Change log : dnsmasq package : Debian

2.90-3

Published in sid-release on 2024-03-10

dnsmasq (2.90-3) unstable; urgency=medium

  * Update d/control:
    - Add passwd to Depends of dnsmasq-base(-lua) (closes: #1064518).
    - Update the Vcs-* fields (closes: #1065347).
    - Fix lintian issue build-depends-on-obsolete-package.
    - Add myself as uploader.
  * Update d/copyright:
    - Fix lintian issue missing-field-in-dep5-copyright.
  * Add missing CVE number to the 2.90-1 change log.

 -- Sven Geuer <email address hidden>  Sat, 09 Mar 2024 20:18:53 +0100

2.90-2

Superseded in sid-release on 2024-03-13

dnsmasq (2.90-2) unstable; urgency=medium

  [ Sven Geuer ]
  * Relax limits imposed by d/t/functions.d/ip-addr.patterns to allow for
    successful tests on ci.debian.net.

 -- Simon Kelley <email address hidden>  Wed, 14 Feb 2024 11:33:14 +0000

Available diffs

diff from 2.89-1 to 2.90-2 (97.8 KiB)
diff from 2.90-1 to 2.90-2 (568 bytes)

2.90-1

Superseded in sid-release on 2024-02-15

dnsmasq (2.90-1) unstable; urgency=medium

  [ Simon Kelley ]
  * New upstream. (closes: #1033165)
  * Move hard-coding of Lua version from the upstream Makefile
    to  d/rules.
  * Security fixes for Keytrap - DNSSEC validation CPU exhaustion.
    CVE-2023-50387 and CVE-2023-50868
  [ Sven Geuer ]
  * Introduce autokpgtests per d/tests/* (closes: #1034135).
  * Switch to dpkg-source 3.0 (quilt) format (closes: #1007041).
  * doc.html: Add patch to eliminate privacy breaches leaving the Donations
    paragraph as untouched as possible.
  * Prepend dnsmasq. to default, init, preinst, postinst, prerm, postrm.
  * Rename d/systemd.service to d/dnsmasq.service.
  * Rename d/systemd@.service to d/dnsmasq@.service.
  * Refactor d/rules to use the DH sequencer and fix major lintian issues
    (closes: #844989, #1040923, #1063551).
    Modified files:
    - d/rules
        Complete rewrite making use of debhelper and its tools, fixes lintian
        warning debian-rules-sets-dpkg-architecture-variable.
    - d/control
        Build-Depends, Pre-Depends, Depends added or changed as needed, lintian
        error depends-on-obsolete-package fixed.
    - d/dnsmasq.default
        ENABLED removed and comment changed to fix lintian error
        init.d-script-should-always-start-service.
    - d/dnsmasq.init
        Remove handling of obsolete ENABLED flag.
        Extract code used with System-V-style init and systemd into
        d/init-system-common, extract code used with systemd only
        into d/systemd-helper. This fixes lintian warning
        systemd-service-file-wraps-init-script.
        Drop workaround for hypothetically non-existent file
        /lib/lsb/init-functions, it has been around for more than a decade.
    - d/dnsmasq.service, d/dnsmasq@.service
        Adapt these files to make use of init-system-common and systemd-helper.
    - d/dnsmasq.{post,pre}{inst,rm}
        Rely mostly on the script snippets created by the DH tools to get
        things done, implicitly fixes the lintian warnings
        maintainer-script-should-not-use-dpkg-maintscript-helper and
        command-with-path-in-maintainer-script.
    - d/resolvconf*
        Change file mode bits to 0755, the installed files need it
    New files:
    - d/dnsmasq.{install,links,maintscript}
    - d/dnsmasq-base.{dirs,docs,install}
    - d/dnsmasq-base-lua.{dirs,docs,install,links}
    - d/dnsmasq-utils.{install,manpages}
        The DH tools use these to install what was scripted explicitly
        in the previous version of the d/rules file,
        lintian warning dbus-policy-in-etc fixed
    - d/init-system-common
    - d/systemd-helper
        These files contain slightly modified code formerly part of in
        d/dnsmasq.init.
    Deleted files:
    - d/*conffiles
    - d/lintian-override
    - d/installed-marker
        These are not in use anymore.
  * Deal with a removed conffile and changed links.
    Modified files:
    - d/dnsmasq-base.{postinst,postrm}
    New files:
    - d/dnsmasq-base.maintscript
    - d/dnsmasq-base-lua.maintscript
  * Add watch file and upstream's signing key.
    New files:
    - d/watch
    - d/u/signing-key.asc
  * Remove dependency on package adduser.
    Modified files:
    - d/control
    - d/dnsmasq.post{inst,rm}
  * Refactor d/copyright to comply with DEP 5 (closes: #966505).
  * Remove trailing whitespace from various files under debian/.
  * Bump Standards-Version to 4.6.2.
  * Specify Rules-Requires-Root.
  * Update http:// to https:// with Homepage, Vcs-Git and Vcs-Browser.
  * Introduce d/u/metadata.
  * Fix lintian issue duplicate-short-description.
  * Fix lintian issue capitalization-error-in-description.
  * Bump Lua version to 5.4 (closes: #1050750).
    Modified files:
    - d/control
    - d/t/functions.d/log.patterns

 -- Simon Kelley <email address hidden>  Fri, 23 Jan 2024 22:52:01 +0000

2.89-1

Published in bookworm-release on 2023-06-01

Superseded in sid-release on 2024-02-13

dnsmasq (2.89-1) unstable; urgency=low

   * New upstream.

