Summary
[4.0.6-37]
- Fix resolv: do not register on-demand classes for unknown DNS
types and SvcParamKeys to prevent memory exhaustion
(CVE-2026-80212)
Resolves: RHEL-252032
Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 10 | ruby4.0 | 0:4.0.6-37.el10_2 |
| Oracle Linux · 10 | ruby4.0-devel | 0:4.0.6-37.el10_2 |
| Oracle Linux · 10 | ruby4.0-doc | 0:4.0.6-37.el10_2 |
| Oracle Linux · 10 | ruby4.0-rubygem-mysql2 | 0:0.5.7-37.el10_2 |
| Oracle Linux · 10 | ruby4.0-rubygem-pg | 0:1.6.3-37.el10_2 |
Vulnerabilities 1
-
High 7.5
An issue was discovered in the resolv gem before 0.7.2 for Ruby. Resolv::DNS::Resource.get_class, Resolv::DNS::Resource…