SECURITY UPDATE: denial of service via a 0-length UDP packet
debian/patches/CVE-2023-32067.patch: in read_udp_packets() in
ares_process.c, treat a 0-length UDP read as a 0-length packet and keep
reading instead of tearing the server connection down; only a negative
return value is now an error, and an answer from a mismatched address
no longer stops the read loop.