From: Volker Schlecht Subject: Re: [Security] net/libcares 1.34.5 To: Theo Buehler Cc: ports@openbsd.org, brad@comstyle.com Date: Sat, 12 Apr 2025 14:48:54 +0200 On 2025-04-12 08:15, Theo Buehler wrote: >On Tue, Apr 08, 2025 at 10:10:39PM +0200, Volker Schlecht wrote: >> Here's a security release for libcares that can probably wait a little: >> >> https://github.com/c-ares/c-ares/security/advisories/GHSA-6hxc-62jh-p29v >> >> ok for -current after ports tree is unlocked? > >As discussed on ICB, this needs a minor shlib bump for -current and >we probably also want to remove -DCARES_STATIC=ON. So here for completeness' sake and oks the proposal for -current when unlocked. I'll wait for 7.7 to work on the -stable patch. Index: Makefile =================================================================== RCS file: /cvs/ports/net/libcares/Makefile,v diff -u -p -r1.39 Makefile --- Makefile 28 Jan 2025 14:38:29 -0000 1.39 +++ Makefile 12 Apr 2025 12:46:20 -0000 @@ -1,13 +1,12 @@ COMMENT= asynchronous resolver library -V= 1.34.3 +V= 1.34.5 DISTNAME= c-ares-${V} PKGNAME= libcares-${V} CATEGORIES= net devel SITES= https://github.com/c-ares/c-ares/releases/download/v${V}/ -REVISION= 0 -SHARED_LIBS += cares 4.3 # 2.19.0 +SHARED_LIBS += cares 4.4 # 2.19.0 HOMEPAGE= https://c-ares.org/ @@ -27,7 +26,6 @@ BUILD_DEPENDS+= devel/gtest CONFIGURE_ARGS+=-DCARES_BUILD_TESTS=ON \ -DCARES_BUILD_TOOLS=OFF \ - -DCARES_STATIC=ON \ -DCARES_SYMBOL_HIDING=ON .include Index: distinfo =================================================================== RCS file: /cvs/ports/net/libcares/distinfo,v diff -u -p -r1.23 distinfo --- distinfo 10 Nov 2024 20:04:19 -0000 1.23 +++ distinfo 12 Apr 2025 12:46:20 -0000 @@ -1,2 +1,2 @@ -SHA256 (c-ares-1.34.3.tar.gz) = JuH3dx2iPkKhj98eWJEqOWYp5ToqxxsTCvk7vPuQrb4= -SIZE (c-ares-1.34.3.tar.gz) = 997244 +SHA256 (c-ares-1.34.5.tar.gz) = fZNXkOmvCBwlxJX9E8LPzaR5KYNBjpY1jvbnMg7gY0Y= +SIZE (c-ares-1.34.5.tar.gz) = 1009261 Index: pkg/PLIST =================================================================== RCS file: /cvs/ports/net/libcares/pkg/PLIST,v diff -u -p -r1.19 PLIST --- pkg/PLIST 10 Nov 2024 20:04:23 -0000 1.19 +++ pkg/PLIST 12 Apr 2025 12:46:20 -0000 @@ -11,7 +11,6 @@ lib/cmake/c-ares/c-ares-config.cmake lib/cmake/c-ares/c-ares-targets${MODCMAKE_BUILD_SUFFIX} lib/cmake/c-ares/c-ares-targets.cmake @lib lib/libcares.so.${LIBcares_VERSION} -@static-lib lib/libcares_static.a lib/pkgconfig/libcares.pc @man man/man3/ares_cancel.3 @man man/man3/ares_create_query.3