c-ares 1.18.1-1ubuntu0.22.10.2 source package in Ubuntu

Changelog

c-ares (1.18.1-1ubuntu0.22.10.2) kinetic-security; urgency=medium

  * SECURITY UPDATE: buffer underflow on certain ipv6 addresses
    - debian/patches/CVE-2023-31130.diff: add newer inet_net_pton_ipv6()
      and fix test cases in src/lib/inet_net_pton.c,
      test/ares-test-internal.cc.
    - CVE-2023-31130
  * SECURITY UPDATE: denial of service via 0-byte UDP payload
    - debian/patches/CVE-2023-32067.diff: check length in
      src/lib/ares_process.c.
    - CVE-2023-32067

 -- Marc Deslauriers <email address hidden>  Mon, 12 Jun 2023 14:43:01 -0400

Upload details

Uploaded by:
Marc Deslauriers
Uploaded to:
Kinetic
Original maintainer:
Ubuntu Developers
Architectures:
any
Section:
libs
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section
Kinetic updates main libs
Kinetic security main libs

Downloads

File Size SHA-256 Checksum
c-ares_1.18.1.orig.tar.gz 1.5 MiB 1a7d52a8a84a9fbffb1be9133c0f6e17217d91ea5a6fa61f6b4729cda78ebbcf
c-ares_1.18.1.orig.tar.gz.asc 488 bytes e5a8a7bb13f77833b3cbce1865d2521e07e7b8011eda414fc8934f4b816e5523
c-ares_1.18.1-1ubuntu0.22.10.2.debian.tar.xz 12.9 KiB 54cd91584d2a64ca5ca4386e10450e9b4c96c7ebbc2d691abaada77d256e5442
c-ares_1.18.1-1ubuntu0.22.10.2.dsc 2.2 KiB 35dddf7371504a2ed8cc44220c02c3d59ee7830c8a3ddf65fd06948493a515ec

View changes file

Binary packages built by this source

libc-ares-dev: asynchronous name resolver - development files

 c-ares is a C library that performs DNS requests and name resolution
 asynchronously.
 .
 It is a fork of the library named "ares", with additional features:
  * IPv6 support;
  * extended cross-platform portability;
  * 64-bit clean sources.
 .
 This package contains development files (headers and static libraries).

libc-ares2: asynchronous name resolver

 c-ares is a C library that performs DNS requests and name resolution
 asynchronously.
 .
 It is a fork of the library named "ares", with additional features:
  * IPv6 support;
  * extended cross-platform portability;
  * 64-bit clean sources.
 .
 This package provides the shared libraries.

libc-ares2-dbgsym: debug symbols for libc-ares2