Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package dnsmasq for openSUSE:Factory checked in at 2024-02-23 16:40:30 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/dnsmasq (Old) and /work/SRC/openSUSE:Factory/.dnsmasq.new.1770 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "dnsmasq" Fri Feb 23 16:40:30 2024 rev:96 rq:1148852 version:2.90 Changes: -------- --- /work/SRC/openSUSE:Factory/dnsmasq/dnsmasq.changes 2023-11-16 20:27:14.417446336 +0100 +++ /work/SRC/openSUSE:Factory/.dnsmasq.new.1770/dnsmasq.changes 2024-02-23 16:40:32.868937194 +0100 @@ -1,0 +2,21 @@ +Wed Feb 14 17:39:46 UTC 2024 - Reinhard Max <[email protected]> + +- update to 2.90: + * CVE-2023-50387, CVE-2023-50868, bsc#1219823, bsc#1219826: + Denial Of Service while trying to validate specially crafted + DNSSEC responses + * Fix reversion in --rev-server introduced in 2.88 which caused + breakage if the prefix length is not exactly divisible by 8 + (IPv4) or 4 (IPv6). + * Fix possible SEGV when there server(s) for a particular domain + are configured, but no server which is not qualified for a + particular domain. + * Set the default maximum DNS UDP packet sice to 1232. + Obsoletes: dnsmasq-CVE-2023-28450.patch + * Add --no-dhcpv4-interface and --no-dhcpv6-interface for better + control over which inetrfaces are providing DHCP service. + * Fix issue with stale caching + * Add configurable caching for arbitrary RR-types. + * Add --filter-rr option, to filter arbitrary RR-types. + +------------------------------------------------------------------- Old: ---- dnsmasq-2.89.tar.xz dnsmasq-2.89.tar.xz.asc dnsmasq-CVE-2023-28450.patch New: ---- dnsmasq-2.90.tar.xz dnsmasq-2.90.tar.xz.asc BETA DEBUG BEGIN: Old: * Set the default maximum DNS UDP packet sice to 1232. Obsoletes: dnsmasq-CVE-2023-28450.patch * Add --no-dhcpv4-interface and --no-dhcpv6-interface for better BETA DEBUG END: ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ dnsmasq.spec ++++++ --- /var/tmp/diff_new_pack.iN5rZQ/_old 2024-02-23 16:40:33.716967934 +0100 +++ /var/tmp/diff_new_pack.iN5rZQ/_new 2024-02-23 16:40:33.720968079 +0100 @@ -1,7 +1,7 @@ # # spec file for package dnsmasq # -# Copyright (c) 2023 SUSE LLC +# Copyright (c) 2024 SUSE LLC # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -22,7 +22,7 @@ %bcond_with tftp_user_package %endif Name: dnsmasq -Version: 2.89 +Version: 2.90 Release: 0 Summary: DNS Forwarder and DHCP Server License: GPL-2.0-only OR GPL-3.0-only @@ -35,7 +35,6 @@ Source5: rc.dnsmasq-suse Source6: system-user-dnsmasq.conf Patch0: dnsmasq-groups.patch -Patch1: dnsmasq-CVE-2023-28450.patch BuildRequires: dbus-1-devel BuildRequires: dos2unix BuildRequires: libidn2-devel ++++++ dnsmasq-2.89.tar.xz -> dnsmasq-2.90.tar.xz ++++++ ++++ 8093 lines of diff (skipped) ++++++ dnsmasq-groups.patch ++++++ --- /var/tmp/diff_new_pack.iN5rZQ/_old 2024-02-23 16:40:34.016978810 +0100 +++ /var/tmp/diff_new_pack.iN5rZQ/_new 2024-02-23 16:40:34.020978954 +0100 @@ -1,6 +1,6 @@ --- src/dnsmasq.c.orig +++ src/dnsmasq.c -@@ -731,11 +731,10 @@ int main (int argc, char **argv) +@@ -728,11 +728,10 @@ int main (int argc, char **argv) if (!option_bool(OPT_DEBUG) && getuid() == 0) { int bad_capabilities = 0;
