Bug #22268: Backport resolv security fixes (CVE-2026-80212, CVE-2026-80213)

• Status: Closed
• Assignee: -
• Target version: -
• Backport: 3.3: REQUIRED, 3.4: REQUIRED, 4.0: REQUIRED

[hsbt (Hiroshi SHIBATA)]

The resolv security releases of 2026-08-27 fix CVE-2026-80212 and CVE-2026-80213. https://www.ruby-lang.org/en/news/2026/08/27/multiple-vulnerabilities-in-resolv/

resolv is a default gem. master already has the fixes through the automatic sync from ruby/resolv, but the stable branches do not.

Branch	Current	Target	PR
ruby_4_0	0.7.0	0.7.2	https://github.com/ruby/ruby/pull/18528
ruby_3_4	0.7.1	0.7.2	https://github.com/ruby/ruby/pull/18529
ruby_3_3	0.3.1	0.3.2	https://github.com/ruby/ruby/pull/18530

[k0kubun (Takashi Kokubun)]

• Status changed from Open to Closed