Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 496
Alerts This Week
Warning Icon 1 496

Fedora 25: c-ares Update for CVE-2016-5180 Critical Buffer Issue

fedora
Calendar Grey October 9, 2016
Dist Fedora Esm H88
Enhancement in c-ares for Fedora 25 tackles vulnerability CVE-2016-5180, bolstering security in DNS procedures with a corrective measure.
Security fix for CVE-2016-5180

Summary

c-ares is a C library that performs DNS requests and name resolves

asynchronously. c-ares is a fork of the library named 'ares', written

by Greg Hudson at MIT.

Update Information:

Security fix for CVE-2016-5180

Topics%20covered

Topics Covered

security advisory fedora critical buffer issue c-ares dns operations

Change Log

References


[ 1 ] Bug #1380463 - CVE-2016-5180 c-ares: Single byte out of buffer write https://bugzilla.redhat.com/show_bug.cgi?id=1380463

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update c-ares' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
critical
Lowest
Low
Medium
High
Critical

Name: c-ares
Product: Fedora 25
Version: 1.12.0
Release: 1.fc25
URL: https://c-ares.org/
Summary: A library that performs asynchronous DNS operations

Topics%20covered

Topics Covered

security advisory fedora critical buffer issue c-ares dns operations

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.