Bug 925661 (CVE-2024-25629, GHSA-mg26-v6qh-x48q) – <net-dns/c-ares-1.27.0: Reading malformed /etc/resolv.conf, /etc/nsswitch.conf, or HOSTALIASES could cause crash

• Product: Gentoo Security
• Status: RESOLVED FIXED

[Description Sam James 2024-02-27 23:58:12 UTC]

From 1.27.0 release notes (https://github.com/c-ares/c-ares/releases/tag/cares-1_27_0):
    Moderate. CVE-2024-25629. Reading malformatted /etc/resolv.conf,
    /etc/nsswitch.conf or the HOSTALIASES file could result in a crash.
    GHSA-mg26-v6qh-x48q

[Comment 1 Larry the Git Cow 2024-02-28 00:12:39 UTC]

The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=4f6ce3e29c1b9241d9f9b8a7cf432923fa3e1480

commit 4f6ce3e29c1b9241d9f9b8a7cf432923fa3e1480
Author:     Sam James <[e-mail]>
AuthorDate: 2024-02-28 00:06:13 +0000
Commit:     Sam James <[e-mail]>
CommitDate: 2024-02-28 00:06:13 +0000

    net-dns/c-ares: add 1.27.0
    
    Bug: https://bugs.gentoo.org/925661
    Signed-off-by: Sam James <[e-mail]>

 net-dns/c-ares/Manifest             |  2 +
 net-dns/c-ares/c-ares-1.27.0.ebuild | 92 +++++++++++++++++++++++++++++++++++++
 2 files changed, 94 insertions(+)

[Comment 2 Larry the Git Cow 2024-06-24 02:54:52 UTC]

The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=59e60662c86175e12b431c440d353351607a5e76

commit 59e60662c86175e12b431c440d353351607a5e76
Author:     Sam James <[e-mail]>
AuthorDate: 2024-06-24 02:36:25 +0000
Commit:     Sam James <[e-mail]>
CommitDate: 2024-06-24 02:53:36 +0000

    net-dns/c-ares: drop 1.25.0-r1, 1.26.0, 1.27.0
    
    Bug: https://bugs.gentoo.org/925661
    Signed-off-by: Sam James <[e-mail]>

 net-dns/c-ares/Manifest                            |   6 -
 net-dns/c-ares/c-ares-1.25.0-r1.ebuild             |  96 ------------
 net-dns/c-ares/c-ares-1.26.0.ebuild                |  92 ------------
 net-dns/c-ares/c-ares-1.27.0.ebuild                |  92 ------------
 .../files/c-ares-1.25.0-fix-sanity-check-rr.patch  | 166 ---------------------
 5 files changed, 452 deletions(-)