cab8d5
%define testrelease 0
cab8d5
%define releasecandidate 0
cab8d5
%if 0%{testrelease}
cab8d5
  %define extrapath test-releases/
cab8d5
  %define extraversion test30
cab8d5
%endif
cab8d5
%if 0%{releasecandidate}
cab8d5
  %define extrapath release-candidates/
cab8d5
  %define extraversion rc5
cab8d5
%endif
cab8d5
cab8d5
%define _hardened_build 1
cab8d5
cab8d5
Name:           dnsmasq
33b374
Version:        2.76
6d0937
Release:        17%{?extraversion}%{?dist}.3
cab8d5
Summary:        A lightweight DHCP/caching DNS server
cab8d5
cab8d5
Group:          System Environment/Daemons
33b374
License:        GPLv2 or GPLv3
cab8d5
URL:            http://www.thekelleys.org.uk/dnsmasq/
cab8d5
Source0:        http://www.thekelleys.org.uk/dnsmasq/%{?extrapath}%{name}-%{version}%{?extraversion}.tar.gz
cab8d5
Source1:        %{name}.service
33b374
# upstream git: git://thekelleys.org.uk/dnsmasq.git
cab8d5
155a36
# https://bugzilla.redhat.com/show_bug.cgi?id=1367772
33b374
# commit 2675f2061525bc954be14988d64384b74aa7bf8b
33b374
# after v2.76
33b374
Patch1:         dnsmasq-2.76-dns-sleep-resume.patch
33b374
# commit 591ed1e90503817938ccf5f127e677a8dd48b6d8
33b374
Patch2:         dnsmasq-2.76-fix-dhcp-option-arrangements.patch
33b374
# commit 396750cef533cf72c7e6a72e47a9c93e2e431cb7
33b374
Patch3:         dnsmasq-2.76-pftables.patch
33b374
# commit 16800ea072dd0cdf14d951c4bb8d2808b3dfe53d
33b374
Patch4:         dnsmasq-2.76-fix-crash-dns-resume.patch
33b374
# commit 13dee6f49e1d035b8069947be84ee8da2af0c420
33b374
Patch5:		dnsmasq-2.76-warning-fixes.patch
33b374
Patch6:		dnsmasq-2.76-label-warning.patch
33b374
Patch7:		dnsmasq-2.76-label-man.patch
33b374
Patch8:		dnsmasq-2.76-coverity.patch
598def
# commit c77fb9d8f09d136fa71bde2469c4fd11cefa6f4a
598def
# commit bf4e62c19e619f7edf8d03d58d33a5752f190bfd
598def
# commit 3a8b0f6fccf464b1ec6d24c0e00e540ab2b17705
598def
Patch9:		dnsmasq-2.76-dhcp-script-log.patch
598def
# Fix possible different sizes of off_t
598def
Patch10:	dnsmasq-2.76-file_offset32.patch
598def
Patch11:	dnsmasq-2.76-CVE-2017-14491.patch
598def
Patch12:	dnsmasq-2.76-CVE-2017-14492.patch
598def
Patch13:	dnsmasq-2.76-CVE-2017-14493.patch
598def
Patch14:	dnsmasq-2.76-CVE-2017-14494.patch
598def
Patch15:	dnsmasq-2.76-CVE-2017-14496.patch
598def
Patch16:	dnsmasq-2.76-CVE-2017-14495.patch
a03026
# commit a3303e196e5d304ec955c4d63afb923ade66c6e8
598def
Patch17:	dnsmasq-2.76-gita3303e196.patch
598def
Patch18:	dnsmasq-2.76-underflow.patch
598def
Patch19:	dnsmasq-2.76-misc-cleanups.patch
814650
Patch20:	dnsmasq-2.76-CVE-2017-14491-2.patch
814650
Patch21:	dnsmasq-2.76-inotify.patch
429959
Patch22:	dnsmasq-2.76-min-query-port.patch
429959
# commit a6004d7f17687ac2455f724d0b57098c413f128d
429959
Patch23:	dnsmasq-2.76-dnssec-cache.patch
429959
# commit a997ca0da044719a0ce8a232d14da8b30022592b
429959
Patch24:	dnsmasq-2.76-dnssec-passthru.patch
e9e7d6
Patch25:	dnsmasq-2.76-rh1721668-1.patch
e9e7d6
Patch26:	dnsmasq-2.76-rh1721668-2.patch
e9e7d6
Patch27:	dnsmasq-2.76-rh1721668-3.patch
e9e7d6
Patch28:	dnsmasq-2.76-rh1721668-4.patch
e9e7d6
# commit 60ac10d8d86e6f95ab0f06abe6c42596adcedcb8
e9e7d6
Patch29:	dnsmasq-2.76-rh1752569.patch
a7b456
# commit 69bc94779c2f035a9fffdb5327a54c3aeca73ed5
a7b456
