id	summary	reporter	owner	description	type	status	priority	milestone	component	version	severity	resolution	keywords	cc
13522	c-ares-1.16.1	Douglas R. Reno	Douglas R. Reno	"New point version

{{{
 c-ares version 1.16.1 - May 11 2020

Security:

    Prevent possible use-after-free and double-free in ares_getaddrinfo() if ares_destroy() is called prior to ares_getaddrinfo() completing. Reported by Jann Horn at Google Project Zero. 

Changes:

    Allow TXT records on CHAOS qclass. Used for retriving things like version.bind, version.server, authoris.bind, hostname.bind, and id.server. [3] 

Bug fixes:

    Fix Windows Unicode incompatibilities with ares_getaddrinfo() [1]
    Silence false cast-align compiler warnings due to valid casts of struct sockaddr to struct sockaddr_in and struct sockaddr_in6.
    MacOS should use libresolv for retrieving DNS servers, like iOS
    CMake build system should populate the INCLUDE_DIRECTORIES property of installed targets [2]
    Correct macros in use for the ares_getaddrinfo.3 man page 
}}}
"	enhancement	closed	normal	10.0	BOOK	SVN	medium	fixed