[CLSA-2026:1789564688] Fix CVE(s): CVE-2026-80212, CVE-2026-80213
Type:
security
Severity:
Important
Release date:
2026-09-16 13:18:20 UTC
Description:
* SECURITY UPDATE: resolv memory exhaustion via unknown DNS resource types - debian/patches/CVE-2026-80212.patch: stop permanently registering generated Resource::Generic classes (Generic constants and Resource::ClassHash entries) for every unknown DNS (type, class) pair, and compare generic records by TypeValue/ClassValue instead of class identity; backport of upstream ruby/resolv 23f0009 (resolv 0.3.2 / 0.7.2) - Behaviour change inherited from upstream: a class obtained from Resource::Generic.create(type, class) is no longer registered, so Resolv::DNS#getresources(name, Generic.create(type, class)) now returns an empty list where it used to return the matching records; records of unknown types are still decoded as Resource::Generic - CVE-2026-80212 * SECURITY UPDATE: resolv hostname validation bypass via unchecked DNS name limits - debian/patches/CVE-2026-80213.patch: enforce the 63-octet label and 255-octet encoded-name limits when encoding, cap character- strings at 255 octets and report out-of-range length octets as DecodeError, so an over-long label can no longer wrap its length octet and resolve a different name; backport of upstream ruby/resolv b0ddbb5 (resolv 0.3.2 / 0.7.2) - CVE-2026-80213
CVEs fixed:
Updated packages:
  • alt-ruby31_3.1.7-14_amd64.deb
    sha:d551e577d4974384a2eb1f56cbe2ee236c8d4605
  • alt-ruby31-bundled-gems_3.1.7-14_amd64.deb
    sha:0b315d16e189ec9cfd40518883e1e8e3e5568c57
  • alt-ruby31-default-gems_3.1.7-14_amd64.deb
    sha:3012031ac78e3fa5feeddfafc467e2ea3f96a9c4
  • alt-ruby31-devel_3.1.7-14_amd64.deb
    sha:2cc50f002a75318d976678538e624d11242262a1
  • alt-ruby31-doc_3.1.7-14_amd64.deb
    sha:8cb55925d4082f32b09de7efef6c8c1f81c41d35
  • alt-ruby31-libs_3.1.7-14_amd64.deb
    sha:94d9567944b8a866d18bc8e1c590abbdc98cce89
  • alt-ruby31-rubygem-bigdecimal_3.1.1-14_amd64.deb
    sha:d15c307f387833669a19ff964fe0bbabdfe8688e
  • alt-ruby31-rubygem-bundler_2.3.27-14_amd64.deb
    sha:b2650bab24a2e9fdeb9788c6ac22e43b8cef2ba3
  • alt-ruby31-rubygem-io-console_0.5.11-14_amd64.deb
    sha:b032450be62aae9528e38da385c4aade4e7cfcfa
  • alt-ruby31-rubygem-irb_1.4.1-14_amd64.deb
    sha:b2919afca31d1f5812de1d8f0e1a131a6be9f323
  • alt-ruby31-rubygem-json_2.6.1-14_amd64.deb
    sha:b38fdcffee02c141b7e0c57ed97d646b562c2552
  • alt-ruby31-rubygem-minitest_5.15.0-14_amd64.deb
    sha:79a059d2019da15d7f7149b89cef407b630983a6
  • alt-ruby31-rubygem-power-assert_2.0.1-14_amd64.deb
    sha:f04a6291209d6883b4ad5e7b9a1c65cf29e2c3e8
  • alt-ruby31-rubygem-psych_4.0.4-14_amd64.deb
    sha:0ed4333c6a17059100cd712e91047fef672ece04
  • alt-ruby31-rubygem-rake_13.0.6-14_amd64.deb
    sha:88c1fdc420d55ddf10658105ae289511adf9f0ab
  • alt-ruby31-rubygem-rbs_2.7.0-14_amd64.deb
    sha:153164c3ad3b28acd75fa4d6f08851bfb8714f69
