9997f11794- c-ares 1.30.0 Features: * Basic support for SIG RR record (RFC 2931 / RFC 2535) [PR #773] Changes: * Validation that DNS strings can only consist of printable ascii characters otherwise will trigger a parse failure. [75de16c] and [40fb125] Bugfixes: * QueryCache: Fix issue where purging on server changes wasn't working. [a6c8fe6] - changes in 1.29.0 Features: * When using ARES_OPT_EVENT_THREAD, automatically reload system configuration when network conditions change. [PR #759] * Add observability into DNS server health via a server state callback, invoked whenever a query finishes. [PR #744] * Add server failover retry behavior, where failed servers are retried with small probability after a minimum delay. [PR #731] Changes: * Mark ares_channel_t * as const in more places in the public API. [PR #758] Bugfixes: * Due to a logic flaw dns name compression writing was not properly implemented which would result in the name prefix not being written for a partial match. This could cause issues in various record types such as MX records when using the deprecated API. Regression introduced in 1.28.0. [Issue #757] * Revert OpenBSD SOCK_DNS flag, it doesn't do what the docs say it does and causes c-ares to become non-functional. [PR #754] * ares_getnameinfo(): loosen validation on salen parameter. [Issue #752] * cmake: Android requires C99. [PR #748] * ares_queue_wait_empty() does not honor timeout_ms >= 0. [Issue #742] - updated dowload URLs to point to github - updated keyring to include Brad House DA7D64E4C82C6294CB73A20E22E3D13B5411B7CAAdam Majer2024-06-10 12:06:32 +0000
0600a0e20fAccepting request 1178954 from devel:libraries:c_c++
Ana Guerrero
2024-06-07 13:02:16 +0000
26be3a8aefAccepting request 1178095 from home:jgwang:branches:devel:libraries:c_c++Dirk Mueller2024-06-06 08:39:35 +0000
760ce24e9eAccepting request 1164057 from devel:libraries:c_c++
Ana Guerrero
2024-04-03 15:18:32 +0000
1efadc9528- c-ares 1.28.1 Features: * Emit warnings when deprecated c-ares functions are used. This can be disabled by passing a compiler definition of CARES_NO_DEPRECATED. [PR #732] * Add function ares_search_dnsrec() to search for records using the new DNS record data structures. [PR #719] * Rework internals to pass around ares_dns_record_t instead of binary data, this introduces new public functions of ares_query_dnsrec() and ares_send_dnsrec(). [PR #730] Changes: * tests: when performing simulated queries, reduce timeouts to make tests run faster * Replace configuration file parsers with memory-safe parser. [PR #725] * Remove acountry completely, the manpage might still get installed otherwise. [Issue #718] Bugfixes: * CMake: don't overwrite global required libraries/definitions/includes which could cause build errors for projects chain building c-ares. [Issue #729] * On some platforms, netinet6/in6.h is not included by netinet/in.h and needs to be included separately. [PR #728] * Fix a potential memory leak in ares_init(). [Issue #724] * Some platforms don't have the isascii() function. Implement as a macro. [PR #721] * CMake: Fix Chain building if CMAKE runtime paths not set * NDots configuration should allow a value of zero. [PR #735]Adam Majer2024-04-02 08:49:16 +0000
cd6995d0e8Accepting request 1151588 from devel:libraries:c_c++
Ana Guerrero
2024-02-27 21:44:28 +0000
fcf38f067a- c-ares 1.27.0 Security: * Moderate. CVE-2024-25629. Reading malformatted /etc/resolv.conf, /etc/nsswitch.conf or the HOSTALIASES file could result in a crash. GHSA-mg26-v6qh-x48q (CVE-2024-25629, bsc#1220279) Features: * New function ares_queue_active_queries() to retrieve number of in-flight queries. PR #712 * New function ares_queue_wait_empty() to wait for the number of in-flight queries to reach zero. PR #710 * New ARES_FLAG_NO_DEFLT_SVR for ares_init_options() to return a failure if no DNS servers can be found rather than attempting to use 127.0.0.1. This also introduces a new ares status code of ARES_ENOSERVER. PR #713 Changes: * EDNS Packet size should be 1232 as per DNS Flag Day. PR #705 Bugfixes: * Fix warning due to ignoring return code of write(). PR #709 * CMake: don't override target output locations if not top-level. Issue #708 * Fix building c-ares without thread support. PR #700Adam Majer2024-02-26 13:29:07 +0000
