c-ares/c-ares-1.19.1.tar.gz.asc
Adam Majer dd6f9f454c - Update to version 1.19.1
Security:
  * CVE-2023-32067. High. 0-byte UDP payload causes Denial of Service
    (bsc#1211604)
  * CVE-2023-31147 Moderate. Insufficient randomness in generation
    of DNS query IDs (bsc#1211605)
  * CVE-2023-31130. Moderate. Buffer Underwrite in
    ares_inet_net_pton() (bsc#1211606)
  * CVE-2023-31124. Low. AutoTools does not set CARES_RANDOM_FILE
    during cross compilation (bsc#1211607)
  Bug fixes:
  * Fix uninitialized memory warning in test
  * ares_getaddrinfo() should allow a port of 0
  * Fix memory leak in ares_send() on error
  * Fix comment style in ares_data.h
  * Fix typo in ares_init_options.3
  * Sync ax_pthread.m4 with upstream
  * Sync ax_cxx_compile_stdcxx_11.m4 with upstream to fix uclibc support

OBS-URL: https://build.opensuse.org/package/show/devel:libraries:c_c++/c-ares?expand=0&rev=50
2023-05-22 14:02:45 +00:00

12 lines
488 B
Plaintext

-----BEGIN PGP SIGNATURE-----
iQEzBAABCgAdFiEEJ+3q8i86vOtQ25oSXMkI/bceEsIFAmRrXuwACgkQXMkI/bce
EsKdGgf9EP41uA/RWuaXGaRhUjlUasGGwUFntEkcOjLtxZNwLXkdE2d3NOIVeiVR
HG6Dto+20ygqorDsHnLHH8iOyER3g/aRDtzY95uE6t4UBA69NOcWhO0H28t5NG1y
q+OUI4zcbLn78UddF5vMNoUrVt5eZf5x+EgnpPldn86cAmT8+2KZ1+LiI3XpzEbK
L4+VpkqrSEdSVMN4qqzzQCsC2jxgQuDgZe6as+cf4Bsf6upQT6iH4f+O9+cPFObM
p0LvdyTWDOXiosjyWuWoYat0LdEcExYjNFEh9V3+drkjUNXJ3HvcyBottQQBUsNV
PGGrIY76CXzqOYv+j/0us7400RQD9A==
=J2nY
-----END PGP SIGNATURE-----