bundler: The attack vector is a potential Denial of Service (DoS)

The attack vector is a potential Denial of Service (DoS). The vulnerabilityis caused by an insufficient check on the length of a decompressed domainname within a DNS packet.An attacker can craft a malicious DNS packet containing a highly compresseddomain name. When the resolv library parses such a packet, the namedecompression process consumes a large amount of CPU resources, as thelibrary does not limit the resulting length of the name.This resource consumption can cause the application thread to becomeunresponsive, resulting in a Denial of Service condition.

Where it's fixed