|
1 |
| -c-ares version 1.16.1 |
| 1 | +c-ares version 1.17.1 |
| 2 | + |
| 3 | +Due to a packaging issue with 1.17.0, we have released 1.17.1 to address that |
| 4 | +issue. See 1.17.0 release notes below.. |
| 5 | + |
| 6 | + |
| 7 | +c-ares version 1.17.0 |
2 | 8 |
|
3 | 9 | Security:
|
4 |
| - o Prevent possible use-after-free and double-free in ares_getaddrinfo() if |
5 |
| - ares_destroy() is called prior to ares_getaddrinfo() completing. Reported |
6 |
| - by Jann Horn at Google Project Zero. |
| 10 | + o avoid read-heap-buffer-overflow in ares_parse_soa_reply found during |
| 11 | + fuzzing [2] [3] |
| 12 | + o Avoid theoretical buffer overflow in RC4 loop comparison [5] |
| 13 | + o Empty hquery->name could lead to invalid memory access [15] |
| 14 | + o ares_parse_{a,aaaa}_reply() could return a larger *naddrttls than was |
| 15 | + passed in [17] |
7 | 16 |
|
8 | 17 | Changes:
|
9 |
| - o Allow TXT records on CHAOS qclass. Used for retriving things like |
10 |
| - version.bind, version.server, authoris.bind, hostname.bind, and id.server. |
11 |
| - [3] |
| 18 | + o Update help information for adig, acountry, and ahost [4] |
| 19 | + o Test Suite now uses dynamic system-assigned ports rather than hardcoded |
| 20 | + ports to prevent failures in containers [10] |
| 21 | + o Detect remote DNS server does not support EDNS using rules from RFC 6891 [12] |
| 22 | + o Source tree has been reorganized to use a more modern layout [13] |
| 23 | + o Allow parsing of CAA Resource Record [14] |
12 | 24 |
|
13 | 25 | Bug fixes:
|
14 |
| - o Fix Windows Unicode incompatibilities with ares_getaddrinfo() [1] |
15 |
| - o Silence false cast-align compiler warnings due to valid casts of |
16 |
| - struct sockaddr to struct sockaddr_in and struct sockaddr_in6. |
17 |
| - o MacOS should use libresolv for retrieving DNS servers, like iOS |
18 |
| - o CMake build system should populate the INCLUDE_DIRECTORIES property of |
19 |
| - installed targets [2] |
20 |
| - o Correct macros in use for the ares_getaddrinfo.3 man page |
| 26 | + o readaddrinfo bad sizeof() [1] |
| 27 | + o Test cases should honor HAVE_WRITEV flag, not depend on WIN32 [6] |
| 28 | + o FQDN with trailing period should be queried first [7] |
| 29 | + o ares_getaddrinfo() was returning members of the struct as garbage values if |
| 30 | + unset, and was not honoring ai_socktype and ai_protocol hints. [8] [9] |
| 31 | + o ares_gethostbyname() with AF_UNSPEC and an ip address would fail [11] |
| 32 | + o Properly document ares_set_local_ip4() uses host byte order [16] |
21 | 33 |
|
22 | 34 | Thanks go to these friendly people for their efforts and contributions:
|
23 |
| - Brad House (@bradh352), Daniel Stenberg (@bagder), Dmitry Igrishin (@dmitigr), |
24 |
| - Jann Horn, Shelly Vohr, Teemu R (@rytilahti) |
25 |
| - (6 contributors) |
| 35 | + @anonymoushelpishere |
| 36 | + Anthony Penniston (@apenn-msft) |
| 37 | + Brad House (@bradh352) |
| 38 | + Bulat Gaifullin (@bgaifullin) |
| 39 | + Daniela Sonnenschein (@lxdicted) |
| 40 | + Daniel Stenberg (@bagder) |
| 41 | + David Hotham (@dimbleby) |
| 42 | + Fionn Fitzmaurice (@fionn) |
| 43 | + Gisle Vanem (@gavenm) |
| 44 | + Ivan Baidakou (@basiliscos) |
| 45 | + Jonathan Maye-Hobbs (@wheelpharoah) |
| 46 | + Łukasz Marszał (@lmarszal) |
| 47 | + lutianxiong (@ltx2018) |
| 48 | + Seraphime Kirkovski (@Seraphime) |
| 49 | +(14 contributors) |
26 | 50 |
|
27 | 51 | References to bug reports and discussions on issues:
|
28 |
| - [1] = https://github.com/c-ares/c-ares/pull/328 |
29 |
| - [2] = https://github.com/c-ares/c-ares/pull/323 |
30 |
| - [3] = https://github.com/c-ares/c-ares/pull/321 |
| 52 | + [1] = https://github.com/c-ares/c-ares/pull/331 |
| 53 | + [2] = https://github.com/c-ares/c-ares/pull/332 |
| 54 | + [3] = https://github.com/c-ares/c-ares/issues/333 |
| 55 | + [4] = https://github.com/c-ares/c-ares/pull/334 |
| 56 | + [5] = https://github.com/c-ares/c-ares/pull/336 |
| 57 | + [6] = https://github.com/c-ares/c-ares/pull/344 |
| 58 | + [7] = https://github.com/c-ares/c-ares/pull/345 |
| 59 | + [8] = https://github.com/c-ares/c-ares/issues/343 |
| 60 | + [9] = https://github.com/c-ares/c-ares/issues/317 |
| 61 | + [10] = https://github.com/c-ares/c-ares/pull/346 |
| 62 | + [11] = https://github.com/c-ares/c-ares/pull/204 |
| 63 | + [12] = https://github.com/c-ares/c-ares/pull/244 |
| 64 | + [13] = https://github.com/c-ares/c-ares/pull/349 |
| 65 | + [14] = https://github.com/c-ares/c-ares/pull/360 |
| 66 | + [15] = https://github.com/c-ares/c-ares/pull/367 |
| 67 | + [16] = https://github.com/c-ares/c-ares/pull/368 |
| 68 | + [17] = https://github.com/c-ares/c-ares/issues/371 |
0 commit comments