c-ares version 1.16.1 Security: o Prevent possible use-after-free and double-free in ares_getaddrinfo() if ares_destroy() is called prior to ares_getaddrinfo() completing. Reported by Jann Horn at Google Project Zero. Changes: o Allow TXT records on CHAOS qclass. Used for retriving things like version.bind, version.server, authoris.bind, hostname.bind, and id.server. [3] Bug fixes: o Fix Windows Unicode incompatibilities with ares_getaddrinfo() [1] o Silence false cast-align compiler warnings due to valid casts of struct sockaddr to struct sockaddr_in and struct sockaddr_in6. o MacOS should use libresolv for retrieving DNS servers, like iOS o CMake build system should populate the INCLUDE_DIRECTORIES property of installed targets [2] o Correct macros in use for the ares_getaddrinfo.3 man page Thanks go to these friendly people for their efforts and contributions: Brad House (@bradh352), Daniel Stenberg (@bagder), Dmitry Igrishin (@dmitigr), Jann Horn, Shelly Vohr, Teemu R (@rytilahti) (6 contributors) References to bug reports and discussions on issues: [1] = https://github.com/c-ares/c-ares/pull/328 [2] = https://github.com/c-ares/c-ares/pull/323 [3] = https://github.com/c-ares/c-ares/pull/321