libcares: update to 1.17.2. c-ares version 1.17.2 This is a security and bugfix release. It addresses a few security related issues along with various bugfixes mostly related to portability. Security: o NodeJS passes NULL for addr and 0 for addrlen to ares_parse_ptr_reply() on systems where malloc(0) returns NULL. This would cause a crash. [8] o When building c-ares with CMake, the RANDOM_FILE would not be set and therefore downgrade to the less secure random number generator [12] o If ares_getaddrinfo() was terminated by an ares_destroy(), it would cause a crash [13] o Crash in sortaddrinfo() if the list size equals 0 due to an unexpected DNS response [14] o Expand number of escaped characters in DNS replies as per RFC1035 5.1 to prevent spoofing [16], [17] o Perform validation on hostnames to prevent possible XSS due to applications not performing valiation themselves [18] Changes: o Use non-blocking /dev/urandom for random data to prevent early startup performance issues [5] o z/OS port [6] o ares_malloc(0) is now defined behavior (returns NULL) rather than system-specific to catch edge cases [7] Bug fixes: o Fuzz testing files were not distributed with official archives [1] o Building tests should not force building of static libraries except on Windows [2] o Windows builds of the tools would fail if built as static due to a missing CARES_STATICLIB definition [3] o Relative headers must use double quotes to prevent pulling in a system library [4] o Fix OpenBSD building by implementing portability updates for including arpa/nameser.h [9] o Fix building out-of-tree for autotools [10] o Make install on MacOS/iOS with CMake was missing the bundle destination so libraries weren't actually installed [11] o Fix retrieving DNS server configuration on MacOS and iOS if the configuration did not include search domains [15] o ares_parse_a_reply and ares_parse_aaa_reply were erroneously using strdup() instead of ares_strdup() [19]diff -r1.29 -r1.30 pkgsrc/net/libcares/Makefile
(wiz)
@@ -1,16 +1,16 @@ | @@ -1,16 +1,16 @@ | |||
1 | # $NetBSD: Makefile,v 1.29 2020/11/23 15:47:19 wiz Exp $ | 1 | # $NetBSD: Makefile,v 1.30 2021/08/10 07:27:23 wiz Exp $ | |
2 | 2 | |||
3 | DISTNAME= c-ares-1.17.1 | 3 | DISTNAME= c-ares-1.17.2 | |
4 | PKGNAME= ${DISTNAME:S/c-/libc/1} | 4 | PKGNAME= ${DISTNAME:S/c-/libc/1} | |
5 | CATEGORIES= net | 5 | CATEGORIES= net | |
6 | MASTER_SITES= https://c-ares.haxx.se/download/ | 6 | MASTER_SITES= https://c-ares.haxx.se/download/ | |
7 | 7 | |||
8 | MAINTAINER= pkgsrc-users@NetBSD.org | 8 | MAINTAINER= pkgsrc-users@NetBSD.org | |
9 | HOMEPAGE= https://c-ares.haxx.se/ | 9 | HOMEPAGE= https://c-ares.haxx.se/ | |
10 | COMMENT= Asynchronous resolver library, c-ares | 10 | COMMENT= Asynchronous resolver library, c-ares | |
11 | LICENSE= mit | 11 | LICENSE= mit | |
12 | 12 | |||
13 | USE_CMAKE= yes | 13 | USE_CMAKE= yes | |
14 | CMAKE_ARGS+= -DCARES_STATIC=ON | 14 | CMAKE_ARGS+= -DCARES_STATIC=ON | |
