From 755bed9cef01e305962ae08f2f5b4c9623314611dfab859f62a6dac7457c3fde Mon Sep 17 00:00:00 2001 From: Reinhard Max Date: Mon, 19 Apr 2021 21:50:31 +0000 Subject: [PATCH] - Update to 2.85: * Fix problem with DNS retries in 2.83/2.84. * Tweak sort order of tags in get-version. * Avoid treating a --dhcp-host which has an IPv6 address as eligible for use with DHCPv4 on the grounds that it has no address, and vice-versa. * Add --dynamic-host option: A and AAAA records which take their network part from the network of a local interface. Useful for routers with dynamically prefixes. * Teach --bogus-nxdomain and --ignore-address to take an IPv4 subnet. * CVE-2021-3448, bsc#1183709: Use random source ports where possible if source addresses/interfaces in use. * Change the method of allocation of random source ports for DNS. * Scale the size of the DNS random-port pool based on the value of the --dns-forward-max configuration. * Tweak TFTP code to check sender of all received packets, as specified in RFC 1350 para 4. OBS-URL: https://build.opensuse.org/package/show/network/dnsmasq?expand=0&rev=132 --- dnsmasq-2.84.tar.xz | 3 --- dnsmasq-2.84.tar.xz.asc | 16 ---------------- dnsmasq-2.85.tar.xz | 3 +++ dnsmasq-2.85.tar.xz.asc | 16 ++++++++++++++++ dnsmasq.changes | 22 ++++++++++++++++++++++ dnsmasq.spec | 2 +- 6 files changed, 42 insertions(+), 20 deletions(-) delete mode 100644 dnsmasq-2.84.tar.xz delete mode 100644 dnsmasq-2.84.tar.xz.asc create mode 100644 dnsmasq-2.85.tar.xz create mode 100644 dnsmasq-2.85.tar.xz.asc diff --git a/dnsmasq-2.84.tar.xz b/dnsmasq-2.84.tar.xz deleted file mode 100644 index 972ef2c..0000000 --- a/dnsmasq-2.84.tar.xz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:603195c64b73137609b07e1024ae0b37f652b2f5fe467dce66985b3d1850050c -size 514216 diff --git a/dnsmasq-2.84.tar.xz.asc b/dnsmasq-2.84.tar.xz.asc deleted file mode 100644 index ef70312..0000000 --- a/dnsmasq-2.84.tar.xz.asc +++ /dev/null @@ -1,16 +0,0 @@ ------BEGIN PGP SIGNATURE----- - -iQIzBAABCAAdFiEE1urL1u5GuDQkjRESFc3aauGRNaIFAmAPQV8ACgkQFc3aauGR -NaJDjw//fBXY3NjvufUEDRCyKlOTETTmh+emg9hvBz6tnh91xThciI+xfhvNZ9+e -yvG2dUHr0spa/BbAcE8Ac9ai59Be9sCdi6PlEgjnGTFfpKCZ816AoNZPU1F0WU3j -H1r5BQ+c1eV0xw7QpowLxxrOkRbj/WtSdab6J1hr9BDyx0jlMfyCulHQ+nHABJON -xfD893bRdNDDU1zrZZh4ep2FM/4oslJpcrKzpMtF0cq7ZlUFT7HOywy87iAL87AY -4vAm11ZXTMEycTw2puYURs5E5OfkxQpzXSCaUIjZX9UcjtEn+VNEC6/dXKOreQB+ -xt3IscmifBNbN4n4dKfWY2JjIv5kPUZoWA/SE0SdQixAugoDztczEzVHxaJMYO/9 -1wX13IMnCM53IdGbXXtLOfIvgsZpNA6IxbyDT9McJ6CCUWkjSpxlFqwLFEiAqV4Q -ZpeR25N6D8ngGLSyEKet0Gbd3/aJK9Z6cmrtQFxSvEwBcdiv1Aq9zad9PaIuXNXi -gHn9SBT7Tws6AmbHtA1rDKvbncuheRPZOSwNtjLDMBatb9+2tYloekpFCjQHtWYB -nGWALEBTzs1kAYYlT0v8UX3BMokUam0MV0fGPQOgAgcEpNTycPA+30AMPw8sIVfY -dqDQgU9nU3l4QLwVt4Dm5SEhGNim4eYnBKPbpsDhQ33N1p/xw7o= -=v/QT ------END PGP SIGNATURE----- diff --git