Ubuntu alert USN-8844-1 (c-ares)

From:
             
 
noreply+usn-bot--- via ubuntu-security-announce <ubuntu-security-announce@lists.ubuntu.com>
To:
             
 
ubuntu-security-announce@lists.ubuntu.com
Subject:
             
 
[USN-8844-1] c-ares vulnerability
Date:
             
 
Tue, 29 Sep 2026 17:57:18 +0000
Message-ID:
             
 
<E1xBc4s-0003m7-1Q@lists.ubuntu.com>
Cc:
             
 
noreply+usn-bot@canonical.com
==========================================================================
Ubuntu Security Notice USN-8844-1
September 29, 2026

c-ares vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 26.04 LTS

Summary:

c-ares could be made to crash or run programs if it received specially
crafted network traffic.

Software Description:
- c-ares: library for asynchronous name resolution

Details:

It was discovered that c-ares incorrectly handled certain query completion
callbacks. An attacker could possibly use this issue to trigger a use-
after-free or double-free, resulting in a denial of service or arbitrary
code execution.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 26.04 LTS
  libcares2                       1.34.6-1ubuntu0.1

In general, a standard system update will make all the necessary changes.

References:
  https://ubuntu.com/security/notices/USN-8844-1
  CVE-2026-33630

Package Information:
  https://launchpad.net/ubuntu/+source/c-ares/1.34.6-1ubunt...


Attachment: signature.asc (type=application/pgp-signature)
-----BEGIN PGP SIGNATURE-----
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=Wuum
-----END PGP SIGNATURE-----