Issued:: 2024-01-24
Updated:: 2024-01-24

RHSA-2024:0419 - Security Advisory

Overview
Updated Packages

Synopsis

Moderate: c-ares security update

Type/Severity

Security Advisory: Moderate

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for c-ares is now available for Red Hat Enterprise Linux 8.6 Extended Update Support.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

The c-ares C library defines asynchronous DNS (Domain Name System) requests and provides name resolving API.

Security Fix(es):

c-ares: Heap buffer over read in ares_parse_soa_reply (CVE-2020-22217)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

Red Hat Enterprise Linux for x86_64 - Extended Life Cycle Long Life 8.6 x86_64
Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.6 x86_64
Red Hat Enterprise Linux Server - AUS 8.6 x86_64
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 8.6 s390x
Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.6 ppc64le
Red Hat Enterprise Linux Server - TUS 8.6 x86_64
Red Hat Enterprise Linux for ARM 64 - Extended Update Support 8.6 aarch64
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.6 ppc64le
Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.6 x86_64
Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle Long Life 8.6 aarch64
Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle Long Life 8.6 ppc64le
Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle Long Life 8.6 s390x

Fixes

BZ - 2235527 - CVE-2020-22217 c-ares: Heap buffer over read in ares_parse_soa_reply

CVEs

CVE-2020-22217

References

https://access.redhat.com/security/updates/classification/#moderate

Note: More recent versions of these packages may be available. Click a package name for more details.

Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.6

SRPM
c-ares-1.13.0-6.el8_6.3.src.rpm	SHA-256: d84e5460b2dc6bb28a7fa034cec05e8ce1f1f76d15669ea1c5ed1cced2e8b5ff
x86_64
c-ares-1.13.0-6.el8_6.3.i686.rpm	SHA-256: 2762126d517149eecf0e6ba995817a44082db166d291375b0bcf959743412627
c-ares-1.13.0-6.el8_6.3.x86_64.rpm	SHA-256: 08927d62b1964bf27857526e0b72a8cd6fdc6b06cd846acdbed04e7af4fff7dd
c-ares-debuginfo-1.13.0-6.el8_6.3.i686.rpm	SHA-256: 2a583bdd608c2e98567941084671ea2fd8cef40acbf3332f8dc0df07ca532c1e
c-ares-debuginfo-1.13.0-6.el8_6.3.x86_64.rpm	SHA-256: 1ea81ad96c017309fba2cba73c1b3ae19a0a0df655c363c93ce0f0d9a317bc1b
c-ares-debugsource-1.13.0-6.el8_6.3.i686.rpm	SHA-256: 2de58464696ecde00d65fd2dc8205db9d3e4a46b58c107f44704277c50e49a51
c-ares-debugsource-1.13.0-6.el8_6.3.x86_64.rpm	SHA-256: e72247a36f53b5dc16f0636f4f0132f8b0361ac00601d1a7bc4ea3c22715743f
c-ares-devel-1.13.0-6.el8_6.3.i686.rpm	SHA-256: b082ed40f50261ca5b5a853679612a579947e36de24327249e3f20b70a7c4916
c-ares-devel-1.13.0-6.el8_6.3.x86_64.rpm	SHA-256: 26ed71215a3302c8f785b7aae280443dbf7eae80205c3c8e6be524e2e2cba9e4

Red Hat Enterprise Linux for x86_64 - Extended Life Cycle Long Life 8.6

SRPM
c-ares-1.13.0-6.el8_6.3.src.rpm	SHA-256: d84e5460b2dc6bb28a7fa034cec05e8ce1f1f76d15669ea1c5ed1cced2e8b5ff
x86_64
c-ares-1.13.0-6.el8_6.3.i686.rpm	SHA-256: 2762126d517149eecf0e6ba995817a44082db166d291375b0bcf959743412627
c-ares-1.13.0-6.el8_6.3.x86_64.rpm	SHA-256: 08927d62b1964bf27857526e0b72a8cd6fdc6b06cd846acdbed04e7af4fff7dd
c-ares-debuginfo-1.13.0-6.el8_6.3.i686.rpm	SHA-256: 2a583bdd608c2e98567941084671ea2fd8cef40acbf3332f8dc0df07ca532c1e
c-ares-debuginfo-1.13.0-6.el8_6.3.x86_64.rpm	SHA-256: 1ea81ad96c017309fba2cba73c1b3ae19a0a0df655c363c93ce0f0d9a317bc1b
c-ares-debugsource-1.13.0-6.el8_6.3.i686.rpm	SHA-256: 2de58464696ecde00d65fd2dc8205db9d3e4a46b58c107f44704277c50e49a51
c-ares-debugsource-1.13.0-6.el8_6.3.x86_64.rpm	SHA-256: e72247a36f53b5dc16f0636f4f0132f8b0361ac00601d1a7bc4ea3c22715743f
c-ares-devel-1.13.0-6.el8_6.3.i686.rpm	SHA-256: b082ed40f50261ca5b5a853679612a579947e36de24327249e3f20b70a7c4916
c-ares-devel-1.13.0-6.el8_6.3.x86_64.rpm	SHA-256: 26ed71215a3302c8f785b7aae280443dbf7eae80205c3c8e6be524e2e2cba9e4

