tocsin

Debian/c-ares: unknown

c-ares is an asynchronous resolver library. From 1.32.3 through 1.34.4, there is a use-after-free in read_answers() when process_answer() may re-enqueue a query either due to a DNS Cookie Failure or w

Action: Upgrade c-ares to 1.34.5-1 or later.

Affected

introducedfixedlast affected
01.34.5-1-

Fixed versions

1.34.5-1

Sources

published · modified · JSON