From 687026bea740dc0fda2c8024488de7694e8e6d61 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Alejandro=20L=C3=B3pez?= Date: Fri, 24 Jul 2026 11:18:22 +0200 Subject: [PATCH] Fix CVE-2026-33630: double-free in process_timeouts() in c-ares Reference the right ticket. Resolves: RHEL-192864. --- c-ares.spec | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/c-ares.spec b/c-ares.spec index 60f393a..6247bad 100644 --- a/c-ares.spec +++ b/c-ares.spec @@ -3,7 +3,7 @@ Summary: A library that performs asynchronous DNS operations Name: c-ares Version: 1.34.6 -Release: 3%{?dist} +Release: 4%{?dist} License: MIT URL: http://c-ares.org/ Source0: https://github.com/c-ares/c-ares/releases/download/v%{version}/c-ares-%{version}.tar.gz @@ -81,7 +81,7 @@ rm -f $RPM_BUILD_ROOT/%{_libdir}/libcares.la %{_mandir}/man3/ares_* %changelog -* Wed Jul 22 2026 RHEL Packaging Agent - 1.34.6-3 +* Wed Jul 22 2026 RHEL Packaging Agent - 1.34.6-4 - Fix double-free in process_timeouts() (CVE-2026-33630) Resolves: RHEL-192867