-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 30 Oct 2026 15:35:16 -0300 Source: ruby3.3 Binary: libruby3.3 libruby3.3-dbgsym ruby3.3 ruby3.3-dbgsym ruby3.3-dev Architecture: s390x Version: 3.3.13-0+deb13u1 Distribution: trixie-security Urgency: medium Maintainer: s390x Build Daemon (ziehrer) Changed-By: Lucas Kanashiro Description: libruby3.3 - Libraries necessary to run Ruby 3.3 ruby3.3 - Interpreter of object-oriented scripting language Ruby ruby3.3-dev - Header files for compiling extension modules for the Ruby 3.3 Changes: ruby3.3 (3.3.13-0+deb13u1) trixie-security; urgency=medium . * New upstream version 3.3.13. It contains the following security fixes: - resolv: + CVE-2025-24294: Fix denial of service caused by excessive CPU consumption when parsing highly compressed DNS names. + CVE-2026-80212: Fix unbounded memory consumption when processing DNS responses containing unknown resource record types. + CVE-2026-80213: Fix DNS hostname validation bypass caused by incorrectly handling DNS label and name length limits. - REXML: + CVE-2025-58767: Fix denial of service when parsing XML documents containing multiple XML declarations. - uri: + CVE-2025-61594: Fix credential leakage when combining URIs using the '+' operator. - zlib: + CVE-2026-27820: Fix buffer overflow in Zlib::GzipReader. - erb: + CVE-2026-41316: Fix deserialization guard bypass allowing arbitrary code execution through def_method, def_module and def_class. - net-imap: + CVE-2026-42245: Fix denial of service caused by quadratic processing of IMAP responses containing multiple string literals. + CVE-2026-42246: Fix STARTTLS stripping vulnerability caused by incorrect handling of IMAP server responses. + CVE-2026-42256: Fix denial of service caused by excessive iteration counts in SCRAM authentication. + CVE-2026-42257: Fix IMAP command injection through unvalidated raw command arguments. + CVE-2026-42258: Fix IMAP command injection through unvalidated Symbol arguments. + CVE-2026-47240: Fix IMAP command injection through non-synchronizing literals in raw arguments. + CVE-2026-47241: Fix denial of service caused by incomplete validation of raw IMAP command arguments. + CVE-2026-47242: Fix IMAP command injection through unvalidated arguments to the ID and ENABLE commands. - Onigmo (regular expression engine): + CVE-2026-89078: Fix a double-free vulnerability in regular expression compilation. + CVE-2026-93577: Fix an integer overflow vulnerability in regular expression compilation. + CVE-2026-97229: Fix an integer overflow vulnerability in regular expression compilation. + CVE-2026-110264: Fix an internal ID overflow vulnerability in regular expression compilation. * d/p/CVE-2025-27221_{1,2}.patch: