From 31716a180a3a8b3ebe53f8e68004cbfb1b1503e5 Mon Sep 17 00:00:00 2001 From: Peter Korsgaard Date: Fri, 29 May 2026 20:49:33 +0200 Subject: [PATCH] package/{aardvark-dns, netavark}: security bump to versions 1.17.1 Fixes the following security issue: CVE-2026-35406: netavark has incorrect error handling for malformed tcp packets https://github.com/advisories/GHSA-hfpq-x728-986j aardvark-dns and netavark needs to be bumped in sync, so update both. https://github.com/containers/aardvark-dns/releases/tag/v1.17.1 https://github.com/containers/netavark/releases/tag/v1.17.1 Signed-off-by: Peter Korsgaard Signed-off-by: Arnout Vandecappelle --- package/aardvark-dns/aardvark-dns.hash | 2 +- package/aardvark-dns/aardvark-dns.mk | 2 +- package/netavark/netavark.hash | 2 +- package/netavark/netavark.mk | 2 +- 4 files changed, 4 insertions(+), 4 deletions(-) diff --git a/package/aardvark-dns/aardvark-dns.hash b/package/aardvark-dns/aardvark-dns.hash index b3b742089a..d0a42c2ca5 100644 --- a/package/aardvark-dns/aardvark-dns.hash +++ b/package/aardvark-dns/aardvark-dns.hash @@ -1,3 +1,3 @@ # Locally computed -sha256 bf046c3bc7bc9f1f04220a89393b9189bcab1c61c204f247b3a5415d0ac27117 aardvark-dns-v1.17.0-git4-cargo5.tar.gz +sha256 9742d4a31d2136028221f386cf21f377cbad129626a70813f2bedad1162174ad aardvark-dns-v1.17.1-git4-cargo5.tar.gz sha256 c71d239df91726fc519c6eb72d318ec65820627232b2f796219e87dcf35d0ab4 LICENSE diff --git a/package/aardvark-dns/aardvark-dns.mk b/package/aardvark-dns/aardvark-dns.mk index c0dc7eb2a7..3f2a32ac88 100644 --- a/package/aardvark-dns/aardvark-dns.mk +++ b/package/aardvark-dns/aardvark-dns.mk @@ -5,7 +5,7 @@ ################################################################################ # When updating the version here, also update netavark in lockstep -AARDVARK_DNS_VERSION = v1.17.0 +AARDVARK_DNS_VERSION = v1.17.1 AARDVARK_DNS_SITE = https://github.com/containers/aardvark-dns AARDVARK_DNS_SITE_METHOD = git diff --git a/package/netavark/netavark.hash b/package/netavark/netavark.hash index f7ab17de3e..b53311c574 100644 --- a/package/netavark/netavark.hash +++ b/package/netavark/netavark.hash @@ -1,3 +1,3 @@ # Locally computed -sha256 9ff98fe9bcb6478ef558ae277b32aad67dbd7e7b72cac66df24084cb4f9038d9 netavark-v1.17.0-git4-cargo5.tar.gz +sha256 3bfc0d3bb40965ecd4908f9a03a4fcf59228bacfaf6a7b73736b5019181e8499 netavark-v1.17.1-git4-cargo5.tar.gz sha256 c71d239df91726fc519c6eb72d318ec65820627232b2f796219e87dcf35d0ab4 LICENSE diff --git a/package/netavark/netavark.mk b/package/netavark/netavark.mk index d47cee0fe1..e7126e3d4b 100644 --- a/package/netavark/netavark.mk +++ b/package/netavark/netavark.mk @@ -5,7 +5,7 @@ ################################################################################ # When updating the version here, also update aardvark-dns in lockstep -NETAVARK_VERSION = v1.17.0 +NETAVARK_VERSION = v1.17.1 NETAVARK_SITE = https://github.com/containers/netavark NETAVARK_SITE_METHOD = git