c-ares 1.18.1-1ubuntu0.22.04.2 source package in Ubuntu

Changelog

c-ares (1.18.1-1ubuntu0.22.04.2) jammy-security; urgency=medium

  * SECURITY UPDATE: buffer underflow on certain ipv6 addresses
    - debian/patches/CVE-2023-31130.diff: add newer inet_net_pton_ipv6()
      and fix test cases in src/lib/inet_net_pton.c,
      test/ares-test-internal.cc.
    - CVE-2023-31130
  * SECURITY UPDATE: denial of service via 0-byte UDP payload
    - debian/patches/CVE-2023-32067.diff: check length in
      src/lib/ares_process.c.
    - CVE-2023-32067

 -- Marc Deslauriers <email address hidden>  Mon, 12 Jun 2023 14:43:33 -0400

Upload details

Uploaded by:
Marc Deslauriers
Uploaded to:
Jammy
Original maintainer:
Ubuntu Developers
Architectures:
any
Section:
libs
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
c-ares_1.18.1.orig.tar.gz 1.5 MiB 1a7d52a8a84a9fbffb1be9133c0f6e17217d91ea5a6fa61f6b4729cda78ebbcf
c-ares_1.18.1.orig.tar.gz.asc 488 bytes e5a8a7bb13f77833b3cbce1865d2521e07e7b8011eda414fc8934f4b816e5523
c-ares_1.18.1-1ubuntu0.22.04.2.debian.tar.xz 12.9 KiB 6a89db84faf39e158d5c58e71b571cdf0faf0ad5dd7285b6b151b429b90ef6a0
c-ares_1.18.1-1ubuntu0.22.04.2.dsc 2.2 KiB 6d03cfddbbf47e86052f626a1d4c1fc73ba1b9a8c337ed5aa78895971f22c994

View changes file

Binary packages built by this source

libc-ares-dev: asynchronous name resolver - development files

 c-ares is a C library that performs DNS requests and name resolution
 asynchronously.
 .
 It is a fork of the library named "ares", with additional features:
  * IPv6 support;
  * extended cross-platform portability;
  * 64-bit clean sources.
 .
 This package contains development files (headers and static libraries).

libc-ares2: asynchronous name resolver

 c-ares is a C library that performs DNS requests and name resolution
 asynchronously.
 .
 It is a fork of the library named "ares", with additional features:
  * IPv6 support;
  * extended cross-platform portability;
  * 64-bit clean sources.
 .
 This package provides the shared libraries.

libc-ares2-dbgsym: debug symbols for libc-ares2