mirror/buildroot
1
0
Fork 0
mirror of https://gitlab.com/buildroot.org/buildroot.git synced 2026-08-08 08:30:47 -09:00
Code Issues Packages Projects Releases Wiki Activity

package/c-ares: security bump to v1.34.6

Browse Source 
For more information about the release, see:
  - https://github.com/c-ares/c-ares/releases/tag/v1.34.6

Fixes the following vulnerability:

- CVE-2025-62408:
    c-ares is an asynchronous resolver library. Versions 1.32.3 through
    1.34.5  terminate a query after maximum attempts when using
    read_answer() and process_answer(), which can cause a Denial of
    Service. This issue is fixed in version 1.34.6.

For more information, see:
  - https://www.cve.org/CVERecord?id=CVE-2025-62408
  - 714bf5675c

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit bed675a240)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
This commit is contained in:
Thomas Perale
2026-02-22 21:46:07 +01:00
parent 9634c4d584
commit 6930cbca0d
2 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
package/c-ares/c-ares.hash
View File

@@ -1,5 +1,5 @@
# Locally calculated after checking pgp signature
sha256 7d935790e9af081c25c495fd13c2cfcda4792983418e96358ef6e7320ee06346 c-ares-1.34.5.tar.gz
sha256 912dd7cc3b3e8a79c52fd7fb9c0f4ecf0aaa73e45efda880266a2d6e26b84ef5 c-ares-1.34.6.tar.gz
# Hash for license file
sha256 460f5e768fda3752ca2169a95df062578a10fb126bfd65f3b9b1a1bed2f84807 LICENSE.md

2
package/c-ares/c-ares.mk
View File

@@ -4,7 +4,7 @@
#
################################################################################
C_ARES_VERSION = 1.34.5
C_ARES_VERSION = 1.34.6
C_ARES_SITE = https://github.com/c-ares/c-ares/releases/download/v$(C_ARES_VERSION)
C_ARES_INSTALL_STAGING = YES
C_ARES_CONF_OPTS = --with-random=/dev/urandom