[CLSA-2026:1793346372] c-ares: Fix of 3 CVEs
Type:
security
Severity:
Critical
Release date:
2026-10-30 07:46:24 UTC
Description:
- CVE-2022-4904: fix stack overflow in ares_set_sortlist due to missing input validation - CVE-2023-32067: fix denial of service via 0-byte UDP payload - CVE-2016-5180: fix heap-based buffer overflow in ares_create_query()
Updated packages:
  • c-ares-1.10.0-3.el6.tuxcare.els1.i686.rpm
    sha:2fbb50735f82007f2dc8c98df56ca25629373998a0a62c0bc2af0803a6e61030
  • c-ares-1.10.0-3.el6.tuxcare.els1.x86_64.rpm
    sha:ad60ffaa1c995db6aeabaa746c16ee5c8ab7d8b254ae532cdf1fd2b96ca32a89
  • c-ares-devel-1.10.0-3.el6.tuxcare.els1.i686.rpm
    sha:613cc1c98017e3a0392aed751bdc818723f4e03599b39e22e123c24031a71baf
  • c-ares-devel-1.10.0-3.el6.tuxcare.els1.x86_64.rpm
    sha:f66b7f59c4abb3cff4e85a0fc29a3b4efcca47e23ef16b3b9eab524639482dad
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.