Blame SPECS/dnsmasq.spec

784d94
%define testrelease 0
784d94
%define releasecandidate 0
784d94
%if 0%{testrelease}
784d94
  %define extrapath test-releases/
784d94
  %define extraversion test%{testrelease}
784d94
%endif
784d94
%if 0%{releasecandidate}
784d94
  %define extrapath release-candidates/
784d94
  %define extraversion rc%{releasecandidate}
784d94
%endif
784d94
784d94
%define _hardened_build 1
784d94
784d94
Name:           dnsmasq
784d94
Version:        2.79
d08ebc
Release:        15%{?extraversion:.%{extraversion}}%{?dist}
784d94
Summary:        A lightweight DHCP/caching DNS server
784d94
784d94
License:        GPLv2 or GPLv3
784d94
URL:            http://www.thekelleys.org.uk/dnsmasq/
784d94
Source0:        http://www.thekelleys.org.uk/dnsmasq/%{?extrapath}%{name}-%{version}%{?extraversion}.tar.xz
784d94
Source1:        %{name}.service
784d94
Source2:        dnsmasq-systemd-sysusers.conf
784d94
784d94
# https://bugzilla.redhat.com/show_bug.cgi?id=1495409
784d94
Patch1:         dnsmasq-2.77-underflow.patch
784d94
Patch3:         dnsmasq-2.78-fips.patch
784d94
Patch4:         dnsmasq-2.80-dnssec.patch
2bab6f
Patch5:         dnsmasq-2.79-rh1602477.patch
2bab6f
# Few changes not yet in upstream
2bab6f
Patch6:         dnsmasq-2.79-rh1602477-2.patch
88706c
# commit 60ac10d8d86e6f95ab0f06abe6c42596adcedcb8
88706c
Patch7:         dnsmasq-2.76-rh1752569.patch
88706c
# Report failure when no release would be sent
88706c
Patch8:         dnsmasq-2.79-rh1749092-fail.patch
8e0267
Patch9:         dnsmasq-2.76-rh1728698-1.patch
8e0267
Patch10:        dnsmasq-2.79-rh1728698-2.patch
8e0267
Patch11:        dnsmasq-2.76-rh1728698-3.patch
8e0267
Patch12:        dnsmasq-2.79-rh1728698-4.patch
8e0267
Patch13:        dnsmasq-2.79-rh1746411.patch
8e0267
Patch14:        dnsmasq-2.79-rh1700916.patch
8e0267
Patch15:        dnsmasq-2.80-rh1795370.patch
8e0267
# https://bugzilla.redhat.com/show_bug.cgi?id=1779187
8e0267
# http://thekelleys.org.uk/gitweb/?p=dnsmasq.git;a=commit;h=97f876b64c22b2b18412e2e3d8506ee33e42db7c
8e0267
Patch16:        dnsmasq-2.80-unaligned-addresses-in-DHCPv6-packet.patch
8e0267
# http://thekelleys.org.uk/gitweb/?p=dnsmasq.git;a=commit;h=f064188032a829efdcf3988b24ac795ff52785ec
8e0267
# http://thekelleys.org.uk/gitweb/?p=dnsmasq.git;a=commit;h=137286e9baecf6a3ba97722ef1b49c851b531810
8e0267
# http://thekelleys.org.uk/gitweb/?p=dnsmasq.git;a=commit;h=79aba0f10ad0157fb4f48afbbcb03f094caff97a
8e0267
Patch17:        dnsmasq-2.81-prefix-ranges-or-list-of-ipv6-addresses.patch
8e0267
# http://thekelleys.org.uk/gitweb/?p=dnsmasq.git;a=commit;h=52ec7836139e7a11374971905e5ac0d2d02e32c0
8e0267
Patch18:        dnsmasq-2.81-tag-filtering-of-dhcp-host-directives.patch
8e0267
Patch19:        dnsmasq-2.81-correct-range-check-of-dhcp-host-prefix.patch
f854f6
Patch20:        dnsmasq-2.81-optimize-fds-close.patch
f854f6
Patch21:        dnsmasq-2.81-rh1829448.patch
ac771d
Patch22:        dnsmasq-2.79-CVE-2020-25681.patch
ac771d
Patch23:        dnsmasq-2.79-CVE-2020-25684.patch
ac771d
Patch24:        dnsmasq-2.79-CVE-2020-25685.patch
ac771d
Patch25:        dnsmasq-2.79-CVE-2020-25686.patch
ac771d
Patch26:        dnsmasq-2.79-CVE-2020-25686-2.patch
784d94
784d94
# This is workaround to nettle bug #1549190
784d94
# https://bugzilla.redhat.com/show_bug.cgi?id=1549190
784d94
Requires:       nettle >= 3.4
784d94
784d94
BuildRequires:  dbus-devel
784d94
BuildRequires:  pkgconfig
784d94
BuildRequires:  libidn2-devel
784d94
BuildRequires:  nettle-devel
784d94
Buildrequires:  gcc
784d94
784d94
BuildRequires:  systemd
784d94
%{?systemd_requires}
784d94
784d94
%description
784d94
Dnsmasq is lightweight, easy to configure DNS forwarder and DHCP server.
