Oval Definition:oval:org.opensuse.security:def:69705
Revision Date:2021-08-17Version:1
Title:Security update for c-ares (Important)
Description:

This update for c-ares fixes the following issues:

Version update to git snapshot 1.17.1+20200724:

- CVE-2021-3672: fixed missing input validation on hostnames returned by DNS servers (bsc#1188881) - If ares_getaddrinfo() was terminated by an ares_destroy(), it would cause crash - Crash in sortaddrinfo() if the list size equals 0 due to an unexpected DNS response - Expand number of escaped characters in DNS replies as per RFC1035 5.1 to prevent spoofing - Use unbuffered /dev/urandom for random data to prevent early startup performance issues
Family:unixClass:patch
Status:Reference(s):1188881
CVE-2014-9114
CVE-2015-5218
CVE-2016-2779
CVE-2016-5011
CVE-2017-2616
CVE-2018-1000845
CVE-2018-7738
CVE-2021-3672
SUSE-SU-2021:2760-1
Platform(s):SUSE Linux Enterprise Module for Basesystem 15 SP2
SUSE Linux Enterprise Server 15 SP1-BCL
Product(s):
Definition Synopsis
  • SUSE Linux Enterprise Module for Basesystem 15 SP2 is installed
  • AND Package Information
  • avahi-0.7-1 is installed
  • OR avahi-compat-howl-devel-0.7-1 is installed
  • OR avahi-compat-mDNSResponder-devel-0.7-1 is installed
  • OR avahi-lang-0.7-1 is installed
  • OR avahi-utils-0.7-1 is installed
  • OR libavahi-client3-0.7-1 is installed
  • OR libavahi-client3-32bit-0.7-1 is installed
  • OR libavahi-common3-0.7-1 is installed
  • OR libavahi-common3-32bit-0.7-1 is installed
  • OR libavahi-core7-0.7-1 is installed
  • OR libavahi-devel-0.7-1 is installed
  • OR libdns_sd-0.7-1 is installed
  • OR libhowl0-0.7-1 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 15 SP1-BCL is installed
  • AND Package Information
  • c-ares-devel-1.17.1+20200724-3.14.1 is installed
  • OR libcares2-1.17.1+20200724-3.14.1 is installed
  • BACK