a/dnsmasq-2.85.tar.xz b/dnsmasq-2.85.tar.xz new file mode 100644 index 0000000..70c5043 --- /dev/null +++ b/dnsmasq-2.85.tar.xz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:ad98d3803df687e5b938080f3d25c628fe41c878752d03fbc6199787fee312fa +size 518316 diff --git a/dnsmasq-2.85.tar.xz.asc b/dnsmasq-2.85.tar.xz.asc new file mode 100644 index 0000000..f6dbf66 --- /dev/null +++ b/dnsmasq-2.85.tar.xz.asc @@ -0,0 +1,16 @@ +-----BEGIN PGP SIGNATURE----- + +iQIzBAABCAAdFiEE1urL1u5GuDQkjRESFc3aauGRNaIFAmBuGPsACgkQFc3aauGR +NaIg6A//Xfcu62aItiHf/jTeFHUSqHrdqanDqLRWSpgdeKO2adk+s66p5CqVHC8K +JfxPo6eTUj8uX53Idy5oiwUz4d40iiOjfxHs4Nme0ozyIAHGw/Tfwx7/+NV882vi ++rtqhjF83dRsnqIR95FD17tVI+cR0sq6XKzwBtPicjmPt79sQ2UtkBo7I+IS9B5g +o+i21gGYm34EgY6EavveWfGkKgJLz+cF59h4i16lc1eRGNsy5clURDxiJ65Zz0zb +ZARLudEclbFNdoUu/4idmOUhZCGWrqf9o+rQDYW3vN85saxCPbTChqqy1VC6OBnX +VLN3cAJlk1hS5X0HzewhXkOqulzjg81KWRQ8EYATdOQP7u6apv4q87hnmr+uL9E8 +0VZ3ECyhH7n6qNXfqNS2Fp3Yp0sm1hgRy+6bu/IgVTPs/Ro22HqTiw5YXZQkPMbe +A4acAep59nIV9dEB5DYF1N0S0P6OcVtUsZAFlGS1cD0owFuI44W/lg8w9xA9gyJv +uqZvZqkQDM8bi9zJ2d7fjf65pjS+7S9ISxDoPHp34lLMB7D/rAuW8GVBkL1KxMWb +sRHIBDKM01CXZeRBlbxAYHlH7s2QehRk/t57ksTmPtT3IAVMSajEG0+1YElUGg8s +2gqLtCLdmB6Lwl4RFripSERvPzYOAsd8DiqDL9wYOECBStUGuEw= +=W3WM +-----END PGP SIGNATURE----- diff --git a/dnsmasq.changes b/dnsmasq.changes index c1d9851..32cf98f 100644 --- a/dnsmasq.changes +++ b/dnsmasq.changes @@ -1,3 +1,25 @@ +------------------------------------------------------------------- +Mon Apr 19 20:46:49 UTC 2021 - Reinhard Max + +- Update to 2.85: + * Fix problem with DNS retries in 2.83/2.84. + * Tweak sort order of tags in get-version. + * Avoid treating a --dhcp-host which has an IPv6 address as + eligible for use with DHCPv4 on the grounds that it has + no address, and vice-versa. + * Add --dynamic-host option: A and AAAA records which take their + network part from the network of a local interface. Useful + for routers with dynamically prefixes. + * Teach --bogus-nxdomain and --ignore-address to take an IPv4 + subnet. + * CVE-2021-3448, bsc#1183709: Use random source ports where + possible if source addresses/interfaces in use. + * Change the method of allocation of random source ports for DNS. + * Scale the size of the DNS random-port pool based on the + value of the --dns-forward-max configuration. + * Tweak TFTP code to check sender of all received packets, as + specified in RFC 1350 para 4. + ------------------------------------------------------------------- Mon Feb 8 22:37:20 UTC 2021 - Dirk Müller diff --git a/dnsmasq.spec b/dnsmasq.spec index b5d30a4..31f5d37 100644 --- a/dnsmasq.spec +++ b/dnsmasq.spec @@ -22,7 +22,7 @@ %bcond_without tftp_user_package %endif Name: dnsmasq -Version: 2.84 +Version: 2.85 Release: 0 Summary: DNS Forwarder and DHCP Server License: GPL-2.0-only OR GPL-3.0-only