-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 07 Aug 2021 11:43:50 +0200 Source: c-ares Architecture: source Version: 1.17.1-1.1 Distribution: unstable Urgency: medium Maintainer: Gregor Jasny <gjasny@googlemail.com> Changed-By: Salvatore Bonaccorso <carnil@debian.org> Closes: 992053 Changes: c-ares (1.17.1-1.1) unstable; urgency=medium . * Non-maintainer upload. * Missing input validation on hostnames returned by DNS servers (CVE-2021-3672) (Closes: #992053) - ares_expand_name() should escape more characters - ares_expand_name(): fix formatting and handling of root name response Checksums-Sha1: ae9d01a4640938cf1be2e6ee8c97f882d4fb168e 2277 c-ares_1.17.1-1.1.dsc 21211a710b8af6d5ac10dc5a2fad120774f550da 9932 c-ares_1.17.1-1.1.debian.tar.xz Checksums-Sha256: 672e1174eb176a5b60806d2b998ea10c1f2916f897e227a0a49f92b3f2b9dc64 2277 c-ares_1.17.1-1.1.dsc 7b5dc4da2bf6cfafeb44797b3a9e58dabe94ef79347cf0f5375aad5af1fc9683 9932 c-ares_1.17.1-1.1.debian.tar.xz Files: 4788fa6102cf9f47e3488eb444356074 2277 libs optional c-ares_1.17.1-1.1.dsc 250f4b58e3f34f0471b7a2ac59478f0b 9932 libs optional c-ares_1.17.1-1.1.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQKmBAEBCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAmESHeRfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk ZWJpYW4ub3JnAAoJEAVMuPMTQ89EvWcP/0tEBL0wTTxdHoTAlsVRNa4EZ62TVFej 7YL2QsYGwW0dc2yvxq7HYAvOdE6y0ee4CPEYJCOcLrhhftHmH3aF9+3Ih/z5N+r3 h1JGCD+5/ByzzzyLIls3mwhEEAKJcDO4NtYorOZynBvIP32XfOvyrujzP7+0xvUl AT6lokhUYHZrdhxNfx0hDyeMEOUSxp49H67wUYTN5Lh09G9y1faR8KojddIPHJ9P Eb81I+11xzOaZPx3S4/RjrNf1L/SD3cilCUGMN95OEJKm9DIUbFp5JrvWhDt1jnT rOkifrugDsv5vi2Tssxap46uc+aZKbBkIyDpzZ3pJTRlXbxaVT9yQY0GbLQjb1po 1Q37StO4TP8F6p4OaaZl1fh+Fe95IbLNxJgJVPh52xXxjrXHP4OzuNKLrpdL3Pqn Y3FNsob7VYJcqBh7sKS7wW1ltjz14WKec0j3cmkiHVLv+EhB7J83J0upkr7VrOkw gENnLyoizUP6r714FXyy/X3m4EDLPcXUJUGb4faSiedqczCqFAYaxVvwF+vhJspm Pq3eb0LVLqEp02Wv1xPJuxtfTHNHi7V6SI0A4vsbT1dmIZozAiUOMkEljnQ5YiTN ilhXZGzKiQAerkLEdLNEmGva4baOUpT3kj5THqCojBe0AHbf/T6MSdGloIJW6mC7 qWtmPx4tNCez =i+h6 -----END PGP SIGNATURE-----