{"id":10180,"date":"2017-06-20T08:15:52","date_gmt":"2017-06-20T06:15:52","guid":{"rendered":"https:\/\/daniel.haxx.se\/blog\/?p=10180"},"modified":"2017-06-20T08:15:52","modified_gmt":"2017-06-20T06:15:52","slug":"c-ares-1-13-0","status":"publish","type":"post","link":"https:\/\/daniel.haxx.se\/blog\/2017\/06\/20\/c-ares-1-13-0\/","title":{"rendered":"c-ares 1.13.0"},"content":{"rendered":"<p><a href=\"https:\/\/c-ares.haxx.se\/\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-1412\" src=\"https:\/\/daniel.haxx.se\/blog\/wp-content\/uploads\/2009\/11\/cares.png\" alt=\"\" width=\"460\" height=\"160\" srcset=\"https:\/\/daniel.haxx.se\/blog\/wp-content\/uploads\/2009\/11\/cares.png 460w, https:\/\/daniel.haxx.se\/blog\/wp-content\/uploads\/2009\/11\/cares-150x52.png 150w, https:\/\/daniel.haxx.se\/blog\/wp-content\/uploads\/2009\/11\/cares-300x104.png 300w\" sizes=\"auto, (max-width: 460px) 100vw, 460px\" \/><\/a>The <a href=\"https:\/\/c-ares.haxx.se\/\">c-ares project<\/a> may not be very fancy or make a lot of noise, but it steadily moves forward and boasts an amazing 95% code coverage in the automated tests.<\/p>\n<p>Today we release <strong>c-ares 1.13.0<\/strong>.<\/p>\n<p>This time there&#8217;s basically three notable things to take home from this, apart from the 20-something bug-fixes.<\/p>\n<h2>CVE-2017-1000381<\/h2>\n<p>Due to an oversight there was an API function that we didn&#8217;t fuzz and yes, it was found out to have a security flaw. If you ask a server for a NAPTR DNS field and that response comes back crafted carefully, it could cause c-ares to access memory out of bounds.<\/p>\n<p>All details for <a href=\"https:\/\/c-ares.haxx.se\/adv_20170620.html\">CVE-2017-1000381 on the c-ares site<\/a>.<\/p>\n<p>(Side-note: this is the first CVE I&#8217;ve received with a 7(!)-digit number to the right of the year.)<\/p>\n<h2>cmake<\/h2>\n<p>Now c-ares can optionally be built using cmake, in addition to the existing autotools setup.<\/p>\n<h2>Virtual socket IO<\/h2>\n<p>If you have a special setup or custom needs, c-ares now allows you to fully replace all the socket IO functions with your own custom set with <a href=\"https:\/\/c-ares.haxx.se\/ares_set_socket_functions.html\">ares_set_socket_functions<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>The c-ares project may not be very fancy or make a lot of noise, but it steadily moves forward and boasts an amazing 95% code coverage in the automated tests. Today we release c-ares 1.13.0. This time there&#8217;s basically three notable things to take home from this, apart from the 20-something bug-fixes. CVE-2017-1000381 Due to &hellip; <a href=\"https:\/\/daniel.haxx.se\/blog\/2017\/06\/20\/c-ares-1-13-0\/\" class=\"more-link\">Continue reading <span class=\"screen-reader-text\">c-ares 1.13.0<\/span> <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":5,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[239],"tags":[213,95],"class_list":["post-10180","post","type-post","status-publish","format-standard","hentry","category-c-ares-floss","tag-c-ares","tag-release"],"_links":{"self":[{"href":"https:\/\/daniel.haxx.se\/blog\/wp-json\/wp\/v2\/posts\/10180","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/daniel.haxx.se\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/daniel.haxx.se\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/daniel.haxx.se\/blog\/wp-json\/wp\/v2\/users\/5"}],"replies":[{"embeddable":true,"href":"https:\/\/daniel.haxx.se\/blog\/wp-json\/wp\/v2\/comments?post=10180"}],"version-history":[{"count":2,"href":"https:\/\/daniel.haxx.se\/blog\/wp-json\/wp\/v2\/posts\/10180\/revisions"}],"predecessor-version":[{"id":10185,"href":"https:\/\/daniel.haxx.se\/blog\/wp-json\/wp\/v2\/posts\/10180\/revisions\/10185"}],"wp:attachment":[{"href":"https:\/\/daniel.haxx.se\/blog\/wp-json\/wp\/v2\/media?parent=10180"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/daniel.haxx.se\/blog\/wp-json\/wp\/v2\/categories?post=10180"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/daniel.haxx.se\/blog\/wp-json\/wp\/v2\/tags?post=10180"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}