baserev update by copy to link target

• Files Changed
• Browse Source

- Security update to version 2.78:
  * bsc#1060354, CVE-2017-14491: 2 byte heap based overflow.
  * bsc#1060355, CVE-2017-14492: heap based overflow.
  * bsc#1060360, CVE-2017-14493: stack based overflow.
  * bsc#1060361, CVE-2017-14494: DHCP - info leak.
  * bsc#1060362, CVE-2017-14495: DNS - OOM DoS.
  * bsc#1060364, CVE-2017-14496: DNS - DoS Integer underflow.
  * Fix DHCP relaying, broken in 2.76 and 2.77.
  * For other changes, see
    http://www.thekelleys.org.uk/dnsmasq/CHANGELOG
- Obsoleted patches:
  * Fix-crash-introduced-in-2675f2061525bc954be14988d643.patch
  * Handle-binding-upstream-servers-to-an-interface.patch

• Files Changed
• Browse Source

- Fix /srv/tftpboot permissions wrt bsc#940608

• Files Changed
• Browse Source

- reload system dbus to pick up policy change on install (bsc#1054429)

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

- Handle binding upstream servers to an interface if interface
  is destroyed and recreated (boo#1018160) 
  Added two patches from upstream:
  * added Handle-binding-upstream-servers-to-an-interface.patch
  * added Fix-crash-introduced-in-2675f2061525bc954be14988d643.patch

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

- Update to 2.76:
  * Include 0.0.0.0/8 in DNS rebind checks.
  * Enhance --add-subnet to allow arbitrary subnet addresses.
  * Respect the --no-resolv flag in inotify code. Fixes bug
    which caused dnsmasq to fail to start if a resolv-file
    was a dangling symbolic link, even of --no-resolv set.
  * Fix crash when an A or AAAA record is defined locally,
    in a hosts file, and an upstream server sends a reply
    that the same name is empty (CVE-2015-8899, bsc#983273).
  * Fix failure to correctly calculate cache-size when reading a
    hosts-file fails.
  * Fix wrong answer to simple name query when --domain-needed
    set, but no upstream servers configured.
  * Return REFUSED when running out of forwarding table slots,
    not SERVFAIL.
  * Add --max-port configuration.
  * Add --script-arp and two new functions for the dhcp-script.
  * Extend --add-mac to allow a new encoding of the MAC address
    as base64, by configurting --add-mac=base64
  * Add --add-cpe-id option.
  * Don't crash with divide-by-zero if an IPv6 dhcp-range is
    declared as a whole /64.
    (ie xx::0 to xx::ffff:ffff:ffff:ffff)
  * Add support for a TTL parameter in --host-record and --cname.
  * Add --dhcp-ttl option.
  * Add --tftp-mtu option.
  * Check return-code of inet_pton() when parsing dhcp-option.
  * Fix wrong value for EDNS UDP packet size when using
    --servers-file to define upstream DNS servers.
  * Add dhcp_release6 to contrib/lease-tools.

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

- dnsmasq-groups.patch: Initialize the supplementary groups of the
  dnsmasq user (bsc#859298).

• Files Changed
• Browse Source

- Initialize the supplementary groups of the dnsmasq user
  (bsc#859298).

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

The build log is filled with a lot of redefinition warnings, as e.g. HAVE_DBUS is defined in both config.h and on the command line.

The correct way for the dnsmasq build system is to supply the configuration options as "COPTS" during make and make install.

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

This is a kind request to update dnsmasq from version 2.72 to 2.75.

2.73 contains a security related fix - CVE-2015-3294

The upstream changelog is contained in the rpm changelog.

• Files Changed
• Browse Source

- dnsmasq.service: Order Before=nss-lookup.target  and 
  Wants=nss-lookup.target as this service may provide
  name resolution even for the localhost.

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

- Move trust-anchors.conf into /etc/dnsmasq.d to be AppArmor conform.
  (bnc#908137)

• Files Changed
• Browse Source