| c-ares version 1.17.1 |
| |
| Due to a packaging issue with 1.17.0, we have released 1.17.1 to address that |
| issue. See 1.17.0 release notes below.. |
| |
| |
| c-ares version 1.17.0 |
| |
| Security: |
| o avoid read-heap-buffer-overflow in ares_parse_soa_reply found during |
| fuzzing [2] [3] |
| o Avoid theoretical buffer overflow in RC4 loop comparison [5] |
| o Empty hquery->name could lead to invalid memory access [15] |
| o ares_parse_{a,aaaa}_reply() could return a larger *naddrttls than was |
| passed in [17] |
| |
| Changes: |
| o Update help information for adig, acountry, and ahost [4] |
| o Test Suite now uses dynamic system-assigned ports rather than hardcoded |
| ports to prevent failures in containers [10] |
| o Detect remote DNS server does not support EDNS using rules from RFC 6891 [12] |
| o Source tree has been reorganized to use a more modern layout [13] |
| o Allow parsing of CAA Resource Record [14] |
| |
| Bug fixes: |
| o readaddrinfo bad sizeof() [1] |
| o Test cases should honor HAVE_WRITEV flag, not depend on WIN32 [6] |
| o FQDN with trailing period should be queried first [7] |
| o ares_getaddrinfo() was returning members of the struct as garbage values if |
| unset, and was not honoring ai_socktype and ai_protocol hints. [8] [9] |
| o ares_gethostbyname() with AF_UNSPEC and an ip address would fail [11] |
| o Properly document ares_set_local_ip4() uses host byte order [16] |
| |
| Thanks go to these friendly people for their efforts and contributions: |
| @anonymoushelpishere |
| Anthony Penniston (@apenn-msft) |
| Brad House (@bradh352) |
| Bulat Gaifullin (@bgaifullin) |
| Daniela Sonnenschein (@lxdicted) |
| Daniel Stenberg (@bagder) |
| David Hotham (@dimbleby) |
| Fionn Fitzmaurice (@fionn) |
| Gisle Vanem (@gavenm) |
| Ivan Baidakou (@basiliscos) |
| Jonathan Maye-Hobbs (@wheelpharoah) |
| Łukasz Marszał (@lmarszal) |
| lutianxiong (@ltx2018) |
| Seraphime Kirkovski (@Seraphime) |
| (14 contributors) |
| |
| References to bug reports and discussions on issues: |
| [1] = https://github.com/c-ares/c-ares/pull/331 |
| [2] = https://github.com/c-ares/c-ares/pull/332 |
| [3] = https://github.com/c-ares/c-ares/issues/333 |
| [4] = https://github.com/c-ares/c-ares/pull/334 |
| [5] = https://github.com/c-ares/c-ares/pull/336 |
| [6] = https://github.com/c-ares/c-ares/pull/344 |
| [7] = https://github.com/c-ares/c-ares/pull/345 |
| [8] = https://github.com/c-ares/c-ares/issues/343 |
| [9] = https://github.com/c-ares/c-ares/issues/317 |
| [10] = https://github.com/c-ares/c-ares/pull/346 |
| [11] = https://github.com/c-ares/c-ares/pull/204 |
| [12] = https://github.com/c-ares/c-ares/pull/244 |
| [13] = https://github.com/c-ares/c-ares/pull/349 |
| [14] = https://github.com/c-ares/c-ares/pull/360 |
| [15] = https://github.com/c-ares/c-ares/pull/367 |
| [16] = https://github.com/c-ares/c-ares/pull/368 |
| [17] = https://github.com/c-ares/c-ares/issues/371 |
| |
