Issued:
2022-05-10
Updated:
2022-05-10

RHSA-2022:2043 - Security Advisory

Synopsis

Moderate: c-ares security update

Type/Severity

Security Advisory: Moderate

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for c-ares is now available for Red Hat Enterprise Linux 8.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

The c-ares C library defines asynchronous DNS (Domain Name System) requests and provides name resolving API.

Security Fix(es):

  • c-ares: Missing input validation of host names may lead to domain hijacking (CVE-2021-3672)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.6 Release Notes linked from the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 8 x86_64
  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.6 x86_64
  • Red Hat Enterprise Linux Server - AUS 8.6 x86_64
  • Red Hat Enterprise Linux for IBM z Systems 8 s390x
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 8.6 s390x
  • Red Hat Enterprise Linux for Power, little endian 8 ppc64le
  • Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.6 ppc64le
  • Red Hat Enterprise Linux Server - TUS 8.6 x86_64
  • Red Hat Enterprise Linux for ARM 64 8 aarch64
  • Red Hat Enterprise Linux for ARM 64 - Extended Update Support 8.6 aarch64
  • Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.6 ppc64le
  • Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.6 x86_64

Fixes

  • BZ - 1988342 - CVE-2021-3672 c-ares: Missing input validation of host names may lead to domain hijacking

Red Hat Enterprise Linux for x86_64 8

SRPM
c-ares-1.13.0-6.el8.src.rpm SHA-256: 000619008f8bd07bb5fe59354a1a861afadc984b934bc7e186fd9259aab8f3d3
x86_64
c-ares-1.13.0-6.el8.i686.rpm SHA-256: aff2e7fe5fd6e0ec80f2e6fec1178b315a75765d289e364b12b54a691cd3005e
c-ares-1.13.0-6.el8.x86_64.rpm SHA-256: 6b7a5cf334ac0f4381fe034007817d0e9a7ac88eb0a0dd0d645cb36811247823
c-ares-debuginfo-1.13.0-6.el8.i686.rpm SHA-256: 6ce8e7d847299502b84e412ba173b654691a7dba5965b2f50c9d8ed0851d5d58
c-ares-debuginfo-1.13.0-6.el8.x86_64.rpm SHA-256: cab3f93381cf218fa1a5ec91d0e431a791808c7491f267c43647c3d899dca9b2
c-ares-debugsource-1.13.0-6.el8.i686.rpm SHA-256: ae03afc06e74983645cd2c7e2d6c3ae07271205cbf3d96d87655cdffdff89c6c
c-ares-debugsource-1.13.0-6.el8.x86_64.rpm SHA-256: 0dca8d594ab2be41f6f20f039bac20b010e67895a6e4a3bbed73167f876ef354
c-ares-devel-1.13.0-6.el8.i686.rpm SHA-256: 2be4211af486eb24b3c79c4f065236438eb34d8f885e119cf2dff3b3d0d07987
c-ares-devel-1.13.0-6.el8.x86_64.rpm SHA-256: 716285e38e4bc8027df6cb038fa3b6ee87f49c821f60e0445b83dfc10eb8b532

Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.6

SRPM
c-ares-1.13.0-6.el8.src.rpm SHA-256: 000619008f8bd07bb5fe59354a1a861afadc984b934bc7e186fd9259aab8f3d3
x86_64
c-ares-1.13.0-6.el8.i686.rpm SHA-256: aff2e7fe5fd6e0ec80f2e6fec1178b315a75765d289e364b12b54a691cd3005e
c-ares-1.13.0-6.el8.x86_64.rpm SHA-256: 6b7a5cf334ac0f4381fe034007817d0e9a7ac88eb0a0dd0d645cb36811247823
c-ares-debuginfo-1.13.0-6.el8.i686.rpm SHA-256: 6ce8e7d847299502b84e412ba173b654691a7dba5965b2f50c9d8ed0851d5d58
c-ares-debuginfo-1.13.0-6.el8.x86_64.rpm SHA-256: cab3f93381cf218fa1a5ec91d0e431a791808c7491f267c43647c3d899dca9b2
c-ares-debugsource-1.13.0-6.el8.i686.rpm SHA-256: ae03afc06e74983645cd2c7e2d6c3ae07271205cbf3d96d87655cdffdff89c6c
c-ares-debugsource-1.13.0-6.el8.x86_64.rpm SHA-256: 0dca8d594ab2be41f6f20f039bac20b010e67895a6e4a3bbed73167f876ef354
c-ares-devel-1.13.0-6.el8.i686.rpm SHA-256: 2be4211af486eb24b3c79c4f065236438eb34d8f885e119cf2dff3b3d0d07987
c-ares-devel-1.13.0-6.el8.x86_64.rpm SHA-256: 716285e38e4bc8027df6cb038fa3b6ee87f49c821f60e0445b83dfc10eb8b532

