Bugs fixes in "c-ares"
| Origin | Bug number | Title | Date fixed |
|---|---|---|---|
| CVE | CVE-2026-69184 | c-ares is an asynchronous resolver library. Prior to 1.34.7, ares_dns_name_parse() enforces backward DNS compression pointers but does not bound the | 2026-10-21 |
| CVE | CVE-2026-69184 | c-ares is an asynchronous resolver library. Prior to 1.34.7, ares_dns_name_parse() enforces backward DNS compression pointers but does not bound the | 2026-10-21 |
| CVE | CVE-2026-69186 | c-ares is an asynchronous resolver library. Prior to 1.34.7, ares_dns_parse() trusts the attacker-controlled ANCOUNT, NSCOUNT, and ARCOUNT fields bef | 2026-10-21 |
| CVE | CVE-2026-69184 | c-ares is an asynchronous resolver library. Prior to 1.34.7, ares_dns_name_parse() enforces backward DNS compression pointers but does not bound the | 2026-10-21 |
| CVE | CVE-2026-69186 | c-ares is an asynchronous resolver library. Prior to 1.34.7, ares_dns_parse() trusts the attacker-controlled ANCOUNT, NSCOUNT, and ARCOUNT fields bef | 2026-10-21 |
| CVE | CVE-2026-69184 | c-ares is an asynchronous resolver library. Prior to 1.34.7, ares_dns_name_parse() enforces backward DNS compression pointers but does not bound the | 2026-10-21 |
| CVE | CVE-2026-69186 | c-ares is an asynchronous resolver library. Prior to 1.34.7, ares_dns_parse() trusts the attacker-controlled ANCOUNT, NSCOUNT, and ARCOUNT fields bef | 2026-10-21 |
| CVE | CVE-2026-33630 | c-ares is an asynchronous resolver library. From ver 1.32.3 until 1.34.7, a use-after-free / double-free in c-ares' query-completion handling. The sa | 2026-09-29 |
| CVE | CVE-2026-33630 | c-ares is an asynchronous resolver library. From ver 1.32.3 until 1.34.7, a use-after-free / double-free in c-ares' query-completion handling. The sa | 2026-09-29 |
| CVE | CVE-2026-33630 | c-ares is an asynchronous resolver library. From ver 1.32.3 until 1.34.7, a use-after-free / double-free in c-ares' query-completion handling. The sa | 2026-09-29 |
| CVE | CVE-2026-33630 | c-ares is an asynchronous resolver library. From ver 1.32.3 until 1.34.7, a use-after-free / double-free in c-ares' query-completion handling. The sa | 2026-09-29 |
| CVE | CVE-2025-62408 | c-ares is an asynchronous resolver library. Versions 1.32.3 through 1.34.5 terminate a query after maximum attempts when using read_answer() and pro | 2025-12-11 |
| CVE | CVE-2025-62408 | c-ares is an asynchronous resolver library. Versions 1.32.3 through 1.34.5 terminate a query after maximum attempts when using read_answer() and pro | 2025-12-11 |
| CVE | CVE-2025-62408 | c-ares is an asynchronous resolver library. Versions 1.32.3 through 1.34.5 terminate a query after maximum attempts when using read_answer() and pro | 2025-12-11 |
| CVE | CVE-2025-62408 | c-ares is an asynchronous resolver library. Versions 1.32.3 through 1.34.5 terminate a query after maximum attempts when using read_answer() and pro | 2025-12-11 |
| CVE | CVE-2025-31498 | c-ares is an asynchronous resolver library. From 1.32.3 through 1.34.4, there is a use-after-free in read_answers() when process_answer() may re-enqu | 2025-05-05 |
| CVE | CVE-2025-31498 | c-ares is an asynchronous resolver library. From 1.32.3 through 1.34.4, there is a use-after-free in read_answers() when process_answer() may re-enqu | 2025-05-05 |
| CVE | CVE-2025-31498 | c-ares is an asynchronous resolver library. From 1.32.3 through 1.34.4, there is a use-after-free in read_answers() when process_answer() may re-enqu | 2025-05-05 |
| CVE | CVE-2025-31498 | c-ares is an asynchronous resolver library. From 1.32.3 through 1.34.4, there is a use-after-free in read_answers() when process_answer() may re-enqu | 2025-05-05 |
| CVE | CVE-2024-25629 | c-ares is a C library for asynchronous DNS requests. `ares__read_line()` is used to parse local configuration files such as `/etc/resolv.conf`, `/etc | 2024-03-06 |
About
-
Send Feedback to @ubuntu_updates
