diff --git a/SPECS/c-ares/c-ares.signatures.json b/SPECS/c-ares/c-ares.signatures.json index 4d86354088..13392bfe8d 100644 --- a/SPECS/c-ares/c-ares.signatures.json +++ b/SPECS/c-ares/c-ares.signatures.json @@ -1,5 +1,5 @@ { - "Signatures": { - "c-ares-1.25.0.tar.gz": "71832b93a48f5ff579c505f4869120c14e57b783275367207f1a98314aa724e5" - } + "Signatures": { + "c-ares-1.30.0.tar.gz": "4fea312112021bcef081203b1ea020109842feb58cd8a36a3d3f7e0d8bc1138c" + } } diff --git a/SPECS/c-ares/c-ares.spec b/SPECS/c-ares/c-ares.spec index e456546dec..8eea2dbc3c 100644 --- a/SPECS/c-ares/c-ares.spec +++ b/SPECS/c-ares/c-ares.spec @@ -1,13 +1,13 @@ Summary: A library that performs asynchronous DNS operations Name: c-ares -Version: 1.25.0 +Version: 1.30.0 Release: 1%{?dist} License: MIT Vendor: Microsoft Corporation Distribution: Azure Linux Group: System Environment/Libraries URL: https://c-ares.haxx.se/ -Source0: https://c-ares.haxx.se/download/%{name}-%{version}.tar.gz +Source0: https://github.com/c-ares/c-ares/releases/download/v%{version}/%{name}-%{version}.tar.gz BuildRequires: autoconf BuildRequires: automake BuildRequires: libtool @@ -120,6 +120,9 @@ fi %{_mandir}/man3/ares_* %changelog +* Tue Jun 25 2024 Neha Agarwal - 1.30.0-1 +- Upgrade to v1.30.0 to fix CVE-2024-25629 + * Wed Jan 24 2024 Suresh Thelkar - 1.25.0-1 - Auto-upgrade to 1.25.0 diff --git a/cgmanifest.json b/cgmanifest.json index 50388d634e..a41a744d29 100644 --- a/cgmanifest.json +++ b/cgmanifest.json @@ -1367,8 +1367,8 @@ "type": "other", "other": { "name": "c-ares", - "version": "1.25.0", - "downloadUrl": "https://c-ares.haxx.se/download/c-ares-1.25.0.tar.gz" + "version": "1.30.0", + "downloadUrl": "https://github.com/c-ares/c-ares/releases/download/v1.30.0/c-ares-1.30.0.tar.gz" } } },