Fabrice Fontaine c7a369a907 package/c-ares: security bump to version 1.17.0 ...

- avoid read-heap-buffer-overflow in ares_parse_soa_reply found during
  fuzzing
- Avoid theoretical buffer overflow in RC4 loop comparison
- Empty hquery->name could lead to invalid memory access
- ares_parse_{a,aaaa}_reply() could return a larger *naddrttls than was
  passed in

https://c-ares.haxx.se/changelog.html#1_17_0

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>

2020-11-17 20:57:50 +01:00

..

c-ares.hash

package/c-ares: security bump to version 1.17.0

2020-11-17 20:57:50 +01:00

c-ares.mk

package/c-ares: security bump to version 1.17.0

2020-11-17 20:57:50 +01:00

Config.in

…