5cef7a7fedAccepting request 1145395 from devel:libraries:c_c++
Ana Guerrero
2024-02-09 22:51:58 +0000
ddddc211b5Accepting request 1145356 from home:dimstar:FactoryAdam Majer2024-02-09 11:02:27 +0000
5e95ab0befAccepting request 1143773 from home:AndreasStieger:branches:devel:libraries:c_c++Adam Majer2024-02-08 11:26:19 +0000
b765727bcc- Update to version 1.25 Changes: o Rewrite ares_strsplit() as a wrapper for ares__buf_split() for memory safety reasons. o The ahost utility now uses ares_getaddrinfo() and returns both IPv4 and IPv6 addresses by default. Bug Fixes: o Tests: Live reverse lookups for Google's public DNS servers no longer return results, replace with CloudFlare pubic DNS servers. o Connection failures should increment the server failure count first or a retry might be enqueued to the same server o On systems that don't implement the ability to enumerate network interfaces the stubs used the wrong prototype. o Fix minor warnings and documentation typos o Fix support for older GoogleTest versions o getrandom() may require sys/random.h on some systems. o Fix building tests with symbol hiding enabled. - 0001-Use-RPM-compiler-options.patch: dropped, obsoleteAdam Majer2024-01-08 10:22:59 +0000
8a446affed- Update to version 1.24 Features: * Add support for IPv6 link-local DNS servers. Nameserver formats can now accept the 0face suffix, and a new ares_get_servers_csv() function was added to return servers that can contain the link-local interface name. Changes: * Unbundle GoogleTest for test cases. Package maintainers will now need torequire GoogleTest (GMock) as a build dependency if building tests. New GoogleTest versions require C++14 or later. * Replace nameserver parsing code to use new memory-safe functions. * Replace the sortlist parser with new memory-safe functions. * Various warning fixes and dead code removal. Bugfixes: * Old Linux versions require POSIX_C_SOURCE or _GNU_SOURCE to compile with thread safety support * A non-responsive DNS server that caused timeouts wouldn't increment thefailure count, this would lead to other servers not being tried. Regression introduced in 1.22.0 * Some projects that depend on c-ares expect invalid parameter option valuespassed into ares_init_options() to simply be ignored. This behavior has been restored * getrandom() can fail if the kernel doesn't support the syscall, fall back to another random source * ares_cancel() when performing ares_gethostbyname() or ares_getaddrinfo()with AF_UNSPEC, if called after one address class was returned but before the other address class, it would return ARES_SUCCESS rather than ARES_ECANCELLED - disable-live-tests.patch: dropped, not neededAdam Majer2024-01-02 12:11:58 +0000
45b51c91bd- Update to version 1.23 Features: Introduce optional (but on by default) thread-safety for the c-ares library. This has no API nor ABI implications. resolv.conf in modern systems uses attempts and timeouts options instead of the old retrans and retry options. Query caching support based on TTL of responses. Can be enabled via ares_init_options() with ARES_OPT_QUERY_CACHE. Bugfixes: ares_init_options() for ARES_OPT_UDP_PORT and ARES_OPT_TCP_PORT accept theport in host byte order, but it was reading it as network byte order. Regression introduced in 1.20.0. ares_init_options() for ARES_FLAG_NOSEARCH was not being honored forares_getaddrinfo() or