package/c-ares: security bump to version 1.27.0

Fix CVE-2024-25629: Reading malformatted /etc/resolv.conf,
/etc/nsswitch.conf or the HOSTALIASES file could result in a crash.

https://github.com/c-ares/c-ares/security/advisories/GHSA-mg26-v6qh-x48q
https://github.com/c-ares/c-ares/releases/tag/cares-1_27_0

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
This commit is contained in:
Fabrice Fontaine 2024-02-23 18:28:50 +01:00 committed by Peter Korsgaard
parent fbedcfa221
commit 66cfd29e97
2 changed files with 2 additions and 2 deletions

View File

@ -1,5 +1,5 @@
# Locally calculated after checking pgp signature
sha256 bed58c4f02b009080ebda6c2467ba469722ac6aebbf4497dc44a83d8c6194e50 c-ares-1.26.0.tar.gz
sha256 0a72be66959955c43e2af2fbd03418e82a2bd5464604ec9a62147e37aceb420b c-ares-1.27.0.tar.gz
# Hash for license file
sha256 80fff25340df53b0cf0c3cddbca9050b559b9cbed2ad71830327cfef54959aef LICENSE.md

View File

@ -4,7 +4,7 @@
#
################################################################################
C_ARES_VERSION = 1.26.0
C_ARES_VERSION = 1.27.0
C_ARES_SITE = http://c-ares.haxx.se/download
C_ARES_INSTALL_STAGING = YES
C_ARES_CONF_OPTS = --with-random=/dev/urandom