Navigation:
Browse pkgsrc
(this page)
net libcares
CVSweb ] [ 
Homepage ] [ 
RSS ] [ 
Required by ] 2026-07-09 14:46:45 by Adam Ciarcinski | Files touched by this commit (3) |  |
Log message: libcares: updated to 1.34.8 c-ares version 1.34.8 - July 7 2026 This is a bugfix release. Bugfixes: * Revert "Mark parameters in callbacks as const" which shipped in 1.34.7. Changing the parameter types of the `ares_callback`, `ares_host_callback`, and `ares_nameinfo_callback` function pointer typedefs was an unintended API break: existing applications with the historical non-const callback signatures no longer compiled, particularly in C++ where function pointer types must match exactly. The read-only nature of the callback parameters is now documented instead. |
| 2026-07-07 07:48:04 by Thomas Klausner | Files touched by this commit (2) |
Log message: libcares: switch to newer commit on 1.34 branch Fixes API breakage introduced in 1.34 (non-const -> const argument). Bump PKGREVISION. |
| 2026-07-06 23:03:09 by Thomas Klausner | Files touched by this commit (3) | |
Log message: libcares: update to 1.34.7. ## c-ares version 1.34.7 - July 6 2026 This is a security release. Security: * CVE-2026-33630. Use-after-free / double-free in c-ares' query-completion handling, remotely triggerable via ares_getaddrinfo() over TCP. Please see https://github.com/c-ares/c-ares/security/advisories/GHSA-6wfj-rwm7-3542 * CPU-exhaustion denial of service via unbounded DNS name compression pointer chains. Please see https://github.com/c-ares/c-ares/security/advisories/GHSA-pjmc-gx33-gc76 * Memory-amplification denial of service via unvalidated DNS header record counts. Please see https://github.com/c-ares/c-ares/security/advisories/GHSA-jv8r-gqr9-68wj Changes: * `ares_getaddrinfo()`: handle a NULL node per POSIX and implement `ARES_AI_PASSIVE`. [PR #1186](https://github.com/c-ares/c-ares/pull/1186) * Mark parameters in callbacks as const. [PR #1060](https://github.com/c-ares/c-ares/pull/1060) * Correct `ARES_CLASS_HESOID` misspelling to `ARES_CLASS_HESIOD`. [PR #1092](https://github.com/c-ares/c-ares/pull/1092) Bugfixes: * Fix sticky server recovery when all servers have failures. [PR \ #1192](https://github.com/c-ares/c-ares/pull/1192) * Fix UDP socket exhaustion regression: retire connections per-connection, not \ via server failure count. [PR #1197](https://github.com/c-ares/c-ares/pull/1197) * Guard DNS record binary length overflow. [PR \ #1168](https://github.com/c-ares/c-ares/pull/1168) * Prevent integer overflow in allocation size calculations. [PR \ #1147](https://github.com/c-ares/c-ares/pull/1147) * Prevent overflow in ares_array allocation size calculations. [PR \ #1117](https://github.com/c-ares/c-ares/pull/1117) * Prevent integer overflow in buffer size calculation. [PR \ #1116](https://github.com/c-ares/c-ares/pull/1116) * Add overflow checks to ares_buf_ensure_space(). [PR \ #1094](https://github.com/c-ares/c-ares/pull/1094) * Skip name compression offsets beyond the 14-bit pointer limit. [PR \ #1159](https://github.com/c-ares/c-ares/pull/1159) * ares_dns_parse: reject name compression in RDATA where not permitted (RFC \ 3597). [PR #1190](https://github.com/c-ares/c-ares/pull/1190) * ares_dns_parse: reject responses with more than one OPT record (RFC 6891). [PR \ #1189](https://github.com/c-ares/c-ares/pull/1189) * Discard oversized UDP datagrams instead of truncating the length frame. [PR \ #1161](https://github.com/c-ares/c-ares/pull/1161) * Route numeric config parsing through range-checked ares_str_parse_uint. [PR \ #1158](https://github.com/c-ares/c-ares/pull/1158) * Replace atoi-based port parsing with validated helper. [PR \ #1097](https://github.com/c-ares/c-ares/pull/1097) * Defer TCP connection