Revisions of dnsmasq
buildservice-autocommit
accepted
request 1148852
from
Factory Maintainer (factory-maintainer)
(revision 167)
baserev update by copy to link target
Reinhard Max (rmax)
committed
(revision 166)
Reinhard Max (rmax)
committed
(revision 165)
- update to 2.90: * CVE-2023-50387, CVE-2023-50868, bsc#1219823, bsc#1219826: Denial Of Service while trying to validate specially crafted DNSSEC responses * Fix reversion in --rev-server introduced in 2.88 which caused breakage if the prefix length is not exactly divisible by 8 (IPv4) or 4 (IPv6). * Fix possible SEGV when there server(s) for a particular domain are configured, but no server which is not qualified for a particular domain. * Set the default maximum DNS UDP packet sice to 1232. Obsoletes: dnsmasq-CVE-2023-28450.patch * Add --no-dhcpv4-interface and --no-dhcpv6-interface for better control over which inetrfaces are providing DHCP service. * Fix issue with stale caching * Add configurable caching for arbitrary RR-types. * Add --filter-rr option, to filter arbitrary RR-types.
buildservice-autocommit
accepted
request 1126658
from
Reinhard Max (rmax)
(revision 164)
baserev update by copy to link target
Reinhard Max (rmax)
accepted
request 1117613
from
Thorsten Kukuk (kukuk)
(revision 163)
- SLP got dropped, remove config (bsc#1214884)
buildservice-autocommit
accepted
request 1087210
from
Reinhard Max (rmax)
(revision 162)
baserev update by copy to link target
Reinhard Max (rmax)
accepted
request 1087003
from
Callum Farmer (gmbr3)
(revision 161)
- Correct rundir from /var/run to /run for pid file
buildservice-autocommit
accepted
request 1082695
from
Reinhard Max (rmax)
(revision 160)
baserev update by copy to link target
Reinhard Max (rmax)
committed
(revision 159)
- bsc#1209358, CVE-2023-28450, dnsmasq-CVE-2023-28450.patch: default maximum EDNS.0 UDP packet size should be 1232
buildservice-autocommit
accepted
request 1066370
from
Reinhard Max (rmax)
(revision 158)
baserev update by copy to link target
Reinhard Max (rmax)
committed
(revision 157)
it down. (boo#1207174)
buildservice-autocommit
accepted
request 1063496
from
Reinhard Max (rmax)
(revision 156)
baserev update by copy to link target
Reinhard Max (rmax)
accepted
request 1063373
from
Paolo Stivanin (polslinux)
(revision 155)
- update to 2.89: * Fix bug introduced in 2.88 (commit fe91134b) which can result in corruption of the DNS cache internal data structures and logging of "cache internal error". This has only been seen in one place in the wild, and it took considerable effort to even generate a test case to reproduce it, but there's no way to be sure it won't strike, and the effect is to break the cache badly. Installations with DNSSEC enabled are more likely to see the problem, but not running DNSSEC does not guarantee that it won't happen. Thanks to Timo van Roermund for reporting the bug and for his great efforts in chasing it down. - remove no longer needed rpmlintrc filters
buildservice-autocommit
accepted
request 1045478
from
Reinhard Max (rmax)
(revision 154)
baserev update by copy to link target
Reinhard Max (rmax)
accepted
request 1044373
from
Dirk Mueller (dirkmueller)
(revision 153)
- update to 2.88: * Fix bug in --dynamic-host when an interface has /16 IPv4 * address. * Add --fast-dns-retry option. This gives dnsmasq the ability to originate retries for upstream DNS queries itself, rather than relying on the downstream client. This is most useful when doing DNSSEC over unreliable upstream networks. It comes with some cost in memory usage and network bandwidth. * Add --use-stale-cache option. When set, if a DNS name exists in the cache, but its time-to-live has expired, dnsmasq will return the data anyway. * handle removal of whole files or entries within files.
buildservice-autocommit
accepted
request 1034136
from
Reinhard Max (rmax)
(revision 152)
baserev update by copy to link target
Reinhard Max (rmax)
accepted
request 1031298
from
Dirk Mueller (dirkmueller)
(revision 151)
- update to 2.87 (bsc#1197872, CVE-2022-0934): * Allow arbitrary prefix lengths in --rev-server and --domain=....,local * Replace --address=/#/..... functionality which got missed in the 2.86 domain search rewrite. * Add --nftset option, like --ipset but for the newer nftables. * Add --filter-A and --filter-AAAA options, to remove IPv4 or IPv6 addresses from DNS answers. * Fix crash doing netbooting when --port is set to zero to disable the DNS server. Thanks to Drexl Johannes for the bug report. * Generalise --dhcp-relay. Sending via broadcast/multicast is now supported for both IPv4 and IPv6 and the configuration syntax made easier (but backwards compatible). * Add snooping of IPv6 prefix-delegations to the DHCP-relay system. * Finesse parsing of --dhcp-remoteid and --dhcp-subscrid. To be treated as hex, the pattern must consist of only hex digits AND contain at least one ':'. Thanks to Bengt-Erik Sandstrom who tripped over a pattern consisting of a decimal number which was interpreted surprisingly. * Include client address in TFTP file-not-found error reports. Thanks to Stefan Rink for the initial patch, which has been re-worked by me (srk). All bugs mine. * Note in manpage the change in behaviour of -address. This behaviour actually changed in v2.86, but was undocumented there. From 2.86 on, (eg) --address=/example.com/1.2.3.4 ONLY applies to A queries. All other types of query will be sent upstream. Pre 2.86, that would catch the whole example.com domain and queries for other types would get a local NODATA answer. The pre-2.86 behaviour is still available, by configuring --address=/example.com/1.2.3.4 --local=/example.com/
buildservice-autocommit
accepted
request 1004570
from
Marcus Meissner (msmeissn)
(revision 150)
baserev update by copy to link target
Marcus Meissner (msmeissn)
accepted
request 1002291
from
Callum Farmer (gmbr3)
(revision 149)
- Ensure the dnsmasq user's group is used - Remove nogroup requirement
buildservice-autocommit
accepted
request 982371
from
Marcus Meissner (msmeissn)
(revision 148)
baserev update by copy to link target
Displaying revisions 1 - 20 of 167