Patch30:	dnsmasq-2.76-CVE-2019-14834.patch
a7b456
# commit 499d8dde2b1a216eab9252ee500cc31b8c2b2974
a7b456
Patch31:	dnsmasq-2.76-rh1757247.patch
a7b456
# http://thekelleys.org.uk/gitweb/?p=dnsmasq.git;a=commit;h=68f6312d4bae30b78daafcd6f51dc441b8685b1e
a7b456
Patch32:	dnsmasq-2.76-rh1815080.patch
a7b456
# http://thekelleys.org.uk/gitweb/?p=dnsmasq.git;a=commit;h=4139298d287eb5c57f4aa53c459cb02fc5be2495
a7b456
# http://thekelleys.org.uk/gitweb/?p=dnsmasq.git;a=commit;h=29ae3083981ea82f535f77ea54bbd538f1224a9e
a7b456
Patch33:	dnsmasq-2.76-rh1755610.patch
a7b456
# http://thekelleys.org.uk/gitweb/?p=dnsmasq.git;a=commit;h=ef3d137a646fa8309e1ff5184e3e145eef40cc4d
a7b456
Patch34:	dnsmasq-2.79-fix-infitite-strict-mode-retries.patch
c7e749
Patch35:        dnsmasq-2.79-CVE-2020-25684.patch
c7e749
Patch36:        dnsmasq-2.79-CVE-2020-25685.patch
c7e749
Patch37:        dnsmasq-2.79-CVE-2020-25686.patch
c7e749
# Link hash function from nettle, avoid local implementation
c7e749
Patch38:        dnsmasq-2.76-nettlehash.patch
0e847a
# http://thekelleys.org.uk/gitweb/?p=dnsmasq.git;a=commit;h=1d07667ac77c55b9de56b1b2c385167e0e0ec27a
0e847a
Patch39:        dnsmasq-2.77-netlink-loop.patch
0e847a
Patch40:        dnsmasq-2.81-netlink-table.patch
0e847a
Patch41:        dnsmasq-2.84-bind-dynamic-netlink.patch
6d0937
# http://thekelleys.org.uk/gitweb/?p=dnsmasq.git;a=commit;h=305cb79c5754d5554729b18a2c06fe7ce699687a
6d0937
# http://thekelleys.org.uk/gitweb/?p=dnsmasq.git;a=commit;h=141a26f979b4bc959d8e866a295e24f8cf456920
6d0937
Patch42:        dnsmasq-2.84-forward-mixed-af.patch
6d0937
# http://thekelleys.org.uk/gitweb/?p=dnsmasq.git;a=commit;h=3f535da79e7a42104543ef5c7b5fa2bed819a78b
6d0937
# http://thekelleys.org.uk/gitweb/?p=dnsmasq.git;a=commit;h=04490bf622ac84891aad6f2dd2edf83725decdee
6d0937
Patch43:        dnsmasq-2.84-forward-retries.patch
6d0937
Patch44:        dnsmasq-2.76-forward-sfd.patch
cab8d5
cab8d5
BuildRoot:      %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
cab8d5
cab8d5
BuildRequires:  dbus-devel
cab8d5
BuildRequires:  pkgconfig
cab8d5
BuildRequires:  libidn-devel
c7e749
BuildRequires:  nettle-devel
cab8d5
cab8d5
BuildRequires:  systemd
cab8d5
Requires(post): systemd systemd-sysv chkconfig
cab8d5
Requires(preun): systemd
cab8d5
Requires(postun): systemd
cab8d5
cab8d5
cab8d5
%description
cab8d5
Dnsmasq is lightweight, easy to configure DNS forwarder and DHCP server.
cab8d5
It is designed to provide DNS and, optionally, DHCP, to a small network.
cab8d5
It can serve the names of local machines which are not in the global
cab8d5
DNS. The DHCP server integrates with the DNS server and allows machines
cab8d5
with DHCP-allocated addresses to appear in the DNS with names configured
cab8d5
either in each host or in a central configuration file. Dnsmasq supports
cab8d5
static and dynamic DHCP leases and BOOTP for network booting of diskless
cab8d5
machines.
cab8d5
cab8d5
%package        utils
cab8d5
Summary:        Utilities for manipulating DHCP server leases
cab8d5
Group:          System Environment/Daemons
cab8d5
cab8d5
%description    utils
cab8d5
Utilities that use the standard DHCP protocol to
cab8d5
query/remove a DHCP server's leases.