error handling until DNS responses are parsed. [PR \ #1138](https://github.com/c-ares/c-ares/pull/1138) * Prevent undefined-behavior left shift in ares_calc_query_timeout(). [PR \ #1151](https://github.com/c-ares/c-ares/pull/1151) * Use unsigned type for ares_round_up_pow2_u64 to avoid undefined behavior. [PR \ #1107](https://github.com/c-ares/c-ares/pull/1107) * Fix undefined behavior in ares_buf_replace() pointer arithmetic. [PR \ #1099](https://github.com/c-ares/c-ares/pull/1099) * ares_array: reset offset when array becomes empty. [PR \ #1165](https://github.com/c-ares/c-ares/pull/1165) * ares_iface_ips: add ARES_IFACE_IP_NONE zero enum value. [PR \ #1187](https://github.com/c-ares/c-ares/pull/1187) * ares_sysconfig_files: recognize AIX netsvc.conf bind4/local4 tokens. [PR \ #1188](https://github.com/c-ares/c-ares/pull/1188) * Use safe string construction in Windows sysconfig join path. [PR \ #1143](https://github.com/c-ares/c-ares/pull/1143) * Fix zero-length RAW_RR losing type metadata during parsing. [PR \ #1129](https://github.com/c-ares/c-ares/pull/1129) * Fix RAW_RR type tostr/fromstr roundtrip mismatch. [PR \ #1123](https://github.com/c-ares/c-ares/pull/1123) * Fix NULL dereference for ifa netmask. [PR \ #1120](https://github.com/c-ares/c-ares/pull/1120) * adig: fix negated option prefix parsing. [PR \ #1135](https://github.com/c-ares/c-ares/pull/1135) * Use UnregisterWaitEx to prevent use-after-free on Win32. [PR \ #1111](https://github.com/c-ares/c-ares/pull/1111) * Add NULL check after ares_malloc_zero in Windows UTF8 conversion. [PR \ #1121](https://github.com/c-ares/c-ares/pull/1121) * Fix NULL dereference after ares_malloc_zero in Win32 IOCP event add. [PR \ #1132](https://github.com/c-ares/c-ares/pull/1132) * Fix microsecond overflow in ares_queue_wait_empty timeout. [PR \ #1122](https://github.com/c-ares/c-ares/pull/1122) * Fix NULL dereference in ares_buf_replace() on NULL buf. [PR \ #1124](https://github.com/c-ares/c-ares/pull/1124) * Initialize *read_bytes in ares_socket_recvfrom(). [PR \ #1125](https://github.com/c-ares/c-ares/pull/1125) * Fix memory leak of binbuf in ares_buf_parse_dns_binstr_int. [PR \ #1126](https://github.com/c-ares/c-ares/pull/1126) * Fix memory leak of qcache entry on key allocation failure. [PR \ #1127](https://github.com/c-ares/c-ares/pull/1127) * Fix memory leak of buf in ares_dns_multistring_combined() on OOM. [PR \ #1110](https://github.com/c-ares/c-ares/pull/1110) * Fix memory leaks on error paths in two functions. [PR \ #1109](https://github.com/c-ares/c-ares/pull/1109) * Fix memory leak of buckets in ares_htable_dict_keys() error path. [PR \ #1108](https://github.com/c-ares/c-ares/pull/1108) * Fix memory leak of bucket->key in ares_htable_dict_insert error path. [PR \ #1105](https://github.com/c-ares/c-ares/pull/1105) * Fix additional memory leaks. [PR \ #1091](https://github.com/c-ares/c-ares/pull/1091) [PR \ #1078](https://github.com/c-ares/c-ares/pull/1078) * Prevent corrupt addrinfo nodes on sockaddr allocation failure. [PR \ #1112](https://github.com/c-ares/c-ares/pull/1112) * Fix two logic bugs in DNS cookie handling. [PR \ #1103](https://github.com/c-ares/c-ares/pull/1103) * Fix linked list INSERT_BEFORE corruption and array insertdata_first ordering. \ [PR #1101](https://github.com/c-ares/c-ares/pull/1101) * Fix HASH_IDX macro missing parentheses. [PR \ #1128](https://github.com/c-ares/c-ares/pull/1128) * Fix malloc(0) in ares_htable_all_buckets on empty table. [PR \ #1131](https://github.com/c-ares/c-ares/pull/1131) * Fix wrong sizeof in QNX confstr() call truncating domain names. [PR \ #1130](https://github.com/c-ares/c-ares/pull/1130) * Clear probe pending flag after timeout. [PR \ #1059](https://github.com/c-ares/c-ares/pull/1059) * Fix incorrect check for empty wide string. [PR \ #1064](https://github.com/c-ares/c-ares/pull/1064) * Handle strdup failure. [PR #1077](https://github.com/c-ares/c-ares/pull/1077) * doc: reference ares_free_string(), not ares_free(). [PR \ #1084](https://github.com/c-ares/c-ares/pull/1084) |
