#acl PaulHowarth:read,write,admin,revert,delete All:read

=== Saturday 21st November 2020 ===

==== Fedora Project ====

 * Updated `python-crypto` (2.6.1) in Rawhide to fix Python 3.10 compatibility ([[RedHatBugzilla:1897544|Bug #1897544]])

==== Local Packages ====

 * Updated `c-ares` to 1.17.1:
 . Security:
  * Avoid read-heap-buffer-overflow in `ares_parse_soa_reply` found during fuzzing ([[https://github.com/c-ares/c-ares/pull/332|GH#332]], [[https://github.com/c-ares/c-ares/issues/333|GH#333]])
  * Avoid theoretical buffer overflow in RC4 loop comparison ([[https://github.com/c-ares/c-ares/pull/336|GH#336]])
  * Empty `hquery->name` could lead to invalid memory access ([[https://github.com/c-ares/c-ares/pull/367|GH#367]])
  * `ares_parse_{a,aaaa}_reply()` could return a larger `*naddrttls` than was passed in ([[https://github.com/c-ares/c-ares/issues/371|GH#371]])
 . Changes:
  * Update help information for `adig`, `acountry`, and `ahost` ([[https://github.com/c-ares/c-ares/pull/334|GH#334]])
  * Test Suite now uses dynamic system-assigned ports rather than hardcoded ports to prevent failures in containers ([[https://github.com/c-ares/c-ares/pull/346|GH#346]])
  * Detect remote DNS server does not support EDNS using rules from RFC 6891 ([[https://github.com/c-ares/c-ares/pull/244|GH#244]])
  * Source tree has been reorganized to use a more modern layout ([[https://github.com/c-ares/c-ares/pull/349|GH#349]])
  * Allow parsing of `CAA` Resource Record ([[https://github.com/c-ares/c-ares/pull/360|GH#360]])
 . Bug fixes:
  * `readaddrinfo` bad `sizeof()` ([[https://github.com/c-ares/c-ares/pull/331|GH#331]])
  * Test cases should honour `HAVE_WRITEV` flag, not depend on WIN32 ([[https://github.com/c-ares/c-ares/pull/344|GH#344]])
  * FQDN with trailing period should be queried first ([[https://github.com/c-ares/c-ares/pull/345|GH#345]])
  * `ares_getaddrinfo()` was returning members of the struct as garbage values if unset, and was not honouring `ai_socktype` and `ai_protocol` hints ([[https://github.com/c-ares/c-ares/issues/343|GH#343]], [[https://github.com/c-ares/c-ares/issues/317|GH#317]])
  * `ares_gethostbyname()` with `AF_UNSPEC` and an IP address would fail ([[https://github.com/c-ares/c-ares/pull/204|GH#204]])
  * Properly document `ares_set_local_ip4()` uses host byte order ([[https://github.com/c-ares/c-ares/pull/368|GH#368]])
 * Updated `perl-Net-DNS` to 1.29:
  * Include test number in summary of failed non-fatal tests
  * Remove `Net::DNS::SEC` specific tests
  * Fix faulty test plan in `t/08-recurse.t`

----