mirror of https://github.com/openwrt/packages.git
2e9131fa69
This is a security release. Security: * Memory corruption when an application cancels its lookups after a connection failure. * A DNS reply that arrived from a different server than the one queried could be accepted. * Use-after-free of a lookup after shutting down a failed connection. * Use-after-free when an application cancels lookups from a callback, or shuts a channel down. * Use-after-free of a connection after the socket-state callback returns. * Use-after-free when an application cancels lookups from a server-state callback. * Use-after-free of a server record when an application changes its DNS servers from a callback. * Use-after-free of a cached DNS answer while the application is still reading it. * Buffer overflow when ares_dup() or ares_save_options() runs while another thread changes the srv * Uninitialized memory returned for a numeric IPv6 name with a prefix length. * The query cache could return an answer obtained using different EDNS options. Fixes: GHSA-wpr3-8q3r-4q8c GHSA-fqh5-3x7m-wp44 GHSA-97vq-4mxv-7vhm GHSA-rf6g-ww74-97qh GHSA-mw23-pfg6-2x9r GHSA-v33j-65h4-4ch8 GHSA-pj7p-v3cw-hq66 GHSA-grv7-fq5q-9vfc GHSA-ph6c-3cvx-mq6v GHSA-cfcv-8v2j-qj6r GHSA-wrgc-prmw-27xh Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com> |
||
|---|---|---|
| .. | ||
| Makefile | ||