 -- Simon Kelley <email address hidden>  Fri, 13 Jan 2023 21:57:01 +0000

Available diffs

diff from 2.88-1 to 2.89-1 (5.8 KiB)

2.88-1

Superseded in sid-release on 2023-02-07

dnsmasq (2.88-1) unstable; urgency=low

   * New upstream.
   * Fix loss of server configuration (closes: #1020830)
     Git commit 930428fb970f4991e5c2933fd5a5d2504c18a551

 -- Simon Kelley <email address hidden>  Wed, 2 Nov 2022 22:15:45 +0000

Available diffs

diff from 2.87-1.1 to 2.88-1 (215.1 KiB)

2.87-1.1

Superseded in sid-release on 2022-12-05

dnsmasq (2.87-1.1) unstable; urgency=medium

  * Non-maintainer upload.
  * No source change upload to rebuild with debhelper 13.10.

 -- Michael Biebl <email address hidden>  Sat, 15 Oct 2022 12:01:25 +0200

Available diffs

diff from 2.86-1.1ubuntu2 (in Ubuntu) to 2.87-1.1 (80.1 KiB)

2.87-1

Superseded in sid-release on 2022-10-15

dnsmasq (2.87-1) unstable; urgency=low

   * New upstream. (closes: #1001209, #1003156)
   * Include new NFTset support in the build.
   * Fix crash on netboot with DNS server disabled. (closes: #996332)
   * Fix rare lockup in DNSSEC. (closes: #1001576)
   * Close old bug. (closes: #902963)

 -- Simon Kelley <email address hidden>  Wed, 25 Sep 2022 23:11:25 +0000

2.86-1.1

Superseded in sid-release on 2022-09-26

dnsmasq (2.86-1.1) unstable; urgency=medium

  * Non-maintainer upload.
  * Fix --address=/#/...... which was lost in 2.86. (closes: #995655)

 -- Michael Biebl <email address hidden>  Wed, 10 Nov 2021 22:05:45 +0100

Available diffs

diff from 2.85-1ubuntu2 (in Ubuntu) to 2.86-1.1 (472.3 KiB)

2.86-1

Superseded in sid-release on 2021-11-13

dnsmasq (2.86-1) unstable; urgency=low

   * Fix debian/changelog format error. (closes: #986626)

 -- Simon Kelley <email address hidden>  Thu, 08 Apr 2021 22:39:00 +0100

2.85-1

Published in bullseye-release on 2021-07-22

Superseded in sid-release on 2021-09-09

dnsmasq (2.85-1) unstable; urgency=low

   * New upstream.
   * Includes fix to CVE-2021-3448.
   * Fix manpage typos. (closes: #986150)

 -- Simon Kelley <email address hidden>  Sat, 03 Apr 2021 22:17:23 +0100

2.84-1.2

Superseded in sid-release on 2021-04-08

dnsmasq (2.84-1.2) unstable; urgency=medium

  * Non-maintainer upload.
  * Bump old-version in dpkg-maintscript-helper dir_to_symlink calls to also
    clean up after upgrades to an earlier version in testing.

 -- Andreas Beckmann <email address hidden>  Thu, 01 Apr 2021 16:01:51 +0200

2.84-1.1

Superseded in sid-release on 2021-04-01

dnsmasq (2.84-1.1) unstable; urgency=medium

  * Non-maintainer upload.
  * Fix symlink to directory conversion for /usr/share/doc/dnsmasq.
    This is achieved by directly calling dpkg-maintscript-helper in the preinst,
    postinst, and postrm scripts, since the package does not use debhelper.
    (Closes: #985282)

 -- Sébastien Villemot <email address hidden>  Sun, 28 Mar 2021 10:55:07 +0200

2.80-1+deb10u1

Published in buster-release on 2021-03-27

dnsmasq (2.80-1+deb10u1) buster-security; urgency=high

   * Non-maintainer upload by the Security Team.
   * Fix DNSpooq issue: CVE-2020-25681, CVE-2020-25682, CVE-2020-25683,
     CVE-2020-25684, CVE-2020-25685, CVE-2020-25686, CVE-2020-25687.

 -- Sebastien Delafond <email address hidden>  Tue, 02 Feb 2021 07:52:55 +0100

2.84-1

Superseded in sid-release on 2021-03-30

dnsmasq (2.84-1) unstable; urgency=low

   * New upstream.