cab8d5
cab8d5
cab8d5
%prep
cab8d5
%setup -q -n %{name}-%{version}%{?extraversion}
cab8d5
33b374
%patch1 -p1
33b374
%patch2 -p1
33b374
%patch3 -p1
33b374
%patch4 -p1
cab8d5
%patch5 -p1
33b374
%patch6 -p1
33b374
%patch7 -p1
33b374
%patch8 -p1 -b .coverity
598def
%patch9 -p1 -b .scriptlog
598def
%patch10 -p1 -b .off_t
598def
%patch11 -p1 -b .CVE-2017-14491
598def
%patch12 -p1 -b .CVE-2017-14492
598def
%patch13 -p1 -b .CVE-2017-14493
598def
%patch14 -p1 -b .CVE-2017-14494
598def
%patch15 -p1 -b .CVE-2017-14496
598def
%patch16 -p1 -b .CVE-2017-14495
598def
%patch17 -p1 -b .gita3303e196
598def
%patch18 -p1 -b .underflow
598def
%patch19 -p1 -b .misc
814650
%patch20 -p1 -b .CVE-2017-14491-2
814650
%patch21 -p1 -b .inotify
429959
%patch22 -p1 -b .rh1614331
429959
%patch23 -p1 -b .dnssec-cache
429959
%patch24 -p1 -b .dnssec-passthru
e9e7d6
%patch25 -p1 -b .rh1721668-1
e9e7d6
%patch26 -p1 -b .rh1721668-2
e9e7d6
%patch27 -p1 -b .rh1721668-3
e9e7d6
%patch28 -p1 -b .rh1721668-4
e9e7d6
%patch29 -p1 -b .rh1752569
a7b456
%patch30 -p1 -b .CVE-2019-14834
a7b456
%patch31 -p1 -b .rh1757247
a7b456
%patch32 -p1 -b .rh1815080
a7b456
%patch33 -p1 -b .rh1755610
a7b456
%patch34 -p1 -b .rh1755610-strict-mode
c7e749
%patch35 -p1 -b .CVE-2020-25684
c7e749
%patch36 -p1 -b .CVE-2020-25685
c7e749
%patch37 -p1 -b .CVE-2020-25686
c7e749
%patch38 -p1 -b .nettlehash
0e847a
%patch39 -p1 -b .rh1887649-seq
0e847a
%patch40 -p1 -b .rh1887649-table
0e847a
%patch41 -p1 -b .rh1887649
6d0937
%patch42 -p1 -b .rh1923913
6d0937
%patch43 -p1 -b .rh1923913
6d0937
%patch44 -p1 -b .rh1923913-sfd
cab8d5
cab8d5
# use /var/lib/dnsmasq instead of /var/lib/misc
cab8d5
for file in dnsmasq.conf.example man/dnsmasq.8 man/es/dnsmasq.8 src/config.h; do
cab8d5
    sed -i 's|/var/lib/misc/dnsmasq.leases|/var/lib/dnsmasq/dnsmasq.leases|g' "$file"
cab8d5
done
cab8d5
cab8d5
#enable dbus
cab8d5
sed -i 's|/\* #define HAVE_DBUS \*/|#define HAVE_DBUS|g' src/config.h
cab8d5
cab8d5
#enable IDN support
cab8d5
sed -i 's|/\* #define HAVE_IDN \*/|#define HAVE_IDN|g' src/config.h
cab8d5
c7e749
#enable sha256 from nettle
c7e749
sed -i 's|/\* #define HAVE_NETTLEHASH \*/|#define HAVE_NETTLEHASH|g' src/config.h
c7e749
33b374
#enable /etc/dnsmasq.d fix bz 526703, ignore RPM backup files
33b374
cat << EOF >> dnsmasq.conf.example
33b374
33b374
# Include all files in /etc/dnsmasq.d except RPM backup files
33b374
conf-dir=/etc/dnsmasq.d,.rpmnew,.rpmsave,.rpmorig
33b374
EOF
cab8d5
cab8d5
cab8d5
%build
cab8d5
make %{?_smp_mflags} CFLAGS="$RPM_OPT_FLAGS" LDFLAGS="$RPM_LD_FLAGS"
33b374
make -C contrib/lease-tools %{?_smp_mflags} CFLAGS="$RPM_OPT_FLAGS" LDFLAGS="$RPM_LD_FLAGS"
cab8d5
cab8d5
cab8d5
%install
cab8d5
rm -rf $RPM_BUILD_ROOT
cab8d5
# normally i'd do 'make install'...it's a bit messy, though
cab8d5
mkdir -p $RPM_BUILD_ROOT%{_sbindir} \
cab8d5
        $RPM_BUILD_ROOT%{_mandir}/man8 \
cab8d5
        $RPM_BUILD_ROOT%{_var}/lib/dnsmasq \
cab8d5
        $RPM_BUILD_ROOT%{_sysconfdir}/dnsmasq.d \
cab8d5
        $RPM_BUILD_ROOT%{_sysconfdir}/dbus-1/system.d
cab8d5
install src/dnsmasq $RPM_BUILD_ROOT%{_sbindir}/dnsmasq
cab8d5
install dnsmasq.conf.example $RPM_BUILD_ROOT%{_sysconfdir}/dnsmasq.conf
cab8d5
install dbus/dnsmasq.conf $RPM_BUILD_ROOT%{_sysconfdir}/dbus-1/system.d/
cab8d5
install -m 644 man/dnsmasq.8 $RPM_BUILD_ROOT%{_mandir}/man8/
cab8d5
cab8d5
# utils sub package
cab8d5
mkdir -p $RPM_BUILD_ROOT%{_bindir} \
cab8d5
         $RPM_BUILD_ROOT%{_mandir}/man1
33b374
install -m 755 contrib/lease-tools/dhcp_release $RPM_BUILD_ROOT%{_bindir}/dhcp_release
33b374
install -m 644 contrib/lease-tools/dhcp_release.1 $RPM_BUILD_ROOT%{_mandir}/man1/dhcp_release.1
33b374
install -m 755 contrib/lease-tools/dhcp_release6 $RPM_BUILD_ROOT%{_bindir}/dhcp_release6
33b374
install -m 644 contrib/lease-tools/dhcp_release6.1 $RPM_BUILD_ROOT%{_mandir}/man1/dhcp_release6.1
33b374
install -m 755 contrib/lease-tools/dhcp_lease_time $RPM_BUILD_ROOT%{_bindir}/dhcp_lease_time
