RELEASE-NOTES.md (1049B)
1 ## c-ares version 1.34.5 - April 8 2025 2 3 This is a security release. 4 5 Security: 6 * CVE-2025-31498. A use-after-free bug has been uncovered in read_answers() that 7 was introduced in v1.32.3. Please see https://github.com/c-ares/c-ares/security/advisories/GHSA-6hxc-62jh-p29v 8 9 Changes: 10 * Restore Windows XP support. [PR #958](https://github.com/c-ares/c-ares/pull/958) 11 12 Bugfixes: 13 * A missing mutex initialization would make busy polling for configuration 14 changes (platforms other than Windows, Linux, MacOS) eat too much CPU 15 [PR #974](https://github.com/c-ares/c-ares/pull/974) 16 * Pkgconfig may be generated wrong for static builds in relation to `-pthread` 17 [PR #965](https://github.com/c-ares/c-ares/pull/965) 18 * Localhost resolution can fail if only one address family is in `/etc/hosts` 19 [PR #947](https://github.com/c-ares/c-ares/pull/947) 20 21 Thanks go to these friendly people for their efforts and contributions for this 22 release: 23 24 * Brad House (@bradh352) 25 * Erik Lax (@eriklax) 26 * Florian Pfisterer (@FlorianPfisterer) 27 * Kai Pastor (@dg0yt) 28