[Forgot Password]
Login  Register Subscribe

30481

 
 

423868

 
 

256288

 
 

909

 
 

199146

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

SUSE-SU-2021:2760-1 -- SLES c-ares, libcares2

ID: oval:org.secpod.oval:def:89045517Date: (C)2021-08-23   (M)2024-01-08
Class: PATCHFamily: unix




This update for c-ares fixes the following issues: Version update to git snapshot 1.17.1+20200724: - CVE-2021-3672: fixed missing input validation on hostnames returned by DNS servers - If ares_getaddrinfo was terminated by an ares_destroy, it would cause crash - Crash in sortaddrinfo if the list size equals 0 due to an unexpected DNS response - Expand number of escaped characters in DNS replies as per RFC1035 5.1 to prevent spoofing - Use unbuffered /dev/urandom for random data to prevent early startup performance issues

Platform:
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Server 15 SP1
Product:
c-ares
libcares2
Reference:
SUSE-SU-2021:2760-1
CVE-2021-3672
CVE    1
CVE-2021-3672

© SecPod Technologies