-----BEGIN PGP SIGNATURE-----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=jOCo
-----END PGP SIGNATURE-----
==========================================================================
Ubuntu Security Notice USN-7477-1
May 05, 2025
c-ares vulnerability
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 25.04
- Ubuntu 24.10
Summary:
c-ares could be made to crash if it received specially crafted network
traffic.
Software Description:
- c-ares: library for asynchronous name resolution
Details:
It was discovered that c-ares incorrectly handled re-enqueuing certain
queries. A remote attacker could possibly use this issue to cause c-ares to
crash, resulting in a denial of service.
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 25.04
libcares2 1.34.4-2.1ubuntu0.1
Ubuntu 24.10
libcares2 1.33.0-1ubuntu0.1
In general, a standard system update will make all the necessary changes.
References:
https://ubuntu.com/security/notices/USN-7477-1
CVE-2025-31498
Package Information:
https://launchpad.net/ubuntu/+source/c-ares/1.34.4-2.1ubuntu0.1
https://launchpad.net/ubuntu/+source/c-ares/1.33.0-1ubuntu0.1
No comments:
Post a Comment