Library for asynchronous name resolves

Edit Package c-ares

This package is based on the package 'libcares2' from project 'openSUSE:Factory'.

c-ares is a C library that performs DNS requests and name resolves
asynchronously. c-ares is a fork of the library named 'ares', written
by Greg Hudson at MIT.

Refresh
Refresh
Source Files
Filename Size Changed
0001-Use-RPM-compiler-options.patch 0000001433 1.4 KB
_multibuild 0000000080 80 Bytes
ares_dns.h 0000005540 5.41 KB
baselibs.conf 0000000010 10 Bytes
c-ares-1.17.2.tar.gz 0001538276 1.47 MB
c-ares-1.17.2.tar.gz.asc 0000000488 488 Bytes
c-ares-config.cmake.in 0000000725 725 Bytes
c-ares.changes 0000021207 20.7 KB
c-ares.keyring 0000001845 1.8 KB
c-ares.spec 0000004270 4.17 KB
disable-live-tests.patch 0000000436 436 Bytes
libcares.pc.cmake 0000000684 684 Bytes
Revision 13 (latest revision is 24)
Richard Brown's avatar Richard Brown (RBrownSUSE) accepted request 911845 from Adam Majer's avatar Adam Majer (adamm) (revision 13)
- update to 1.17.2:
  Security:
  * When building c-ares with CMake, the RANDOM_FILE would not be set
    and therefore downgrade to the less secure random number generator
  * If ares_getaddrinfo() was terminated by an ares_destroy(),
    it would cause a crash
  * Crash in sortaddrinfo() if the list size equals 0 due to
    an unexpected DNS response
  * Expand number of escaped characters in DNS replies as per
    RFC1035 5.1 to prevent spoofing follow-up
    (bsc#1188881, CVE-2021-3672)
  * Perform validation on hostnames to prevent possible XSS
    due to applications not performing valiation themselves 
  Changes:
  * ares_malloc(0) is now defined behavior (returns NULL) rather than system-specific to catch edge cases 
  Bug fixes:
  * Building tests should not force building of static libraries except on Windows
  * Relative headers must use double quotes to prevent pulling in a system library
for details see,
https://c-ares.haxx.se/changelog.html#1_17_2
Comments 0
openSUSE Build Service is sponsored by