15 | 15 | |||
16 | .include "../../mk/bsd.pkg.mk" | 16 | .include "../../mk/bsd.pkg.mk" |
@@ -1,29 +1,29 @@ | @@ -1,29 +1,29 @@ | |||
1 | @comment $NetBSD: PLIST,v 1.14 2020/11/23 15:47:19 wiz Exp $ | 1 | @comment $NetBSD: PLIST,v 1.15 2021/08/10 07:27:23 wiz Exp $ | |
2 | bin/acountry | 2 | bin/acountry | |
3 | bin/adig | 3 | bin/adig | |
4 | bin/ahost | 4 | bin/ahost | |
5 | include/ares.h | 5 | include/ares.h | |
6 | include/ares_build.h | 6 | include/ares_build.h | |
7 | include/ares_dns.h | 7 | include/ares_dns.h | |
8 | include/ares_rules.h | 8 | include/ares_rules.h | |
9 | include/ares_version.h | 9 | include/ares_version.h | |
10 | lib/cmake/c-ares/c-ares-config-version.cmake | 10 | lib/cmake/c-ares/c-ares-config-version.cmake | |
11 | lib/cmake/c-ares/c-ares-config.cmake | 11 | lib/cmake/c-ares/c-ares-config.cmake | |
12 | lib/cmake/c-ares/c-ares-targets-noconfig.cmake | 12 | lib/cmake/c-ares/c-ares-targets-noconfig.cmake | |
13 | lib/cmake/c-ares/c-ares-targets.cmake | 13 | lib/cmake/c-ares/c-ares-targets.cmake | |
14 | lib/libcares.so | 14 | lib/libcares.so | |
15 | lib/libcares.so.2 | 15 | lib/libcares.so.2 | |
16 | lib/libcares.so.2.4.2 | 16 | lib/libcares.so.2.4.3 | |
17 | lib/libcares_static.a | 17 | lib/libcares_static.a | |
18 | lib/pkgconfig/libcares.pc | 18 | lib/pkgconfig/libcares.pc | |
19 | man/man1/acountry.1 | 19 | man/man1/acountry.1 | |
20 | man/man1/adig.1 | 20 | man/man1/adig.1 | |
21 | man/man1/ahost.1 | 21 | man/man1/ahost.1 | |
22 | man/man3/ares_cancel.3 | 22 | man/man3/ares_cancel.3 | |
23 | man/man3/ares_create_query.3 | 23 | man/man3/ares_create_query.3 | |
24 | man/man3/ares_destroy.3 | 24 | man/man3/ares_destroy.3 | |
25 | man/man3/ares_destroy_options.3 | 25 | man/man3/ares_destroy_options.3 | |
26 | man/man3/ares_dup.3 | 26 | man/man3/ares_dup.3 | |
27 | man/man3/ares_expand_name.3 | 27 | man/man3/ares_expand_name.3 | |
28 | man/man3/ares_expand_string.3 | 28 | man/man3/ares_expand_string.3 | |
29 | man/man3/ares_fds.3 | 29 | man/man3/ares_fds.3 |
@@ -1,6 +1,6 @@ | @@ -1,6 +1,6 @@ | |||
1 | $NetBSD: distinfo,v 1.22 2020/11/23 15:47:19 wiz Exp $ | 1 | $NetBSD: distinfo,v 1.23 2021/08/10 07:27:23 wiz Exp $ | |
2 | 2 | |||
3 | SHA1 (c-ares-1.17.1.tar.gz) = 431d5ff705db752f5d25e610827b7cb3653fc7ff | 3 | SHA1 (c-ares-1.17.2.tar.gz) = 933d862f5877625003a212a7f825309af6517dea | |
4 | RMD160 (c-ares-1.17.1.tar.gz) = 4e7f83785735951f2c22145743c238d78332f4cf | 4 | RMD160 (c-ares-1.17.2.tar.gz) = facbdff9395ab01e313d21565c87ee5e06aed1ab | |
5 | SHA512 (c-ares-1.17.1.tar.gz) = b11887bcc9274d368088e1a8b6aca62414f20675cf0bc58e948f54fa04c327c39dd23cefe7509eec6397db14b550a3f6b77f5c18b3d735b3eef48ce2da1dcd00 | 5 | SHA512 (c-ares-1.17.2.tar.gz) = f625e0ef8508af6475d3e83b51ab29be8a4878e2a87e7f518bea046b76a74bfde7043ca6ec2a9e714c898ab9e5d4a5a678c3347a9f9eb68980438f7ca8ae3fc8 | |
6 | Size (c-ares-1.17.1.tar.gz) = 1518701 bytes | 6 | Size (c-ares-1.17.2.tar.gz) = 1538276 bytes |