From ca9b4aa114c0767647fc2c755f8bdfd87833719f Mon Sep 17 00:00:00 2001
From: Peter Marko <peter.marko@siemens.com>
Date: Sun, 19 Jul 2026 22:16:42 +0200
Subject: [PATCH] c-ares: set status for CVE-2025-31498

This CVE was fixed in 1.34.5 as mentioned in release notes [1].

[1] https://github.com/c-ares/c-ares/releases/tag/v1.34.5

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
---
 meta-oe/recipes-support/c-ares/c-ares_1.34.8.bb | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/meta-oe/recipes-support/c-ares/c-ares_1.34.8.bb b/meta-oe/recipes-support/c-ares/c-ares_1.34.8.bb
index df994c83ae..058f3666e7 100644
--- a/meta-oe/recipes-support/c-ares/c-ares_1.34.8.bb
+++ b/meta-oe/recipes-support/c-ares/c-ares_1.34.8.bb
@@ -28,3 +28,5 @@ PACKAGE_BEFORE_PN = "${PN}-utils"
 FILES:${PN}-utils = "${bindir}"
 
 BBCLASSEXTEND = "native nativesdk"
+
+CVE_STATUS[CVE-2025-31498] = "fixed-version: Fixed since 1.34.5"