| Message ID | 20240223172850.559363-1-fontaine.fabrice@gmail.com |
|---|---|
| State | Accepted |
| Headers | show |
| Series | [1/1] package/c-ares: security bump to version 1.27.0 | expand |
>>>>> "Fabrice" == Fabrice Fontaine <fontaine.fabrice@gmail.com> writes: > Fix CVE-2024-25629: Reading malformatted /etc/resolv.conf, > /etc/nsswitch.conf or the HOSTALIASES file could result in a crash. > https://github.com/c-ares/c-ares/security/advisories/GHSA-mg26-v6qh-x48q > https://github.com/c-ares/c-ares/releases/tag/cares-1_27_0 > Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Committed, thanks.
>>>>> "Fabrice" == Fabrice Fontaine <fontaine.fabrice@gmail.com> writes: > Fix CVE-2024-25629: Reading malformatted /etc/resolv.conf, > /etc/nsswitch.conf or the HOSTALIASES file could result in a crash. > https://github.com/c-ares/c-ares/security/advisories/GHSA-mg26-v6qh-x48q > https://github.com/c-ares/c-ares/releases/tag/cares-1_27_0 > Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Committed to 2023.02.x and 2023.11.x, thanks.
diff --git a/package/c-ares/c-ares.hash b/package/c-ares/c-ares.hash index ee097a53c9..9a2b69c731 100644 --- a/package/c-ares/c-ares.hash +++ b/package/c-ares/c-ares.hash @@ -1,5 +1,5 @@ # Locally calculated after checking pgp signature -sha256 bed58c4f02b009080ebda6c2467ba469722ac6aebbf4497dc44a83d8c6194e50 c-ares-1.26.0.tar.gz +sha256 0a72be66959955c43e2af2fbd03418e82a2bd5464604ec9a62147e37aceb420b c-ares-1.27.0.tar.gz # Hash for license file sha256 80fff25340df53b0cf0c3cddbca9050b559b9cbed2ad71830327cfef54959aef LICENSE.md diff --git a/package/c-ares/c-ares.mk b/package/c-ares/c-ares.mk index 29da6baa4b..c4441255a2 100644 --- a/package/c-ares/c-ares.mk +++ b/package/c-ares/c-ares.mk @@ -4,7 +4,7 @@ # ################################################################################ -C_ARES_VERSION = 1.26.0 +C_ARES_VERSION = 1.27.0 C_ARES_SITE = http://c-ares.haxx.se/download C_ARES_INSTALL_STAGING = YES C_ARES_CONF_OPTS = --with-random=/dev/urandom
Fix CVE-2024-25629: Reading malformatted /etc/resolv.conf, /etc/nsswitch.conf or the HOSTALIASES file could result in a crash. https://github.com/c-ares/c-ares/security/advisories/GHSA-mg26-v6qh-x48q https://github.com/c-ares/c-ares/releases/tag/cares-1_27_0 Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> --- package/c-ares/c-ares.hash | 2 +- package/c-ares/c-ares.mk | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-)