[meta-oe][PATCH] c-ares: set status for CVE-2025-31498

Peter Marko <[email protected]>
Newsgroups org.openembedded.lists.openembedded-devel
Message-ID <[email protected]>
From: Peter Marko <[email protected]>

This CVE was fixed in 1.34.5 as mentioned in release notes [1].

[1] https://github.com/c-ares/c-ares/releases/tag/v1.34.5

Signed-off-by: Peter Marko <[email protected]>
---
 meta-oe/recipes-support/c-ares/c-ares_1.34.8.bb | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/meta-oe/recipes-support/c-ares/c-ares_1.34.8.bb b/meta-oe/recipes-support/c-ares/c-ares_1.34.8.bb
index df994c83ae..058f3666e7 100644
--- a/meta-oe/recipes-support/c-ares/c-ares_1.34.8.bb
+++ b/meta-oe/recipes-support/c-ares/c-ares_1.34.8.bb
@@ -28,3 +28,5 @@ PACKAGE_BEFORE_PN = "${PN}-utils"
 FILES:${PN}-utils = "${bindir}"
 
 BBCLASSEXTEND = "native nativesdk"
+
+CVE_STATUS[CVE-2025-31498] = "fixed-version: Fixed since 1.34.5"
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.