UbuntuUpdates.org

Package "c-ares"

Name: c-ares

Description:

This package is just an umbrella for a group of other packages, it has no description.
Description samples from packages in group:

  • asynchronous name resolver - development files
  • asynchronous name resolver
Latest version: 1.34.6-1ubuntu0.1
Release: resolute (26.04)
Level: security
Repository: main

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Other versions of "c-ares" in Resolute

Repository Area Version
base main 1.34.6-1
base universe 1.34.6-1
security universe 1.34.6-1ubuntu0.1

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 1.34.6-1ubuntu0.1 2026-09-29 16:07:09 UTC

c-ares (1.34.6-1ubuntu0.1) resolute-security; urgency=medium

  * SECURITY UPDATE: Use-after-free/double-free in query-completion handling
    - debian/patches/CVE-2026-33630.patch: Fix double-free and consolidate
      requeue handling in src/lib/ares_process.c, test/ares-test-mock.cc.
    - CVE-2026-33630

 -- Shafayat Hossain Majumder Fri, 25 Sep 2026 13:26:32 -0400
CVE-2026-33630 c-ares is an asynchronous resolver library. From ver 1.32.3 until 1.34.7, a use-after-free / double-free in c-ares' query-completion handling. The sa


About   -   Send Feedback to @ubuntu_updates