c-ares - Debian Package Tracker

general

source: c-ares (main)
version: 1.34.6-1
maintainer: Gregor Jasny (DMD) (DM)
arch: all any
std-ver: 4.7.2
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

o-o-stable: 1.17.1-1+deb11u3
o-o-sec: 1.17.1-1+deb11u3
oldstable: 1.18.1-3
stable: 1.34.5-1
stable-sec: 1.34.5-1+deb13u1
stable-p-u: 1.34.5-1+deb13u1
testing: 1.34.6-1
unstable: 1.34.6-1

versioned links

1.17.1-1+deb11u3: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1.18.1-3: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1.34.5-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1.34.5-1+deb13u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1.34.6-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

libc-ares-dev
libc-ares2
libcares2

action needed

2 new commits since last upload, is it time to release? normal

vcswatch reports that this package seems to have new commits in its VCS but has not yet updated debian/changelog. You should consider updating the Debian changelog and uploading this new version into the archive.

Here are the relevant commit logs:

commit 2c14966ff30d49833beb3152025b12e2695856a7
Author: Gregor Jasny <Gregor Jasny gjasny@googlemail.com>
Date:   Fri Jan 2 13:29:08 2026 +0100

    Bumped standards to version 4.7.3

commit f25f9aa508b0ee1dc589d401c52a6c40651135fe
Author: Gregor Jasny <Gregor Jasny gjasny@googlemail.com>
Date:   Fri Jan 2 13:27:30 2026 +0100

    Update watch file to version 5

Created: 2026-01-02 Last update: 2026-01-02 14:33

1 low-priority security issue in bookworm low

There is 1 open security issue in bookworm.

1 issue left for the package maintainer to handle:

CVE-2024-25629: (needs triaging) c-ares is a C library for asynchronous DNS requests. `ares__read_line()` is used to parse local configuration files such as `/etc/resolv.conf`, `/etc/nsswitch.conf`, the `HOSTALIASES` file, and if using a c-ares version prior to 1.27.0, the `/etc/hosts` file. If any of these configuration files has an embedded `NULL` character as the first character in a new line, it can lead to attempting to read memory prior to the start of the given buffer which may result in a crash. This issue is fixed in c-ares 1.27.0. No known workarounds exist.

You can find information about how to handle this issue in the security team's documentation.

Created: 2024-02-23 Last update: 2025-12-18 16:30

Standards version of the package is outdated. wishlist

The package should be updated to follow the last version of Debian Policy (Standards-Version 4.7.3 instead of 4.7.2).

Created: 2025-12-23 Last update: 2025-12-23 20:00

news

[rss feed]

[2025-12-20] Accepted c-ares 1.34.5-1+deb13u1 (source) into proposed-updates (Debian FTP Masters) (signed by: Salvatore Bonaccorso)
[2025-12-18] Accepted c-ares 1.34.5-1+deb13u1 (source) into stable-security (Debian FTP Masters) (signed by: Salvatore Bonaccorso)
[2025-12-12] c-ares 1.34.6-1 MIGRATED to testing (Debian testing watch)
[2025-12-08] Accepted c-ares 1.34.6-1 (source) into unstable (Gregor Jasny)
[2025-04-11] c-ares 1.34.5-1 MIGRATED to testing (Debian testing watch)
[2025-04-08] Accepted c-ares 1.34.5-1 (source) into unstable (Gregor Jasny)
[2025-01-05] c-ares 1.34.4-2.1 MIGRATED to testing (Debian testing watch)
[2024-12-31] Accepted c-ares 1.34.4-2.1 (source) into unstable (Boyuan Yang)
[2024-12-30] Accepted c-ares 1.34.4-2 (source amd64 all) into unstable (Debian FTP Masters) (signed by: Boyuan Yang)
[2024-12-20] c-ares 1.34.4-1 MIGRATED to testing (Debian testing watch)
[2024-12-14] Accepted c-ares 1.34.4-1 (source) into unstable (Gregor Jasny)
[2024-12-13] c-ares 1.34.3-1 MIGRATED to testing (Debian testing watch)
[2024-12-07] Accepted c-ares 1.34.3-1 (source) into unstable (Gregor Jasny)
[2024-10-23] c-ares 1.34.2-1 MIGRATED to testing (Debian testing watch)
[2024-10-17] Accepted c-ares 1.34.2-1 (source) into unstable (Gregor Jasny)
[2024-09-27] c-ares 1.33.1-2 MIGRATED to testing (Debian testing watch)
[2024-09-21] Accepted c-ares 1.33.1-2 (source) into unstable (Gregor Jasny)
[2024-08-29] c-ares 1.33.1-1 MIGRATED to testing (Debian testing watch)
[2024-08-24] Accepted c-ares 1.33.1-1 (source) into unstable (Gregor Jasny)
[2024-08-08] c-ares 1.33.0-1 MIGRATED to testing (Debian testing watch)
[2024-08-02] Accepted c-ares 1.33.0-1 (source) into unstable (Gregor Jasny)
[2024-07-30] c-ares 1.32.3-1 MIGRATED to testing (Debian testing watch)
[2024-07-24] Accepted c-ares 1.32.3-1 (source) into unstable (Gregor Jasny)
[2024-07-24] c-ares 1.32.2-2 MIGRATED to testing (Debian testing watch)
[2024-07-18] Accepted c-ares 1.32.2-2 (source) into unstable (Gregor Jasny)
[2024-07-17] Accepted c-ares 1.32.2-1 (source) into unstable (Gregor Jasny)
[2024-06-24] c-ares 1.31.0-1 MIGRATED to testing (Debian testing watch)
[2024-06-18] Accepted c-ares 1.31.0-1 (source) into unstable (Gregor Jasny)
[2024-06-13] c-ares 1.30.0-1 MIGRATED to testing (Debian testing watch)
[2024-06-07] Accepted c-ares 1.30.0-1 (source) into unstable (Gregor Jasny)

bugs [bug history graph]

all: 0

links

homepage
lintian
buildd: logs, reproducibility, cross
popcon
browse source code
edit tags
other distros
security tracker
debian patches

ubuntu

[Information about Ubuntu for Debian Developers]

version: 1.34.5-1
4 bugs