.8-10_arm64.deb
sha:ef692a46a6036e90d4299c22031863573bb85d07
-
alt-ruby27-libs_2.7.8-10_arm64.deb
sha:37e969ca32ed66aefea14b1e09fda26ffd35c85b
-
alt-ruby27-rubygem-bigdecimal_2.0.0-10_arm64.deb
sha:6406948df004cf9ce5c89178581cfcb88ee61c8b
-
alt-ruby27-rubygem-bundler_2.2.24-10_arm64.deb
sha:d27370ef687a35f962ffec878a6f8534594af481
-
alt-ruby27-rubygem-io-console_0.5.6-10_arm64.deb
sha:92a257356a75248fd0a3b76499350fcd97909d4d
-
alt-ruby27-rubygem-irb_1.2.6-10_arm64.deb
sha:d38b99c2c0dbfa042504da1e5778b361a3a86ad0
-
alt-ruby27-rubygem-json_2.3.0-10_arm64.deb
sha:31d53381c4cf8b5fff982235ac7694b266c4e2d3
-
alt-ruby27-rubygem-minitest_5.13.0-10_arm64.deb
sha:78831bcda56c99e84f04b23a6ceb0b33e7ee776d
-
alt-ruby27-rubygem-net-telnet_0.2.0-10_arm64.deb
sha:3ae939d4d26441ec554d031e83a45b341bddbc46
-
alt-ruby27-rubygem-power-assert_1.1.7-10_arm64.deb
sha:76ddd6c8a41a9327f75c94a1b2812ba32594951c
-
alt-ruby27-rubygem-psych_3.1.0-10_arm64.deb
sha:f5bf2a68c23ad244065b7159dde4a576dbd1c851
-
alt-ruby27-rubygem-rake_13.0.1-10_arm64.deb
sha:b6c54f1d91021f3e07d0624e31824fcbd7399a0e
-
alt-ruby27-rubygem-rdoc_6.2.1.1-10_arm64.deb
sha:3aec237fb4b6fba3102f54bcde777534cf50bd19
-
alt-ruby27-rubygem-test-unit_3.3.4-10_arm64.deb
sha:5798154d7f3cacbfb9935cb9db3b5c9a965d406d
-
alt-ruby27-rubygem-xmlrpc_0.3.0-10_arm64.deb
sha:148b071e001299ca7f581714213928d3715b8b88
-
alt-ruby27-rubygems_3.1.6-10_arm64.deb
sha:79fea06b368f296804b0f8b5c0394959f0f60eb0
-
alt-ruby27-rubygems-devel_3.1.6-10_arm64.deb
sha:f20d26150c171d546ae95e03a9c4a4283792a559
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