ares_gethostbyname(). Regression introduced in 1.16.0. Autotools MacOS and iOS version check was failing Environment variables passed to c-ares are meant to be an override for system configuration. Regression introduced in 1.22.0. Spelling fixes as detected by codespell. The timeout returned by ares_timeout() was truncated to milliseconds butvalidated to microseconds which could cause a user to attempt to process timeouts prior to the timeout actually expiring. CMake was not honoring CXXFLAGS passed in via the environment which couldcause compile and link errors with distribution hardening flags during packaging. Fix Windows UWP and Cygwin compilation. ares_set_servers_*() for legacy reasons needs to accept an empty server listand zero out all servers. This results in an inoperable channel and thus is only used in simulation testing, but we don't want to break users. Regression introduced in 1.21.0. Changes in version 1.22.1 Bugfixes: Fix /etc/hosts processing performance with all entries using same IPaddress. Large hosts files using the same IP address for all entries could use exponential time. Fix typos in manpages Fix OpenWatcom building Changes in version 1.22.0 Features: ares_reinit() is now implemented to re-read any system configuration and immediately apply to an existing ares channel The adig command line program has been rewritten and its format now more closely matches that of BIND's dig utility The new DNS message parser and writer functions have now been made public RFC9460 HTTPS and SVCB records are now supported RFC6698 TLSA records are now supported The server list is now internally dynamic and can be changed without impacting existing queries Hosts file processing is now cached until the file is detected to be changed to speed up repetitive lookups of large hosts files Changes:Adam Majer2023-12-01 13:45:16 +0000
8e8ed3e596Accepting request 1120917 from home:AndreasStieger:branches:devel:libraries:c_c++Adam Majer2023-10-31 08:33:31 +0000
a531fc908cAccepting request 1116650 from devel:libraries:c_c++
Ana Guerrero
2023-10-11 21:53:59 +0000
8c83e2cbe8- Update to version 1.20.1 * Remove bin/acountry from built tools as nerd.dk is gone * Default per-query timeout has been reduced to 2s with a 3x retry count * rand: add support for getrandom() Bug fixes: * TCP back to back queries were broken * Ensure queries for ares_getaddrinfo() are not requeued during destruction * ares_getaddrinfo() should not retry other address classes if one address class has already been returned * Avoid production ill-formed result when qualifying a name with the root domain * Fix missing prefix for CMake generated libcares.pc * DNS server ports can now be read from system configuration instead of defaulting to port 53, aka openBSD resolv.conf format * Replace usages of sprintf with snprintfAdam Majer2023-10-10 09:43:18 +0000
49f6bb8adeAccepting request 1088407 from devel:libraries:c_c++
Dominique Leuenberger
2023-05-23 12:53:27 +0000
dd6f9f454c- Update to version 1.19.1 Security: * CVE-2023-32067. High. 0-byte UDP payload causes Denial of Service (bsc#1211604) * CVE-2023-31147 Moderate. Insufficient randomness in generation of DNS query IDs (bsc#1211605) * CVE-2023-31130. Moderate. Buffer Underwrite in ares_inet_net_pton() (bsc#1211606) * CVE-2023-31124. Low. AutoTools does not set CARES_RANDOM_FILE during cross compilation (bsc#1211607) Bug fixes: * Fix uninitialized memory warning in test * ares_getaddrinfo() should allow a port of 0 * Fix memory leak in ares_send() on error * Fix comment style in ares_data.h * Fix typo in ares_init_options.3 * Sync ax_pthread.m4 with upstream * Sync ax_cxx_compile_stdcxx_11.m4 with upstream to fix uclibc supportAdam Majer2023-05-22 14:02:45 +0000
57e98fe5ccAccepting request 1064045 from devel:libraries:c_c++
Dominique Leuenberger
2023-02-10 13:33:48 +0000
