Critical Denial of Service Vulnerability in rubygem-abrt: Important Security Update Required
Summary
RLSA-2026:72285: Important: ruby:3.3 security update. Affects rubygem-abrt across 7 version ranges.
< 0:0.4.0-1.module+el8.10.0+1679+61871737
< 0:0.4.0-1.module+el8.10.0+1820+f3fffb92
< 0:0.4.0-1.module+el8.10.0+1826+b62220b4
< 0:0.4.0-1.module+el8.9.0+1537+0b2034bd
< 0:0.4.0-1.module+el8.10.0+1741+bdb5b6ca
< 0:0.4.0-1.module+el8.10.0+1827+16ecb9d2
< 0:0.4.0-1.module+el8.5.0+668+665814fa
Fixed in 7 releases; the minimum fixed version depends on the release line you run. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Ruby is an extensible, interpreted, object-oriented scripting language widely used for web development and system management tasks. The rubygem-abrt package is a Ruby gem that provides a framework for handling application crashes and reporting them. This package is crucial for maintaining application stability and ensuring that errors are reported effectively. However, it has been identified to have a security vulnerability that could lead to denial of service, making it essential for users to update to the latest patched version.
Vulnerability Detail
The vulnerability, identified as CVE-2026-80212, arises from the resolv gem within Ruby, which is susceptible to denial of service attacks due to uncontrolled memory growth when processing crafted DNS responses. This means that an attacker could exploit this vulnerability to cause the application to consume excessive memory, potentially leading to application crashes or unresponsiveness. The CVSS score for this vulnerability is 7.5, indicating a high severity level that necessitates immediate attention.
How To Fix
Fixed versions by release line
The minimum fixed version depends on the release line you run.
sudo dnf update rubygem-abrt-
< 0:0.4.0-1.module+el8.5.0+668+665814fa0:0.4.0-1.module+el8.5.0+668+665814fa -
< 0:0.4.0-1.module+el8.9.0+1537+0b2034bd0:0.4.0-1.module+el8.9.0+1537+0b2034bd -
< 0:0.4.0-1.module+el8.10.0+1679+618717370:0.4.0-1.module+el8.10.0+1679+61871737 -
< 0:0.4.0-1.module+el8.10.0+1741+bdb5b6ca0:0.4.0-1.module+el8.10.0+1741+bdb5b6ca -
< 0:0.4.0-1.module+el8.10.0+1820+f3fffb920:0.4.0-1.module+el8.10.0+1820+f3fffb92 -
< 0:0.4.0-1.module+el8.10.0+1826+b62220b40:0.4.0-1.module+el8.10.0+1826+b62220b4
Show all 7 release lines
-
< 0:0.4.0-1.module+el8.10.0+1827+16ecb9d20:0.4.0-1.module+el8.10.0+1827+16ecb9d2
Tip — Not sure which release line you're on? Vulert can find the fix for the version you are using. Scan free →
Workaround
As a temporary workaround, users can limit the DNS responses processed by the application or implement rate limiting on DNS queries to reduce the risk of memory exhaustion. However, this is not a permanent solution and updating the package is strongly recommended.
Conclusion
The rubygem-abrt package has a critical vulnerability that can lead to denial of service, necessitating immediate updates to the patched version. Users are encouraged to follow the outlined steps to secure their applications and utilize tools like Vulert for ongoing vulnerability monitoring.
See every vulnerability recorded for rubygem-abrt →
FAQ
CVE-2026-80212 is a vulnerability in the resolv gem of Ruby that can lead to denial of service due to uncontrolled memory growth from crafted DNS responses.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
The CVSS score for this vulnerability is 7.5, indicating a high severity level that requires immediate action.
You should update the rubygem-abrt package to the latest patched version using the command 'sudo dnf update rubygem-abrt'.
Yes, Vulert can monitor and alert you in real-time for open-source vulnerabilities in your software using just a manifest file like package-lock.json.
Related vulnerabilities
Recent vulnerabilities recorded for rubygem-abrt.
