c-ares: update to v1.30.0 to fix CVE-2024-25629 (#9499)

SPECS/c-ares/c-ares.signatures.json

@@ -1,5 +1,5 @@
 {
-  "Signatures": {
-    "c-ares-1.25.0.tar.gz": "71832b93a48f5ff579c505f4869120c14e57b783275367207f1a98314aa724e5"
-  }
+ "Signatures": {
+  "c-ares-1.30.0.tar.gz": "4fea312112021bcef081203b1ea020109842feb58cd8a36a3d3f7e0d8bc1138c"
+ }
 }

SPECS/c-ares/c-ares.spec

@@ -1,13 +1,13 @@
 Summary:        A library that performs asynchronous DNS operations
 Name:           c-ares
-Version:        1.25.0
+Version:        1.30.0
 Release:        1%{?dist}
 License:        MIT
 Vendor:         Microsoft Corporation
 Distribution:   Azure Linux
 Group:          System Environment/Libraries
 URL:            https://c-ares.haxx.se/
-Source0:        https://c-ares.haxx.se/download/%{name}-%{version}.tar.gz
+Source0:        https://github.com/c-ares/c-ares/releases/download/v%{version}/%{name}-%{version}.tar.gz
 BuildRequires:  autoconf
 BuildRequires:  automake
 BuildRequires:  libtool
@@ -120,6 +120,9 @@ fi
 %{_mandir}/man3/ares_*
 
 %changelog
+* Tue Jun 25 2024 Neha Agarwal <nehaagarwal@microsoft.com> - 1.30.0-1
+- Upgrade to v1.30.0 to fix CVE-2024-25629
+
 * Wed Jan 24 2024 Suresh Thelkar <sthelkar@microsoft.com> - 1.25.0-1
 - Auto-upgrade to 1.25.0
 

cgmanifest.json

@@ -1367,8 +1367,8 @@
         "type": "other",
         "other": {
           "name": "c-ares",
-          "version": "1.25.0",
-          "downloadUrl": "https://c-ares.haxx.se/download/c-ares-1.25.0.tar.gz"
+          "version": "1.30.0",
+          "downloadUrl": "https://github.com/c-ares/c-ares/releases/download/v1.30.0/c-ares-1.30.0.tar.gz"
         }
       }
     },