Fedora alert FEDORA-2017-7c9a5b4791 (mingw-c-ares)

From:
    	     
 
updates@fedoraproject.org 
To:
    	     
 
package-announce@lists.fedoraproject.org 
Subject:
    	     
 
[SECURITY] Fedora 26 Update: mingw-c-ares-1.13.0-1.fc26 
Date:
    	     
 
Tue,  1 Aug 2017 16:26:26 +0000 (UTC)
Message-ID:
    	     
 
<20170801162626.91DD460DDB8A@bastion01.phx2.fedoraproject.org>
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2017-7c9a5b4791
2017-08-01 13:47:18.101005
--------------------------------------------------------------------------------

Name        : mingw-c-ares
Product     : Fedora 26
Version     : 1.13.0
Release     : 1.fc26
URL         : http://c-ares.haxx.se/

Summary     : Library that performs asynchronous DNS operations
Description :
c-ares is a C library that performs DNS requests and name resolves
asynchronously. c-ares is a fork of the library named 'ares', written
by Greg Hudson at MIT.

--------------------------------------------------------------------------------
Update Information:

New version, security fix for CVE-2017-1000381.
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1463135 - CVE-2017-1000381 mingw-c-ares: c-ares: NAPTR parser out of bounds access
[fedora-all]
        https://bugzilla.redhat.com/show_bug.cgi?id=1463135

--------------------------------------------------------------------------------

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade mingw-c-ares' at the command line.
For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgr...

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys

--------------------------------------------------------------------------------
_______________________________________________
package-announce mailing list -- package-announce@lists.fedoraproject.org
To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org