6c705d3088Accepting request 1062054 from devel:libraries:c_c++
Dominique Leuenberger
2023-01-31 15:08:43 +0000
9871bab11aAccepting request 1061853 from home:mnhaukeAdam Majer2023-01-30 13:37:09 +0000
91745c25f1Accepting request 937232 from devel:libraries:c_c++
Dominique Leuenberger
2021-12-13 19:42:02 +0000
f57624e19d- disable unit tests for SLE12 since GCC compiler too old to build unit testsAdam Majer2021-12-08 19:02:58 +0000
e7ba41e9de- update to 1.18.1. Changes since 1.17.2: * Allow '/' as a valid character for a returned name for CNAME in-addr.arpa delegation * no longer forwards requests for localhost resolution per RFC6761 * During a domain search, treat ARES_ENODATA as ARES_NXDOMAIN so that the search process will continue to the next domain in the search. * Provide ares_nameser.h as a public interface as needed by NodeJS * Add support for URI(Uniform Resource Identifier) records via ares_parse_uri_reply() - 5c995d5.patch: upstreamed - disable-live-tests.patch: refreshedAdam Majer2021-12-08 14:08:53 +0000
2572151cd5Accepting request 917731 from devel:libraries:c_c++
Dominique Leuenberger
2021-09-13 14:24:22 +0000
0738305207- new upstream website - drop multibuild - tests do not require static library anymore - spec file cleanup - drop sources that were re-added to upstream distibution (c-ares-config.cmake.in ares_dns.h libcares.pc.cmake)Adam Majer2021-09-09 12:29:23 +0000
0cd11bc174- 5c995d5.patch: augment input validation on hostnames to allow _ as part of DNS response (bsc#1190225)Adam Majer2021-09-08 14:10:21 +0000
f7d4aff1a8Accepting request 911845 from devel:libraries:c_c++
Richard Brown
2021-08-16 08:08:59 +0000
95591c953c- update to 1.17.2: Security: * When building c-ares with CMake, the RANDOM_FILE would not be set and therefore downgrade to the less secure random number generator * If ares_getaddrinfo() was terminated by an ares_destroy(), it would cause a crash * Crash in sortaddrinfo() if the list size equals 0 due to an unexpected DNS response * Expand number of escaped characters in DNS replies as per RFC1035 5.1 to prevent spoofing follow-up (bsc#1188881, CVE-2021-3672) * Perform validation on hostnames to prevent possible XSS due to applications not performing valiation themselves Changes: * ares_malloc(0) is now defined behavior (returns NULL) rather than system-specific to catch edge cases Bug fixes: * Building tests should not force building of static libraries except on Windows * Relative headers must use double quotes to prevent pulling in a system library for details see, https://c-ares.haxx.se/changelog.html#1_17_2Adam Majer2021-08-12 14:26:22 +0000
eb03d40079Accepting request 863715 from devel:libraries:c_c++
Dominique Leuenberger
2021-01-19 15:00:32 +0000
4ef81ce403Accepting request 863667 from home:dirkmueller:branches:devel:libraries:c_c++Adam Majer2021-01-16 18:20:28 +0000
673b82e8c0Accepting request 849957 from devel:libraries:c_c++
Dominique Leuenberger
2020-11-26 22:10:39 +0000
3a1bf709ceAccepting request 849904 from home:darix:appsAdam Majer2020-11-22 11:04:11 +0000
780ba1ff3fAccepting request 849356 from devel:libraries:c_c++
Dominique Leuenberger
2020-11-21 11:40:21 +0000
6d9b7b197e- ares_dns.h, missing_header.patch: re-add missing header in last releaseAdam Majer2020-11-19 09:56:19 +0000
063de5f532- add missing upstream sources, to be removed for next release - remove unnecessary BuildRequires - fix building on SLE12 systemsAdam Majer2020-11-17 20:39:07 +0000
ebe86ab1cbFix building in older SLE environmentsAdam Majer2020-11-17 14:05:48 +0000
dceca7e869Fixes broken %autosetup macro expansion on SLE12?Adam Majer2020-11-17 13:41:55 +0000
