Library for asynchronous name resolves
This package is based on the package 'libcares2' from project 'openSUSE:Factory'.
c-ares is a C library that performs DNS requests and name resolves
asynchronously. c-ares is a fork of the library named 'ares', written
by Greg Hudson at MIT.
- Developed at devel:libraries:c_c++
- Sources inherited from project openSUSE:Factory
-
6
derived packages
- Download package
-
Checkout Package
osc -A https://api.opensuse.org checkout openSUSE:Leap:15.1:Staging:FactoryCandidates/c-ares && cd $_ - Create Badge
Refresh
Refresh
Source Files
| Filename | Size | Changed |
|---|---|---|
| 0001-Use-RPM-compiler-options.patch | 0000001433 1.4 KB | |
| _multibuild | 0000000080 80 Bytes | |
| ares_dns.h | 0000005540 5.41 KB | |
| baselibs.conf | 0000000010 10 Bytes | |
| c-ares-1.17.2.tar.gz | 0001538276 1.47 MB | |
| c-ares-1.17.2.tar.gz.asc | 0000000488 488 Bytes | |
| c-ares-config.cmake.in | 0000000725 725 Bytes | |
| c-ares.changes | 0000021207 20.7 KB | |
| c-ares.keyring | 0000001845 1.8 KB | |
| c-ares.spec | 0000004270 4.17 KB | |
| disable-live-tests.patch | 0000000436 436 Bytes | |
| libcares.pc.cmake | 0000000684 684 Bytes |
Revision 13 (latest revision is 22)
Richard Brown (RBrownSUSE)
accepted
request 911845
from
Adam Majer (adamm)
(revision 13)
- update to 1.17.2:
Security:
* When building c-ares with CMake, the RANDOM_FILE would not be set
and therefore downgrade to the less secure random number generator
* If ares_getaddrinfo() was terminated by an ares_destroy(),
it would cause a crash
* Crash in sortaddrinfo() if the list size equals 0 due to
an unexpected DNS response
* Expand number of escaped characters in DNS replies as per
RFC1035 5.1 to prevent spoofing follow-up
(bsc#1188881, CVE-2021-3672)
* Perform validation on hostnames to prevent possible XSS
due to applications not performing valiation themselves
Changes:
* ares_malloc(0) is now defined behavior (returns NULL) rather than system-specific to catch edge cases
Bug fixes:
* Building tests should not force building of static libraries except on Windows
* Relative headers must use double quotes to prevent pulling in a system library
for details see,
https://c-ares.haxx.se/changelog.html#1_17_2
Comments 0