UbuntuUpdates.org

Package "libcares2"

Name: libcares2

Description:

asynchronous name resolver

Latest version: 1.34.6-1ubuntu0.1
Release: resolute (26.04)
Level: security
Repository: main
Head package: c-ares
Homepage: https://c-ares.org/

Links


Download "libcares2"


Other versions of "libcares2" in Resolute

Repository Area Version
base main 1.34.6-1
updates main 1.34.6-1ubuntu0.1

Changelog

Version: 1.34.6-1ubuntu0.1 2026-09-29 16:07:09 UTC

c-ares (1.34.6-1ubuntu0.1) resolute-security; urgency=medium

  * SECURITY UPDATE: Use-after-free/double-free in query-completion handling
    - debian/patches/CVE-2026-33630.patch: Fix double-free and consolidate
      requeue handling in src/lib/ares_process.c, test/ares-test-mock.cc.
    - CVE-2026-33630

 -- Shafayat Hossain Majumder Fri, 25 Sep 2026 13:26:32 -0400

CVE-2026-33630 c-ares is an asynchronous resolver library. From ver 1.32.3 until 1.34.7, a use-after-free / double-free in c-ares' query-completion handling. The sa



About   -   Send Feedback to @ubuntu_updates