Upstream update available: c-ares 1.34.6 → 1.34.7 #4
Labels
No labels
ai-summary
bot
needs-build
needs-triage
priority/high
priority/medium
security-release
update/patch
upstream-update
upstream/github
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference
rpms/c-ares#4
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Upstream update available:
c-ares1.34.6→1.34.7Package
c-aresc-aresniceos-5.21.34.6-1patchpython_rpmleafgithub-upstreamUpstream
githubc-ares/c-ares1.34.7v1.34.7github_release_latest2026-07-06T17:35:39ZFalseSignals
TrueFalse-ai-summary, bot, needs-build, needs-triage, priority/high, security-release, update/patch, upstream-update, upstream/githubNiceSOFT AI preliminary stability analysis
The upstream update for c-ares (version 1.34.7) introduces security fixes and improvements to address potential vulnerabilities. Below is a structured analysis of the key points:
1. Security Highlights
Critical Fixes:
Impact:
These patches are critical for systems using c-ares to prevent buffer overflow and integer overflow vulnerabilities that could lead to code execution or data corruption.
2. Release Context
v1.34.7).5.0.0-0.ci-2026-07-06-214840).3. Recommendations
Apply the Update:
Review Changelog:
Security Considerations:
4. Risks and Mitigations
Risk:
Mitigation:
5. Conclusion
The c-ares 1.34.7 release is a critical security update that addresses buffer and integer overflow vulnerabilities. It is essential for NAS.OS systems using c-ares to ensure secure and stable DNS resolution. The update should be applied promptly and verified against the system's codebase to avoid potential risks.
Action Steps:
This update is mandatory for security compliance and should be prioritized in the deployment timeline.
Источники, найденные web_search
Upstream release notes / description
c-ares version 1.34.7 - July 6 2026
This is a security release.
Security:
handling, remotely triggerable via ares_getaddrinfo() over TCP. Please see
github.com — GHSA 6wfj rwm7 3542
chains. Please see
github.com — GHSA pjmc gx33 gc76
counts. Please see
github.com — GHSA jv8r gqr9 68wj
Changes:
ares_getaddrinfo(): handle a NULL node per POSIX and implementARES_AI_PASSIVE. PR #1186PR #1060
ARES_CLASS_HESOIDmisspelling toARES_CLASS_HESIOD.PR #1092
Bugfixes:
...[truncated 2628 chars]
NiceOS maintainer checklist
Versionand related fields inSPECS/*.speconly if policy allows it.SOURCES/sources.lock.json, manifests, metadata and SBOM.Bot metadata
niceos_upstream_monitor.py 2.1.3-local-websearch-github-release-pages2026-07-06T23:07:22Z