Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package c-ares for openSUSE:Factory checked in at 2025-04-09 21:49:45 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/c-ares (Old) and /work/SRC/openSUSE:Factory/.c-ares.new.1907 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "c-ares" Wed Apr 9 21:49:45 2025 rev:27 rq:1267943 version:1.34.5 Changes: -------- --- /work/SRC/openSUSE:Factory/c-ares/c-ares.changes 2025-01-06 16:04:34.748181385 +0100 +++ /work/SRC/openSUSE:Factory/.c-ares.new.1907/c-ares.changes 2025-04-09 21:50:03.329575416 +0200 @@ -1,0 +2,9 @@ +Tue Apr 8 15:54:34 UTC 2025 - Adam Majer <adam.ma...@suse.de> + +- c-ares version 1.34.5 + * CVE-2025-31498. A use-after-free bug has been uncovered in read_answers() that + was introduced in v1.32.3 (bsc#1240955) + +- a531524a3d085fcd9a5e25d5f6cbdb953082c2b9.patch: upstreamed, removed + +------------------------------------------------------------------- Old: ---- a531524a3d085fcd9a5e25d5f6cbdb953082c2b9.patch c-ares-1.34.4.tar.gz c-ares-1.34.4.tar.gz.asc New: ---- c-ares-1.34.5.tar.gz c-ares-1.34.5.tar.gz.asc BETA DEBUG BEGIN: Old: - a531524a3d085fcd9a5e25d5f6cbdb953082c2b9.patch: upstreamed, removed BETA DEBUG END: ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ c-ares.spec ++++++ --- /var/tmp/diff_new_pack.7oApK4/_old 2025-04-09 21:50:03.909599841 +0200 +++ /var/tmp/diff_new_pack.7oApK4/_new 2025-04-09 21:50:03.913600009 +0200 @@ -26,7 +26,7 @@ %endif Name: c-ares%pkg_suffix -Version: 1.34.4 +Version: 1.34.5 Release: 0 Summary: Library for asynchronous name resolves License: MIT @@ -36,7 +36,6 @@ Source3: c-ares.keyring Source4: baselibs.conf Source5: series -Patch1: a531524a3d085fcd9a5e25d5f6cbdb953082c2b9.patch BuildRequires: c++_compiler BuildRequires: cmake # Needed for getservbyport_r function to work properly. ++++++ _scmsync.obsinfo ++++++ --- /var/tmp/diff_new_pack.7oApK4/_old 2025-04-09 21:50:03.961602030 +0200 +++ /var/tmp/diff_new_pack.7oApK4/_new 2025-04-09 21:50:03.961602030 +0200 @@ -1,5 +1,5 @@ -mtime: 1735943824 -commit: 642897f8dd9ec9c30bf8b91bfd64940334473fc5dc81a41f82074bc1ea11d8db +mtime: 1744128051 +commit: 5353240e2fda3d2bfedef524f0ced66ac78f6dcee2ba708d0ac19234a68b1ca7 url: https://src.opensuse.org/adamm/c-ares.git -revision: 642897f8dd9ec9c30bf8b91bfd64940334473fc5dc81a41f82074bc1ea11d8db +revision: factory ++++++ build.specials.obscpio ++++++ ++++++ c-ares-1.34.4.tar.gz -> c-ares-1.34.5.tar.gz ++++++ ++++ 5726 lines of diff (skipped)