|
|
|
## c-ares version 1.27.0 - Feb 23 2024
|
|
|
|
|
|
|
|
This is a security, feature, and bugfix release.
|
|
|
|
|
|
|
|
Security:
|
|
|
|
|
|
|
|
* Moderate. CVE-2024-25629. Reading malformatted `/etc/resolv.conf`,
|
|
|
|
`/etc/nsswitch.conf` or the `HOSTALIASES` file could result in a crash.
|
|
|
|
[GHSA-mg26-v6qh-x48q](https://github.com/c-ares/c-ares/security/advisories/GHSA-mg26-v6qh-x48q)
|
|
|
|
|
|
|
|
Features:
|
|
|
|
|
|
|
|
* New function `ares_queue_active_queries()` to retrieve number of in-flight
|
|
|
|
queries. [PR #712](https://github.com/c-ares/c-ares/pull/712)
|
|
|
|
* New function `ares_queue_wait_empty()` to wait for the number of in-flight
|
|
|
|
queries to reach zero. [PR #710](https://github.com/c-ares/c-ares/pull/710)
|
|
|
|
* New `ARES_FLAG_NO_DEFLT_SVR` for `ares_init_options()` to return a failure if
|
|
|
|
no DNS servers can be found rather than attempting to use `127.0.0.1`. This
|
|
|
|
also introduces a new ares status code of `ARES_ENOSERVER`. [PR #713](https://github.com/c-ares/c-ares/pull/713)
|
|
|
|
|
|
|
|
Changes:
|
|
|
|
|
|
|
|
* EDNS Packet size should be 1232 as per DNS Flag Day. [PR #705](https://github.com/c-ares/c-ares/pull/705)
|
|
|
|
|
|
|
|
Bugfixes:
|
|
|
|
|
|
|
|
* Windows DNS suffix search list memory leak. [PR #711](https://github.com/c-ares/c-ares/pull/711)
|
|
|
|
* Fix warning due to ignoring return code of `write()`. [PR #709](https://github.com/c-ares/c-ares/pull/709)
|
|
|
|
* CMake: don't override target output locations if not top-level. [Issue #708](https://github.com/c-ares/c-ares/issues/708)
|
|
|
|
* Fix building c-ares without thread support. [PR #700](https://github.com/c-ares/c-ares/pull/700)
|
|
|
|
|
|
|
|
Thanks go to these friendly people for their efforts and contributions for this release:
|
|
|
|
|
|
|
|
* Anthony Alayo (@anthonyalayo)
|
|
|
|
* Brad House (@bradh352)
|
|
|
|
* Cheng Zhao (@zcbenz)
|
|
|
|
* Cristian Rodríguez (@crrodriguez)
|
|
|
|
* Daniel Stenberg (@bagder)
|
|
|
|
* Oliver Welsh (@oliverwelsh)
|
|
|
|
* Vojtěch Vobr (@vojtechvobr)
|