Oval Definition:oval:org.opensuse.security:def:99405
Revision Date:2021-08-17Version:1
Title: (Important)
Description:

This update for c-ares fixes the following issues:

Version update to git snapshot 1.17.1+20200724:

- CVE-2021-3672: fixed missing input validation on hostnames returned by DNS servers (bsc#1188881) - If ares_getaddrinfo() was terminated by an ares_destroy(), it would cause crash - Crash in sortaddrinfo() if the list size equals 0 due to an unexpected DNS response - Expand number of escaped characters in DNS replies as per RFC1035 5.1 to prevent spoofing - Use unbuffered /dev/urandom for random data to prevent early startup performance issues
Family:unixClass:patch
Status:Reference(s):1175970
1176711
1177883
1179264
1179265
1182057
1182262
1182263
1188881
CVE-2020-14372
CVE-2020-25632
CVE-2020-25647
CVE-2020-27749
CVE-2020-27779
CVE-2021-20225
CVE-2021-20233
CVE-2021-3672
SUSE-SU-2021:0684-1
Platform(s):Image SLES15-SP3-Manager-4-2-Proxy-BYOS-EC2-HVM
SUSE Linux Enterprise Server 15 SP1-BCL
Product(s):
Definition Synopsis
  • Image SLES15-SP3-Manager-4-2-Proxy-BYOS-EC2-HVM is installed
  • AND libcares2-1.17.1+20200724-3.14.1 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 15 SP1-BCL is installed
  • AND Package Information
  • grub2-2.02-26.43.1 is installed
  • OR grub2-i386-pc-2.02-26.43.1 is installed
  • OR grub2-snapper-plugin-2.02-26.43.1 is installed
  • OR grub2-systemd-sleep-plugin-2.02-26.43.1 is installed
  • OR grub2-x86_64-efi-2.02-26.43.1 is installed
  • OR grub2-x86_64-xen-2.02-26.43.1 is installed
  • BACK