Most recent entries from all

ALSA-2026:42096 — Important: c-ares security update

Affected: AlmaLinux:10: c-ares, AlmaLinux:10: c-ares-devel

The c-ares C library defines asynchronous DNS (Domain Name System) requests and provides name resolving API.

Security Fix(es):

* c-ares: c-ares: Use-after-free / double-free in query-completion handling (CVE-2026-33630)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

BELL-CVE-2026-33630

Affected: Alpaquita:25: c-ares, Alpaquita:stream: c-ares, BellSoft Hardened Containers:25: c-ares, BellSoft Hardened Containers:stream: c-ares

EUVD-2026-364161

fkie_cve-2026-33630

c-ares is an asynchronous resolver library. From ver 1.32.3 until 1.34.7, a use-after-free / double-free in c-ares' query-completion handling. The same flaw — a query's callback being invoked while the query is still linked in the channel's internal lookup structures — is present at multiple points in the resend/finish path (timeout handling, response handling, and query dispatch). If the query, or for ares_getaddrinfo() the owning host_query, is freed as a side effect of that callback, it is then accessed and/or freed a second time. This vulnerability is fixed in ver 1.34.7.

msrc_CVE-2026-33630 — c-ares : Use-after-free / double-free in c-ares query-completion handling, remotely triggerable via ares_getaddrinfo()…

msrc_CVE-2026-33630

openSUSE-SU-2026:11593-1 — c-ares-devel-1.34.8-1.1 on GA media

c-ares-devel-1.34.8-1.1 on GA media

RHSA-2026:36192 — Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

c-ares: c-ares: Use-after-free / double-free in query-completion handling

RLSA-2026:42096 — Important: c-ares security update

Affected: Rocky Linux:10: c-ares

The c-ares C library defines asynchronous DNS (Domain Name System) requests and provides name resolving API.

Security Fix(es):

* c-ares: c-ares: Use-after-free / double-free in query-completion handling (CVE-2026-33630)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

SUSE-SU-2026:23364-1 — Security update for c-ares

Security update for c-ares

UBUNTU-CVE-2026-33630

Affected: Ubuntu:25.10: c-ares, Ubuntu:26.04:LTS: c-ares

WID-SEC-W-2026-2419 — Red Hat Enterprise Linux (sssd, glib, c-ares): Mehrere Schwachstellen

Ein Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um Administratorrechte zu erlangen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren und einen Denial-of-Service-Zustand auszulösen.