Debian
c-ares package

c-ares 1.14.0-1+deb10u1 source package in Debian

Changelog

c-ares (1.14.0-1+deb10u1) buster-security; urgency=high

  * Non-maintainer upload by the Security Team.
  * Missing input validation on hostnames returned by DNS servers
    (CVE-2021-3672)
    - ares_expand_name() should escape more characters
    - ares_expand_name(): fix formatting and handling of root name response

 -- Salvatore Bonaccorso <email address hidden>  Sat, 07 Aug 2021 13:02:07 +0200

Upload details

Uploaded by:
Gregor Jasny
Uploaded to:
Buster
Original maintainer:
Gregor Jasny
Architectures:
any
Section:
libs
Urgency:
Very Urgent

See full publishing history Publishing

Series Pocket Published Component Section
Buster release main libs

Builds

Downloads

File Size SHA-256 Checksum
c-ares_1.14.0-1+deb10u1.dsc 2.3 KiB 3519511759e5769e674e759a215cfc1688f4e984776cfc3f2d52c3b697e918ec
c-ares_1.14.0.orig.tar.gz 1.3 MiB 45d3c1fd29263ceec2afc8ff9cd06d5f8f889636eb4e80ce3cc7f0eaf7aadc6e
c-ares_1.14.0.orig.tar.gz.asc 488 bytes d84d42c725ef5a9d34835806200c04652b2139f9fb46828c92573a04a6c83288
c-ares_1.14.0-1+deb10u1.debian.tar.xz 11.1 KiB e51baf79b1f48bfca1e5c82032a3de1a8b50140b56c8a86bbac81711c08acb1e

No changes file available.

Binary packages built by this source