  • alt-ruby31-rubygem-rdoc_6.4.1.1-14_amd64.deb
    sha:e06f6b9d968264c2d1b75a042483f0299dab8e24
  • alt-ruby31-rubygem-rexml_3.3.9-14_amd64.deb
    sha:0158f3a0ab034024c8a8365c8a537b0c571d1b92
  • alt-ruby31-rubygem-rss_0.3.1-14_amd64.deb
    sha:1c4f051cbb0f349ad4b100456d8f5bff9173cda8
  • alt-ruby31-rubygem-test-unit_3.5.3-14_amd64.deb
    sha:b137e22ff9eb169862fb7f8c471219cbf855c97e
  • alt-ruby31-rubygem-typeprof_0.21.3-14_amd64.deb
    sha:fc7fc9d0169ef3be2ea454df79265e746600f1ff
  • alt-ruby31-rubygems_3.3.27-14_amd64.deb
    sha:d3543bc1ed3efb9f77fd457b6c1971a60343a1aa
  • alt-ruby31-rubygems-devel_3.3.27-14_amd64.deb
    sha:38de9179bd25fa7baa6b8f680ebbec14c0fe833f
  • alt-ruby31_3.1.7-14_arm64.deb
    sha:8d4ebf9ff99cff4ad5c8d57a199eeae2f1165a6a
  • alt-ruby31-bundled-gems_3.1.7-14_arm64.deb
    sha:24248f2e523c0cfcc739a66c00921616e1035a96
  • alt-ruby31-default-gems_3.1.7-14_arm64.deb
    sha:ff1832b376406c6681bbaac321ce9d3ed57c17ec
  • alt-ruby31-devel_3.1.7-14_arm64.deb
    sha:3da8fefbe7656bd8614559de6635f904532022c6
  • alt-ruby31-doc_3.1.7-14_arm64.deb
    sha:6019a1b5924e7b0b7c4842681adab8c811779109
  • alt-ruby31-libs_3.1.7-14_arm64.deb
    sha:3fb568112bba47f31d9e54ac8b7516ec26f9153f
  • alt-ruby31-rubygem-bigdecimal_3.1.1-14_arm64.deb
    sha:c04f475233ab32f6834e439c8bfc23c5ea17d271
  • alt-ruby31-rubygem-bundler_2.3.27-14_arm64.deb
    sha:faba1b46aa05b0395db88857f8851f019a58a66f
  • alt-ruby31-rubygem-io-console_0.5.11-14_arm64.deb
    sha:86fd55d499c675f8bc252e85e77fb07fdadd3327
  • alt-ruby31-rubygem-irb_1.4.1-14_arm64.deb
    sha:a82585d0f0eb7737cc08a5614b62e33084b4aed1
  • alt-ruby31-rubygem-json_2.6.1-14_arm64.deb
    sha:1ad27469e1a9fd4affc28701d3f95554cb2f6bcd
  • alt-ruby31-rubygem-minitest_5.15.0-14_arm64.deb
    sha:b332cf095e7f418e9a437e5bd6d9c651bf0e9dd4
  • alt-ruby31-rubygem-power-assert_2.0.1-14_arm64.deb
    sha:71064d937d1024b9038c6a804f636cecafed220b
  • alt-ruby31-rubygem-psych_4.0.4-14_arm64.deb
    sha:e02b2dfdc3195a1c59cd1fa13539415591c088b9
  • alt-ruby31-rubygem-rake_13.0.6-14_arm64.deb
    sha:7f4748d9d24c0f0ecb99fe787c0fda2be2b7b96a
  • alt-ruby31-rubygem-rbs_2.7.0-14_arm64.deb
    sha:ae55710b1dcf1f322313a5f1292d057c6332fc4c
  • alt-ruby31-rubygem-rdoc_6.4.1.1-14_arm64.deb
    sha:63cc4512540970e5a8a3c1ab16383d283ecdf513
  • alt-ruby31-rubygem-rexml_3.3.9-14_arm64.deb
    sha:cba8fc17986fd37c0c588ebecb9ca3d25e7fbb04
  • alt-ruby31-rubygem-rss_0.3.1-14_arm64.deb
    sha:a878ea394968b64367c682b695470402ebb846e5
  • alt-ruby31-rubygem-test-unit_3.5.3-14_arm64.deb
    sha:f9c9e362236626e3fd57da8bc18b68a50aac52f8
  • alt-ruby31-rubygem-typeprof_0.21.3-14_arm64.deb
    sha:d8134d9deda2c059b6876dd5757f56adca9dce3e
  • alt-ruby31-rubygems_3.3.27-14_arm64.deb
    sha:8f6d07e5d66052ca100731e18300f75688e006ee
  • alt-ruby31-rubygems-devel_3.3.27-14_arm64.deb
    sha:d82f1150c9023dd4f1033ad4234e4fbcfbd73353
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.