Red Hat Enterprise Linux Server - AUS 8.6

SRPM
c-ares-1.13.0-6.el8_6.3.src.rpm	SHA-256: d84e5460b2dc6bb28a7fa034cec05e8ce1f1f76d15669ea1c5ed1cced2e8b5ff
x86_64
c-ares-1.13.0-6.el8_6.3.i686.rpm	SHA-256: 2762126d517149eecf0e6ba995817a44082db166d291375b0bcf959743412627
c-ares-1.13.0-6.el8_6.3.x86_64.rpm	SHA-256: 08927d62b1964bf27857526e0b72a8cd6fdc6b06cd846acdbed04e7af4fff7dd
c-ares-debuginfo-1.13.0-6.el8_6.3.i686.rpm	SHA-256: 2a583bdd608c2e98567941084671ea2fd8cef40acbf3332f8dc0df07ca532c1e
c-ares-debuginfo-1.13.0-6.el8_6.3.x86_64.rpm	SHA-256: 1ea81ad96c017309fba2cba73c1b3ae19a0a0df655c363c93ce0f0d9a317bc1b
c-ares-debugsource-1.13.0-6.el8_6.3.i686.rpm	SHA-256: 2de58464696ecde00d65fd2dc8205db9d3e4a46b58c107f44704277c50e49a51
c-ares-debugsource-1.13.0-6.el8_6.3.x86_64.rpm	SHA-256: e72247a36f53b5dc16f0636f4f0132f8b0361ac00601d1a7bc4ea3c22715743f
c-ares-devel-1.13.0-6.el8_6.3.i686.rpm	SHA-256: b082ed40f50261ca5b5a853679612a579947e36de24327249e3f20b70a7c4916
c-ares-devel-1.13.0-6.el8_6.3.x86_64.rpm	SHA-256: 26ed71215a3302c8f785b7aae280443dbf7eae80205c3c8e6be524e2e2cba9e4

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 8.6

SRPM
c-ares-1.13.0-6.el8_6.3.src.rpm	SHA-256: d84e5460b2dc6bb28a7fa034cec05e8ce1f1f76d15669ea1c5ed1cced2e8b5ff
s390x
c-ares-1.13.0-6.el8_6.3.s390x.rpm	SHA-256: c33f2ce0d4afa554015c74b1477b7dda3201349ff92fda17a8b3ce4c80061980
c-ares-debuginfo-1.13.0-6.el8_6.3.s390x.rpm	SHA-256: 17120165e138a2cff08d93c89b5371d3cd83cb2c12a9c74c459bad1f3941a5c7
c-ares-debugsource-1.13.0-6.el8_6.3.s390x.rpm	SHA-256: 14a906f55cbfb93df0575eb12f0d10db806f5ca4e91acbeb26d0e9e6a7e1439d
c-ares-devel-1.13.0-6.el8_6.3.s390x.rpm	SHA-256: 4d732efcf745e6481877d0f3391255109d30b38f465b4d0e56367ccc0ed02501

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.6

SRPM
c-ares-1.13.0-6.el8_6.3.src.rpm	SHA-256: d84e5460b2dc6bb28a7fa034cec05e8ce1f1f76d15669ea1c5ed1cced2e8b5ff
ppc64le
c-ares-1.13.0-6.el8_6.3.ppc64le.rpm	SHA-256: 79b44fd2e19bc2191c150c55174d6612bf2e86daeb24fa493fb69333c2f4deea
c-ares-debuginfo-1.13.0-6.el8_6.3.ppc64le.rpm	SHA-256: 59cd46a11adc9e58d055b2b91524e3fb18f71187f4025ade4b8d6c07e80f1354
c-ares-debugsource-1.13.0-6.el8_6.3.ppc64le.rpm	SHA-256: 1d8e081995cc0752f4e9a79ca0de556537b6f1be6c3529da5b761db257eb5106
c-ares-devel-1.13.0-6.el8_6.3.ppc64le.rpm	SHA-256: 187096213edf6f3d2ad3ab81d2a3f86646c819a89d11f739fdd2a3f59b85e78c