removed, applied by upstream Checksums-Sha1: 152859ea8fb5bfe9c9fa5be9563ae09b4da4d1db 10003932 libruby3.3-dbgsym_3.3.13-0+deb13u1_s390x.deb a5f8d7ee27f331976f795ec56d9bba968963d244 5460028 libruby3.3_3.3.13-0+deb13u1_s390x.deb 2e1237e05e58d94d569961aca3d4e4c716f665ab 3608 ruby3.3-dbgsym_3.3.13-0+deb13u1_s390x.deb 005db86dd266c715cac0b248bcaaa7de04ac5a54 267752 ruby3.3-dev_3.3.13-0+deb13u1_s390x.deb 62355180a6fa87c515a595c620e58c63c5ce70d9 8025 ruby3.3_3.3.13-0+deb13u1_s390x-buildd.buildinfo 88d3fe67ca33a0389e24c6405ec69bf52170baf8 57320 ruby3.3_3.3.13-0+deb13u1_s390x.deb Checksums-Sha256: a32145ac2573308bb5535ab0418aff91d22705be60c7e6b4ea989afb955f3966 10003932 libruby3.3-dbgsym_3.3.13-0+deb13u1_s390x.deb 9dfff650c96db2f6784f792dbb6de007c1b199f76cbff6fdf308e50933f1629b 5460028 libruby3.3_3.3.13-0+deb13u1_s390x.deb 182f9a5be190c124a5f175de0ebc8037316e6f5e54e2898a12da3cf8ac19ac8f 3608 ruby3.3-dbgsym_3.3.13-0+deb13u1_s390x.deb 3cba2b36da827c6d9a9651ed38999c2427aed0afc147c64dc3d7cafa056b5691 267752 ruby3.3-dev_3.3.13-0+deb13u1_s390x.deb bdbc1c43a1e6a23fed1b4c9c3c69f7152caa5623a12b48be05573745d6fa2f20 8025 ruby3.3_3.3.13-0+deb13u1_s390x-buildd.buildinfo 914e462411c61a3cf2c33b199e11f03a4b6a6febe8a5fcb157701a7fb099a0c0 57320 ruby3.3_3.3.13-0+deb13u1_s390x.deb Files: 40f7c04da0dad6989962d501e79be13d 10003932 debug optional libruby3.3-dbgsym_3.3.13-0+deb13u1_s390x.deb b2ff4e6f634d710a4901fbbe4b88a6c4 5460028 libs optional libruby3.3_3.3.13-0+deb13u1_s390x.deb 59617944319cf8d3cd5b1c81e546783d 3608 debug optional ruby3.3-dbgsym_3.3.13-0+deb13u1_s390x.deb d3bddb7bd4a79cec5369e1073d63a9b9 267752 ruby optional ruby3.3-dev_3.3.13-0+deb13u1_s390x.deb 8d580fbdad8d769e2ff5754b1b3aa219 8025 ruby optional ruby3.3_3.3.13-0+deb13u1_s390x-buildd.buildinfo 98dc2c425e1d80392cc378e8cdbe3ddf 57320 ruby optional ruby3.3_3.3.13-0+deb13u1_s390x.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEl0BM/nR+Oj597wRWMWUFebkHnoQFAmrsiOUACgkQMWUFebkH noSXMQ/9H+QQanypRIwr/9r+Q4MMDk1C2vR1mDql6eOcSvuOn5HzmipwRs33OWdj r03md1Se9XCev6hxetvebf9mrSILs47mM/FNLfoONiNLhPQgjigluK3FV8hkZYlK IuDZGgyCprE1lGdiZ8ix5IHZ6BspNtN0NvthaKtpMvMlNi8hZXGaKBZf3Vkm2ct1 dwLV5mcOYpjNpV5GCq6hGq4/mK8nIv8eR/3sjfWJQiiNTknJPRu10GYUKUnAfk62 xYshq61Q4Nf5bK1rOoVlaGa2MJ/PoO6eR3Cp6aKzgS7QeVmTf0+o4sFl0zJeNUUv Qq9SbVFZxLF9zI8ZOipXOxFgZ4Lz4v7jK7yu7ZJ1G0qdys/Apq5UnRhFEyML43lF wLkEXcanmChVwajOifzVVb9EhLA/RDSiOTQ8XgwDYsxvhgyLGcwvoAZympXQb305 cdrTeD8fGklfDWvQKaSWUWCxSqZB4JOJnC/lJ3Hw9XEIsstbadBf4S3ga4kJbQws VWDiVBC4f0/gS3alxhhwvcdCWoc5J8p4PXEV28w3mKA+yUOTTwr7FemhtVH6jZ2j s0JivJAju68HG+eR6CGAv3hCEo4VJ7kGmG8NjkQc2TIzXiRMhc9yIMpWBYBvlkW9 yky1wfhAdcDJiq5239arfTMxl5UHOiTAv6+j3vog13csaIfhTSI= =Zqii -----END PGP SIGNATURE-----