Sync changes to SLFO-1.2 branch

c-ares-1.30.0.tar.gz.asc

@@ -1,7 +0,0 @@
------BEGIN PGP SIGNATURE-----
-
-iHUEABYKAB0WIQR162yg5j6QxP8sho/B0VYRsuRyCwUCZmLmtQAKCRDB0VYRsuRy
-CzQKAQDCSS0EUT08hI7KC3KmqrWQGEU0UN2rddaz9Lg3k67MUAD8Cmq7tr8XOCRH
-FKd2USXldyCwePWqfTZ5EJzXMuhemgw=
-=utMN
------END PGP SIGNATURE-----

c-ares-1.34.5.tar.gz.asc

@@ -0,0 +1,7 @@
+-----BEGIN PGP SIGNATURE-----
+
+iHUEABYKAB0WIQR162yg5j6QxP8sho/B0VYRsuRyCwUCZ/UVXQAKCRDB0VYRsuRy
+C+1rAPwLnee/20Ph40baZomuyXNBCENIuxAhUZ1hUM7lUddn3QD8CdamueCF4JZQ
+L+CzqAGnonAs1ykKrxG1wWYr6/EQ7A8=
+=OviJ
+-----END PGP SIGNATURE-----

c-ares.changes

@@ -1,3 +1,136 @@
+-------------------------------------------------------------------
+Tue Apr  8 15:54:34 UTC 2025 - Adam Majer <adam.majer@suse.de>
+
+- c-ares version 1.34.5
+  * CVE-2025-31498. A use-after-free bug has been uncovered in read_answers() that
+    was introduced in v1.32.3 (bsc#1240955)
+
+- a531524a3d085fcd9a5e25d5f6cbdb953082c2b9.patch: upstreamed, removed
+
+-------------------------------------------------------------------
+Fri Jan  3 22:36:24 UTC 2025 - Adam Majer <adam.majer@suse.de>
+
+- skip-test.patch replaced with upstream unit test fix
+  a531524a3d085fcd9a5e25d5f6cbdb953082c2b9.patch
+
+-------------------------------------------------------------------
+Mon Dec 30 11:13:26 UTC 2024 - Adam Majer <adam.majer@suse.de>
+
+- c-ares 1.34.4
+This is a bugfix release.
+Changes:
+
+    QNX Port: Port to QNX 8, add primary config reading support, add CI build. PR #934, PR #937, PR #938
+
+Bugfixes:
+    Empty TXT records were not being preserved. PR #922
+    docs: update deprecation notices for ares_create_query() and ares_mkquery(). PR #910
+    license: some files weren't properly updated. PR #920
+    Fix bind local device regression from 1.34.0. PR #929, PR #931, PR #935
+    CMake: set policy version to prevent deprecation warnings. PR #932
+    CMake: shared and static library names should be the same on unix platforms like autotools uses. PR #933
+    Update to latest autoconf archive macros for enhanced system compatibility. PR #936
+
+In version 1.34.3
+This is a bugfix release.
+Changes:
+    Build the release package in an automated way so we can provide provenance as per SLSA3. PR #906
+
+Bugfixes:
+    Some upstream servers are non-compliant with EDNS options, resend queries without EDNS. Issue #911
+    TSAN warns on missing lock, but lock isn't actually necessary. PR #915
+    ares_getaddrinfo() for AF_UNSPEC should retry IPv4 if only IPv6 is received. 765d558
+    ares_send() shouldn't return ARES_EBADRESP, its ARES_EBADQUERY. 91519e7
+    Fix typos in man pages. PR #905
+
+- skip-test.patch: fix failing tests
+
+-------------------------------------------------------------------
+Tue Oct 29 09:24:43 UTC 2024 - Adam Majer <adam.majer@suse.de>
+
+- c-ares 1.34.2
+
+Features:
+* adig: read arguments from adigrc. [PR #856]
+* Add new pending write callback optimization via `ares_set_pending_write_cb`. [PR #857]
+* New function `ares_process_fds()`. [PR #875]
+* Failed servers should be probed rather than redirecting queries which could
+  cause unexpected latency. [PR #877]
+* adig: rework command line arguments to mimic dig from bind. [PR #890]
+* Add new method for overriding network functions
+  `ares_set_socket_function_ex()` to properly support all new functionality.
+  [PR #894]
+* Fix regression with custom socket callbacks due to DNS cookie support. [PR #895]
+* ares_socket: set IP_BIND_ADDRESS_NO_PORT on ares_set_local_ip* tcp sockets [PR #887]
+* URI parser/writer for ares_set_servers_csv()/ares_get_servers_csv(). [PR #882]
