Описание
[GHSA-jv8r-gqr9-68wj: Memory-amplification denial of service via unvalidated DNS header record counts]
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| c-ares | fixed | 1.34.7-1 | package | |
| c-ares | no-dsa | trixie | package | |
| c-ares | not-affected | bookworm | package | |
| c-ares | not-affected | bullseye | package |
Примечания
https://www.openwall.com/lists/oss-security/2026/07/06/8
https://github.com/c-ares/c-ares/security/advisories/GHSA-jv8r-gqr9-68wj
Fixed by: https://github.com/c-ares/c-ares/commit/eaded4cb200b2a5f8d73f11021ff7c8d6968aaab (main)
Fixed by: https://github.com/c-ares/c-ares/commit/e47c203f91cd8b749c8736bc18d75a31ffdec8f4 (v1.34.7)