[CLSA-2026:1789568099] Fix CVE(s): CVE-2026-80212, CVE-2026-80213
Type:
security
Severity:
Important
Release date:
2026-09-16 14:15:10 UTC
Description:
* SECURITY UPDATE: resolv memory exhaustion via unknown DNS resource types - debian/patches/CVE-2026-80212.patch: stop permanently registering generated Resource::Generic classes (Generic constants and Resource::ClassHash entries) for every unknown DNS (type, class) pair, and compare generic records by TypeValue/ClassValue instead of class identity; backport of upstream ruby/resolv 23f0009 (resolv 0.3.2 / 0.7.2) - Behaviour change inherited from upstream: a class obtained from Resource::Generic.create(type, class) is no longer registered, so Resolv::DNS#getresources(name, Generic.create(type, class)) now returns an empty list where it used to return the matching records; records of unknown types are still decoded as Resource::Generic - CVE-2026-80212 * SECURITY UPDATE: resolv hostname validation bypass via unchecked DNS name limits - debian/patches/CVE-2026-80213.patch: enforce the 63-octet label and 255-octet encoded-name limits when encoding, cap character- strings at 255 octets and report out-of-range length octets as DecodeError, so an over-long label can no longer wrap its length octet and resolve a different name; backport of upstream ruby/resolv b0ddbb5 (resolv 0.3.2 / 0.7.2) - CVE-2026-80213
Updated packages:
  • alt-ruby32_3.2.11-15_amd64.deb
    sha:b3a13d88a10d476042530a8eafe2e726e6620825
  • alt-ruby32-bundled-gems_3.2.11-15_amd64.deb
    sha:453e8381f8ab51cc7167b63f1881ffdb8a27fd74
  • alt-ruby32-default-gems_3.2.11-15_amd64.deb
    sha:41641ee72736ea768dd0defb9ab104ae772efb6d
  • alt-ruby32-devel_3.2.11-15_amd64.deb
    sha:a6c023dda33a998774f2e7812a0335a8fae90b48
  • alt-ruby32-doc_3.2.11-15_amd64.deb
    sha:e5113462d40305b71b5f338e0953faa0d735f408
  • alt-ruby32-libs_3.2.11-15_amd64.deb
    sha:edfa21022db6286bfed9834e03f53c39b511a3c1
  • alt-ruby32-rubygem-bigdecimal_3.1.3-15_amd64.deb
    sha:1144d8c3a3aa65ace3005705da08f5ddcc5f4393
  • alt-ruby32-rubygem-bundler_2.4.19-15_amd64.deb
    sha:e17dacb0495ed3204081a246f41ef99a6897987a
  • alt-ruby32-rubygem-io-console_0.6.0-15_amd64.deb
    sha:ab634d57b17249f4ba8b6d8fca9e5844d3dcfaef
  • alt-ruby32-rubygem-irb_1.6.2-15_amd64.deb
    sha:c538377b8b773b332e280fe9641b5ad42cbb2509
  • alt-ruby32-rubygem-json_2.6.3-15_amd64.deb
    sha:8d146583bc903e1963296d4c15ac1f90ed4bf9f1
  • alt-ruby32-rubygem-minitest_5.25.1-15_amd64.deb
    sha:f398b0e908f663a5470ea99e0a8fe8d50b3035af
  • alt-ruby32-rubygem-power-assert_2.0.3-15_amd64.deb
    sha:a612577557bce1a91e426199d38d6f53a1745bbd
  • alt-ruby32-rubygem-psych_5.0.1-15_amd64.deb
    sha:601e90d93f80e339a469d5dd5f044e77698b47a9
  • alt-ruby32-rubygem-rake_13.0.6-15_amd64.deb
    sha:7fb7e161527b8b016c44ca628509608156e6b883
  • alt-ruby32-rubygem-rbs_2.8.2-15_amd64.deb
    sha:504999768da8e9f7d49a1f800b81c262aff3be50