Red Hat Enterprise Linux Server - AUS 8.6

SRPM
c-ares-1.13.0-6.el8.src.rpm SHA-256: 000619008f8bd07bb5fe59354a1a861afadc984b934bc7e186fd9259aab8f3d3
x86_64
c-ares-1.13.0-6.el8.i686.rpm SHA-256: aff2e7fe5fd6e0ec80f2e6fec1178b315a75765d289e364b12b54a691cd3005e
c-ares-1.13.0-6.el8.x86_64.rpm SHA-256: 6b7a5cf334ac0f4381fe034007817d0e9a7ac88eb0a0dd0d645cb36811247823
c-ares-debuginfo-1.13.0-6.el8.i686.rpm SHA-256: 6ce8e7d847299502b84e412ba173b654691a7dba5965b2f50c9d8ed0851d5d58
c-ares-debuginfo-1.13.0-6.el8.x86_64.rpm SHA-256: cab3f93381cf218fa1a5ec91d0e431a791808c7491f267c43647c3d899dca9b2
c-ares-debugsource-1.13.0-6.el8.i686.rpm SHA-256: ae03afc06e74983645cd2c7e2d6c3ae07271205cbf3d96d87655cdffdff89c6c
c-ares-debugsource-1.13.0-6.el8.x86_64.rpm SHA-256: 0dca8d594ab2be41f6f20f039bac20b010e67895a6e4a3bbed73167f876ef354
c-ares-devel-1.13.0-6.el8.i686.rpm SHA-256: 2be4211af486eb24b3c79c4f065236438eb34d8f885e119cf2dff3b3d0d07987
c-ares-devel-1.13.0-6.el8.x86_64.rpm SHA-256: 716285e38e4bc8027df6cb038fa3b6ee87f49c821f60e0445b83dfc10eb8b532

Red Hat Enterprise Linux for IBM z Systems 8

SRPM
c-ares-1.13.0-6.el8.src.rpm SHA-256: 000619008f8bd07bb5fe59354a1a861afadc984b934bc7e186fd9259aab8f3d3
s390x
c-ares-1.13.0-6.el8.s390x.rpm SHA-256: d1c4a48c154d64b7d41f77bbff69f056128d1327bd4ef34b1fee427da2771489
c-ares-debuginfo-1.13.0-6.el8.s390x.rpm SHA-256: b2b6b05f4b736a1998d9d6a7a127fdfd935a6467defb45d62a797f42ef671dbc
c-ares-debugsource-1.13.0-6.el8.s390x.rpm SHA-256: e819df1dcce4e490fc066047d40b9d784902e6853bf6bd5e76f19a3527ca543c
c-ares-devel-1.13.0-6.el8.s390x.rpm SHA-256: e82a033ec95fbce3168ee67c5703a919cc1aa845815aed69d3e676036ce5aa15

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 8.6

SRPM
c-ares-1.13.0-6.el8.src.rpm SHA-256: 000619008f8bd07bb5fe59354a1a861afadc984b934bc7e186fd9259aab8f3d3
s390x
c-ares-1.13.0-6.el8.s390x.rpm SHA-256: d1c4a48c154d64b7d41f77bbff69f056128d1327bd4ef34b1fee427da2771489
c-ares-debuginfo-1.13.0-6.el8.s390x.rpm SHA-256: b2b6b05f4b736a1998d9d6a7a127fdfd935a6467defb45d62a797f42ef671dbc
c-ares-debugsource-1.13.0-6.el8.s390x.rpm SHA-256: e819df1dcce4e490fc066047d40b9d784902e6853bf6bd5e76f19a3527ca543c
c-ares-devel-1.13.0-6.el8.s390x.rpm SHA-256: e82a033ec95fbce3168ee67c5703a919cc1aa845815aed69d3e676036ce5aa15

