Subject: [RELEASE] c-ares 1.16.1

[RELEASE] c-ares 1.16.1

From: Daniel Stenberg <daniel_at_haxx.se>
Date: Mon, 11 May 2020 20:04:50 +0200 (CEST)

Hi friends!

Another c-ares version is here! As always, get it from:

   https://c-ares.haxx.se/

c-ares version 1.16.1

Security:
  o Prevent possible use-after-free and double-free in ares_getaddrinfo() if
    ares_destroy() is called prior to ares_getaddrinfo() completing. Reported
    by Jann Horn at Google Project Zero.

Changes:
  o Allow TXT records on CHAOS qclass. Used for retriving things like
    version.bind, version.server, authoris.bind, hostname.bind, and id.server.
    [3]

Bug fixes:
  o Fix Windows Unicode incompatibilities with ares_getaddrinfo() [1]
  o Silence false cast-align compiler warnings due to valid casts of
    struct sockaddr to struct sockaddr_in and struct sockaddr_in6.
  o MacOS should use libresolv for retrieving DNS servers, like iOS
  o CMake build system should populate the INCLUDE_DIRECTORIES property of
    installed targets [2]
  o Correct macros in use for the ares_getaddrinfo.3 man page

Thanks go to these friendly people for their efforts and contributions:
  Brad House (@bradh352), Daniel Stenberg (@bagder), Dmitry Igrishin (@dmitigr),
  Jann Horn, Shelly Vohr, Teemu R (@rytilahti)
  (6 contributors)

References to bug reports and discussions on issues:
  [1] = https://github.com/c-ares/c-ares/pull/328
  [2] = https://github.com/c-ares/c-ares/pull/323
  [3] = https://github.com/c-ares/c-ares/pull/321

-- 
  / daniel.haxx.se
Received on 2020-05-11