Fedora 40: c-ares 2024-9963d77dcb Security Advisory Updates
Summary
c-ares is a C library that performs DNS requests and name resolves
asynchronously. c-ares is a fork of the library named 'ares', written
by Greg Hudson at MIT.
Update Information:
1.28.1 fixes a significant bug in 1.28.0. Update to 1.28.0. Also fixes CVE-2024-25629.
Change Log
* Sun Mar 31 2024 Tom Callaway
References
[ 1 ] Bug #2265714 - CVE-2024-25629 c-ares: Out of bounds read in ares__read_line() [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2265714
Update Instructions
This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-9963d77dcb' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label