 -- Simon Kelley <email address hidden>  Sun, 24 Jan 2021 22:02:01 +0000

2.83-1

Superseded in sid-release on 2021-01-26

dnsmasq (2.83-1) unstable; urgency=high

   * New upstream.
   * Includes fixes to CVE-2020-25681 - CVE-2020-25687 inclusive.

 -- Simon Kelley <email address hidden>  Fri, 15 Jan 2021 22:22:41 +0000

2.82-1

Superseded in sid-release on 2021-01-19

dnsmasq (2.82-1) unstable; urgency=low

   * New upstream.

 -- Simon Kelley <email address hidden>  Fri, 26 Jun 2020 22:22:41 +0000

Available diffs

diff from 2.81-4build1 (in Ubuntu) to 2.82-1 (10.0 KiB)

2.81-4

Superseded in sid-release on 2020-07-20

dnsmasq (2.81-4) unstable; urgency=low

   * Remove runit support when building for Ubuntu. (closes: #960401)

 -- Simon Kelley <email address hidden>  Fri, 26 Jun 2020 21:52:44 +0000

Available diffs

diff from 2.81-3ubuntu2 (in Ubuntu) to 2.81-4 (1.4 KiB)

2.81-3

Superseded in sid-release on 2020-06-27

dnsmasq (2.81-3) unstable; urgency=low

   * Fixes to control file for bug 958100

 -- Simon Kelley <email address hidden>  Sun, 19 Apr 2020 21:44:12 +0000

2.81-2

Superseded in sid-release on 2020-04-20

dnsmasq (2.81-2) unstable; urgency=low

   * Fix FTBFS on kFreeBSD. (closes: #958100)
	
 -- Simon Kelley <email address hidden>  Sat, 18 Apr 2020 18:34:15 +0000

2.81-1

Superseded in sid-release on 2020-04-19

dnsmasq (2.81-1) unstable; urgency=low

   * New upstream.
   * Fix nodocs/nodoc confusion in rules. (closes: #922758)
   * Add Vcs-* fields to control. (closes: #922422)
   * Add systemd support for multiple daemon instances. (closes: #914305)
   * Add note explaining that ENABLED is SYSV-init only. (closes: #914755)
   * Replace ash with dash in contrib/reverse-dns. (closes: #920224)
   * Move to libidn2. (closes: #932695)
   * Fix RA problem with two interfaces on same net, but RA service on
     only one of the interfaces. (closes: #949565)
   * Fix breakage of dig +trace. (closes: #942363)
   * Fix build faliure with newer Nettle libraries. (closes: #940985)
   * Support runscript init-system (closes: #929884)
   * Security fix for CVE-2019-14834 (closes: #948373)
	
 -- Simon Kelley <email address hidden>  Wed, 8 Apr 2020 17:33:15 +0000

2.80-1.1

Superseded in sid-release on 2020-04-13

dnsmasq (2.80-1.1) unstable; urgency=medium

  [ Andreas Metzler ]
  * Non-maintainer upload.
  * Apply ab73a746a0d6fcac2e682c5548eeb87fb9c9c82e from upstream GIT to fix
    build error against nettle 3.5. Closes: #940985

 -- Paul Gevers <email address hidden>  Wed, 18 Dec 2019 21:23:49 +0100

2.76-5+deb9u2

Published in stretch-release on 2018-11-10

dnsmasq (2.76-5+deb9u2) stretch; urgency=medium

  * Non-maintainer upload.
  * trust-anchors.conf: include latest DNS trust anchor KSK-2017.
    (Closes: #907887)

 -- Santiago Ruano Rincón <email address hidden>  Wed, 10 Oct 2018 08:52:32 +0200

2.80-1

Superseded in buster-release on 2021-03-27

Superseded in sid-release on 2019-12-21

dnsmasq (2.80-1) unstable; urgency=low

   * New upstream. (closes: #837602) (closes: #794640) (closes: #794636)
   * Close old bugs, long agp fixed. (closes: #802845) (closes: #754299)
   * Provide usr/lib/tmpfiles.d/dnsmasq.conf. (closes: #872396)
   * Run restorecon on /run/dnsmasq for SE Linux. (closes: #872397)

 -- Simon Kelley <email address hidden>  Mon, 17 Sep 2018 23:11:25 +0000

Available diffs

diff from 2.79-1 to 2.80-1 (72.7 KiB)

2.79-1

Superseded in buster-release on 2018-11-24

Superseded in sid-release on 2018-10-19

dnsmasq (2.79-1) unstable; urgency=low

   * New upstream. (closes: #888200)
   * Fix trust-anchor regex in init script. (closes: #884347)
   * Fix exit code for dhcp_release6 (closes: #833596)
   * Add project homepage to control file. (closes: #887764)
   * New binary package dnsmasq-base-lua, includes Lua support.
   * Remove hardwired shlibs dependency for libnettle 3.3 and
     fix code to avoid ABI breakage as long as compiled against
     libnettle 3.4 or later. (closes: #891315)

