Subject: Re: [SECURITY ADVISORY] c-ares: single byte out of buffer write

Re: [SECURITY ADVISORY] c-ares: single byte out of buffer write

From: bch <brad.harder_at_gmail.com>
Date: Thu, 29 Sep 2016 13:38:56 -0700

On Sep 29, 2016 1:37 PM, "Daniel Stenberg" <daniel_at_haxx.se> wrote:
>
> On Thu, 29 Sep 2016, bch wrote:
>
>> On 9/29/16, bch <brad.harder_at_gmail.com> wrote:
>>>
>>> This release doesn't have the ./configure properly generated.
>>
>>
>> Note to self, others: it's essentially the git checkout - run
./buildconf.
>
>
> I assume you're talking about the tarball you can get from github?
>
> The official tarballs and releases are hosted at https://c-ares.haxx.se/
and I can certainly see and use the configure script in the 1.12.0 release
from there. That package is also the only signed tarball.

I am, and now I learned something. Thanks, sorry for the noise.

-bch

> --
>
> / daniel.haxx.se
Received on 2016-09-29