33b374
install -m 644 contrib/lease-tools/dhcp_lease_time.1 $RPM_BUILD_ROOT%{_mandir}/man1/dhcp_lease_time.1
cab8d5
cab8d5
# Systemd
cab8d5
mkdir -p %{buildroot}%{_unitdir}
cab8d5
install -m644 %{SOURCE1} %{buildroot}%{_unitdir}
cab8d5
rm -rf %{buildroot}%{_initrddir}
cab8d5
cab8d5
%clean
cab8d5
rm -rf $RPM_BUILD_ROOT
cab8d5
cab8d5
%post
cab8d5
%systemd_post dnsmasq.service
cab8d5
cab8d5
%preun
cab8d5
%systemd_preun dnsmasq.service
cab8d5
cab8d5
%postun
cab8d5
%systemd_postun_with_restart dnsmasq.service
cab8d5
cab8d5
%triggerun -- dnsmasq < 2.52-3
cab8d5
%{_bindir}/systemd-sysv-convert --save dnsmasq >/dev/null 2>&1 ||:
cab8d5
/sbin/chkconfig --del dnsmasq >/dev/null 2>&1 || :
cab8d5
/bin/systemctl try-restart dnsmasq.service >/dev/null 2>&1 || :
cab8d5
cab8d5
%files
cab8d5
%defattr(-,root,root,-)
33b374
%doc CHANGELOG COPYING COPYING-v3 FAQ doc.html setup.html dbus/DBus-interface
cab8d5
%config(noreplace) %attr(644,root,root) %{_sysconfdir}/dnsmasq.conf
cab8d5
%dir /etc/dnsmasq.d
cab8d5
%dir %{_var}/lib/dnsmasq
cab8d5
%config(noreplace) %attr(644,root,root) %{_sysconfdir}/dbus-1/system.d/dnsmasq.conf
cab8d5
%{_unitdir}/%{name}.service
cab8d5
%{_sbindir}/dnsmasq
cab8d5
%{_mandir}/man8/dnsmasq*
cab8d5
cab8d5
%files utils
cab8d5
%{_bindir}/dhcp_*
cab8d5
%{_mandir}/man1/dhcp_*
cab8d5
cab8d5
%changelog
6d0937
* Fri Mar 05 2021 Petr Menšík <pemensik@redhat.com> - 2.76-17.3
6d0937
- Accept replies from bound sockets again (#1923913)
6d0937
6d0937
* Mon Mar 01 2021 Petr Menšík <pemensik@redhat.com> - 2.76-17.2
6d0937
- Correct two regressions introduced by CVE fixes (#1923913)
6d0937
0e847a
* Thu Feb 11 2021 Petr Menšík <pemensik@redhat.com> - 2.76-17.1
0e847a
- Fix occasional failures in netlink on many interfaces (#1887649)
0e847a
c7e749
* Fri Nov 27 2020 Petr Menšík <pemensik@redhat.com> - 2.76-16.1
c7e749
- Accept responses only on correct sockets (CVE-2020-25684)
c7e749
- Use strong verification on queries (CVE-2020-25685)
c7e749
- Handle multiple identical DNS queries better (CVE-2020-25686)
c7e749
- Link against nettle for sha256 hash implementation
c7e749
a7b456
* Thu Jul 02 2020 Petr Menšík <pemensik@redhat.com> - 2.76-16
a7b456
- Fix strict-mode retries on REFUSED (#1755610)
a7b456
a7b456
* Tue Apr 21 2020 Petr Menšík <pemensik@redhat.com> - 2.76-15
a7b456
- Forward non-recursive queries to upstream, but serve local names (#1755610)
a7b456
a7b456
* Thu Apr 09 2020 Petr Menšík <pemensik@redhat.com> - 2.76-14
a7b456
- Stop treating SERVFAIL as successful response (#1815080)
a7b456
a7b456
* Tue Mar 03 2020 Petr Menšík <pemensik@redhat.com> - 2.76-13
a7b456
- Do not ignore DHCPv6 relay messages (#1757247)
a7b456
a7b456
* Mon Mar 02 2020 Petr Menšík <pemensik@redhat.com> - 2.76-12
a7b456
- Fix memory leak in create_helper (#1795369)
a7b456
a7b456
* Mon Sep 30 2019 Petr Menšík <pemensik@redhat.com> - 2.76-11
e9e7d6
- Send dhcp_release even for addresses not on local network (#1752569)
e9e7d6
e9e7d6
* Wed Jul 03 2019 Petr Menšík <pemensik@redhat.com> - 2.76-10
e9e7d6
- Fix TCP queries after interface recreation (#1721668)
e9e7d6
429959
* Tue Mar 26 2019 Petr Menšík <pemensik@redhat.com> - 2.79-9
429959
- Fix passing of dnssec enabled queries (#1638703)
429959
429959
* Mon Mar 18 2019 Petr Menšík <pemensik@redhat.com> - 2.76-8
429959
- Stop using privileged port for outbound queries (#1614331)
429959
814650
* Wed May 09 2018 Martin Sehnoutka <msehnout@redhat.com> - 2.76-7
814650
- Resolves: #1474515 dhcp-agent dnsmasq max files
814650
814650
* Wed Sep 27 2017 Petr Menšík <pemensik@redhat.com> - 2.76-6
814650
- Small correction of CVE-2017-14491
814650
598def
* Tue Sep 26 2017 Petr Menšík <pemensik@redhat.com> - 2.76-5
a03026
- Fix CVE-2017-14491
a03026
- Fix CVE-2017-14492
a03026
- Fix CVE-2017-14493
a03026
- Fix CVE-2017-14494
a03026
- Fix CVE-2017-14496
a03026
- Fix CVE-2017-14495
a03026