| 2025-12-09 00:37:49 by Thomas Klausner | Files touched by this commit (3) | |
Log message: libcares: update to 1.34.6. This is a security release. Security: * CVE-2025-62408. A use-after-free bug has been uncovered in read_answers() that was introduced in v1.32.3. Please see \ https://github.com/c-ares/c-ares/security/advisories/GHSA-jq53-42q6-pqr5 Changes: * Ignore Windows IDN Search Domains until proper IDN support is added. Bugfixes: * Event Thread could stall when not notified of new queries on existing connections that are in a bad state * fix conversion of invalid service to port number in ares_getaddrinfo() * fix memory leak in ares_uri * Ignore ares_event_configchg_init failures * Use XOR for random seed generation on fallback logic. * Fix clang build on windows. * Fix IPv6 link-local nameservers in /etc/resolv.conf * Fix a few build issues on MidnightBSD. |
| 2025-04-08 16:02:44 by Thomas Klausner | Files touched by this commit (3) | |
Log message: libcares: update to 1.34.5. ## c-ares version 1.34.5 - April 8 2025 This is a security release. Security: * CVE-2025-31498. A use-after-free bug has been uncovered in read_answers() that was introduced in v1.32.3. Please see \ https://github.com/c-ares/c-ares/security/advisories/GHSA-6hxc-62jh-p29v Changes: * Restore Windows XP support. Bugfixes: * A missing mutex initialization would make busy polling for configuration changes (platforms other than Windows, Linux, MacOS) eat too much CPU * Pkgconfig may be generated wrong for static builds in relation to `-pthread` * Localhost resolution can fail if only one address family is in `/etc/hosts` |
| 2024-12-24 16:43:03 by Adam Ciarcinski | Files touched by this commit (3) | |
Log message: libcares: updated to 1.34.4 c-ares version 1.34.4 - December 14 2024 This is a bugfix release. Changes: QNX Port: Port to QNX 8, add primary config reading support, add CI build. Bugfixes: Empty TXT records were not being preserved. docs: update deprecation notices for ares_create_query() and ares_mkquery(). license: some files weren’t properly updated. Fix bind local device regression from 1.34.0. CMake: set policy version to prevent deprecation warnings. CMake: shared and static library names should be the same on unix platforms like \ autotools uses. Update to latest autoconf archive macros for enhanced system compatibility. |
| 2024-11-10 10:14:10 by Adam Ciarcinski | Files touched by this commit (3) | |
Log message: libcares: updated to 1.34.3 c-ares version 1.34.3 - November 9 2024 This is a bugfix release. Changes: * Build the release package in an automated way so we can provide provenance as per [SLSA3](https://slsa.dev/). Bugfixes: * Some upstream servers are non-compliant with EDNS options, resend queries without EDNS. * Android: <=7 needs sys/system_properties.h * Android: CMake needs `-D_GNU_SOURCE` and others. * TSAN warns on missing lock, but lock isn't actually necessary. * `ares_getaddrinfo()` for `AF_UNSPEC` should retry IPv4 if only IPv6 is received. * `ares_send()` shouldn't return `ARES_EBADRESP`, its `ARES_EBADQUERY`. * Fix typos in man pages. |
| 2024-10-16 10:51:31 by Adam Ciarcinski | Files touched by this commit (4) | |
Log message: libcares: updated to 1.34.2 c-ares version 1.34.2 - October 15 2024 This release contains a fix for downstream packages detecting the c-ares version based on the contents of the header file rather than the distributed pkgconf or cmake files. |
New packages: