Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package c-ares for openSUSE:Factory checked in at 2023-01-31 16:08:43 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/c-ares (Old) and /work/SRC/openSUSE:Factory/.c-ares.new.32243 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "c-ares" Tue Jan 31 16:08:43 2023 rev:16 rq:1062054 version:1.19.0 Changes: -------- --- /work/SRC/openSUSE:Factory/c-ares/c-ares.changes 2021-12-13 20:46:43.528502197 +0100 +++ /work/SRC/openSUSE:Factory/.c-ares.new.32243/c-ares.changes 2023-01-31 16:25:09.563764637 +0100 @@ -1,0 +2,32 @@ +Sun Jan 29 09:31:00 UTC 2023 - Martin Hauke <[email protected]> + +- Update to version 1.19.0 + Security: + * Low. Stack overflow in ares_set_sortlist() which is used + during c-ares initialization and typically provided by an + administrator and not an end user. + Changes: + * Add ARES_OPT_HOSTS_FILE similar to ARES_OPT_RESOLVCONF for + specifying a custom hosts file location. + Bug fixes: + * Fix memory leak in reading /etc/hosts when using localhost + fallback. + * Fix chain building c-ares when libresolv is already included by + another project. + * File lookup should not immediately abort as there may be other + tries due to search criteria. + * Asterisks should be allowed in host validation as CNAMEs may + reference wildcard domains. + * AutoTools build system referenced bad STDC_HEADERS macro. + * Even if one address class returns a failure for + ares_getaddrinfo() we should still return the results we have. + * Fix ares_getaddrinfo() numerical address resolution with + AF_UNSPEC + * Fix tools and help information. + * Various documentation fixes and cleanups. + * Add include guards to ares_data.h + * c-ares could try to exceed maximum number of iovec entries + supported by system. + * The RFC6761 6.3 states localhost subdomains must be offline too + +------------------------------------------------------------------- Old: ---- c-ares-1.18.1.tar.gz c-ares-1.18.1.tar.gz.asc New: ---- c-ares-1.19.0.tar.gz c-ares-1.19.0.tar.gz.asc ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ c-ares.spec ++++++ --- /var/tmp/diff_new_pack.M8BR7Y/_old 2023-01-31 16:25:09.979767030 +0100 +++ /var/tmp/diff_new_pack.M8BR7Y/_new 2023-01-31 16:25:09.983767053 +0100 @@ -1,7 +1,7 @@ # # spec file for package c-ares # -# Copyright (c) 2021 SUSE LLC +# Copyright (c) 2023 SUSE LLC # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -18,13 +18,11 @@ %define sonum 2 %define libname libcares%{sonum} - %if 0%{!?cmake_build:1} %define cmake_build make -O VERBOSE=1 %{?_smp_mflags} %endif - Name: c-ares -Version: 1.18.1 +Version: 1.19.0 Release: 0 Summary: Library for asynchronous name resolves License: MIT @@ -37,9 +35,9 @@ Patch1: disable-live-tests.patch BuildRequires: cmake BuildRequires: gcc-c++ -BuildRequires: pkg-config # Needed for getservbyport_r function to work properly. BuildRequires: netcfg +BuildRequires: pkgconfig %description c-ares is a C library that performs DNS requests and name resolves ++++++ c-ares-1.18.1.tar.gz -> c-ares-1.19.0.tar.gz ++++++ ++++ 20273 lines of diff (skipped)
