c-ares-1.34.6

[Douglas R. Reno]

New point version

c-ares version 1.34.6 - December 8 2025

This is a security release.

Security:

    CVE-2025-62408. A use-after-free bug has been uncovered in 
read_answers() that
    was introduced in v1.32.3. Please see https://github.com/c-ares/c-
ares/security/advisories/GHSA-jq53-42q6-pqr5

Changes:

    Ignore Windows IDN Search Domains until proper IDN support is added. PR #1034

Bugfixes:

    Event Thread could stall when not notified of new queries on existing
    connections that are in a bad state
    PR #1032
    fix conversion of invalid service to port number in ares_getaddrinfo()
    PR #1029
    fix memory leak in ares_uri
    PR #1012
    Ignore ares_event_configchg_init failures
    PR #1009
    Use XOR for random seed generation on fallback logic.
    PR #994
    Fix clang build on windows.
    PR #996
    Fix IPv6 link-local nameservers in /etc/resolv.conf
    PR #996
    Fix a few build issues on MidnightBSD.
    PR #983

[Douglas R. Reno]

Fixed at 97fb8da249dbfcfbdb3c40ba94bb2799eccec6f6

SA-12.4-055 issued

[Bruce Dubbs]

Milestone renamed