tocsin

Alpine/c-ares: high 7.5

c-ares is an asynchronous resolver library. From ver 1.32.3 until 1.34.7, a use-after-free / double-free in c-ares' query-completion handling. The same flaw — a query's callback being invoked while th

Action: Upgrade c-ares to 1.34.8-r0 or later.

Affected

introducedfixedlast affected
01.34.8-r0-

Fixed versions

1.34.8-r0

Sources

published · modified · JSON