ELSA-2023-7207

ELSA-2023-7207 - c-ares security update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2023-11-22

Description

[1.13.0-9.1]
- Resolves: RHEL-11931 - Buffer Underwrite in ares_inet_net_pton() [rhel-8.9.0.z]

[1.13.0-9]
- Resolves: rhbz#2238293 - CVE-2020-22217 c-ares: read-heap-buffer-overflow in ares_parse_soa_reply [rhel-8] [rhel-8.9.0.z]

Related CVEs

CVE-2020-22217

CVE-2023-31130

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	c-ares-1.13.0-9.el8_9.1.src.rpm	d7863cbc01701242df4f467e7f5c0137cb32558806910216821429612fd274a1	-	ol8_aarch64_baseos_latest
	c-ares-1.13.0-9.el8_9.1.src.rpm	d7863cbc01701242df4f467e7f5c0137cb32558806910216821429612fd274a1	-	ol8_aarch64_u9_baseos_patch
	c-ares-1.13.0-9.el8_9.1.aarch64.rpm	bb46439eace96fa12f3a1e50ba2be927e001a2049f49a32c536eab3d76e7f53f	-	ol8_aarch64_baseos_latest
	c-ares-1.13.0-9.el8_9.1.aarch64.rpm	bb46439eace96fa12f3a1e50ba2be927e001a2049f49a32c536eab3d76e7f53f	-	ol8_aarch64_u9_baseos_patch
	c-ares-devel-1.13.0-9.el8_9.1.aarch64.rpm	bd114a910434ff9bde245cb36ee9220e7d6d2ee8b30d5c85aa44832d6f2920c3	-	ol8_aarch64_baseos_latest
	c-ares-devel-1.13.0-9.el8_9.1.aarch64.rpm	bd114a910434ff9bde245cb36ee9220e7d6d2ee8b30d5c85aa44832d6f2920c3	-	ol8_aarch64_u9_baseos_patch
Oracle Linux 8 (x86_64)	c-ares-1.13.0-9.el8_9.1.src.rpm	d7863cbc01701242df4f467e7f5c0137cb32558806910216821429612fd274a1	-	ol8_x86_64_baseos_latest
	c-ares-1.13.0-9.el8_9.1.src.rpm	d7863cbc01701242df4f467e7f5c0137cb32558806910216821429612fd274a1	-	ol8_x86_64_u9_baseos_patch
	c-ares-1.13.0-9.el8_9.1.i686.rpm	d37e8169046d0f9380cf8054331bcbad3082c3934e9a71b5615b81863ff269ee	-	ol8_x86_64_baseos_latest
	c-ares-1.13.0-9.el8_9.1.i686.rpm	d37e8169046d0f9380cf8054331bcbad3082c3934e9a71b5615b81863ff269ee	-	ol8_x86_64_u9_baseos_patch
	c-ares-1.13.0-9.el8_9.1.x86_64.rpm	c7f288143ada683e2cc896a6ab708a05bc09fce13dd4d4adef7ac9ebb038ec2c	-	exadata_dbserver_23.1.10.0.0_x86_64_base
	c-ares-1.13.0-9.el8_9.1.x86_64.rpm	c7f288143ada683e2cc896a6ab708a05bc09fce13dd4d4adef7ac9ebb038ec2c	-	exadata_dbserver_23.1.11.0.0_x86_64_base
	c-ares-1.13.0-9.el8_9.1.x86_64.rpm	c7f288143ada683e2cc896a6ab708a05bc09fce13dd4d4adef7ac9ebb038ec2c	-	exadata_dbserver_23.1.12.0.0_x86_64_base
	c-ares-1.13.0-9.el8_9.1.x86_64.rpm	c7f288143ada683e2cc896a6ab708a05bc09fce13dd4d4adef7ac9ebb038ec2c	-	exadata_dbserver_23.1.13.0.0_x86_64_base
	c-ares-1.13.0-9.el8_9.1.x86_64.rpm	c7f288143ada683e2cc896a6ab708a05bc09fce13dd4d4adef7ac9ebb038ec2c	-	exadata_dbserver_23.1.14.0.0_x86_64_base
	c-ares-1.13.0-9.el8_9.1.x86_64.rpm	c7f288143ada683e2cc896a6ab708a05bc09fce13dd4d4adef7ac9ebb038ec2c	-	exadata_dbserver_23.1.15.0.0_x86_64_base
	c-ares-1.13.0-9.el8_9.1.x86_64.rpm	c7f288143ada683e2cc896a6ab708a05bc09fce13dd4d4adef7ac9ebb038ec2c	-	exadata_dbserver_23.1.9.0.0_x86_64_base
	c-ares-1.13.0-9.el8_9.1.x86_64.rpm	c7f288143ada683e2cc896a6ab708a05bc09fce13dd4d4adef7ac9ebb038ec2c	-	exadata_dbserver_24.1.0.0.0_x86_64_base
	c-ares-1.13.0-9.el8_9.1.x86_64.rpm	c7f288143ada683e2cc896a6ab708a05bc09fce13dd4d4adef7ac9ebb038ec2c	-	exadata_dbserver_24.1.1.0.0_x86_64_base
	c-ares-1.13.0-9.el8_9.1.x86_64.rpm	c7f288143ada683e2cc896a6ab708a05bc09fce13dd4d4adef7ac9ebb038ec2c	-	ol8_x86_64_baseos_latest
	c-ares-1.13.0-9.el8_9.1.x86_64.rpm	c7f288143ada683e2cc896a6ab708a05bc09fce13dd4d4adef7ac9ebb038ec2c	-	ol8_x86_64_u9_baseos_patch
	c-ares-devel-1.13.0-9.el8_9.1.i686.rpm	a882eb112fa45455a830eba2c509805d8f56eccdf132a50c183081a775068d69	-	ol8_x86_64_baseos_latest
	c-ares-devel-1.13.0-9.el8_9.1.i686.rpm	a882eb112fa45455a830eba2c509805d8f56eccdf132a50c183081a775068d69	-	ol8_x86_64_u9_baseos_patch
	c-ares-devel-1.13.0-9.el8_9.1.x86_64.rpm	495ee8b724820cf46880a4ac51c34c8cbc707d5c0251f6dfa8bd6660ffc4a7e8	-	ol8_x86_64_baseos_latest
	c-ares-devel-1.13.0-9.el8_9.1.x86_64.rpm	495ee8b724820cf46880a4ac51c34c8cbc707d5c0251f6dfa8bd6660ffc4a7e8	-	ol8_x86_64_u9_baseos_patch

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team