6810ec45ff- Version update to 1.17.0 Security: * avoid read-heap-buffer-overflow in ares_parse_soa_reply found during fuzzing * Avoid theoretical buffer overflow in RC4 loop comparison * Empty hquery->name could lead to invalid memory access * ares_parse_{a,aaaa}_reply() could return a larger *naddrttls than was passed in (bsc#1178882, CVE-2020-8277) Changes: * Update help information for adig, acountry, and ahost * Test Suite now uses dynamic system-assigned ports rather than hardcoded ports to prevent failures in containers * Detect remote DNS server does not support EDNS using rules from RFC 6891 * Source tree has been reorganized to use a more modern layout * Allow parsing of CAA Resource Record Bug fixes: * readaddrinfo bad sizeof() * Test cases should honor HAVE_WRITEV flag, not depend on WIN32 * FQDN with trailing period should be queried first * ares_getaddrinfo() was returning members of the struct as garbage values if unset, and was not honoring ai_socktype and ai_protocol hints. * ares_gethostbyname() with AF_UNSPEC and an ip address would fail * Properly document ares_set_local_ip4() uses host byte order For details, see https://c-ares.haxx.se/changelog.htmlAdam Majer2020-11-17 12:35:56 +0000
55b3c60356Accepting request 833686 from devel:libraries:c_c++
Dominique Leuenberger
2020-09-14 10:11:40 +0000
a3c9a16c82- simplify conditions bit to make it tad more readable
Tomáš Chvátal
2020-09-11 07:54:43 +0000
dc6b2f9fb6Accepting request 833524 from home:badshah400:branches:devel:libraries:c_c++
Tomáš Chvátal
2020-09-11 07:42:12 +0000
da1425795bAccepting request 819671 from devel:libraries:c_c++
Dominique Leuenberger
2020-07-15 09:12:37 +0000
a4815457d3Accepting request 819608 from home:elimat:branches:devel:libraries:c_c++
Tomáš Chvátal
2020-07-09 06:43:45 +0000
75191b2167Accepting request 770034 from devel:libraries:c_c++
Oliver Kurz
2020-02-14 15:35:48 +0000
8c39f8b875Accepting request 769948 from home:adamm:node_test
Tomáš Chvátal
2020-02-04 11:49:24 +0000
90605f4d8dAccepting request 761665 from home:TheBlackCat:branches:devel:libraries:c_c++
Tomáš Chvátal
2020-01-07 18:03:05 +0000
42fd2e44efAccepting request 748803 from devel:libraries:c_c++
Dominique Leuenberger
2019-11-18 19:05:57 +0000
4b8c0756e2- Fix version number of the snapshot to not be downgrade: bsc#1156601
Tomáš Chvátal
2019-11-15 07:59:48 +0000
70adc0ccc8Accepting request 746644 from devel:libraries:c_c++
Dominique Leuenberger
2019-11-10 21:34:34 +0000
42b6c9750cAccepting request 746633 from home:adamm:node_test
Tomáš Chvátal
2019-11-08 14:58:09 +0000
a25c8cb565Accepting request 742209 from devel:libraries:c_c++
Dominique Leuenberger
2019-10-28 15:46:11 +0000
4c1bcc5dd1Accepting request 742197 from home:mrostecki:branches:devel:kubic
Tomáš Chvátal
2019-10-23 15:55:33 +0000
63970d9354Accepting request 674654 from devel:libraries:c_c++
Stephan Kulow
2019-02-24 16:06:46 +0000
167e224183Accepting request 674652 from home:adamm:branches:devel:libraries:c_c++
Tomáš Chvátal
2019-02-13 16:25:34 +0000
d7f7f1f34bAccepting request 580631 from devel:libraries:c_c++
Dominique Leuenberger
2018-03-01 11:06:58 +0000
dfa7e543d9Accepting request 578357 from home:jengelh:branches:devel:libraries:c_c++
Tomáš Chvátal
2018-02-20 13:49:23 +0000
9ed4b65b94Accepting request 578293 from devel:libraries:c_c++
Dominique Leuenberger
2018-02-20 16:56:53 +0000
0bd535f0ad- Version update to 1.14.0: * Fix patch for CVE-2017-1000381 to not be overly aggressive * gethostbyaddr should fail with ECANCELLED not ENOTFOUND when ares_cancel is called * ares_gethostbyname.3: fix callback status values * docs: Document WSAStartup requirement * Fix a typo in init_by_resolv_conf
Tomáš Chvátal
2018-02-20 09:38:00 +0000
1671fd544c- Rename everything to c-ares
Tomáš Chvátal
2018-02-20 09:35:11 +0000
b7ef4ba2afAccepting request 577197 from devel:libraries:c_c++Adam Majer2018-02-20 09:24:29 +0000
Adam Majer
Ana Guerrero
Adam Majer
Dirk Mueller
Dominique Leuenberger
Richard Brown
Tomáš Chvátal
Oliver Kurz
Stephan Kulow