Red Hat Enterprise Linux for Power, little endian 8

SRPM
c-ares-1.13.0-6.el8.src.rpm SHA-256: 000619008f8bd07bb5fe59354a1a861afadc984b934bc7e186fd9259aab8f3d3
ppc64le
c-ares-1.13.0-6.el8.ppc64le.rpm SHA-256: ba09e912c4aa70d02a04c5bd0db4f13286a11e931bc6b64c921c12008c4ff10b
c-ares-debuginfo-1.13.0-6.el8.ppc64le.rpm SHA-256: f49360b0b6ba2f55377800583f6349e892cb10ed8ddc8400b1ae005aad6c6304
c-ares-debugsource-1.13.0-6.el8.ppc64le.rpm SHA-256: 7f510104294cce8986018dc3607e495f32644067b14f23145f441d1eb1ec1e24
c-ares-devel-1.13.0-6.el8.ppc64le.rpm SHA-256: c7c8e4fb3b7b290a6ba1f96139f999f78ab48024a15dd6d44255c55f2bfea2af

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.6

SRPM
c-ares-1.13.0-6.el8.src.rpm SHA-256: 000619008f8bd07bb5fe59354a1a861afadc984b934bc7e186fd9259aab8f3d3
ppc64le
c-ares-1.13.0-6.el8.ppc64le.rpm SHA-256: ba09e912c4aa70d02a04c5bd0db4f13286a11e931bc6b64c921c12008c4ff10b
c-ares-debuginfo-1.13.0-6.el8.ppc64le.rpm SHA-256: f49360b0b6ba2f55377800583f6349e892cb10ed8ddc8400b1ae005aad6c6304
c-ares-debugsource-1.13.0-6.el8.ppc64le.rpm SHA-256: 7f510104294cce8986018dc3607e495f32644067b14f23145f441d1eb1ec1e24
c-ares-devel-1.13.0-6.el8.ppc64le.rpm SHA-256: c7c8e4fb3b7b290a6ba1f96139f999f78ab48024a15dd6d44255c55f2bfea2af

Red Hat Enterprise Linux Server - TUS 8.6

SRPM
c-ares-1.13.0-6.el8.src.rpm SHA-256: 000619008f8bd07bb5fe59354a1a861afadc984b934bc7e186fd9259aab8f3d3
x86_64
c-ares-1.13.0-6.el8.i686.rpm SHA-256: aff2e7fe5fd6e0ec80f2e6fec1178b315a75765d289e364b12b54a691cd3005e
c-ares-1.13.0-6.el8.x86_64.rpm SHA-256: 6b7a5cf334ac0f4381fe034007817d0e9a7ac88eb0a0dd0d645cb36811247823
c-ares-debuginfo-1.13.0-6.el8.i686.rpm SHA-256: 6ce8e7d847299502b84e412ba173b654691a7dba5965b2f50c9d8ed0851d5d58
c-ares-debuginfo-1.13.0-6.el8.x86_64.rpm SHA-256: cab3f93381cf218fa1a5ec91d0e431a791808c7491f267c43647c3d899dca9b2
c-ares-debugsource-1.13.0-6.el8.i686.rpm SHA-256: ae03afc06e74983645cd2c7e2d6c3ae07271205cbf3d96d87655cdffdff89c6c
c-ares-debugsource-1.13.0-6.el8.x86_64.rpm SHA-256: 0dca8d594ab2be41f6f20f039bac20b010e67895a6e4a3bbed73167f876ef354
c-ares-devel-1.13.0-6.el8.i686.rpm SHA-256: 2be4211af486eb24b3c79c4f065236438eb34d8f885e119cf2dff3b3d0d07987
c-ares-devel-1.13.0-6.el8.x86_64.rpm SHA-256: 716285e38e4bc8027df6cb038fa3b6ee87f49c821f60e0445b83dfc10eb8b532

