diff options
| author |   Patrick J Volkerding <volkerdi@slackware.com> | 2023-05-22 19:05:02 +0000 |
|---|---|---|
| committer |   Eric Hameleers <alien@slackware.com> | 2023-05-23 13:30:29 +0200 |
| commit | 8e0b115ff3be360a6e31635f57629008062a66f3 (patch) | |
| tree | 94cb9f92972d9d04f181de3b816855a78109b759 /patches/source/c-ares/slack-desc | |
| parent | 837ec54cfe1c06e90127faa662eb29ccf67150c7 (diff) | |
| download | current-8e0b115ff3be360a6e31635f57629008062a66f3.tar.gz current-8e0b115ff3be360a6e31635f57629008062a66f3.tar.xz | |
Mon May 22 19:05:02 UTC 202320230522190502_15.0
patches/packages/c-ares-1.19.1-x86_64-1_slack15.0.txz: Upgraded.
This update fixes bugs and security issues:
0-byte UDP payload causes Denial of Service.
Insufficient randomness in generation of DNS query IDs.
Buffer Underwrite in ares_inet_net_pton().
AutoTools does not set CARES_RANDOM_FILE during cross compilation.
For more information, see:
https://www.cve.org/CVERecord?id=CVE-2023-32067
https://www.cve.org/CVERecord?id=CVE-2023-31147
https://www.cve.org/CVERecord?id=CVE-2023-31130
https://www.cve.org/CVERecord?id=CVE-2023-31124
(* Security fix *)
Diffstat (limited to '')
| -rw-r--r-- | patches/source/c-ares/slack-desc | 19 |
1 files changed, 19 insertions, 0 deletions
diff --git a/patches/source/c-ares/slack-desc b/patches/source/c-ares/slack-desc new file mode 100644 index 000000000..120a4190f --- /dev/null +++ b/patches/source/c-ares/slack-desc @@ -0,0 +1,19 @@ +# HOW TO EDIT THIS FILE: +# The "handy ruler" below makes it easier to edit a package description. +# Line up the first '|' above the ':' following the base package name, and +# the '|' on the right side marks the last column you can put a character in. +# You must make exactly 11 lines for the formatting to be correct. It's also +# customary to leave one space after the ':' except on otherwise blank lines. + + |-----handy-ruler------------------------------------------------------| +c-ares: c-ares (C library for DNS requests) +c-ares: +c-ares: This is c-ares, an asynchronous resolver library. It is intended for +c-ares: applications which need to perform DNS queries without blocking, or +c-ares: need to perform multiple DNS queries in parallel. The primary examples +c-ares: of such applications are servers which communicate with multiple +c-ares: clients and programs with graphical user interfaces. +c-ares: +c-ares: Homepage: https://c-ares.haxx.se/ +c-ares: +c-ares: |