From 6b197bd62a6252a731deb8f051de47c7edccbe75 Mon Sep 17 00:00:00 2001 From: Hirokazu MORIKAWA Date: Mon, 15 Dec 2025 17:42:33 +0900 Subject: [PATCH] c-ares: bump to 1.34.6 MIME-Version: 1.0 Content-Type: text/plain; charset=utf8 Content-Transfer-Encoding: 8bit This is a security release. Security: * CVE-2025-31498. A use-after-free bug has been uncovered in read_answers() that was introduced in v1.32.3. Please see GHSA-6hxc-62jh-p29v * CVE-2025-62408. A use-after-free bug has been uncovered in read_answers() that
was introduced in v1.32.3. Please see GHSA-jq53-42q6-pqr5 Signed-off-by: Hirokazu MORIKAWA (cherry picked from commit ebdb9536a9a0063f92efd63b529d7c9bd0d838c4) --- libs/c-ares/Makefile | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/libs/c-ares/Makefile b/libs/c-ares/Makefile index eafa3ff058..8e132851ed 100644 --- a/libs/c-ares/Makefile +++ b/libs/c-ares/Makefile @@ -9,12 +9,12 @@ include $(TOPDIR)/rules.mk PKG_NAME:=c-ares -PKG_VERSION:=1.33.1 +PKG_VERSION:=1.34.6 PKG_RELEASE:=1 PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz PKG_SOURCE_URL:=https://github.com/c-ares/c-ares/releases/download/v$(PKG_VERSION) -PKG_HASH:=06869824094745872fa26efd4c48e622b9bd82a89ef0ce693dc682a23604f415 +PKG_HASH:=912dd7cc3b3e8a79c52fd7fb9c0f4ecf0aaa73e45efda880266a2d6e26b84ef5 PKG_LICENSE:=MIT PKG_LICENSE_FILES:=LICENSE.md -- 2.30.2