packages/libs/c-ares/Makefile, branch masterMirror of packages feedhttps://git-03.infra.openwrt.org/feed/packages/atom?h=master2026-09-04T14:04:44Zc-ares: bump to 1.34.82026-09-04T14:04:44ZKaren Khachatryan2026-08-30T09:44:14Zurn:sha1:f3bc744d83800d067674e0c85bc00c6ae114e319
Update c-ares from 1.34.6 to 1.34.8.
Version 1.34.7 includes the following security fixes:
* CVE-2026-33630 (GHSA-6wfj-rwm7-3542): fix a use-after-free /
double-free issue in query-completion handling.
* CVE-2026-69184 (GHSA-pjmc-gx33-gc76): limit DNS name compression
pointer traversal to prevent CPU-exhaustion denial of service.
* CVE-2026-69186 (GHSA-jv8r-gqr9-68wj): validate DNS record counts
before allocation to prevent memory-amplification denial of service.
It also fixes the UDP socket exhaustion regression introduced in 1.34.6.
Version 1.34.8 reverts an unintended API break introduced in 1.34.7 by
the callback parameter const changes.
Signed-off-by: Karen Khachatryan <karen0734@gmail.com>
treewide: fix spelling and grammar in Makefiles2025-12-31T07:12:36ZGeorge Sapkin2025-12-26T04:26:18Zurn:sha1:de64f871b0f00b885039997eb46f914bdac687a5
Fix spelling and grammar in package definitions, configs, comments and
other strings.
Signed-off-by: George Sapkin <george@sapk.in>
c-ares: bump to 1.34.62025-12-15T10:00:34ZHirokazu MORIKAWA2025-12-15T08:42:33Zurn:sha1:ebdb9536a9a0063f92efd63b529d7c9bd0d838c4
This is a security release.
Security:
* CVE-2025-31498. A use-after-free bug has been uncovered in read_answers() that was introduced in v1.32.3. Please see GHSA-6hxc-62jh-p29v
* CVE-2025-62408. A use-after-free bug has been uncovered in read_answers() that was introduced in v1.32.3. Please see GHSA-jq53-42q6-pqr5
Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
c-ares: update to 1.33.12024-08-30T16:14:31ZAleksey Vasilenko2024-08-26T04:38:29Zurn:sha1:e2e809044b560c79f11bb9b5495eb6afdb067479
Signed-off-by: Aleksey Vasilenko <aleksey.vasilenko@gmail.com>
c-ares: update to 1.32.32024-07-25T23:06:36ZAleksey Vasilenko2024-07-24T22:29:18Zurn:sha1:7cde0eea991ab030c1dcb595fe65c9808db9fdef
- Use up-to-date source URL
Signed-off-by: Aleksey Vasilenko <aleksey.vasilenko@gmail.com>
c-ares: update to 1.29.02024-06-03T02:17:13Zkrant2024-06-02T10:29:18Zurn:sha1:567a123f88d9336ddf3c9cbc533d512ee8e9a592
Signed-off-by: krant <aleksey.vasilenko@gmail.com>
c-ares: update to 1.28.12024-04-10T23:13:53Zkrant2024-04-07T14:26:05Zurn:sha1:bf0b0bea6c441dfd7bb8dee985554ef16471c3a4
Signed-off-by: krant <aleksey.vasilenko@gmail.com>
c-ares: update to 1.27.02024-02-24T20:10:20Zkrant2024-02-23T20:19:37Zurn:sha1:0858accfda87e09df019c2e8ba4ab51f6323f17e
- Update package URL
- Don't set default CMake options
Signed-off-by: krant <aleksey.vasilenko@gmail.com>
c-ares: bump to 1.19.12023-06-22T04:29:05ZHirokazu MORIKAWA2023-06-15T06:49:25Zurn:sha1:4c4d3b900197785292ef92055effcccd7f3b805b
This is a security and bugfix release.
Security
o CVE-2023-32067. High. 0-byte UDP payload causes Denial of Service
o CVE-2023-31147. Moderate. Insufficient randomness in generation of DNS query IDs
o CVE-2023-31130. Moderate. Buffer Underwrite in ares_inet_net_pton()
o CVE-2023-31124. Low. AutoTools does not set CARES_RANDOM_FILE during cross compilation
Fixing libcares.pc
The pkg-config file libcares.pc in version 1.19.1 has been changed to be unsuitable for OpenWrt
and causes build errors with Openwrt packages that use libcares.
For this reason, libcares.pc was replaced.
Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
c-ares: bump to 1.18.12021-11-09T09:21:40ZKarl Palsson2021-11-09T09:16:59Zurn:sha1:60e60fc38f26ef3397411488dfe4a1117f04592a
Changelog: https://lists.haxx.se/pipermail/c-ares/2021-October/000002.html
This includes the update to the domain name, made upstream, ref: https://lists.haxx.se/pipermail/c-ares/2021-September/000001.html
Signed-off-by: Karl Palsson <karlp@etactica.com>