+
+Changes:
+* Connection handling modularization. [PR #857], [PR #876]
+* Expose library/utility functions to tools. [PR #860]
+* Remove `ares__` prefix, just use `ares_` for internal functions. [PR #872]
+
+Bugfixes:
+* fix: potential WIN32_LEAN_AND_MEAN redefinition.
+  [PR #869]
+* Fix googletest v1.15 compatibility.
+  [PR #874]
+* Fix pkgconfig thread dependencies.
+  [PR #884]
+
+Features in 1.33.0:
+* Add DNS cookie support (RFC7873 + RFC9018) to help prevent off-path cache
+  poisoning attacks. [PR #833]
+* Implement TCP FastOpen (TFO) RFC7413, which will make TCP reconnects 0-RTT
+  on supported systems. [PR #840]
+
+Changes:
+* Reorganize source tree. [PR #822]
+* Refactoring of connection handling to prevent code duplication. [PR #839]
+* New dynamic array data structure to prevent simple logic flaws in array
+  handling in various code paths. [PR #841]
+
+Bugfixes:
+* `ares_destroy()` race condition during shutdown due to missing lock. [PR #831]
+
+Features in 1.32:
+
+* Add support for DNS 0x20 to help prevent cache poisoning attacks, enabled
+  by specifying `ARES_FLAG_DNS0x20`.  Disabled by default. [PR #800]
+* Rework query timeout logic to automatically adjust timeouts based on network
+  conditions.  The timeout specified now is only used as a hint until there
+  is enough history to calculate a more valid timeout. [PR #794]
+
+Changes:
+
+* DNS RR TXT strings should not be automatically concatenated as there are use
+  cases outside of RFC 7208.  In order to maintain ABI compliance, the ability
+  to retrieve TXT strings concatenated is retained as well as a new API to
+  retrieve the individual strings.  This restores behavior from c-ares 1.20.0.
+  [PR #801]
+* Clean up header inclusion logic to make hacking on code easier. [PR #797]
+* GCC/Clang: Enable even more strict warnings to catch more coding flaws. [253bdee]
+
+Bugfixes:
+
+* Tests: Fix thread race condition in test cases for EventThread. [PR #803]
+* Thread Saftey: `ares_timeout()` was missing lock. [74a64e4]
+
+-------------------------------------------------------------------
+Tue Jun 18 13:51:01 UTC 2024 - Adam Majer <adam.majer@suse.de>
+
+- c-ares 1.31.0
+
+Changes:
+* Enable Query Cache by default. [PR #786]
+
+Bugfixes:
+* Enhance Windows DNS configuration change detection to also
+  detect manual DNS configuration changes. [PR #785]
+* Various legacy MacOS Build fixes. [Issue #782]
+* Ndots value of zero in resolv.conf was not being honored. [852a60a]
+* Watt-32 build support had been broken for some time. [PR #781]
+* Distribute `ares_dns_rec_type_tostr` manpage. [PR #778]
+
 -------------------------------------------------------------------
 Mon Jun 10 11:36:09 UTC 2024 - Adam Majer <adam.majer@suse.de>
 

c-ares.spec

@@ -26,7 +26,7 @@
 %endif
 
 Name:           c-ares%pkg_suffix
-Version:        1.30.0
+Version:        1.34.5
 Release:        0
 Summary:        Library for asynchronous name resolves
 License:        MIT
@@ -35,6 +35,7 @@ Source0:        https://github.com/c-ares/c-ares/releases/download/v%{version}/c
 Source1:        https://github.com/c-ares/c-ares/releases/download/v%{version}/c-ares-%{version}.tar.gz.asc
 Source3:        c-ares.keyring
 Source4:        baselibs.conf
+Source5:        series
 BuildRequires:  c++_compiler
 BuildRequires:  cmake
 # Needed for getservbyport_r function to work properly.
@@ -91,7 +92,7 @@ to build packages that depend on c-ares.
 %endif
 
 %prep
-%autosetup -n c-ares-%{version}
+%autosetup -n c-ares-%{version} -p1
 
 %build
 %cmake \

series

@@ -0,0 +1 @@
+skip-test.patch