package/c-ares: security bump to version 1.16.1

Prevent possible use-after-free and double-free in ares_getaddrinfo() if
ares_destroy() is called prior to ares_getaddrinfo() completing.

https://c-ares.haxx.se/changelog.html#1_16_1

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 42a0b2d2d9)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
This commit is contained in:
Fabrice Fontaine 2020-05-11 21:29:35 +02:00 committed by Peter Korsgaard
parent 3dc7624f2e
commit 5c39f24256
2 changed files with 2 additions and 2 deletions

View File

@ -1,5 +1,5 @@
# Locally calculated after checking pgp signature
sha256 de058ad7c128156e2db6dc98b8a359924d6f210a1b99dd36ba15c8f839a83a89 c-ares-1.16.0.tar.gz
sha256 d08312d0ecc3bd48eee0a4cc0d2137c9f194e0a28de2028928c0f6cae85f86ce c-ares-1.16.1.tar.gz
# Hash for license file
sha256 db4eb63fe09daebdf57d3f79b091bb5ee5070c0d761040e83264e648d307af4c LICENSE.md

View File

@ -4,7 +4,7 @@
#
################################################################################
C_ARES_VERSION = 1.16.0
C_ARES_VERSION = 1.16.1
C_ARES_SITE = http://c-ares.haxx.se/download
C_ARES_INSTALL_STAGING = YES
C_ARES_CONF_OPTS = --with-random=/dev/urandom