 -- Simon Kelley <email address hidden>  Fri, 16 Feb 2018 19:54:22 +0000

Available diffs

diff from 2.78-3 to 2.79-1 (69.1 KiB)

2.78-3

Superseded in buster-release on 2018-04-05

Superseded in sid-release on 2018-03-26

dnsmasq (2.78-3) unstable; urgency=high

   * Make failure of pidfile chown a warning. (closes: #889857)
  
 -- Simon Kelley <email address hidden>  Thu, 8 Feb 2018 21:26:30 +0000

Available diffs

diff from 2.78-1 to 2.78-3 (996 bytes)
diff from 2.78-2 to 2.78-3 (870 bytes)

2.78-2

Superseded in buster-release on 2018-02-11

Superseded in sid-release on 2018-02-09

dnsmasq (2.78-2) unstable; urgency=high

   * Change ownership of pid file, to keep systemd happy. (closes: #889336)
  
 -- Simon Kelley <email address hidden>  Tue, 6 Feb 2018 17:21:30 +0000

2.72-3+deb8u2

Published in jessie-release on 2017-12-09

dnsmasq (2.72-3+deb8u2) jessie-security; urgency=high

  * Non-maintainer upload by the Security Team.
  * CVE-2017-14491: DNS heap buffer overflow
  * CVE-2017-14492: DHCPv6 RA heap overflow
  * CVE-2017-14493: DHCPv6 - Stack buffer overflow
  * CVE-2017-14494: Infoleak handling DHCPv6 forwarded requests
  * CVE-2017-14491: DNS heap buffer overflow (further fix)

 -- Salvatore Bonaccorso <email address hidden>  Sun, 01 Oct 2017 19:14:59 +0200

2.76-5+deb9u1

Superseded in stretch-release on 2018-11-10

dnsmasq (2.76-5+deb9u1) stretch-security; urgency=high

  * Non-maintainer upload by the Security Team.
  * CVE-2017-14491: DNS heap buffer overflow
  * CVE-2017-14492: DHCPv6 RA heap overflow
  * CVE-2017-14493: DHCPv6 - Stack buffer overflow
  * CVE-2017-14494: Infoleak handling DHCPv6 forwarded requests
  * CVE-2017-14496: Integer underflow in DNS response creation
  * CVE-2017-14495: OOM in DNS response creation
  * Misc code cleanups arising from Google analysis
  * CVE-2017-14491: DNS heap buffer overflow (further fix)

 -- Salvatore Bonaccorso <email address hidden>  Sun, 01 Oct 2017 17:20:45 +0200

2.78-1

Superseded in buster-release on 2018-02-09

Superseded in sid-release on 2018-04-16

dnsmasq (2.78-1) unstable; urgency=high

   * New upstream.
     Security fixes for CVE-2017-13704  (closes: #877102)
     Security fixes for CVE-2017-14491 - CVE-2017-14496 inclusive.	

 -- Simon Kelley <email address hidden>  Sun, 29 Sep 2017 21:34:00 +0000

Available diffs

diff from 2.77-2 to 2.78-1 (184.4 KiB)

2.77-2

Superseded in buster-release on 2017-10-05

Superseded in sid-release on 2017-10-03

dnsmasq (2.77-2) unstable; urgency=low

   * Improve sed regexp for parsing root.ds.

 -- Simon Kelley <email address hidden>  Mon, 5 Jun 2017 20:46:32 +0000

Available diffs

diff from 2.77-1 to 2.77-2 (480 bytes)

2.77-1

Superseded in sid-release on 2017-06-06

dnsmasq (2.77-1) unstable; urgency=low

   * New upstream.
   * Don't register as a resolvconf source when config file
     includes port=0 to disable DNS.
   * Handle gratuitous format change in /usr/share/dns/root.ds
     (closes: #858506) (closes: #860064)
   * Add lsb-base dependancy.

 -- Simon Kelley <email address hidden>  Tue, 11 Apr 2017 14:19:20 +0000

Available diffs

diff from 2.76-5 to 2.77-1 (85.6 KiB)

2.76-5

Superseded in stretch-release on 2017-12-09

Superseded in sid-release on 2017-06-01

dnsmasq (2.76-5) unstable; urgency=medium

  * Nail libnettle dependency to avoid ABI incompatibility.
    (closes: #846642)

 -- Simon Kelley <email address hidden>  Sat, 13 Aug 2016 21:43:10 +0000

Available diffs

diff from 2.76-4.1 to 2.76-5 (357 bytes)

2.76-4.1

Superseded in stretch-release on 2016-12-25

Superseded in sid-release on 2016-12-15

dnsmasq (2.76-4.1) unstable; urgency=medium

  * Non-maintainer upload.
  * Add two upstream patches to fix binding to an interface being
    destroyed and recreated. Closes: #834722.
      + 2675f2061525bc954be14988d64384b74aa7bf8b
      + 16800ea072dd0cdf14d951c4bb8d2808b3dfe53d