- extra fixes
a03026
598def
* Thu Sep 14 2017 Petr Menšík <pemensik@redhat.com> - 2.76-4
598def
- Fix possible stack corruption on 32-bit architectures (#1188259)
598def
598def
* Fri Mar 24 2017 Petr Menšík <pemensik@redhat.com> - 2.76-3
598def
- Log output of dhcp-script (#1188259)
598def
- Log format errors in dhcp-script init
598def
33b374
* Wed Mar 15 2017 Petr Menšík <pemensik@redhat.com> - 2.76-2
33b374
- Fix a few coverity warnings
33b374
- package is dual-licensed GPL v2 or v3
33b374
- don't include /etc/dnsmasq.d in triplicate, ignore RPM backup files instead
33b374
33b374
* Tue Feb 21 2017 Petr Menšík <pemensik@redhat.com> - 2.76-1
33b374
- Rebase to 2.76 (#1375527)
33b374
- Include also dhcp_release6 (#1375569)
33b374
- Fix compilation warnings
33b374
- Correct manual about interface aliases, warn if used without --bind*
33b374
155a36
* Tue Sep 13 2016 Pavel Å imerda <psimerda@redhat.com> - 2.66-21
155a36
- Related: #1367772 - fix dns server update
155a36
155a36
* Thu Sep 08 2016 Pavel Å imerda <psimerda@redhat.com> - 2.66-20
155a36
- Related: #1367772 - additional upstream patch
155a36
155a36
* Tue Sep 06 2016 Pavel Å imerda <psimerda@redhat.com> - 2.66-19
155a36
- Resolves: #1367772 - dns not updated after sleep and resume laptop
155a36
155a36
* Fri Aug 26 2016 root - 2.66-18
155a36
- Resolves: #1358427 - dhcp errors with hostnames beginning with numbers
155a36
155a36
* Tue May 31 2016 Pavel Å imerda <psimerda@redhat.com> - 2.66-17
155a36
- Resolves: #1275626 - modify the patch using new information
155a36
155a36
* Mon May 30 2016 Pavel Å imerda <psimerda@redhat.com> - 2.66-16
155a36
- Resolves: #1275626 - use the patch
155a36
155a36
* Wed May 25 2016 Pavel Å imerda <psimerda@redhat.com> - 2.66-15
155a36
- Resolves: #1275626 - dnsmasq crash with coredump on infiniband network with
155a36
  OpenStack
a65ed4
93ac1e
* Thu Jun 25 2015 Pavel Å imerda <psimerda@redhat.com> - 2.66-14
93ac1e
- Resolves: #1232677 - handle IPv4 and IPv6 host entries properly
93ac1e
dc4044
* Wed Feb 25 2015 Pavel Å imerda <psimerda@redhat.com> - 2.66-13
dc4044
- Resolves: #1179756 - dnsmasq does not support MAC address based matching for
dc4044
  IPv6
dc4044
8d9ee0
* Fri Jan 24 2014 Daniel Mach <dmach@redhat.com> - 2.66-12
8d9ee0
- Mass rebuild 2014-01-24
8d9ee0
8d9ee0
* Fri Dec 27 2013 Daniel Mach <dmach@redhat.com> - 2.66-11
8d9ee0
- Mass rebuild 2013-12-27
8d9ee0
cab8d5
* Thu Aug 15 2013 Tomas Hozza <thozza@redhat.com> - 2.66-10
cab8d5
- Use SO_REUSEPORT and SO_REUSEADDR if possible for DHCPv4/6 (#981973)
cab8d5
cab8d5
* Mon Aug 12 2013 Tomas Hozza <thozza@redhat.com> - 2.66-9
cab8d5
- Don't use SO_REUSEPORT on DHCPv4 socket to prevent conflicts with ISC DHCP (#981973)
cab8d5
cab8d5
* Tue Jul 23 2013 Tomas Hozza <thozza@redhat.com> - 2.66-8
cab8d5
- Fix crash when specified empty DHCP option
cab8d5
cab8d5
* Tue Jun 11 2013 Tomas Hozza <thozza@redhat.com> - 2.66-7
cab8d5
- use _hardened_build macro instead of hardcoded flags
cab8d5
- include several fixies from upstream repo:
cab8d5
  - Allow constructed ranges from interface address at end of range
cab8d5
  - Dont BINDTODEVICE DHCP socket if more interfaces may come
cab8d5
  - Fix option parsing for dhcp host
cab8d5
  - Log forwarding table overflows
cab8d5
  - Remove limit in prefix length in auth zone
cab8d5
cab8d5
* Fri May 17 2013 Tomas Hozza <thozza@redhat.com> - 2.66-6
cab8d5
- include several fixies from upstream repo:
cab8d5
  - Tighten hostname checks in legal hostname() function
cab8d5
  - Replace inet_addr() with inet_pton() in src/option.c
cab8d5
  - Use dnsmasq as default DNS server for RA only if it's doing DNS
cab8d5
  - Handle IPv4 interface address labels (aliases) in Linux (#962246)
cab8d5
  - Fix failure to start with ENOTSOCK (#962874)
cab8d5
cab8d5
* Tue Apr 30 2013 Tomas Hozza <thozza@redhat.com> - 2.66-5
cab8d5
- dnsmasq unit file cleanup
cab8d5
