Red Hat Product Errata RHSA-2023:3662 - Security Advisory
Issued:
2023-06-19
Updated:
2023-06-19

RHSA-2023:3662 - Security Advisory

Synopsis

Important: c-ares security update

Type/Severity

Security Advisory: Important

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for c-ares is now available for Red Hat Enterprise Linux 8.6 Extended Update Support.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

The c-ares C library defines asynchronous DNS (Domain Name System) requests and provides name resolving API.

Security Fix(es):

  • c-ares: 0-byte UDP payload Denial of Service (CVE-2023-32067)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.6 x86_64
  • Red Hat Enterprise Linux for x86_64 - Extended Life Cycle Long Life 8.6 x86_64
  • Red Hat Enterprise Linux Server - AUS 8.6 x86_64
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 8.6 s390x
  • Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.6 ppc64le
  • Red Hat Enterprise Linux Server - TUS 8.6 x86_64
  • Red Hat Enterprise Linux for ARM 64 - Extended Update Support 8.6 aarch64
  • Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.6 ppc64le
  • Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.6 x86_64
  • Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle Long Life 8.6 aarch64
  • Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle Long Life 8.6 ppc64le
  • Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle Long Life 8.6 s390x

Fixes

  • BZ - 2209502 - CVE-2023-32067 c-ares: 0-byte UDP payload Denial of Service

Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.6

SRPM
c-ares-1.13.0-6.el8_6.1.src.rpm SHA-256: 5ca6b3c51ebb4328a42b88c8e3bef7fbd6b9ea52778ba0d346f22bd478fc6d06
x86_64
c-ares-1.13.0-6.el8_6.1.i686.rpm SHA-256: 4cf377bef48dfd41da4d81fca7b6899bd33a56abc0457eb2e2243b3f124a6e18
c-ares-1.13.0-6.el8_6.1.x86_64.rpm SHA-256: b2fd179a15a731f508d74de9aa409d0fc69da15f2033ea48afac79801fe8e52c
c-ares-debuginfo-1.13.0-6.el8_6.1.i686.rpm SHA-256: 57e522cf5381411db98ab0cc7b7b6816044ac54bd68305021b7ce216ad3e3e66
c-ares-debuginfo-1.13.0-6.el8_6.1.x86_64.rpm SHA-256: 3362dacd2bb9468cb347156bde32cdc6549f2b1a6ec81a2b1fa0ed79102719c1
c-ares-debugsource-1.13.0-6.el8_6.1.i686.rpm SHA-256: 9f6529abec3922b460edd095cb4381991f7eba28701d1a0fcb02be781581923b
c-ares-debugsource-1.13.0-6.el8_6.1.x86_64.rpm SHA-256: b68d9ae2cec540742ea9f588cf312dab3a554238a433b1a5495a33afc59946ac
c-ares-devel-1.13.0-6.el8_6.1.i686.rpm SHA-256: 67b524c758ac1cd968f8d9d7eb8775300d65065a5ae74c9370bae9bb61417fcb
c-ares-devel-1.13.0-6.el8_6.1.x86_64.rpm SHA-256: dd5decaa437a90db024b45db0dcd117d646fc9e9fa60b67549481a2d8a58d7fa

Red Hat Enterprise Linux for x86_64 - Extended Life Cycle Long Life 8.6

SRPM
c-ares-1.13.0-6.el8_6.1.src.rpm SHA-256: 5ca6b3c51ebb4328a42b88c8e3bef7fbd6b9ea52778ba0d346f22bd478fc6d06
x86_64
c-ares-1.13.0-6.el8_6.1.i686.rpm SHA-256: 4cf377bef48dfd41da4d81fca7b6899bd33a56abc0457eb2e2243b3f124a6e18
c-ares-1.13.0-6.el8_6.1.x86_64.rpm SHA-256: b2fd179a15a731f508d74de9aa409d0fc69da15f2033ea48afac79801fe8e52c
c-ares-debuginfo-1.13.0-6.el8_6.1.i686.rpm SHA-256: 57e522cf5381411db98ab0cc7b7b6816044ac54bd68305021b7ce216ad3e3e66
c-ares-debuginfo-1.13.0-6.el8_6.1.x86_64.rpm SHA-256: 3362dacd2bb9468cb347156bde32cdc6549f2b1a6ec81a2b1fa0ed79102719c1
c-ares-debugsource-1.13.0-6.el8_6.1.i686.rpm SHA-256: 9f6529abec3922b460edd095cb4381991f7eba28701d1a0fcb02be781581923b
c-ares-debugsource-1.13.0-6.el8_6.1.x86_64.rpm SHA-256: b68d9ae2cec540742ea9f588cf312dab3a554238a433b1a5495a33afc59946ac
c-ares-devel-1.13.0-6.el8_6.1.i686.rpm SHA-256: 67b524c758ac1cd968f8d9d7eb8775300d65065a5ae74c9370bae9bb61417fcb
c-ares-devel-1.13.0-6.el8_6.1.x86_64.rpm SHA-256: dd5decaa437a90db024b45db0dcd117d646fc9e9fa60b67549481a2d8a58d7fa

