[CLSA-2026:1792704367] c-ares: Fix of 2 CVEs
Type:
security
Severity:
Critical
Release date:
2026-10-23 16:35:58 UTC
Description:
- CVE-2022-4904: fix stack overflow in ares_set_sortlist due to missing input validation
Updated packages:
  • c-ares-1.10.0-3.el7_9.1.tuxcare.els2.i686.rpm
    sha:ac31a67ff183dbf90f64bc438eb4dd06ac1a98220682686afb326d0635fa60df
  • c-ares-1.10.0-3.el7_9.1.tuxcare.els2.x86_64.rpm
    sha:ed28dfdc0de846fd8eaea52ae92b5a513b77d2f108a72bc507773e049348d276
  • c-ares-devel-1.10.0-3.el7_9.1.tuxcare.els2.i686.rpm
    sha:cf29a8443524c5c226e1a72f1572bca2b882384e734243ca26435591eb70240a
  • c-ares-devel-1.10.0-3.el7_9.1.tuxcare.els2.x86_64.rpm
    sha:8163250c350040f08268e09a68075ce2c4f01e0aef9d5c06a8fae64623d6a042
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.