openSUSE Build Service

buildservice-autocommit accepted request 1148852 from

Factory Maintainer (factory-maintainer) 3 months ago (revision 167)

baserev update by copy to link target

Reinhard Max (rmax) committed 3 months ago (revision 166)

Reinhard Max (rmax) committed 3 months ago (revision 165)

- update to 2.90:
  * CVE-2023-50387, CVE-2023-50868, bsc#1219823, bsc#1219826:
    Denial Of Service while trying to validate specially crafted
    DNSSEC responses
  * Fix reversion in --rev-server introduced in 2.88 which caused
    breakage if the prefix length is not exactly divisible by 8
    (IPv4) or 4 (IPv6).
  * Fix possible SEGV when there server(s) for a particular domain
    are configured, but no server which is not qualified for a
    particular domain.
  * Set the default maximum DNS UDP packet sice to 1232.
    Obsoletes: dnsmasq-CVE-2023-28450.patch
  * Add --no-dhcpv4-interface and --no-dhcpv6-interface for better
    control over which inetrfaces are providing DHCP service.
  * Fix issue with stale caching
  * Add configurable caching for arbitrary RR-types.
  * Add --filter-rr option, to filter arbitrary RR-types.

buildservice-autocommit accepted request 1126658 from

Reinhard Max (rmax) 6 months ago (revision 164)

baserev update by copy to link target

Reinhard Max (rmax) accepted request 1117613 from

Thorsten Kukuk (kukuk) 6 months ago (revision 163)

- SLP got dropped, remove config (bsc#1214884)

buildservice-autocommit accepted request 1087210 from

Reinhard Max (rmax) 12 months ago (revision 162)

baserev update by copy to link target

Reinhard Max (rmax) accepted request 1087003 from

Callum Farmer (gmbr3) 12 months ago (revision 161)

- Correct rundir from /var/run to /run for pid file

buildservice-autocommit accepted request 1082695 from

Reinhard Max (rmax) about 1 year ago (revision 160)

baserev update by copy to link target

Reinhard Max (rmax) committed about 1 year ago (revision 159)

- bsc#1209358, CVE-2023-28450, dnsmasq-CVE-2023-28450.patch:
  default maximum EDNS.0 UDP packet size should be 1232

buildservice-autocommit accepted request 1066370 from

Reinhard Max (rmax) about 1 year ago (revision 158)

baserev update by copy to link target

Reinhard Max (rmax) committed about 1 year ago (revision 157)

    it down. (boo#1207174)

buildservice-autocommit accepted request 1063496 from

Reinhard Max (rmax) over 1 year ago (revision 156)

baserev update by copy to link target

Reinhard Max (rmax) accepted request 1063373 from

Paolo Stivanin (polslinux) over 1 year ago (revision 155)

- update to 2.89:
  * Fix bug introduced in 2.88 (commit fe91134b) which can result
    in corruption of the DNS cache internal data structures and
    logging of "cache internal error". This has only been seen
    in one place in the wild, and it took considerable effort
    to even generate a test case to reproduce it, but there's
    no way to be sure it won't strike, and the effect is to break
    the cache badly. Installations with DNSSEC enabled are more
    likely to see the problem, but not running DNSSEC does not
    guarantee that it won't happen. Thanks to Timo van Roermund
    for reporting the bug and for his great efforts in chasing
    it down.
- remove no longer needed rpmlintrc filters

buildservice-autocommit accepted request 1045478 from

Reinhard Max (rmax) over 1 year ago (revision 154)

baserev update by copy to link target

Reinhard Max (rmax) accepted request 1044373 from

Dirk Mueller (dirkmueller) over 1 year ago (revision 153)

- update to 2.88:
  * Fix bug in --dynamic-host when an interface has /16 IPv4
  * address.
  * Add --fast-dns-retry option. This gives dnsmasq the ability
    to originate retries for upstream DNS queries itself, rather
    than relying on the downstream client. This is most useful
    when doing DNSSEC over unreliable upstream networks. It comes
    with some cost in memory usage and network bandwidth.
  * Add --use-stale-cache option. When set, if a DNS name exists
    in the cache, but its time-to-live has expired, dnsmasq will
    return the data anyway.
  * handle removal of whole files or entries within files.

buildservice-autocommit accepted request 1034136 from

Reinhard Max (rmax) over 1 year ago (revision 152)

baserev update by copy to link target

Reinhard Max (rmax) accepted request 1031298 from

Dirk Mueller (dirkmueller) over 1 year ago (revision 151)

- update to 2.87 (bsc#1197872, CVE-2022-0934):
  * Allow arbitrary prefix lengths in --rev-server and
    --domain=....,local
  * Replace --address=/#/..... functionality which got
    missed in the 2.86 domain search rewrite.
  * Add --nftset option, like --ipset but for the newer nftables.
  * Add --filter-A and --filter-AAAA options, to remove IPv4 or IPv6
    addresses from DNS answers.
  * Fix crash doing netbooting when --port is set to zero
    to disable the DNS server. Thanks to Drexl Johannes
    for the bug report.
  * Generalise --dhcp-relay. Sending via broadcast/multicast is
    now supported for both IPv4 and IPv6 and the configuration
    syntax made easier (but backwards compatible).
  * Add snooping of IPv6 prefix-delegations to the DHCP-relay system.
  * Finesse parsing of --dhcp-remoteid and --dhcp-subscrid. To be treated
    as hex, the pattern must consist of only hex digits AND contain
    at least one ':'. Thanks to Bengt-Erik Sandstrom who tripped
    over a pattern consisting of a decimal number which was interpreted
    surprisingly.
  * Include client address in TFTP file-not-found error reports.
    Thanks to Stefan Rink for the initial patch, which has been
    re-worked by me (srk). All bugs mine.
  * Note in manpage the change in behaviour of -address. This behaviour
    actually changed in v2.86, but was undocumented there. From 2.86 on,
    (eg) --address=/example.com/1.2.3.4 ONLY applies to A queries. All other
    types of query will be sent upstream. Pre 2.86, that would catch the
    whole example.com domain and queries for other types would get
    a local NODATA answer. The pre-2.86 behaviour is still available,
    by configuring --address=/example.com/1.2.3.4 --local=/example.com/

buildservice-autocommit accepted request 1004570 from

Marcus Meissner (msmeissn) over 1 year ago (revision 150)

baserev update by copy to link target

Marcus Meissner (msmeissn) accepted request 1002291 from

Callum Farmer (gmbr3) over 1 year ago (revision 149)

- Ensure the dnsmasq user's group is used
- Remove nogroup requirement

buildservice-autocommit accepted request 982371 from

Marcus Meissner (msmeissn) almost 2 years ago (revision 148)

baserev update by copy to link target

Places

Revisions of dnsmasq

Places