<!DOCTYPE html>
<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
</head>
<body>
<pre
style="color: rgb(0, 0, 0); font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration-thickness: initial; text-decoration-style: initial; text-decoration-color: initial; overflow-wrap: break-word; white-space: pre-wrap;">## c-ares version 1.34.6 - December 8 2025
This is a security release.
Security:
* CVE-2025-62408. A use-after-free bug has been uncovered in read_answers() that
was introduced in v1.32.3. Please see <a class="moz-txt-link-freetext" href="https://github.com/c-ares/c-ares/security/advisories/GHSA-jq53-42q6-pqr5">https://github.com/c-ares/c-ares/security/advisories/GHSA-jq53-42q6-pqr5</a>
Changes:
* Ignore Windows IDN Search Domains until proper IDN support is added. [PR #1034](<a class="moz-txt-link-freetext" href="https://github.com/c-ares/c-ares/pull/1034">https://github.com/c-ares/c-ares/pull/1034</a>)
Bugfixes:
* Event Thread could stall when not notified of new queries on existing
connections that are in a bad state
[PR #1032](<a class="moz-txt-link-freetext" href="https://github.com/c-ares/c-ares/pull/1032">https://github.com/c-ares/c-ares/pull/1032</a>)
* fix conversion of invalid service to port number in ares_getaddrinfo()
[PR #1029](<a class="moz-txt-link-freetext" href="https://github.com/c-ares/c-ares/pull/1029">https://github.com/c-ares/c-ares/pull/1029</a>)
* fix memory leak in ares_uri
[PR #1012](<a class="moz-txt-link-freetext" href="https://github.com/c-ares/c-ares/pull/1012">https://github.com/c-ares/c-ares/pull/1012</a>)
* Ignore ares_event_configchg_init failures
[PR #1009](<a class="moz-txt-link-freetext" href="https://github.com/c-ares/c-ares/pull/1009">https://github.com/c-ares/c-ares/pull/1009</a>)
* Use XOR for random seed generation on fallback logic.
[PR #994](<a class="moz-txt-link-freetext" href="https://github.com/c-ares/c-ares/pull/994">https://github.com/c-ares/c-ares/pull/994</a>)
* Fix clang build on windows.
[PR #996](<a class="moz-txt-link-freetext" href="https://github.com/c-ares/c-ares/pull/996">https://github.com/c-ares/c-ares/pull/996</a>)
* Fix IPv6 link-local nameservers in /etc/resolv.conf
[PR #996](<a class="moz-txt-link-freetext" href="https://github.com/c-ares/c-ares/pull/997">https://github.com/c-ares/c-ares/pull/997</a>)
* Fix a few build issues on MidnightBSD.
[PR #983](<a class="moz-txt-link-freetext" href="https://github.com/c-ares/c-ares/pull/983">https://github.com/c-ares/c-ares/pull/983</a>)
Thanks go to these friendly people for their efforts and contributions for this
release:
* Brad House (@bradh352)
* (@F3lixTheCat)
* Lucas Holt (@laffer1)
* @oargon
* Pavel P (@pps83)
* Sean Harmer (@seanharmer)
* Uwe (@nixblik)</pre>
<p><br>
</p>
</body>
</html>