Bug #22268: Backport resolv security fixes (CVE-2026-80212, CVE-2026-80213)

• Status: Closed
• Assignee: -
• Target version: -
• Backport: 3.3: REQUIRED, 3.4: DONE, 4.0: REQUIRED

[hsbt (Hiroshi SHIBATA)]

The resolv security releases of 2026-08-27 fix CVE-2026-80212 and CVE-2026-80213. https://www.ruby-lang.org/en/news/2026/08/27/multiple-vulnerabilities-in-resolv/

resolv is a default gem. master already has the fixes through the automatic sync from ruby/resolv, but the stable branches do not.

Branch	Current	Target	PR
ruby_4_0	0.7.0	0.7.2	https://github.com/ruby/ruby/pull/18528
ruby_3_4	0.7.1	0.7.2	https://github.com/ruby/ruby/pull/18529
ruby_3_3	0.3.1	0.3.2	https://github.com/ruby/ruby/pull/18530

[k0kubun (Takashi Kokubun)]

• Status changed from Open to Closed

[nagachika (Tomoyuki Chikanaga)]

• Backport changed from 3.3: REQUIRED, 3.4: REQUIRED, 4.0: REQUIRED to 3.3: REQUIRED, 3.4: DONE, 4.0: REQUIRED

Thank you for creating PR. merged into ruby_3_4 at 6deacfb8275bd1583ffa1b8c2b87f25484586a91.