| Revision Date: | 2021-08-17 | Version: | 1 |
| Title: | (Important) |
| Description: |
This update for c-ares fixes the following issues:
Version update to git snapshot 1.17.1+20200724:
- CVE-2021-3672: fixed missing input validation on hostnames returned by DNS servers (bsc#1188881) - If ares_getaddrinfo() was terminated by an ares_destroy(), it would cause crash - Crash in sortaddrinfo() if the list size equals 0 due to an unexpected DNS response - Expand number of escaped characters in DNS replies as per RFC1035 5.1 to prevent spoofing - Use unbuffered /dev/urandom for random data to prevent early startup performance issues
|
| Family: | unix | Class: | patch |
| Status: | | Reference(s): | 1163749
1188881
CVE-2020-7106
CVE-2021-3672
openSUSE-SU-2020:0654-1
|
| Platform(s): | Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM
SUSE Linux Enterprise High Performance Computing 15 SP1
SUSE Linux Enterprise Server 15 SP1
SUSE Linux Enterprise Server for SAP Applications 15 SP1
SUSE Linux Enterprise Storage 6
SUSE Manager Proxy 4.0
SUSE Manager Server 4.0
SUSE Package Hub for SUSE Linux Enterprise 15 SP1
| Product(s): | |
| Definition Synopsis |
| Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM is installed AND libcares2-1.17.1+20200724-3.14.1 is installed
|
| Definition Synopsis |
| SUSE Package Hub for SUSE Linux Enterprise 15 SP1 is installed
AND Package Information
cacti-1.2.12-bp151.4.9.1 is installed
OR cacti-spine-1.2.12-bp151.4.9.1 is installed
|