c-ares-1.19.0

[Bruce Dubbs]

New minor version.

[Bruce Dubbs]

c-ares version 1.19.0 - Jan 28 2023

Security:

• Low. Stack overflow in ares_set_sortlist() which is used during c-ares initialization and typically provided by an administrator and not an end user.

Changes:

• Windows: Drop support for XP and derivatives which greatly cleans up initialization code.
• Add ARES_OPT_HOSTS_FILE similar to ARES_OPT_RESOLVCONF for specifying a custom hosts file location.
• Add vcpkg installation instructions

Bug fixes:

• Fix cross-compilation from Windows to Linux due to CPACK logic.
• Fix memory leak in reading /etc/hosts when using localhost fallback.
• Fix chain building c-ares when libresolv is already included by another project
• File lookup should not immediately abort as there may be other tries due to search criteria.
• Asterisks should be allowed in host validation as CNAMEs may reference wildcard domains
• AutoTools build system referenced bad STDC_HEADERS macro
• Even if one address class returns a failure for ares_getaddrinfo() we should still return the results we have
• CMake Windows: DLLs did not include resource file to include versions
• CMake: Guard target creation in exported config
• Fix ares_getaddrinfo() numerical address resolution with AF_UNSPEC
• Apple: fix libresolv configured query times.
• Fix tools and help information
• Various documentation fixes and cleanups
• Add include guards to ares_data.h
• c-ares could try to exceed maximum number of iovec entries supported by system
• CMake package config generation allow for absolute install paths
• Intel compiler fixes
• ares_strsplit bugs
• The RFC6761 6.3 states localhost subdomains must be offline too.

[Bruce Dubbs]

Fixed at commits

cb993ff207 Update to fetchmail-6.4.36.
1d0c7f825b Update to c-ares-1.19.0.