  - drop forking Type and PIDfile and rather start dnsmasq with "-k" option
cab8d5
  - drop After syslog.target as this is by default
cab8d5
cab8d5
* Thu Apr 25 2013 Tomas Hozza <thozza@redhat.com> - 2.66-4
cab8d5
- include several fixes from upstream repo:
cab8d5
  - Send TCP DNS messages in one packet
cab8d5
  - Fix crash on SERVFAIL when using --conntrack option
cab8d5
  - Fix regression in dhcp_lease_time utility
cab8d5
  - Man page typos fixes
cab8d5
  - Note that dhcp_lease_time and dhcp_release work only for IPv4
cab8d5
  - Fix for --dhcp-match option to work also with BOOTP protocol
cab8d5
cab8d5
* Sat Apr 20 2013 Tomas Hozza <thozza@redhat.com> - 2.66-3
cab8d5
- Use Full RELRO when linking the daemon
cab8d5
- compile the daemon with PIE
cab8d5
- include two fixes from upstream git repo
cab8d5
cab8d5
* Thu Apr 18 2013 Tomas Hozza <thozza@redhat.com> - 2.66-2
cab8d5
- New stable version dnsmasq-2.66
cab8d5
- Drop of merged patch
cab8d5
cab8d5
* Fri Apr 12 2013 Tomas Hozza <thozza@redhat.com> - 2.66-1.rc5
cab8d5
- Update to latest dnsmasq-2.66rc5
cab8d5
- Include fix for segfault when lease limit is reached
cab8d5
cab8d5
* Fri Mar 22 2013 Tomas Hozza <thozza@redhat.com> - 2.66-1.rc1
cab8d5
- Update to latest dnsmasq-2.66rc1
cab8d5
- Dropping unneeded patches
cab8d5
- Enable IDN support
cab8d5
cab8d5
* Fri Mar 15 2013 Tomas Hozza <thozza@redhat.com> - 2.65-5
cab8d5
- Allocate dhcp_buff-ers also if daemon->ra_contexts to prevent SIGSEGV (#920300)
cab8d5
cab8d5
* Thu Jan 31 2013 Tomas Hozza <thozza@redhat.com> - 2.65-4
cab8d5
- Handle locally-routed DNS Queries (#904940)
cab8d5
cab8d5
* Thu Jan 24 2013 Tomas Hozza <thozza@redhat.com> - 2.65-3
cab8d5
- build dnsmasq with $RPM_OPT_FLAGS, $RPM_LD_FLAGS explicitly (#903362) 
cab8d5
cab8d5
* Tue Jan 22 2013 Tomas Hozza <thozza@redhat.com> - 2.65-2
cab8d5
- Fix for CVE-2013-0198 (checking of TCP connection interfaces) (#901555)
cab8d5
cab8d5
* Sat Dec 15 2012 Tomas Hozza <thozza@redhat.com> - 2.65-1
cab8d5
- new version 2.65
cab8d5
cab8d5
* Wed Dec 05 2012 Tomas Hozza <thozza@redhat.com> - 2.64-1
cab8d5
- New version 2.64
cab8d5
- Merged patches dropped
cab8d5
cab8d5
* Tue Nov 20 2012 Tomas Hozza <thozza@redhat.com> - 2.63-4
cab8d5
- Remove EnvironmentFile from service file (#878343)
cab8d5
cab8d5
* Mon Nov 19 2012 Tomas Hozza <thozza@redhat.com> - 2.63-3
cab8d5
- dhcp6 support fixes (#867054)
cab8d5
- removed "-s $HOSTNAME" from .service file (#753656, #822797)
cab8d5
cab8d5
* Tue Oct 23 2012 Tomas Hozza <thozza@redhat.com> - 2.63-2
cab8d5
- Introduce new systemd-rpm macros in dnsmasq spec file (#850096)
cab8d5
cab8d5
* Thu Aug 23 2012 Douglas Schilling Landgraf <dougsland@redhat.com> - 2.63-1
cab8d5
- Use .tar.gz compression, in upstream site there is no .lzma anymore
cab8d5
- New version 2.63
cab8d5
cab8d5
* Sat Feb 11 2012 Pádraig Brady <P@draigBrady.com> - 2.59-5
cab8d5
- Compile DHCP lease management utils with RPM_OPT_FLAGS
cab8d5
cab8d5
* Thu Feb  9 2012 Pádraig Brady <P@draigBrady.com> - 2.59-4
cab8d5
- Include DHCP lease management utils in a subpackage
cab8d5
cab8d5
* Fri Jan 13 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.59-3
cab8d5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
cab8d5
cab8d5
* Fri Aug 26 2011 Douglas Schilling Landgraf <dougsland@redhat.com> - 2.59-2
cab8d5
- do not enable service by default
cab8d5
cab8d5
* Fri Aug 26 2011 Douglas Schilling Landgraf <dougsland@redhat.com> - 2.59-1
cab8d5
- New version 2.59
cab8d5
- Fix regression in 2.58 (IPv6 issue) - bz 744814
cab8d5
cab8d5
* Fri Aug 26 2011 Douglas Schilling Landgraf <dougsland@redhat.com> - 2.58-1
cab8d5
- Fixed License
cab8d5
- New version 2.58
cab8d5
cab8d5
* Mon Aug 08 2011 Patrick "Jima" Laughton <jima@fedoraproject.org> - 2.52-5
cab8d5
- Include systemd unit file
cab8d5
cab8d5
* Mon Aug 08 2011 Patrick "Jima" Laughton <jima@fedoraproject.org> - 2.52-3
cab8d5
- Applied Jóhann's patch, minor cleanup