Red Hat Enterprise Linux Server - AUS 8.6

SRPM
c-ares-1.13.0-6.el8_6.1.src.rpm SHA-256: 5ca6b3c51ebb4328a42b88c8e3bef7fbd6b9ea52778ba0d346f22bd478fc6d06
x86_64
c-ares-1.13.0-6.el8_6.1.i686.rpm SHA-256: 4cf377bef48dfd41da4d81fca7b6899bd33a56abc0457eb2e2243b3f124a6e18
c-ares-1.13.0-6.el8_6.1.x86_64.rpm SHA-256: b2fd179a15a731f508d74de9aa409d0fc69da15f2033ea48afac79801fe8e52c
c-ares-debuginfo-1.13.0-6.el8_6.1.i686.rpm SHA-256: 57e522cf5381411db98ab0cc7b7b6816044ac54bd68305021b7ce216ad3e3e66
c-ares-debuginfo-1.13.0-6.el8_6.1.x86_64.rpm SHA-256: 3362dacd2bb9468cb347156bde32cdc6549f2b1a6ec81a2b1fa0ed79102719c1
c-ares-debugsource-1.13.0-6.el8_6.1.i686.rpm SHA-256: 9f6529abec3922b460edd095cb4381991f7eba28701d1a0fcb02be781581923b
c-ares-debugsource-1.13.0-6.el8_6.1.x86_64.rpm SHA-256: b68d9ae2cec540742ea9f588cf312dab3a554238a433b1a5495a33afc59946ac
c-ares-devel-1.13.0-6.el8_6.1.i686.rpm SHA-256: 67b524c758ac1cd968f8d9d7eb8775300d65065a5ae74c9370bae9bb61417fcb
c-ares-devel-1.13.0-6.el8_6.1.x86_64.rpm SHA-256: dd5decaa437a90db024b45db0dcd117d646fc9e9fa60b67549481a2d8a58d7fa

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 8.6

SRPM
c-ares-1.13.0-6.el8_6.1.src.rpm SHA-256: 5ca6b3c51ebb4328a42b88c8e3bef7fbd6b9ea52778ba0d346f22bd478fc6d06
s390x
c-ares-1.13.0-6.el8_6.1.s390x.rpm SHA-256: d453370dc9fa0dedc251f2d654f4e1edc802f2b2c9387fdf8aefe4fa00b502d0
c-ares-debuginfo-1.13.0-6.el8_6.1.s390x.rpm SHA-256: 66e63577724e0b5fdf0cf204a5a7c8066dfdb55139b3c2fb92898b96e98f7cf0
c-ares-debugsource-1.13.0-6.el8_6.1.s390x.rpm SHA-256: f31d2e2cee589658c2ec1efadac1523ce1dfb975e957a4e98bffecdecd25f7f5
c-ares-devel-1.13.0-6.el8_6.1.s390x.rpm SHA-256: aacc4ea7f8c52d4b7667620ddf15fbccd98eb645e502e7b8874b10e0b822b883

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.6

SRPM
c-ares-1.13.0-6.el8_6.1.src.rpm SHA-256: 5ca6b3c51ebb4328a42b88c8e3bef7fbd6b9ea52778ba0d346f22bd478fc6d06
ppc64le
c-ares-1.13.0-6.el8_6.1.ppc64le.rpm SHA-256: 887288f53ce8254ea66f47ac939aecfb7ca61c397f9a794ecd313c0bcaa37aa3
c-ares-debuginfo-1.13.0-6.el8_6.1.ppc64le.rpm SHA-256: 426d9880caea30629ef184885312f7e54cb9aaaefae2cafa680bdcee5bbfee0b
c-ares-debugsource-1.13.0-6.el8_6.1.ppc64le.rpm SHA-256: 24a6ab1f34bfa4da5c791d3d3671e208bc69119a658f60f3fcd1ad5d9de02a85
c-ares-devel-1.13.0-6.el8_6.1.ppc64le.rpm SHA-256: 064934a3857e7d8bfef52ba7649d831e24091f4b881ca93746d5d2af523eaf48

