gpp_maybe Security update for c-ares

SUSE-SLE-Module-Basesystem-15-SP4-2023-2313

This update for c-ares fixes the following issues: Update to version 1.19.1: - CVE-2023-32067: 0-byte UDP payload causes Denial of Service (bsc#1211604) - CVE-2023-31147: Insufficient randomness in generation of DNS query IDs (bsc#1211605) - CVE-2023-31130: Buffer Underwrite in ares_inet_net_pton() (bsc#1211606) - CVE-2023-31124: AutoTools does not set CARES_RANDOM_FILE during cross compilation (bsc#1211607) - Fix uninitialized memory warning in test - ares_getaddrinfo() should allow a port of 0 - Fix memory leak in ares_send() on error - Fix comment style in ares_data.h - Fix typo in ares_init_options.3 - Sync ax_pthread.m4 with upstream - Sync ax_cxx_compile_stdcxx_11.m4 with upstream to fix uclibc support

• Release Date
  May 30 2023
• References
  Bugzilla: 1211604, 1211607, 1211605, 1211606
  CVEs: CVE-2023-31124, CVE-2023-32067, CVE-2023-31147, CVE-2023-31130
• Type
  security
• Severity
  important

cloud_download Downloads

Basesystem Module 15.4 aarch64

• Packages
  c-ares
  Library for asynchronous name resolves

  1.19.1-150000.3.23.1 lock src

  c-ares-devel
  Development files for c-ares

  1.19.1-150000.3.23.1 lock rpm

  libcares2
  Library for asynchronous name resolves

  1.19.1-150000.3.23.1 lock rpm

Basesystem Module 15.4 ppc64le

• Packages
  c-ares
  Library for asynchronous name resolves

  1.19.1-150000.3.23.1 lock src

  c-ares-devel
  Development files for c-ares

  1.19.1-150000.3.23.1 lock rpm

  libcares2
  Library for asynchronous name resolves

  1.19.1-150000.3.23.1 lock rpm

Basesystem Module 15.4 s390x

• Packages
  c-ares
  Library for asynchronous name resolves

  1.19.1-150000.3.23.1 lock src

  c-ares-devel
  Development files for c-ares

  1.19.1-150000.3.23.1 lock rpm

  libcares2
  Library for asynchronous name resolves

  1.19.1-150000.3.23.1 lock rpm

Basesystem Module 15.4 x86_64

• Packages
  c-ares
  Library for asynchronous name resolves

  1.19.1-150000.3.23.1 lock src

  c-ares-devel
  Development files for c-ares

  1.19.1-150000.3.23.1 lock rpm

  libcares2
  Library for asynchronous name resolves

  1.19.1-150000.3.23.1 lock rpm