  • alt-ruby32-rubygem-rdoc_6.5.1.1-15_amd64.deb
    sha:513a971b0a6e70d4115db47aee35b373e0e01536
  • alt-ruby32-rubygem-rexml_3.4.4-15_amd64.deb
    sha:66a48336e80ca8fe164dbc25ff88e89d89892250
  • alt-ruby32-rubygem-rss_0.3.1-15_amd64.deb
    sha:c83557373b77a1c2c5b74cc778f958e4a74c14fd
  • alt-ruby32-rubygem-test-unit_3.5.7-15_amd64.deb
    sha:cd3fd03da4fdb5109db3f865be05734033c44443
  • alt-ruby32-rubygem-typeprof_0.21.3-15_amd64.deb
    sha:e06961137968ef855d675abc529d6b5cc6135a3c
  • alt-ruby32-rubygems_3.4.19-15_amd64.deb
    sha:d1a26e05f9904708e52f07298232f4be978499fb
  • alt-ruby32-rubygems-devel_3.4.19-15_amd64.deb
    sha:04c711f154c92fca019d89e31f69076ca7239e77
  • alt-ruby32_3.2.11-15_arm64.deb
    sha:ea633d7e243253a75a3f7763afae1e975a56d9ed
  • alt-ruby32-bundled-gems_3.2.11-15_arm64.deb
    sha:53a13941991b87a7c8f348b6231339b84d315448
  • alt-ruby32-default-gems_3.2.11-15_arm64.deb
    sha:b6497dfd6052ef606b3246305d31cd15424b8860
  • alt-ruby32-devel_3.2.11-15_arm64.deb
    sha:531b0d9f62c0e31e4d6ae2de984e765b80f3a4e8
  • alt-ruby32-doc_3.2.11-15_arm64.deb
    sha:1841b18aacc9a297c4250264c547394d70d4d2b9
  • alt-ruby32-libs_3.2.11-15_arm64.deb
    sha:8ae162ddc36fb6309ec43d4b17f708f2c39c57c1
  • alt-ruby32-rubygem-bigdecimal_3.1.3-15_arm64.deb
    sha:1f6c2d033d2c13f133135715e556e56c1af912a1
  • alt-ruby32-rubygem-bundler_2.4.19-15_arm64.deb
    sha:fb155e067745bad7775feaae638c1a44c181a916
  • alt-ruby32-rubygem-io-console_0.6.0-15_arm64.deb
    sha:d2d67610904d88796c5f54bc0fee62a5027ba227
  • alt-ruby32-rubygem-irb_1.6.2-15_arm64.deb
    sha:b651621cd7157af68c22129e2bf07663b8725895
  • alt-ruby32-rubygem-json_2.6.3-15_arm64.deb
    sha:14b340fe13e7de983a2d7ae48372038bad2e49f0
  • alt-ruby32-rubygem-minitest_5.25.1-15_arm64.deb
    sha:671d24fd83f756cb225c623d129095fe38303c18
  • alt-ruby32-rubygem-power-assert_2.0.3-15_arm64.deb
    sha:8e3dde47ad0ffbeffe01c960a53f99b418335674
  • alt-ruby32-rubygem-psych_5.0.1-15_arm64.deb
    sha:4b78e1bc22eff2d3f2ada6f5785dd4e4b85426c8
  • alt-ruby32-rubygem-rake_13.0.6-15_arm64.deb
    sha:a9f1238c5d2edf8a2649954614b44c303683a1cd
  • alt-ruby32-rubygem-rbs_2.8.2-15_arm64.deb
    sha:5975dfc84a7ef9e20b3215f7df4cbb4ec870815c
  • alt-ruby32-rubygem-rdoc_6.5.1.1-15_arm64.deb
    sha:9904331031f8b2a4b48e15ca38e6f8d7418985ef
  • alt-ruby32-rubygem-rexml_3.4.4-15_arm64.deb
    sha:17f5bd8968f84a3fe0379ef1120114ee55b95e0c
  • alt-ruby32-rubygem-rss_0.3.1-15_arm64.deb
    sha:bc253e495377fa8968dc0f127296cef343d9dcf2
  • alt-ruby32-rubygem-test-unit_3.5.7-15_arm64.deb
    sha:0beec12d9e488e0f0baf334b9b5beaa4379adfd2
  • alt-ruby32-rubygem-typeprof_0.21.3-15_arm64.deb
    sha:1172a74154c5b8884727d18db685975483a1694f
  • alt-ruby32-rubygems_3.4.19-15_arm64.deb
    sha:1a866de4e3e9e04e33d830ff6afd5b59db52f567
  • alt-ruby32-rubygems-devel_3.4.19-15_arm64.deb
    sha:492d05d6f9369dee09f602196213686a77df412d
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.