Ubuntu
c-ares package

c-ares 1.15.0-1ubuntu0.3 source package in Ubuntu

Changelog

c-ares (1.15.0-1ubuntu0.3) focal-security; urgency=medium

  * SECURITY UPDATE: buffer underflow on certain ipv6 addresses
    - debian/patches/CVE-2023-31130.diff: add newer inet_net_pton_ipv6()
      and fix test cases in inet_net_pton.c, test/ares-test-internal.cc.
    - CVE-2023-31130
  * SECURITY UPDATE: denial of service via 0-byte UDP payload
    - debian/patches/CVE-2023-32067.diff: check length in ares_process.c.
    - CVE-2023-32067

 -- Marc Deslauriers <email address hidden>  Mon, 12 Jun 2023 14:45:23 -0400

Upload details

Uploaded by:
Marc Deslauriers
Uploaded to:
Focal
Original maintainer:
Ubuntu Developers
Architectures:
any
Section:
libs
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
c-ares_1.15.0.orig.tar.gz 1.3 MiB 6cdb97871f2930530c97deb7cf5c8fa4be5a0b02c7cea6e7c7667672a39d6852
c-ares_1.15.0.orig.tar.gz.asc 488 bytes 39cc1f98533c065b80d98d08bcc1d0d37f2bbb67af3a6c9b5a6ff7c2490bf58c
c-ares_1.15.0-1ubuntu0.3.debian.tar.xz 13.6 KiB cfdcbcc9990abddfe9f6bb52e5a150d1a6969d93fd36d70d0e93bb067ba2b592
c-ares_1.15.0-1ubuntu0.3.dsc 2.2 KiB 7ce64ba4c417b34812aec111779aaab1a3371c7f251b4a317df5215941f08b20

View changes file

Binary packages built by this source

libc-ares-dev: asynchronous name resolver - development files

 c-ares is a C library that performs DNS requests and name resolution
 asynchronously.
 .
 It is a fork of the library named "ares", with additional features:
  * IPv6 support;
  * extended cross-platform portability;
  * 64-bit clean sources.
 .
 This package contains development files (headers and static libraries).

libc-ares2: asynchronous name resolver

 c-ares is a C library that performs DNS requests and name resolution
 asynchronously.
 .
 It is a fork of the library named "ares", with additional features:
  * IPv6 support;
  * extended cross-platform portability;
  * 64-bit clean sources.
 .
 This package provides the shared libraries.

libc-ares2-dbgsym: debug symbols for libc-ares2