 -- Vincent Bernat <email address hidden>  Sat, 26 Nov 2016 20:15:34 +0100

Available diffs

diff from 2.76-4build1 (in Ubuntu) to 2.76-4.1 (1.6 KiB)

2.76-4

Superseded in stretch-release on 2016-12-07

Superseded in sid-release on 2016-12-05

dnsmasq (2.76-4) unstable; urgency=medium

  * Non-maintainer upload.
  * Fix FTCBFS: Use triplet-prefixed tools. (closes: #836072)

 -- Helmut Grohne <email address hidden>  Tue, 30 Aug 2016 13:59:12 +0200

Available diffs

diff from 2.76-3 to 2.76-4 (1.3 KiB)

2.76-3

Superseded in stretch-release on 2016-09-06

Superseded in sid-release on 2016-09-01

dnsmasq (2.76-3) unstable; urgency=medium

   * Bump auth zone serial on SIGHUP. (closes: #833733)

 -- Simon Kelley <email address hidden>  Sat, 13 Aug 2016 21:43:10 +0000

Available diffs

diff from 2.76-2 to 2.76-3 (487 bytes)

2.76-2

Superseded in stretch-release on 2016-08-19

Superseded in sid-release on 2016-08-14

dnsmasq (2.76-2) unstable; urgency=medium

   * Fix to systemd to fix failure to start with bridge interface.
     (Closes: #831372)

 -- Simon Kelley <email address hidden>  Sat, 16 Jul 2016 22:09:10 +0000

Available diffs

diff from 2.76-1.1 to 2.76-2 (1011 bytes)

2.76-1.1

Superseded in stretch-release on 2016-07-22

Superseded in sid-release on 2016-07-17

dnsmasq (2.76-1.1) unstable; urgency=medium

  * Non-maintainer upload.
  * Provide nss-lookup.target for systemd, without relying on insserv.
    Patch from Michael Biebl <email address hidden>. (Closes: #826242)

 -- Christian Hofstaedtler <email address hidden>  Fri, 01 Jul 2016 13:41:11 +0000

Available diffs

diff from 2.76-1 to 2.76-1.1 (489 bytes)

2.76-1

Superseded in stretch-release on 2016-07-17

Superseded in sid-release on 2016-07-12

dnsmasq (2.76-1) unstable; urgency=low

   * New upstream. (closes: #798586)
   * Use /run/dnsmasq directly, rather than relying on link from /var/run
     to avoid problems before /var is mounted. (closes: #800351)
   * Test for the existance of /usr/share/doc/dnsmasq rather then
     /etc/dnsmasq.d/README in the daemon startup script. (closes: #819856)
   * Add --help to manpage and mention dhcp6 in summary. (closes: #821226)

 -- Simon Kelley <email address hidden>  Thu, 10 Sep 2015 23:07:21 +0000

Available diffs

diff from 2.75-1 to 2.76-1 (211.5 KiB)

2.62-3+deb7u3

Published in wheezy-release on 2015-09-05

dnsmasq (2.62-3+deb7u3) wheezy-security; urgency=high

  * Non-maintainer upload by the Security Team.
  * Handle case where SO_REUSEPORT may be defined but not supported by
    the running kernel.
    The update for CVE-2015-3294 caused a regression for the armel and armhf
    builds due to a newer linux-libc-dev package installed in the wheezy
    chroots used for the build. The libc headers defined SO_REUSEPORT,
    whereas the kernel in wheezy does not support it uncovering this
    problem. (Closes: #784571)
  * Set SO_REUSEADDR as well as SO_REUSEPORT on DHCP sockets when
    both are available

 -- Salvatore Bonaccorso <email address hidden>  Wed, 06 May 2015 21:37:29 +0200

2.75-1

Superseded in stretch-release on 2016-05-29

Superseded in sid-release on 2016-05-19

dnsmasq (2.75-1) unstable; urgency=low

   * New upstream. (closes: #794095)
	
 -- Simon Kelley <email address hidden>  Thur, 30 Jul 2015 20:58:31 +0000

Available diffs

diff from 2.74-1 to 2.75-1 (707 bytes)

2.74-1

Superseded in sid-release on 2015-07-31

dnsmasq (2.74-1) unstable; urgency=low

   * New upstream. (LP: #1468611)
	
 -- Simon Kelley <email address hidden>  Wed, 15 Jul 2015 21:54:11 +0000

Available diffs

diff from 2.73-2 to 2.74-1 (21.2 KiB)

2.73-2

Superseded in stretch-release on 2015-08-10

Superseded in sid-release on 2015-07-31

dnsmasq (2.73-2) unstable; urgency=low

   * Fix behaviour of empty --conf-file (closes: #790341)

 -- Simon Kelley <email address hidden>  Thu, 7 Jul 2015 21:46:42 +0000

Available diffs

diff from 2.73-1 to 2.73-2 (561 bytes)

2.73-1

Superseded in stretch-release on 2015-07-18

Superseded in sid-release on 2015-07-08

dnsmasq (2.73-1) unstable; urgency=low

   * New upstream. (closes: #786996)
   * Tweak field width in cache dump to avoid truncating IPv6
     addresses. (closes: #771557)
   * Add newline at the end of example config file. (LP: #1416895)
   * Make Debian package build reproducible. (closes: #777323)
   * Add Requires=network.target to systemd unit.

