Tue Aug 10 07:27:23 2021 UTC ()
libcares: update to 1.17.2.

c-ares version 1.17.2

This is a security and bugfix release.  It addresses a few security related
issues along with various bugfixes mostly related to portability.

Security:
 o NodeJS passes NULL for addr and 0 for addrlen to ares_parse_ptr_reply() on
   systems where malloc(0) returns NULL.  This would cause a crash. [8]
 o When building c-ares with CMake, the RANDOM_FILE would not be set and
   therefore downgrade to the less secure random number generator [12]
 o If ares_getaddrinfo() was terminated by an ares_destroy(), it would cause
   a crash [13]
 o Crash in sortaddrinfo() if the list size equals 0 due to an unexpected
   DNS response [14]
 o Expand number of escaped characters in DNS replies as per RFC1035 5.1 to
   prevent spoofing [16], [17]
 o Perform validation on hostnames to prevent possible XSS due to applications
   not performing valiation themselves [18]

Changes:
 o Use non-blocking /dev/urandom for random data to prevent early startup
   performance issues [5]
 o z/OS port [6]
 o ares_malloc(0) is now defined behavior (returns NULL) rather than
   system-specific to catch edge cases [7]

Bug fixes:
 o Fuzz testing files were not distributed with official archives [1]
 o Building tests should not force building of static libraries except on
   Windows [2]
 o Windows builds of the tools would fail if built as static due to a missing
   CARES_STATICLIB definition [3]
 o Relative headers must use double quotes to prevent pulling in a system
   library [4]
 o Fix OpenBSD building by implementing portability updates for including
   arpa/nameser.h [9]
 o Fix building out-of-tree for autotools [10]
 o Make install on MacOS/iOS with CMake was missing the bundle destination so
   libraries weren't actually installed [11]
 o Fix retrieving DNS server configuration on MacOS and iOS if the configuration
   did not include search domains [15]
 o ares_parse_a_reply and ares_parse_aaa_reply were erroneously using strdup()
   instead of ares_strdup() [19]


(wiz)
diff -r1.29 -r1.30 pkgsrc/net/libcares/Makefile
diff -r1.14 -r1.15 pkgsrc/net/libcares/PLIST
diff -r1.22 -r1.23 pkgsrc/net/libcares/distinfo

cvs diff -r1.29 -r1.30 pkgsrc/net/libcares/Makefile (expand / switch to unified diff)

--- pkgsrc/net/libcares/Makefile 2020/11/23 15:47:19 1.29
+++ pkgsrc/net/libcares/Makefile 2021/08/10 07:27:23 1.30
@@ -1,16 +1,16 @@ @@ -1,16 +1,16 @@
1# $NetBSD: Makefile,v 1.29 2020/11/23 15:47:19 wiz Exp $ 1# $NetBSD: Makefile,v 1.30 2021/08/10 07:27:23 wiz Exp $
2 2
3DISTNAME= c-ares-1.17.1 3DISTNAME= c-ares-1.17.2
4PKGNAME= ${DISTNAME:S/c-/libc/1} 4PKGNAME= ${DISTNAME:S/c-/libc/1}
5CATEGORIES= net 5CATEGORIES= net
6MASTER_SITES= https://c-ares.haxx.se/download/ 6MASTER_SITES= https://c-ares.haxx.se/download/
7 7
8MAINTAINER= pkgsrc-users@NetBSD.org 8MAINTAINER= pkgsrc-users@NetBSD.org
9HOMEPAGE= https://c-ares.haxx.se/ 9HOMEPAGE= https://c-ares.haxx.se/
10COMMENT= Asynchronous resolver library, c-ares 10COMMENT= Asynchronous resolver library, c-ares
11LICENSE= mit 11LICENSE= mit
12 12
13USE_CMAKE= yes 13USE_CMAKE= yes
14CMAKE_ARGS+= -DCARES_STATIC=ON 14CMAKE_ARGS+= -DCARES_STATIC=ON
15 15
16.include "../../mk/bsd.pkg.mk" 16.include "../../mk/bsd.pkg.mk"

cvs diff -r1.14 -r1.15 pkgsrc/net/libcares/PLIST (expand / switch to unified diff)