Red Hat Enterprise Linux for ARM 64 8

SRPM
c-ares-1.13.0-6.el8.src.rpm SHA-256: 000619008f8bd07bb5fe59354a1a861afadc984b934bc7e186fd9259aab8f3d3
aarch64
c-ares-1.13.0-6.el8.aarch64.rpm SHA-256: efb205b8233e959b5877480e0479c19045f91a368fe5bf54a8264e1b609579d6
c-ares-debuginfo-1.13.0-6.el8.aarch64.rpm SHA-256: 4561fde6fa68848793a193eeb480491372ed3c1ed762e0f40a062bcb71449fea
c-ares-debugsource-1.13.0-6.el8.aarch64.rpm SHA-256: 68b26dd21f585daaeeeda70c71a1bb3e628615d10d35f0d19ca005b3be71bacc
c-ares-devel-1.13.0-6.el8.aarch64.rpm SHA-256: 7ce0ab6f008aed1e157ae21f424d10da42c93c3e90e96be65220ae60cd6af261

Red Hat Enterprise Linux for ARM 64 - Extended Update Support 8.6

SRPM
c-ares-1.13.0-6.el8.src.rpm SHA-256: 000619008f8bd07bb5fe59354a1a861afadc984b934bc7e186fd9259aab8f3d3
aarch64
c-ares-1.13.0-6.el8.aarch64.rpm SHA-256: efb205b8233e959b5877480e0479c19045f91a368fe5bf54a8264e1b609579d6
c-ares-debuginfo-1.13.0-6.el8.aarch64.rpm SHA-256: 4561fde6fa68848793a193eeb480491372ed3c1ed762e0f40a062bcb71449fea
c-ares-debugsource-1.13.0-6.el8.aarch64.rpm SHA-256: 68b26dd21f585daaeeeda70c71a1bb3e628615d10d35f0d19ca005b3be71bacc
c-ares-devel-1.13.0-6.el8.aarch64.rpm SHA-256: 7ce0ab6f008aed1e157ae21f424d10da42c93c3e90e96be65220ae60cd6af261

Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.6

SRPM
c-ares-1.13.0-6.el8.src.rpm SHA-256: 000619008f8bd07bb5fe59354a1a861afadc984b934bc7e186fd9259aab8f3d3
ppc64le
c-ares-1.13.0-6.el8.ppc64le.rpm SHA-256: ba09e912c4aa70d02a04c5bd0db4f13286a11e931bc6b64c921c12008c4ff10b
c-ares-debuginfo-1.13.0-6.el8.ppc64le.rpm SHA-256: f49360b0b6ba2f55377800583f6349e892cb10ed8ddc8400b1ae005aad6c6304
c-ares-debugsource-1.13.0-6.el8.ppc64le.rpm SHA-256: 7f510104294cce8986018dc3607e495f32644067b14f23145f441d1eb1ec1e24
c-ares-devel-1.13.0-6.el8.ppc64le.rpm SHA-256: c7c8e4fb3b7b290a6ba1f96139f999f78ab48024a15dd6d44255c55f2bfea2af

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.6

SRPM
c-ares-1.13.0-6.el8.src.rpm SHA-256: 000619008f8bd07bb5fe59354a1a861afadc984b934bc7e186fd9259aab8f3d3
x86_64
c-ares-1.13.0-6.el8.i686.rpm SHA-256: aff2e7fe5fd6e0ec80f2e6fec1178b315a75765d289e364b12b54a691cd3005e
c-ares-1.13.0-6.el8.x86_64.rpm SHA-256: 6b7a5cf334ac0f4381fe034007817d0e9a7ac88eb0a0dd0d645cb36811247823
c-ares-debuginfo-1.13.0-6.el8.i686.rpm SHA-256: 6ce8e7d847299502b84e412ba173b654691a7dba5965b2f50c9d8ed0851d5d58
c-ares-debuginfo-1.13.0-6.el8.x86_64.rpm SHA-256: cab3f93381cf218fa1a5ec91d0e431a791808c7491f267c43647c3d899dca9b2
c-ares-debugsource-1.13.0-6.el8.i686.rpm SHA-256: ae03afc06e74983645cd2c7e2d6c3ae07271205cbf3d96d87655cdffdff89c6c
c-ares-debugsource-1.13.0-6.el8.x86_64.rpm SHA-256: 0dca8d594ab2be41f6f20f039bac20b010e67895a6e4a3bbed73167f876ef354
c-ares-devel-1.13.0-6.el8.i686.rpm SHA-256: 2be4211af486eb24b3c79c4f065236438eb34d8f885e119cf2dff3b3d0d07987
c-ares-devel-1.13.0-6.el8.x86_64.rpm SHA-256: 716285e38e4bc8027df6cb038fa3b6ee87f49c821f60e0445b83dfc10eb8b532

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.