 -- Simon Kelley <email address hidden>  Thu, 4 Jun 2015 22:31:42 +0000

Available diffs

diff from 2.72-3.1 to 2.73-1 (189.1 KiB)
diff from 2.72-3.1build1 (in Ubuntu) to 2.73-1 (189.2 KiB)

2.72-3+deb8u1

Superseded in jessie-release on 2017-12-09

dnsmasq (2.72-3+deb8u1) jessie-security; urgency=high

  * Non-maintainer upload by the Security Team.
  * CVE-2015-3294: denial of service and memory disclosure via malformed
    DNS requests (Closes: #783459)

 -- Salvatore Bonaccorso <email address hidden>  Tue, 05 May 2015 11:15:01 +0200

2.72-3.1

Superseded in stretch-release on 2015-06-25

Superseded in sid-release on 2015-07-27

dnsmasq (2.72-3.1) unstable; urgency=medium

  * Non-maintainer upload.
  * CVE-2015-3294: denial of service and memory disclosure via malformed
    DNS requests (Closes: #783459)

 -- Salvatore Bonaccorso <email address hidden>  Tue, 05 May 2015 16:09:06 +0200

Available diffs

diff from 2.72-3 to 2.72-3.1 (836 bytes)

2.72-3

Superseded in stretch-release on 2015-05-13

Superseded in jessie-release on 2015-06-06

Superseded in sid-release on 2015-05-12

dnsmasq (2.72-3) unstable; urgency=medium


   * debian/systemd.service: switch from Type=dbus to Type=forking.
     dnsmasq does not depend on dbus, but Type=dbus systemd services cannot
     work without it. (Closes: #769486, #776530)
     - debian/init: when called with systemd-exec argument, let dnsmasq
       go into the background, so Type=forking can detect when it is ready
   * Remove line containing only whitespace in debian/contol.
     (closes: #777571)

 -- Simon Kelley <email address hidden>  Wed, 11 Feb 2015 21:56:12 +0000

Available diffs

diff from 2.72-2 to 2.72-3 (1.1 KiB)

2.72-2

Superseded in jessie-release on 2015-02-18

Superseded in sid-release on 2015-02-13

dnsmasq (2.72-2) unstable; urgency=low


   * Fix build in Debian-kFreeBSD. (closes: #763693)

 -- Simon Kelley <email address hidden>  Thu, 02 Oct 2014 22:34:12 +0000

Available diffs

diff from 2.71-1 to 2.72-2 (148.2 KiB)

2.72-1

Superseded in sid-release on 2014-10-03

dnsmasq (2.72-1) unstable; urgency=low


   * New upstream.
   * If dns-root-data package is installed, use it to set the DNSSEC
     trust anchor(s). Recommend dns-root-data. (closes: #760460)
   * Handle AD bit correctly in replies from cache. (closes: #761654)

 -- Simon Kelley <email address hidden>  Tue, 20 May 2014 21:01:11 +0000

2.71-1

Superseded in jessie-release on 2014-10-14

Superseded in sid-release on 2014-10-03

dnsmasq (2.71-1) unstable; urgency=low


   * New upstream.
   * Fix 100% CPU-usage bug when dnsmasq started with cachesize 
     set to zero. (LP: #1314697)
	
 -- Simon Kelley <email address hidden>  Fri, 16 May 2014 20:17:10 +0000

Available diffs

diff from 2.70-2 to 2.71-1 (11.5 KiB)
diff from 2.70-3 to 2.71-1 (10.2 KiB)

2.70-3

Superseded in sid-release on 2014-05-18

dnsmasq (2.70-3) unstable; urgency=medium


   * Write a pid-file, even when being started using systemd, since
     other components may wish to signal dnsmasq.
   * Enable dnsmasq systemd unit on install. Otherwise dnsmasq does not run on
     fresh installations (without administrator handholding) and even worse it
     is disabled on systems switching from sysv to systemd. Modify
     postinst/postrm exactly as dh_systemd would, add dependency on
     init-system-helpers. Closes: #724602

 -- Simon Kelley <email address hidden> Sun, 11 May 2014 17:45:21 +0000

Available diffs

diff from 2.70-2 to 2.70-3 (1.6 KiB)

2.70-2

Superseded in sid-release on 2014-05-20

dnsmasq (2.70-2) unstable; urgency=low


   * Ensure daemon not stared if dnsmasq package has been removed,
     even if dnsmasq-base is still installed. (closes: #746941)
   * Tidy cruft in initscript. (closes: #746940)

 -- Simon Kelley <email address hidden>  Sun, 04 May 2014 21:34:11 +0000

Available diffs

diff from 2.70-1 to 2.70-2 (738 bytes)

2.70-1

Superseded in sid-release on 2014-05-13

dnsmasq (2.70-1) unstable; urgency=low


   * New upstream.