--- pkgsrc/net/libcares/PLIST 2020/11/23 15:47:19 1.14
+++ pkgsrc/net/libcares/PLIST 2021/08/10 07:27:23 1.15
@@ -1,29 +1,29 @@ @@ -1,29 +1,29 @@
1@comment $NetBSD: PLIST,v 1.14 2020/11/23 15:47:19 wiz Exp $ 1@comment $NetBSD: PLIST,v 1.15 2021/08/10 07:27:23 wiz Exp $
2bin/acountry 2bin/acountry
3bin/adig 3bin/adig
4bin/ahost 4bin/ahost
5include/ares.h 5include/ares.h
6include/ares_build.h 6include/ares_build.h
7include/ares_dns.h 7include/ares_dns.h
8include/ares_rules.h 8include/ares_rules.h
9include/ares_version.h 9include/ares_version.h
10lib/cmake/c-ares/c-ares-config-version.cmake 10lib/cmake/c-ares/c-ares-config-version.cmake
11lib/cmake/c-ares/c-ares-config.cmake 11lib/cmake/c-ares/c-ares-config.cmake
12lib/cmake/c-ares/c-ares-targets-noconfig.cmake 12lib/cmake/c-ares/c-ares-targets-noconfig.cmake
13lib/cmake/c-ares/c-ares-targets.cmake 13lib/cmake/c-ares/c-ares-targets.cmake
14lib/libcares.so 14lib/libcares.so
15lib/libcares.so.2 15lib/libcares.so.2
16lib/libcares.so.2.4.2 16lib/libcares.so.2.4.3
17lib/libcares_static.a 17lib/libcares_static.a
18lib/pkgconfig/libcares.pc 18lib/pkgconfig/libcares.pc
19man/man1/acountry.1 19man/man1/acountry.1
20man/man1/adig.1 20man/man1/adig.1
21man/man1/ahost.1 21man/man1/ahost.1
22man/man3/ares_cancel.3 22man/man3/ares_cancel.3
23man/man3/ares_create_query.3 23man/man3/ares_create_query.3
24man/man3/ares_destroy.3 24man/man3/ares_destroy.3
25man/man3/ares_destroy_options.3 25man/man3/ares_destroy_options.3
26man/man3/ares_dup.3 26man/man3/ares_dup.3
27man/man3/ares_expand_name.3 27man/man3/ares_expand_name.3
28man/man3/ares_expand_string.3 28man/man3/ares_expand_string.3
29man/man3/ares_fds.3 29man/man3/ares_fds.3

cvs diff -r1.22 -r1.23 pkgsrc/net/libcares/distinfo (expand / switch to unified diff)

--- pkgsrc/net/libcares/distinfo 2020/11/23 15:47:19 1.22
+++ pkgsrc/net/libcares/distinfo 2021/08/10 07:27:23 1.23
@@ -1,6 +1,6 @@ @@ -1,6 +1,6 @@
1$NetBSD: distinfo,v 1.22 2020/11/23 15:47:19 wiz Exp $ 1$NetBSD: distinfo,v 1.23 2021/08/10 07:27:23 wiz Exp $
2 2
3SHA1 (c-ares-1.17.1.tar.gz) = 431d5ff705db752f5d25e610827b7cb3653fc7ff 3SHA1 (c-ares-1.17.2.tar.gz) = 933d862f5877625003a212a7f825309af6517dea
4RMD160 (c-ares-1.17.1.tar.gz) = 4e7f83785735951f2c22145743c238d78332f4cf 4RMD160 (c-ares-1.17.2.tar.gz) = facbdff9395ab01e313d21565c87ee5e06aed1ab
5SHA512 (c-ares-1.17.1.tar.gz) = b11887bcc9274d368088e1a8b6aca62414f20675cf0bc58e948f54fa04c327c39dd23cefe7509eec6397db14b550a3f6b77f5c18b3d735b3eef48ce2da1dcd00 5SHA512 (c-ares-1.17.2.tar.gz) = f625e0ef8508af6475d3e83b51ab29be8a4878e2a87e7f518bea046b76a74bfde7043ca6ec2a9e714c898ab9e5d4a5a678c3347a9f9eb68980438f7ca8ae3fc8
6Size (c-ares-1.17.1.tar.gz) = 1518701 bytes 6Size (c-ares-1.17.2.tar.gz) = 1538276 bytes