CVS commit: pkgsrc/net/libcares

["Thomas Klausner" <wiz%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   wiz
Date:           Mon Dec  8 23:37:49 UTC 2025

Modified Files:
        pkgsrc/net/libcares: Makefile PLIST distinfo

Log Message:
libcares: update to 1.34.6.

This is a security release.

Security:
* CVE-2025-62408. A use-after-free bug has been uncovered in read_answers() that
  was introduced in v1.32.3. Please see https://github.com/c-ares/c-ares/security/advisories/GHSA-jq53-42q6-pqr5

Changes:
* Ignore Windows IDN Search Domains until proper IDN support is added.

Bugfixes:
* Event Thread could stall when not notified of new queries on existing
  connections that are in a bad state
* fix conversion of invalid service to port number in ares_getaddrinfo()
* fix memory leak in ares_uri
* Ignore ares_event_configchg_init failures
* Use XOR for random seed generation on fallback logic.
* Fix clang build on windows.
* Fix IPv6 link-local nameservers in /etc/resolv.conf
* Fix a few build issues on MidnightBSD.


To generate a diff of this commit:
cvs rdiff -u -r1.53 -r1.54 pkgsrc/net/libcares/Makefile
cvs rdiff -u -r1.34 -r1.35 pkgsrc/net/libcares/PLIST
cvs rdiff -u -r1.45 -r1.46 pkgsrc/net/libcares/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/net/libcares/Makefile
diff -u pkgsrc/net/libcares/Makefile:1.53 pkgsrc/net/libcares/Makefile:1.54
--- pkgsrc/net/libcares/Makefile:1.53   Tue Apr  8 14:02:44 2025
+++ pkgsrc/net/libcares/Makefile        Mon Dec  8 23:37:49 2025
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.53 2025/04/08 14:02:44 wiz Exp $
+# $NetBSD: Makefile,v 1.54 2025/12/08 23:37:49 wiz Exp $
 
-DISTNAME=      c-ares-1.34.5
+DISTNAME=      c-ares-1.34.6
 PKGNAME=       ${DISTNAME:S/c-/libc/1}
 CATEGORIES=    net
 MASTER_SITES=  ${MASTER_SITE_GITHUB:=c-ares/}

Index: pkgsrc/net/libcares/PLIST
diff -u pkgsrc/net/libcares/PLIST:1.34 pkgsrc/net/libcares/PLIST:1.35
--- pkgsrc/net/libcares/PLIST:1.34      Tue Apr  8 14:02:44 2025
+++ pkgsrc/net/libcares/PLIST   Mon Dec  8 23:37:49 2025
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.34 2025/04/08 14:02:44 wiz Exp $
+@comment $NetBSD: PLIST,v 1.35 2025/12/08 23:37:49 wiz Exp $
 bin/adig
 bin/ahost
 include/ares.h
@@ -14,7 +14,7 @@ lib/cmake/c-ares/c-ares-targets.cmake
 lib/libcares.a
 lib/libcares.so
 lib/libcares.so.2
-lib/libcares.so.2.19.4
+lib/libcares.so.2.19.5
 lib/pkgconfig/libcares.pc
 man/man1/adig.1
 man/man1/ahost.1

Index: pkgsrc/net/libcares/distinfo
diff -u pkgsrc/net/libcares/distinfo:1.45 pkgsrc/net/libcares/distinfo:1.46
--- pkgsrc/net/libcares/distinfo:1.45   Tue Apr  8 14:02:44 2025
+++ pkgsrc/net/libcares/distinfo        Mon Dec  8 23:37:49 2025
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.45 2025/04/08 14:02:44 wiz Exp $
+$NetBSD: distinfo,v 1.46 2025/12/08 23:37:49 wiz Exp $
 
-BLAKE2s (c-ares-1.34.5.tar.gz) = ce63c27e5c2f3702267ec3404490607aa4a4eb7983e0bc7997945d881c0760e8
-SHA512 (c-ares-1.34.5.tar.gz) = 386709e9f405034cb16ba514f9792e89992be52b24a237e6c51f1032e4ca99a8c57b1c3038d6f0a205202a3bfb1246bb95ff0d5e6fc0ee2bba1cb17f6677f97f
-Size (c-ares-1.34.5.tar.gz) = 1009261 bytes
+BLAKE2s (c-ares-1.34.6.tar.gz) = 27e42cfd5e67d7f319f8dad5bea087ffe52f5efa7e24306ce1a5690ec52518dc
+SHA512 (c-ares-1.34.6.tar.gz) = 826eecdb40942caf75da982b9ca57fbe7c3e7c23af43a908683c7c1523c46b06ebac68405c26db8bf4c8b0774ca415666866249a3bde663a71c278f4ec7b1827
+Size (c-ares-1.34.6.tar.gz) = 1017864 bytes