 -- Simon Kelley <email address hidden>  Wed, 23 Apr 2014 15:14:42 +0000

Available diffs

diff from 2.68-1 to 2.70-1 (78.7 KiB)

2.69-1

Superseded in jessie-release on 2014-05-23

Superseded in sid-release on 2014-05-02

dnsmasq (2.69-1) unstable; urgency=low


   * New upstream.
   * Set --local-service. (closes: #732610)
     This tells dnsmasq to ignore DNS requests that don't come from a local network.
     It's automatically ignored if  --interface --except-interface, --listen-address
     or --auth-server exist in the configuration, so for most installations, it will
     have no effect, but for otherwise-unconfigured installations, it stops dnsmasq
     from being vulnerable to DNS-reflection attacks.

 -- Simon Kelley <email address hidden>  Tue, 4 Feb 2014 16:28:12 +0000

2.68-1

Superseded in jessie-release on 2014-04-20

Superseded in sid-release on 2014-04-10

dnsmasq (2.68-1) unstable; urgency=low


   * New upstream. (closes: #730553)
   
 -- Simon Kelley <email address hidden>  Sun, 8 Dec 2013 15:57:32 +0000

Available diffs

diff from 2.67-1 to 2.68-1 (129.6 KiB)

2.67-1

Superseded in jessie-release on 2013-12-19

Superseded in sid-release on 2013-12-09

dnsmasq (2.67-1) unstable; urgency=low


   * New upstream.
   * Update resolvconf script. (closes: #720732)

 -- Simon Kelley <email address hidden>  Wed, 4 Aug 2013 14:53:22 +0000

Available diffs

diff from 2.66-4ubuntu1 (in Ubuntu) to 2.67-1 (207.9 KiB)

2.66-4

Superseded in jessie-release on 2013-11-05

Superseded in sid-release on 2013-10-26

dnsmasq (2.66-4) unstable; urgency=low


   * Update resolvconf script. (closes: #716908)

 -- Simon Kelley <email address hidden>  Wed, 4 Aug 2013 14:48:21 +0000

Available diffs

diff from 2.65-1ubuntu1 (in Ubuntu) to 2.66-4 (193.5 KiB)

2.66-3

Superseded in jessie-release on 2013-08-25

Superseded in sid-release on 2013-08-14

dnsmasq (2.66-3) unstable; urgency=low


   * Update resolvconf script for dnscrypt-proxy integration. (closes: #709179)

 -- Simon Kelley <email address hidden>  Tue, 28 May 2013 14:39:51 +0000

2.66-2

Superseded in sid-release on 2013-05-30

dnsmasq (2.66-2) unstable; urgency=low


   * Fix error on startup with some configs. (closes: #709010)

 -- Simon Kelley <email address hidden>  Mon, 20 May 2013 11:46:11 +0000

2.66-1

Superseded in jessie-release on 2013-06-08

Superseded in sid-release on 2013-05-23

dnsmasq (2.66-1) unstable; urgency=low


   * New upstream.
   * Add support for noipset in DEB_BUILD_OPTIONS.

 -- Simon Kelley <email address hidden>  Fri, 22 Feb 2013 21:52:13 +0000

2.62-3+deb7u1

Superseded in wheezy-release on 2015-09-05

dnsmasq (2.62-3+deb7u1) testing-proposed-updates; urgency=low


  * Non-maintainer upload.
  * Backport fix for symlink attacks from 2.63-4
    (Closes: #686484)

 -- Jonathan Wiltshire <email address hidden>  Sun, 10 Feb 2013 21:07:17 +0000

2.65-1

Superseded in sid-release on 2013-04-17

dnsmasq (2.65-1) unstable; urgency=low


   * New upstream.

 -- Simon Kelley <email address hidden>  Fri, 14 Dec 2012 11:34:12 +0000

Available diffs

diff from 2.64-1 to 2.65-1 (1.4 KiB)

2.64-1

Superseded in sid-release on 2012-12-16

dnsmasq (2.64-1) unstable; urgency=low


   * New upstream.

