Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package c-ares for openSUSE:Factory checked in at 2026-08-25 13:18:54 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/c-ares (Old) and /work/SRC/openSUSE:Factory/.c-ares.new.1258 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "c-ares" Tue Aug 25 13:18:54 2026 rev:29 rq:1373366 version:1.34.8 Changes: -------- --- /work/SRC/openSUSE:Factory/c-ares/c-ares.changes 2026-01-06 17:41:29.586033683 +0100 +++ /work/SRC/openSUSE:Factory/.c-ares.new.1258/c-ares.changes 2026-08-25 13:19:06.986901306 +0200 @@ -1,0 +2,16 @@ +Mon Aug 24 09:42:15 UTC 2026 - Adam Majer <[email protected]> + +- c-ares 1.36.8: + * CVE-2026-33630: Fixes use-after-free/double-free in c-ares + query-completion handling, remotely triggerable via + ares_getaddrinfo() over TCP (bsc#1270416) + * CVE-2026-69184: CPU-exhaustion denial of service via unbounded + DNS name compression pointer chains (bsc#1276290) + * CVE-2026-69186: Memory-amplification denial of service via unvalidated + DNS header record counts (bsc#1276291) + +- README.md: Add readme with build status + +For details, see https://c-ares.org/changelog.html + +------------------------------------------------------------------- Old: ---- c-ares-1.34.6.tar.gz c-ares-1.34.6.tar.gz.asc New: ---- README.md c-ares-1.34.8.tar.gz c-ares-1.34.8.tar.gz.asc ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ c-ares.spec ++++++ --- /var/tmp/diff_new_pack.qB5qmK/_old 2026-08-25 13:19:08.110940886 +0200 +++ /var/tmp/diff_new_pack.qB5qmK/_new 2026-08-25 13:19:08.111940921 +0200 @@ -26,7 +26,7 @@ %endif Name: c-ares%pkg_suffix -Version: 1.34.6 +Version: 1.34.8 Release: 0 Summary: Library for asynchronous name resolves License: MIT @@ -36,6 +36,7 @@ Source3: c-ares.keyring Source4: baselibs.conf Source5: series +Source10: README.md BuildRequires: c++_compiler BuildRequires: cmake # Needed for getservbyport_r function to work properly. ++++++ README.md ++++++ Build status in openSUSE:Factory  Build status in the devel project (devel:libraries:c_c++/c-ares)  Upstream project: https://c-ares.org/ ++++++ _scmsync.obsinfo ++++++ --- /var/tmp/diff_new_pack.qB5qmK/_old 2026-08-25 13:19:08.184943492 +0200 +++ /var/tmp/diff_new_pack.qB5qmK/_new 2026-08-25 13:19:08.188943633 +0200 @@ -1,5 +1,5 @@ -mtime: 1767294812 -commit: 54d0a413f84c4a1cdf16b2d437162cf8a55445410f6aa0aa12899c525dbca273 +mtime: 1787566442 +commit: 960fa3e6180998b153814441fceb1c421351d2d2562ac168fa45b0f46789f1b9 url: https://src.opensuse.org/adamm/c-ares.git revision: factory ++++++ build.specials.obscpio ++++++ ++++++ build.specials.obscpio ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/.gitignore new/.gitignore --- old/.gitignore 1970-01-01 01:00:00.000000000 +0100 +++ new/.gitignore 2026-08-24 12:14:02.000000000 +0200 @@ -0,0 +1 @@ +.osc ++++++ c-ares-1.34.6.tar.gz -> c-ares-1.34.8.tar.gz ++++++ ++++ 4569 lines of diff (skipped) ++++++ series ++++++ --- /var/tmp/diff_new_pack.qB5qmK/_old 2026-08-25 13:19:08.733962825 +0200 +++ /var/tmp/diff_new_pack.qB5qmK/_new 2026-08-25 13:19:08.741963106 +0200 @@ -1,2 +1,3 @@ -skip-test.patch + +(No newline at EOF)
