网安资讯详情 - SecLens 情报雷达

ALINUX4-SA-2026:0309

来源： alibaba_cloud_linux_advisory · 发布时间 2026-07-23 16:07 (UTC+08:00) · 抓取时间 2026-07-23 18:00 (UTC+08:00)

原文链接

摘要

Package updates are available for Alibaba Cloud Linux 4 that fix the following vulnerabilities: CVE-2025-61729: Within HostnameError.Error(), when constructing an error string, there is no limit to the number of hosts that will be printed out. Furthermore, the error string is constructed by repeated string concatenation, leading to quadratic runtime. Therefore, a certificate provided by a malicious actor can result in excessive resource consumption. **Solution**: 请您尽快将升级到修复后的版本。修复命令如下： yum update --advisory ALINUX4-SA-2026:0309 **Affected Products**: Alinux 4

正文

Package updates are available for Alibaba Cloud Linux 4 that fix the following vulnerabilities: CVE-2025-61729: Within HostnameError.Error(), when constructing an error string, there is no limit to the number of hosts that will be printed out. Furthermore, the error string is constructed by repeated string concatenation, leading to quadratic runtime. Therefore, a certificate provided by a malicious actor can result in excessive resource consumption.

标签

• cve:cve-2025-61729
• severity:important
• type:advisory
• vendor:alibaba

扩展字段

{
  "advisory_id": "ALINUX4-SA-2026:0309",
  "affected_products": [
    "Alinux 4"
  ],
  "cve_ids": [
    "CVE-2025-61729"
  ],
  "raw_pub_date": "Thu, 23 Jul 2026 16:07:28 +0800",
  "solution": "请您尽快将升级到修复后的版本。修复命令如下：\nyum update --advisory ALINUX4-SA-2026:0309"
}