cab8d5
cab8d5
* Tue Jul 26 2011 Jóhann B. Guðmundsson <johannbg@gmail.com> - 2.52-3
cab8d5
- Introduce systemd unit file, drop SysV support
cab8d5
cab8d5
* Tue Feb 08 2011 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.52-2
cab8d5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
cab8d5
cab8d5
* Tue Jan 26 2010 Itamar Reis Peixoto <itamar@ispbrasil.com.br> - 2.52-1
cab8d5
- New Version 2.52
cab8d5
- fix condrestart() in initscript bz 547605
cab8d5
- fix sed to enable DBUS(the '*' need some escaping) bz 553161
cab8d5
cab8d5
* Sun Nov 22 2009 Itamar Reis Peixoto <itamar@ispbrasil.com.br> - 2.51-2
cab8d5
- fix bz 512664
cab8d5
cab8d5
* Sat Oct 17 2009 Itamar Reis Peixoto <itamar@ispbrasil.com.br> - 2.51-1
cab8d5
- move initscript from patch to a plain text file
cab8d5
- drop (dnsmasq-configuration.patch) and use sed instead
cab8d5
- enable /etc/dnsmasq.d fix bz 526703
cab8d5
- change requires to package name instead of file
cab8d5
- new version 2.51
cab8d5
cab8d5
* Mon Oct  5 2009 Mark McLoughlin <markmc@redhat.com> - 2.48-4
cab8d5
- Fix multiple TFTP server vulnerabilities (CVE-2009-2957, CVE-2009-2958)
cab8d5
cab8d5
* Wed Aug 12 2009 Ville Skyttä <ville.skytta@iki.fi> - 2.48-3
cab8d5
- Use lzma compressed upstream tarball.
cab8d5
cab8d5
* Fri Jul 24 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.48-2
cab8d5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild
cab8d5
cab8d5
* Wed Jun 10 2009 Patrick "Jima" Laughton <jima@beer.tclug.org> 2.48-1
cab8d5
- Bugfix/feature enhancement update
cab8d5
- Fixing BZ#494094
cab8d5
cab8d5
* Fri May 29 2009 Patrick "Jima" Laughton <jima@beer.tclug.org> 2.47-1
cab8d5
- Bugfix/feature enhancement update
cab8d5
cab8d5
* Tue Feb 24 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.46-2
cab8d5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild
cab8d5
cab8d5
* Mon Dec 29 2008 Matěj Cepl <mcepl@redhat.com> - 2.45-2
cab8d5
- rebuilt
cab8d5
cab8d5
* Mon Jul 21 2008 Patrick "Jima" Laughton <jima@beer.tclug.org> 2.45-1
cab8d5
- Upstream release (bugfixes)
cab8d5
cab8d5
* Wed Jul 16 2008 Patrick "Jima" Laughton <jima@beer.tclug.org> 2.43-2
cab8d5
- New upstream release, contains fixes for CVE-2008-1447/CERT VU#800113
cab8d5
- Dropped patch for newer glibc (merged upstream)
cab8d5
cab8d5
* Wed Feb 13 2008 Patrick "Jima" Laughton <jima@beer.tclug.org> 2.41-0.8
cab8d5
- Added upstream-authored patch for newer glibc (thanks Simon!)
cab8d5
cab8d5
* Wed Feb 13 2008 Patrick "Jima" Laughton <jima@beer.tclug.org> 2.41-0.7
cab8d5
- New upstream release
cab8d5
cab8d5
* Wed Jan 30 2008 Patrick "Jima" Laughton <jima@beer.tclug.org> 2.41-0.6.rc1
cab8d5
- Release candidate
cab8d5
- Happy Birthday Isaac!
cab8d5
cab8d5
* Wed Jan 23 2008 Patrick "Jima" Laughton <jima@beer.tclug.org> 2.41-0.5.test30
cab8d5
- Bugfix update
cab8d5
cab8d5
* Mon Dec 31 2007 Patrick "Jima" Laughton <jima@beer.tclug.org> 2.41-0.4.test26
cab8d5
- Bugfix/feature enhancement update
cab8d5
cab8d5
* Thu Dec 13 2007 Patrick "Jima" Laughton <jima@beer.tclug.org> 2.41-0.3.test24
cab8d5
- Upstream fix for fairly serious regression
cab8d5
cab8d5
* Tue Dec 04 2007 Patrick "Jima" Laughton <jima@beer.tclug.org> 2.41-0.2.test20
cab8d5
- New upstream test release
cab8d5
- Moving dnsmasq.leases to /var/lib/dnsmasq/ as per BZ#407901
cab8d5
- Ignoring dangerous-command-in-%%post rpmlint warning (as per above fix)
cab8d5
- Patch consolidation/cleanup
cab8d5
- Removed conditionals for Fedora <= 3 and Aurora 2.0
cab8d5
cab8d5
* Tue Sep 18 2007 Patrick "Jima" Laughton <jima@beer.tclug.org> 2.40-1
cab8d5
- Finalized upstream release
cab8d5
- Removing URLs from patch lines (CVS is the authoritative source)
cab8d5
- Added more magic to make spinning rc/test packages more seamless
cab8d5
cab8d5
* Sun Aug 26 2007 Patrick "Jima" Laughton <jima@beer.tclug.org> 2.40-0.1.rc2
cab8d5
- New upstream release candidate (feature-frozen), thanks Simon!
