Opened 10 months ago

Closed 10 months ago

Last modified 8 months ago

#22497 closed enhancement (duplicate)

c-ares-1.34.6

Reported by: Joe Locash Owned by: blfs-book
Priority: elevated Milestone: 13.0
Component: BOOK Version: git
Severity: medium Keywords:
Cc:

Description (last modified by Joe Locash) 

c-ares version 1.34.6 - December 8 2025

This is a security release.

Security:
    - CVE-2025-62408. A use-after-free bug has been uncovered in read_answers() that
      was introduced in v1.32.3. Please see GHSA-jq53-42q6-pqr5

Changes:
    - Ignore Windows IDN Search Domains until proper IDN support is added. PR #1034

Bugfixes:
    - Event Thread could stall when not notified of new queries on existing
      connections that are in a bad state
    - fix conversion of invalid service to port number in ares_getaddrinfo()
    - fix memory leak in ares_uri
    - Ignore ares_event_configchg_init failures
    - Use XOR for random seed generation on fallback logic.
    - Fix clang build on windows.
    - Fix IPv6 link-local nameservers in /etc/resolv.conf
    - Fix a few build issues on MidnightBSD.

Change History (2)

comment:1 by Joe Locash, 10 months ago

Description: modified (diff)
Resolution: → duplicate
Status: new → closed

Didn't see #22496

comment:2 by Bruce Dubbs, 8 months ago

Milestone: 12.5 → 13.0

Milestone renamed

Note: See TracTickets for help on using tickets.