Red Hat Enterprise Linux Server - TUS 8.6

SRPM
c-ares-1.13.0-6.el8_6.1.src.rpm SHA-256: 5ca6b3c51ebb4328a42b88c8e3bef7fbd6b9ea52778ba0d346f22bd478fc6d06
x86_64
c-ares-1.13.0-6.el8_6.1.i686.rpm SHA-256: 4cf377bef48dfd41da4d81fca7b6899bd33a56abc0457eb2e2243b3f124a6e18
c-ares-1.13.0-6.el8_6.1.x86_64.rpm SHA-256: b2fd179a15a731f508d74de9aa409d0fc69da15f2033ea48afac79801fe8e52c
c-ares-debuginfo-1.13.0-6.el8_6.1.i686.rpm SHA-256: 57e522cf5381411db98ab0cc7b7b6816044ac54bd68305021b7ce216ad3e3e66
c-ares-debuginfo-1.13.0-6.el8_6.1.x86_64.rpm SHA-256: 3362dacd2bb9468cb347156bde32cdc6549f2b1a6ec81a2b1fa0ed79102719c1
c-ares-debugsource-1.13.0-6.el8_6.1.i686.rpm SHA-256: 9f6529abec3922b460edd095cb4381991f7eba28701d1a0fcb02be781581923b
c-ares-debugsource-1.13.0-6.el8_6.1.x86_64.rpm SHA-256: b68d9ae2cec540742ea9f588cf312dab3a554238a433b1a5495a33afc59946ac
c-ares-devel-1.13.0-6.el8_6.1.i686.rpm SHA-256: 67b524c758ac1cd968f8d9d7eb8775300d65065a5ae74c9370bae9bb61417fcb
c-ares-devel-1.13.0-6.el8_6.1.x86_64.rpm SHA-256: dd5decaa437a90db024b45db0dcd117d646fc9e9fa60b67549481a2d8a58d7fa

Red Hat Enterprise Linux for ARM 64 - Extended Update Support 8.6

SRPM
c-ares-1.13.0-6.el8_6.1.src.rpm SHA-256: 5ca6b3c51ebb4328a42b88c8e3bef7fbd6b9ea52778ba0d346f22bd478fc6d06
aarch64
c-ares-1.13.0-6.el8_6.1.aarch64.rpm SHA-256: 167cd2686beb04bd9ea42f35c2d4a58e53394e6289f620ea35e84e7e030eef4f
c-ares-debuginfo-1.13.0-6.el8_6.1.aarch64.rpm SHA-256: 1e0d2d806940b420294333b8bd5fb534e51442c8fd12382fc28e307da318a496
c-ares-debugsource-1.13.0-6.el8_6.1.aarch64.rpm SHA-256: 73c9e4fe20deafd3c2c9aae51454846b89d30e9cdbd36f2522985a6887a6dd75
c-ares-devel-1.13.0-6.el8_6.1.aarch64.rpm SHA-256: aa80d30dcb44a200cc7351878456447a2734ce08901f23e9d015e7139ccf50a0

Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.6

SRPM
c-ares-1.13.0-6.el8_6.1.src.rpm SHA-256: 5ca6b3c51ebb4328a42b88c8e3bef7fbd6b9ea52778ba0d346f22bd478fc6d06
ppc64le
c-ares-1.13.0-6.el8_6.1.ppc64le.rpm SHA-256: 887288f53ce8254ea66f47ac939aecfb7ca61c397f9a794ecd313c0bcaa37aa3
c-ares-debuginfo-1.13.0-6.el8_6.1.ppc64le.rpm SHA-256: 426d9880caea30629ef184885312f7e54cb9aaaefae2cafa680bdcee5bbfee0b
c-ares-debugsource-1.13.0-6.el8_6.1.ppc64le.rpm SHA-256: 24a6ab1f34bfa4da5c791d3d3671e208bc69119a658f60f3fcd1ad5d9de02a85
c-ares-devel-1.13.0-6.el8_6.1.ppc64le.rpm SHA-256: 064934a3857e7d8bfef52ba7649d831e24091f4b881ca93746d5d2af523eaf48

