update CapnProto to v0.10.3 to avoid CVE-2022-46149

[SadiHassan]

Update CapnProto to v0.10.3 to avoid CVE-2022-46149.

Changelog category (leave one):

• Improvement

Changelog entry (a user-readable short description of the changes that goes to CHANGELOG.md):

Update CapnProto to v0.10.3 to avoid CVE-2022-46149

Documentation entry for user-facing changes

• Documentation is written (mandatory for new features)

Information about CI checks: https://clickhouse.com/docs/en/development/continuous-integration/

[alexey-milovidov]

Let's add a test. Is there a payload to trigger the out-of-bounds access?

[SadiHassan]

@alexey-milovidov 1) Is there any existing (or similar) test for this submodule you can refer? it will be helpful for my enlightenment and implement. 2) I am not aware of any payload yet, but we can search or may be create one. 3) Also, I see Integration tests (tsan) is failing, doesn't look like caused by this PR. Could you please confirm that? Thanks!

[Avogar]

Integration tests (tsan) failure is not related to changes.

I guess, maybe there is a way to make a test by creating a corrupted CapnProto file and then reading it using ClickHouse. But I think it's really difficult or even impossible, I am not sure if we use this code that contains a bug, because our CapnProto reader is implemented through arrow orc adapter (and as I can see in the issue, this bug can be triggered under some special conditions of using the api)
UPD: Sorry, I confused ORC and CapnProto, arrow lib is not related

Let's merge it without a test

[SadiHassan]

@Avogar , Thank you!