From 66cfd29e97a00d5210da38fe45ea2effe23bea94 Mon Sep 17 00:00:00 2001 From: Fabrice Fontaine Date: Fri, 23 Feb 2024 18:28:50 +0100 Subject: [PATCH] package/c-ares: security bump to version 1.27.0 Fix CVE-2024-25629: Reading malformatted /etc/resolv.conf, /etc/nsswitch.conf or the HOSTALIASES file could result in a crash. https://github.com/c-ares/c-ares/security/advisories/GHSA-mg26-v6qh-x48q https://github.com/c-ares/c-ares/releases/tag/cares-1_27_0 Signed-off-by: Fabrice Fontaine Signed-off-by: Peter Korsgaard --- package/c-ares/c-ares.hash | 2 +- package/c-ares/c-ares.mk | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/package/c-ares/c-ares.hash b/package/c-ares/c-ares.hash index ee097a53c9..9a2b69c731 100644 --- a/package/c-ares/c-ares.hash +++ b/package/c-ares/c-ares.hash @@ -1,5 +1,5 @@ # Locally calculated after checking pgp signature -sha256 bed58c4f02b009080ebda6c2467ba469722ac6aebbf4497dc44a83d8c6194e50 c-ares-1.26.0.tar.gz +sha256 0a72be66959955c43e2af2fbd03418e82a2bd5464604ec9a62147e37aceb420b c-ares-1.27.0.tar.gz # Hash for license file sha256 80fff25340df53b0cf0c3cddbca9050b559b9cbed2ad71830327cfef54959aef LICENSE.md diff --git a/package/c-ares/c-ares.mk b/package/c-ares/c-ares.mk index 29da6baa4b..c4441255a2 100644 --- a/package/c-ares/c-ares.mk +++ b/package/c-ares/c-ares.mk @@ -4,7 +4,7 @@ # ################################################################################ -C_ARES_VERSION = 1.26.0 +C_ARES_VERSION = 1.27.0 C_ARES_SITE = http://c-ares.haxx.se/download C_ARES_INSTALL_STAGING = YES C_ARES_CONF_OPTS = --with-random=/dev/urandom