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.6

SRPM
c-ares-1.13.0-6.el8_6.1.src.rpm SHA-256: 5ca6b3c51ebb4328a42b88c8e3bef7fbd6b9ea52778ba0d346f22bd478fc6d06
x86_64
c-ares-1.13.0-6.el8_6.1.i686.rpm SHA-256: 4cf377bef48dfd41da4d81fca7b6899bd33a56abc0457eb2e2243b3f124a6e18
c-ares-1.13.0-6.el8_6.1.x86_64.rpm SHA-256: b2fd179a15a731f508d74de9aa409d0fc69da15f2033ea48afac79801fe8e52c
c-ares-debuginfo-1.13.0-6.el8_6.1.i686.rpm SHA-256: 57e522cf5381411db98ab0cc7b7b6816044ac54bd68305021b7ce216ad3e3e66
c-ares-debuginfo-1.13.0-6.el8_6.1.x86_64.rpm SHA-256: 3362dacd2bb9468cb347156bde32cdc6549f2b1a6ec81a2b1fa0ed79102719c1
c-ares-debugsource-1.13.0-6.el8_6.1.i686.rpm SHA-256: 9f6529abec3922b460edd095cb4381991f7eba28701d1a0fcb02be781581923b
c-ares-debugsource-1.13.0-6.el8_6.1.x86_64.rpm SHA-256: b68d9ae2cec540742ea9f588cf312dab3a554238a433b1a5495a33afc59946ac
c-ares-devel-1.13.0-6.el8_6.1.i686.rpm SHA-256: 67b524c758ac1cd968f8d9d7eb8775300d65065a5ae74c9370bae9bb61417fcb
c-ares-devel-1.13.0-6.el8_6.1.x86_64.rpm SHA-256: dd5decaa437a90db024b45db0dcd117d646fc9e9fa60b67549481a2d8a58d7fa

Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle Long Life 8.6

SRPM
c-ares-1.13.0-6.el8_6.1.src.rpm SHA-256: 5ca6b3c51ebb4328a42b88c8e3bef7fbd6b9ea52778ba0d346f22bd478fc6d06
aarch64
c-ares-1.13.0-6.el8_6.1.aarch64.rpm SHA-256: 167cd2686beb04bd9ea42f35c2d4a58e53394e6289f620ea35e84e7e030eef4f
c-ares-debuginfo-1.13.0-6.el8_6.1.aarch64.rpm SHA-256: 1e0d2d806940b420294333b8bd5fb534e51442c8fd12382fc28e307da318a496
c-ares-debugsource-1.13.0-6.el8_6.1.aarch64.rpm SHA-256: 73c9e4fe20deafd3c2c9aae51454846b89d30e9cdbd36f2522985a6887a6dd75
c-ares-devel-1.13.0-6.el8_6.1.aarch64.rpm SHA-256: aa80d30dcb44a200cc7351878456447a2734ce08901f23e9d015e7139ccf50a0

Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle Long Life 8.6

SRPM
c-ares-1.13.0-6.el8_6.1.src.rpm SHA-256: 5ca6b3c51ebb4328a42b88c8e3bef7fbd6b9ea52778ba0d346f22bd478fc6d06
ppc64le
c-ares-1.13.0-6.el8_6.1.ppc64le.rpm SHA-256: 887288f53ce8254ea66f47ac939aecfb7ca61c397f9a794ecd313c0bcaa37aa3
c-ares-debuginfo-1.13.0-6.el8_6.1.ppc64le.rpm SHA-256: 426d9880caea30629ef184885312f7e54cb9aaaefae2cafa680bdcee5bbfee0b
c-ares-debugsource-1.13.0-6.el8_6.1.ppc64le.rpm SHA-256: 24a6ab1f34bfa4da5c791d3d3671e208bc69119a658f60f3fcd1ad5d9de02a85
c-ares-devel-1.13.0-6.el8_6.1.ppc64le.rpm SHA-256: 064934a3857e7d8bfef52ba7649d831e24091f4b881ca93746d5d2af523eaf48

Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle Long Life 8.6

SRPM
c-ares-1.13.0-6.el8_6.1.src.rpm SHA-256: 5ca6b3c51ebb4328a42b88c8e3bef7fbd6b9ea52778ba0d346f22bd478fc6d06
s390x
c-ares-1.13.0-6.el8_6.1.s390x.rpm SHA-256: d453370dc9fa0dedc251f2d654f4e1edc802f2b2c9387fdf8aefe4fa00b502d0
c-ares-debuginfo-1.13.0-6.el8_6.1.s390x.rpm SHA-256: 66e63577724e0b5fdf0cf204a5a7c8066dfdb55139b3c2fb92898b96e98f7cf0
c-ares-debugsource-1.13.0-6.el8_6.1.s390x.rpm SHA-256: f31d2e2cee589658c2ec1efadac1523ce1dfb975e957a4e98bffecdecd25f7f5
c-ares-devel-1.13.0-6.el8_6.1.s390x.rpm SHA-256: aacc4ea7f8c52d4b7667620ddf15fbccd98eb645e502e7b8874b10e0b822b883

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.