 -- Simon Kelley <email address hidden>  Fri, 21 Sep 2012 17:17:22 +0000

Available diffs

diff from 2.63-4 to 2.64-1 (16.7 KiB)

2.63-4

Superseded in sid-release on 2012-12-05

dnsmasq (2.63-4) unstable; urgency=low


   * Make pid-file creation immune to symlink attacks. (closes: #686484)
	
 -- Simon Kelley <email address hidden>  Fri, 21 Sep 2012 17:16:34 +0000

Available diffs

diff from 2.63-1ubuntu1 (in Ubuntu) to 2.63-4 (3.9 KiB)

2.63-3

Superseded in sid-release on 2012-09-22

dnsmasq (2.63-3) unstable; urgency=low


   * Move adduser dependency to dnsmasq-base. (closes: #686694)
	
 -- Simon Kelley <email address hidden>  Tue, 4 Sep 2012 21:44:15 +0000

2.63-2

Superseded in sid-release on 2012-09-06

dnsmasq (2.63-2) unstable; urgency=low


   * Fix version script to report correct version.
   * Unbotch move of dbus config file by using correct versions in
     Replaces: and Breaks: lines. (closes: #685204)
   * Create dnsmasq user in dnsmasq-base so that Dbus doesn't complain if
     only dnsmasq-base is installed. (closes: #685987)

 -- Simon Kelley <email address hidden>  Tue, 28 Aug 2012 16:18:35 +0000

2.63-1

Superseded in sid-release on 2012-08-29

dnsmasq (2.63-1) unstable; urgency=low


   * New upstream.
   * Move /etc/dbus-1/system.d/dnsmasq.conf from dnsmasq to dnsmasq-base.

 -- Simon Kelley <email address hidden>  Mon, 11 Jun 2012 21:55:35 +0000

2.62-3

Superseded in wheezy-release on 2013-02-13

Superseded in sid-release on 2012-08-19

dnsmasq (2.62-3) unstable; urgency=low


   * Do resolvconf and /etc/default startup logic when
     starting with systemd. (closes: #675854)

 -- Simon Kelley <email address hidden>  Mon, 11 Jun 2012 21:50:11 +0000

Available diffs

diff from 2.62-2 to 2.62-3 (1.4 KiB)

2.62-2

Superseded in sid-release on 2012-06-12

dnsmasq (2.62-2) unstable; urgency=low


   * Pass LDFLAGS to make to get hardening in linker.

 -- Simon Kelley <email address hidden>  Thu, 7 June 2012 09:53:43 +0000

Available diffs

diff from 2.61-1 to 2.62-2 (109.8 KiB)

2.62-1

Superseded in sid-release on 2012-06-08

dnsmasq (2.62-1) unstable; urgency=low


   * New upstream.
   * Use dpkg-buildflags. (Enables hardening).

 -- Simon Kelley <email address hidden>  Sat, 12 May 2012 15:25:23 +0000

2.61-1

Superseded in wheezy-release on 2012-06-22

Superseded in sid-release on 2012-06-07

dnsmasq (2.61-1) unstable; urgency=low


   * New upstream.
   * Provide "dump-stats" initscript method. (closes: #654656)
   * Add (empty) build-indep and build-arch rules targets.
   * Bump standards-version to 3.9.3
   * Add port option to example dnsmasq.conf (closes: #668386)

 -- Simon Kelley <email address hidden>  Tue, 6 Mar 2012 19:45:43 +0000

Available diffs

diff from 2.60-2 to 2.61-1 (153.0 KiB)

2.60-2

Superseded in wheezy-release on 2012-05-10

Superseded in sid-release on 2012-05-04

dnsmasq (2.60-2) unstable; urgency=high


   * Fix DHCPv4 segfault. (closes: #665008)

 -- Simon Kelley <email address hidden>  Fri, 23 Mar 2012 09:37:23 +0000

Available diffs

diff from 2.59-4 (in Ubuntu) to 2.60-2 (204.0 KiB)

2.60-1

Superseded in wheezy-release on 2012-03-29

Superseded in sid-release on 2012-03-30

dnsmasq (2.60-1) unstable; urgency=low


   * New upstream.
   * Bump standards-version to 3.9.2
   * Fix typo in example config file. (closes: #654897)

 -- Simon Kelley <email address hidden>  Thu, 1 Dec 2011 15:49:33 +0000

2.59-4

Superseded in wheezy-release on 2012-03-16

Superseded in sid-release on 2012-03-06

dnsmasq (2.59-4) unstable; urgency=low


   * Supply /etc/insserv.conf.d/dnsmasq (closes: #650540)

 -- Simon Kelley <email address hidden>  Thu, 1 Dec 2011 11:35:13 +0000

2.59-3

Superseded in sid-release on 2011-12-05

dnsmasq (2.59-3) unstable; urgency=low


   * Stop daemon at runlevels 0, 1 and 6. (closes: #647726)

 -- Simon Kelley <email address hidden>  Sat, 26 Nov 2011 15:28:33 +0000

Available diffs

diff from 2.59-2 to 2.59-3 (597 bytes)

2.59-2

Superseded in wheezy-release on 2011-12-12

Superseded in sid-release on 2011-11-27

dnsmasq (2.59-2) unstable; urgency=low


   * Fix reported version number.

 -- Simon Kelley <email address hidden>  Wed, 19 Oct 2011 09:25:53 +0000

Debiandnsmasq package

Change log for dnsmasq package in Debian

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Debian
dnsmasq package