cab8d5
- License clarification
cab8d5
cab8d5
* Tue May 29 2007 Patrick "Jima" Laughton <jima@beer.tclug.org> 2.39-1
cab8d5
- New upstream version (bugfixes, enhancements)
cab8d5
cab8d5
* Mon Feb 12 2007 Patrick "Jima" Laughton <jima@beer.tclug.org> 2.38-1
cab8d5
- New upstream version with bugfix for potential hang
cab8d5
cab8d5
* Tue Feb 06 2007 Patrick "Jima" Laughton <jima@beer.tclug.org> 2.37-1
cab8d5
- New upstream version
cab8d5
cab8d5
* Wed Jan 24 2007 Patrick "Jima" Laughton <jima@beer.tclug.org> 2.36-1
cab8d5
- New upstream version
cab8d5
cab8d5
* Mon Nov 06 2006 Patrick "Jima" Laughton <jima@beer.tclug.org> 2.35-2
cab8d5
- Stop creating /etc/sysconfig on %%install
cab8d5
- Create /etc/dnsmasq.d on %%install
cab8d5
cab8d5
* Mon Nov 06 2006 Patrick "Jima" Laughton <jima@beer.tclug.org> 2.35-1
cab8d5
- Update to 2.35
cab8d5
- Removed UPGRADING_to_2.0 from %%doc as per upstream change
cab8d5
- Enabled conf-dir in default config as per RFE BZ#214220 (thanks Chris!)
cab8d5
- Added %%dir /etc/dnsmasq.d to %%files as per above RFE
cab8d5
cab8d5
* Tue Oct 24 2006 Patrick "Jima" Laughton <jima@beer.tclug.org> 2.34-2
cab8d5
- Fixed BZ#212005
cab8d5
- Moved %%postun scriptlet to %%post, where it made more sense
cab8d5
- Render scriptlets safer
cab8d5
- Minor cleanup for consistency
cab8d5
cab8d5
* Thu Oct 19 2006 Patrick "Jima" Laughton <jima@beer.tclug.org> 2.34-1
cab8d5
- Hardcoded version in patches, as I'm getting tired of updating them
cab8d5
- Update to 2.34
cab8d5
cab8d5
* Mon Aug 28 2006 Patrick "Jima" Laughton <jima@beer.tclug.org> 2.33-2
cab8d5
- Rebuild for FC6
cab8d5
cab8d5
* Tue Aug 15 2006 Patrick "Jima" Laughton <jima@beer.tclug.org> 2.33-1
cab8d5
- Update
cab8d5
cab8d5
* Sat Jul 22 2006 Patrick "Jima" Laughton <jima@beer.tclug.org> 2.32-3
cab8d5
- Added pkgconfig BuildReq due to reduced buildroot
cab8d5
cab8d5
* Thu Jul 20 2006 Patrick "Jima" Laughton <jima@beer.tclug.org> 2.32-2
cab8d5
- Forced update due to dbus version bump
cab8d5
cab8d5
* Mon Jun 12 2006 Patrick "Jima" Laughton <jima@beer.tclug.org> 2.32-1
cab8d5
- Update from upstream
cab8d5
- Patch from Dennis Gilmore fixed the conditionals to detect Aurora Linux
cab8d5
cab8d5
* Mon May  8 2006 Patrick "Jima" Laughton <jima@auroralinux.org> 2.31-1
cab8d5
- Removed dbus config patch (now provided upstream)
cab8d5
- Patched in init script (no longer provided upstream)
cab8d5
- Added DBus-interface to docs
cab8d5
cab8d5
* Tue May  2 2006 Patrick "Jima" Laughton <jima@auroralinux.org> 2.30-4.2
cab8d5
- More upstream-recommended cleanups :)
cab8d5
- Killed sysconfig file (provides unneeded functionality)
cab8d5
- Tweaked init script a little more
cab8d5
cab8d5
* Tue May  2 2006 Patrick "Jima" Laughton <jima@auroralinux.org> 2.30-4
cab8d5
- Moved options out of init script and into /etc/sysconfig/dnsmasq
cab8d5
- Disabled DHCP_LEASE in sysconfig file, fixing bug #190379
cab8d5
- Simon Kelley provided dbus/dnsmasq.conf, soon to be part of the tarball
cab8d5
cab8d5
* Thu Apr 27 2006 Patrick "Jima" Laughton <jima@auroralinux.org> 2.30-3
cab8d5
- Un-enabled HAVE_ISC_READER, a hack to enable a deprecated feature (request)
cab8d5
- Split initscript & enable-dbus patches, conditionalized dbus for FC3
cab8d5
- Tweaked name field in changelog entries (trying to be consistent)
cab8d5
cab8d5
* Mon Apr 24 2006 Patrick "Jima" Laughton <jima@auroralinux.org> 2.30-2
cab8d5
- Disabled stripping of binary while installing (oops)
cab8d5
- Enabled HAVE_ISC_READER/HAVE_DBUS via patch
cab8d5
- Added BuildReq for dbus-devel
cab8d5
cab8d5
* Mon Apr 24 2006 Patrick "Jima" Laughton <jima@auroralinux.org> 2.30-1
cab8d5
- Initial Fedora Extras RPM