tree 292d44d33d3b5c16d7f150fbbd8acc650ad7b378
parent 9bbb6efc81fee71f8045530742f715c933361f77
author Fabrice Fontaine <fontaine.fabrice@gmail.com> 1605597054 +0100
committer Peter Korsgaard <peter@korsgaard.com> 1605643070 +0100

package/c-ares: security bump to version 1.17.0

- avoid read-heap-buffer-overflow in ares_parse_soa_reply found during
  fuzzing
- Avoid theoretical buffer overflow in RC4 loop comparison
- Empty hquery->name could lead to invalid memory access
- ares_parse_{a,aaaa}_reply() could return a larger *naddrttls than was
  passed in

https://c-ares.haxx.se/changelog.html#1_17_0

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>