Ubuntu
c-ares package

c-ares 1.18.1-2ubuntu0.1 source package in Ubuntu

Changelog

c-ares (1.18.1-2ubuntu0.1) lunar-security; urgency=medium

  * SECURITY UPDATE: buffer underflow on certain ipv6 addresses
    - debian/patches/CVE-2023-31130.diff: add newer inet_net_pton_ipv6()
      and fix test cases in src/lib/inet_net_pton.c,
      test/ares-test-internal.cc.
    - CVE-2023-31130
  * SECURITY UPDATE: denial of service via 0-byte UDP payload
    - debian/patches/CVE-2023-32067.diff: check length in
      src/lib/ares_process.c.
    - CVE-2023-32067

 -- Marc Deslauriers <email address hidden>  Mon, 12 Jun 2023 14:39:02 -0400

Upload details

Uploaded by:
Marc Deslauriers
Uploaded to:
Lunar
Original maintainer:
Ubuntu Developers
Architectures:
any
Section:
libs
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section
Lunar updates main libs
Lunar security main libs

Downloads

File Size SHA-256 Checksum
c-ares_1.18.1.orig.tar.gz 1.5 MiB 1a7d52a8a84a9fbffb1be9133c0f6e17217d91ea5a6fa61f6b4729cda78ebbcf
c-ares_1.18.1.orig.tar.gz.asc 488 bytes e5a8a7bb13f77833b3cbce1865d2521e07e7b8011eda414fc8934f4b816e5523
c-ares_1.18.1-2ubuntu0.1.debian.tar.xz 12.5 KiB 82bda42ea006978594733ec06c415db4a6cacc68c3f9cc9771b60945d3bcd17e
c-ares_1.18.1-2ubuntu0.1.dsc 2.2 KiB d1733508ac050d528935d5042496712ec2a688ffa61d7a3d7d8173fecd80dbb2

View changes file

Binary packages built by this source

libc-ares-dev: asynchronous name resolver - development files

 c-ares is a C library that performs DNS requests and name resolution
 asynchronously.
 .
 It is a fork of the library named "ares", with additional features:
  * IPv6 support;
  * extended cross-platform portability;
  * 64-bit clean sources.
 .
 This package contains development files (headers and static libraries).

libc-ares2: asynchronous name resolver

 c-ares is a C library that performs DNS requests and name resolution
 asynchronously.
 .
 It is a fork of the library named "ares", with additional features:
  * IPv6 support;
  * extended cross-platform portability;
  * 64-bit clean sources.
 .
 This package provides the shared libraries.

libc-ares2-dbgsym: debug symbols for libc-ares2