Red Hat Enterprise Linux Server - TUS 8.6

SRPM
c-ares-1.13.0-6.el8_6.3.src.rpm	SHA-256: d84e5460b2dc6bb28a7fa034cec05e8ce1f1f76d15669ea1c5ed1cced2e8b5ff
x86_64
c-ares-1.13.0-6.el8_6.3.i686.rpm	SHA-256: 2762126d517149eecf0e6ba995817a44082db166d291375b0bcf959743412627
c-ares-1.13.0-6.el8_6.3.x86_64.rpm	SHA-256: 08927d62b1964bf27857526e0b72a8cd6fdc6b06cd846acdbed04e7af4fff7dd
c-ares-debuginfo-1.13.0-6.el8_6.3.i686.rpm	SHA-256: 2a583bdd608c2e98567941084671ea2fd8cef40acbf3332f8dc0df07ca532c1e
c-ares-debuginfo-1.13.0-6.el8_6.3.x86_64.rpm	SHA-256: 1ea81ad96c017309fba2cba73c1b3ae19a0a0df655c363c93ce0f0d9a317bc1b
c-ares-debugsource-1.13.0-6.el8_6.3.i686.rpm	SHA-256: 2de58464696ecde00d65fd2dc8205db9d3e4a46b58c107f44704277c50e49a51
c-ares-debugsource-1.13.0-6.el8_6.3.x86_64.rpm	SHA-256: e72247a36f53b5dc16f0636f4f0132f8b0361ac00601d1a7bc4ea3c22715743f
c-ares-devel-1.13.0-6.el8_6.3.i686.rpm	SHA-256: b082ed40f50261ca5b5a853679612a579947e36de24327249e3f20b70a7c4916
c-ares-devel-1.13.0-6.el8_6.3.x86_64.rpm	SHA-256: 26ed71215a3302c8f785b7aae280443dbf7eae80205c3c8e6be524e2e2cba9e4

Red Hat Enterprise Linux for ARM 64 - Extended Update Support 8.6

SRPM
c-ares-1.13.0-6.el8_6.3.src.rpm	SHA-256: d84e5460b2dc6bb28a7fa034cec05e8ce1f1f76d15669ea1c5ed1cced2e8b5ff
aarch64
c-ares-1.13.0-6.el8_6.3.aarch64.rpm	SHA-256: b734a9222d2bf4f6a4bdac3e1e53bbc5d52e065491548487ecc70aff0f1c08d5
c-ares-debuginfo-1.13.0-6.el8_6.3.aarch64.rpm	SHA-256: 887778910d23acf5a1941dfcb2238aaac9509f1f599692fd354fe5b1754af728
c-ares-debugsource-1.13.0-6.el8_6.3.aarch64.rpm	SHA-256: dc92cceaf6f7779dba2b26b7dd195c08ee747441dda9644075f57af6c419c2a1
c-ares-devel-1.13.0-6.el8_6.3.aarch64.rpm	SHA-256: f83e9a7016af9d850d7aa0f828cc26b818866d1564df16a4a15aa0d071a7e8b2

Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.6

SRPM
c-ares-1.13.0-6.el8_6.3.src.rpm	SHA-256: d84e5460b2dc6bb28a7fa034cec05e8ce1f1f76d15669ea1c5ed1cced2e8b5ff
ppc64le
c-ares-1.13.0-6.el8_6.3.ppc64le.rpm	SHA-256: 79b44fd2e19bc2191c150c55174d6612bf2e86daeb24fa493fb69333c2f4deea
c-ares-debuginfo-1.13.0-6.el8_6.3.ppc64le.rpm	SHA-256: 59cd46a11adc9e58d055b2b91524e3fb18f71187f4025ade4b8d6c07e80f1354
c-ares-debugsource-1.13.0-6.el8_6.3.ppc64le.rpm	SHA-256: 1d8e081995cc0752f4e9a79ca0de556537b6f1be6c3529da5b761db257eb5106
c-ares-devel-1.13.0-6.el8_6.3.ppc64le.rpm	SHA-256: 187096213edf6f3d2ad3ab81d2a3f86646c819a89d11f739fdd2a3f59b85e78c

