[Buildroot] [git commit] package/c-ares: security bump to version 1.34.5
Julien Olivain
ju.o at free.fr
Thu Apr 17 20:40:21 UTC 2025
commit: https://git.buildroot.net/buildroot/commit/?id=f85aea1b96ff865ad2981566cfa64f5140f30753
branch: https://git.buildroot.net/buildroot/commit/?id=refs/heads/master
Fixes the following security issue:
- CVE-2025-31498: Use after free in read_answers()
https://github.com/c-ares/c-ares/security/advisories/GHSA-6hxc-62jh-p29v
For more details, see the announcement:
https://github.com/c-ares/c-ares/releases/tag/v1.34.5
Signed-off-by: Peter Korsgaard <peter at korsgaard.com>
Signed-off-by: Julien Olivain <ju.o at free.fr>
---
package/c-ares/c-ares.hash | 2 +-
package/c-ares/c-ares.mk | 4 ++--
2 files changed, 3 insertions(+), 3 deletions(-)
diff --git a/package/c-ares/c-ares.hash b/package/c-ares/c-ares.hash
index 8dc84ada89..1c28d91e97 100644
--- a/package/c-ares/c-ares.hash
+++ b/package/c-ares/c-ares.hash
@@ -1,5 +1,5 @@
# Locally calculated after checking pgp signature
-sha256 35410aa625cc9ee95b66475f54aea7c81c673fb63d75fad5eee267711503b72a c-ares-1.34.2.tar.gz
+sha256 7d935790e9af081c25c495fd13c2cfcda4792983418e96358ef6e7320ee06346 c-ares-1.34.5.tar.gz
# Hash for license file
sha256 460f5e768fda3752ca2169a95df062578a10fb126bfd65f3b9b1a1bed2f84807 LICENSE.md
diff --git a/package/c-ares/c-ares.mk b/package/c-ares/c-ares.mk
index 6685ade9d6..090147d0e9 100644
--- a/package/c-ares/c-ares.mk
+++ b/package/c-ares/c-ares.mk
@@ -4,8 +4,8 @@
#
################################################################################
-C_ARES_VERSION = 1.34.2
-C_ARES_SITE = https://github.com/c-ares/c-ares/releases/download/v1.34.2
+C_ARES_VERSION = 1.34.5
+C_ARES_SITE = https://github.com/c-ares/c-ares/releases/download/v$(C_ARES_VERSION)
C_ARES_INSTALL_STAGING = YES
C_ARES_CONF_OPTS = --with-random=/dev/urandom
C_ARES_LICENSE = MIT
More information about the buildroot
mailing list