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.6

SRPM
c-ares-1.13.0-6.el8_6.3.src.rpm	SHA-256: d84e5460b2dc6bb28a7fa034cec05e8ce1f1f76d15669ea1c5ed1cced2e8b5ff
x86_64
c-ares-1.13.0-6.el8_6.3.i686.rpm	SHA-256: 2762126d517149eecf0e6ba995817a44082db166d291375b0bcf959743412627
c-ares-1.13.0-6.el8_6.3.x86_64.rpm	SHA-256: 08927d62b1964bf27857526e0b72a8cd6fdc6b06cd846acdbed04e7af4fff7dd
c-ares-debuginfo-1.13.0-6.el8_6.3.i686.rpm	SHA-256: 2a583bdd608c2e98567941084671ea2fd8cef40acbf3332f8dc0df07ca532c1e
c-ares-debuginfo-1.13.0-6.el8_6.3.x86_64.rpm	SHA-256: 1ea81ad96c017309fba2cba73c1b3ae19a0a0df655c363c93ce0f0d9a317bc1b
c-ares-debugsource-1.13.0-6.el8_6.3.i686.rpm	SHA-256: 2de58464696ecde00d65fd2dc8205db9d3e4a46b58c107f44704277c50e49a51
c-ares-debugsource-1.13.0-6.el8_6.3.x86_64.rpm	SHA-256: e72247a36f53b5dc16f0636f4f0132f8b0361ac00601d1a7bc4ea3c22715743f
c-ares-devel-1.13.0-6.el8_6.3.i686.rpm	SHA-256: b082ed40f50261ca5b5a853679612a579947e36de24327249e3f20b70a7c4916
c-ares-devel-1.13.0-6.el8_6.3.x86_64.rpm	SHA-256: 26ed71215a3302c8f785b7aae280443dbf7eae80205c3c8e6be524e2e2cba9e4

Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle Long Life 8.6

SRPM
c-ares-1.13.0-6.el8_6.3.src.rpm	SHA-256: d84e5460b2dc6bb28a7fa034cec05e8ce1f1f76d15669ea1c5ed1cced2e8b5ff
aarch64
c-ares-1.13.0-6.el8_6.3.aarch64.rpm	SHA-256: b734a9222d2bf4f6a4bdac3e1e53bbc5d52e065491548487ecc70aff0f1c08d5
c-ares-debuginfo-1.13.0-6.el8_6.3.aarch64.rpm	SHA-256: 887778910d23acf5a1941dfcb2238aaac9509f1f599692fd354fe5b1754af728
c-ares-debugsource-1.13.0-6.el8_6.3.aarch64.rpm	SHA-256: dc92cceaf6f7779dba2b26b7dd195c08ee747441dda9644075f57af6c419c2a1
c-ares-devel-1.13.0-6.el8_6.3.aarch64.rpm	SHA-256: f83e9a7016af9d850d7aa0f828cc26b818866d1564df16a4a15aa0d071a7e8b2

Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle Long Life 8.6

SRPM
c-ares-1.13.0-6.el8_6.3.src.rpm	SHA-256: d84e5460b2dc6bb28a7fa034cec05e8ce1f1f76d15669ea1c5ed1cced2e8b5ff
ppc64le
c-ares-1.13.0-6.el8_6.3.ppc64le.rpm	SHA-256: 79b44fd2e19bc2191c150c55174d6612bf2e86daeb24fa493fb69333c2f4deea
c-ares-debuginfo-1.13.0-6.el8_6.3.ppc64le.rpm	SHA-256: 59cd46a11adc9e58d055b2b91524e3fb18f71187f4025ade4b8d6c07e80f1354
c-ares-debugsource-1.13.0-6.el8_6.3.ppc64le.rpm	SHA-256: 1d8e081995cc0752f4e9a79ca0de556537b6f1be6c3529da5b761db257eb5106
c-ares-devel-1.13.0-6.el8_6.3.ppc64le.rpm	SHA-256: 187096213edf6f3d2ad3ab81d2a3f86646c819a89d11f739fdd2a3f59b85e78c

Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle Long Life 8.6

SRPM
c-ares-1.13.0-6.el8_6.3.src.rpm	SHA-256: d84e5460b2dc6bb28a7fa034cec05e8ce1f1f76d15669ea1c5ed1cced2e8b5ff
s390x
c-ares-1.13.0-6.el8_6.3.s390x.rpm	SHA-256: c33f2ce0d4afa554015c74b1477b7dda3201349ff92fda17a8b3ce4c80061980
c-ares-debuginfo-1.13.0-6.el8_6.3.s390x.rpm	SHA-256: 17120165e138a2cff08d93c89b5371d3cd83cb2c12a9c74c459bad1f3941a5c7
c-ares-debugsource-1.13.0-6.el8_6.3.s390x.rpm	SHA-256: 14a906f55cbfb93df0575eb12f0d10db806f5ca4e91acbeb26d0e9e6a7e1439d
c-ares-devel-1.13.0-6.el8_6.3.s390x.rpm	SHA-256: 4d732efcf745e6481877d0f3391255109d30b38f465b4d0e56367ccc0ed02501

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.

Select Your Language

Infrastructure and Management

Cloud Computing

Storage

Runtimes

Integration and Automation