784d94
It is designed to provide DNS and, optionally, DHCP, to a small network.
784d94
It can serve the names of local machines which are not in the global
784d94
DNS. The DHCP server integrates with the DNS server and allows machines
784d94
with DHCP-allocated addresses to appear in the DNS with names configured
784d94
either in each host or in a central configuration file. Dnsmasq supports
784d94
static and dynamic DHCP leases and BOOTP for network booting of diskless
784d94
machines.
784d94
784d94
%package        utils
784d94
Summary:        Utilities for manipulating DHCP server leases
784d94
784d94
%description    utils
784d94
Utilities that use the standard DHCP protocol to query/remove a DHCP
784d94
server's leases.
784d94
784d94
784d94
%prep
784d94
%setup -q -n %{name}-%{version}%{?extraversion}
784d94
%patch1 -p1 -b .underflow
784d94
%patch3 -p1 -b .fips
784d94
%patch4 -p1 -b .dnssec
2bab6f
%patch5 -p1 -b .rh1602477
2bab6f
%patch6 -p1 -b .rh1602477-2
88706c
%patch7 -p1 -b .rh1752569
88706c
%patch8 -p1 -b .rh1752569
8e0267
%patch9 -p1 -b .rh1728698-1
8e0267
%patch10 -p1 -b .rh1728698-2
8e0267
%patch11 -p1 -b .rh1728698-3
8e0267
%patch12 -p1 -b .rh1728698-4
8e0267
%patch13 -p1 -b .rh1746411
8e0267
%patch14 -p1 -b .rh1700916
8e0267
%patch15 -p1 -b .rh1795370
8e0267
%patch16 -p1 -b .rh1779187-1
8e0267
%patch17 -p1 -b .rh1779187-2
8e0267
%patch18 -p1 -b .rh1779187-3
8e0267
%patch19 -p1 -b .rh1779187-4
f854f6
%patch20 -p1 -b .rh1816613
f854f6
%patch21 -p1 -b .rh1829448
ac771d
%patch22 -p1 -b .CVE-2020-25681
ac771d
%patch23 -p1 -b .CVE-2020-25684
ac771d
%patch24 -p1 -b .CVE-2020-25685
ac771d
%patch25 -p1 -b .CVE-2020-25686
ac771d
%patch26 -p1 -b .CVE-2020-25686-2
784d94
784d94
# use /var/lib/dnsmasq instead of /var/lib/misc
784d94
for file in dnsmasq.conf.example man/dnsmasq.8 man/es/dnsmasq.8 src/config.h; do
784d94
    sed -i 's|/var/lib/misc/dnsmasq.leases|/var/lib/dnsmasq/dnsmasq.leases|g' "$file"
784d94
done
784d94
784d94
# fix the path to the trust anchor
784d94
sed -i 's|%%%%PREFIX%%%%|%{_prefix}|' dnsmasq.conf.example
784d94
784d94
#set dnsmasq user / group
784d94
sed -i 's|#user=|user=dnsmasq|' dnsmasq.conf.example
784d94
sed -i 's|#group=|group=dnsmasq|' dnsmasq.conf.example
784d94
#set default user /group in src/config.h
784d94
sed -i 's|#define CHUSER "nobody"|#define CHUSER "dnsmasq"|' src/config.h
784d94
sed -i 's|#define CHGRP "dip"|#define CHGRP "dnsmasq"|' src/config.h
784d94
784d94
# optional parts
784d94
sed -i 's|^COPTS[[:space:]]*=|\0 -DHAVE_DBUS -DHAVE_LIBIDN2 -DHAVE_DNSSEC|' Makefile
784d94
784d94
#enable /etc/dnsmasq.d fix bz 526703, ignore RPM backup files
784d94
cat << EOF >> dnsmasq.conf.example
784d94
784d94
# Include all files in /etc/dnsmasq.d except RPM backup files
784d94
conf-dir=/etc/dnsmasq.d,.rpmnew,.rpmsave,.rpmorig
784d94
EOF
784d94
784d94
784d94
%build
784d94
%make_build CFLAGS="$RPM_OPT_FLAGS" LDFLAGS="$RPM_LD_FLAGS"
784d94
%make_build -C contrib/lease-tools CFLAGS="$RPM_OPT_FLAGS" LDFLAGS="$RPM_LD_FLAGS"
784d94
784d94
784d94
%install
784d94
# normally i'd do 'make install'...it's a bit messy, though
784d94
mkdir -p $RPM_BUILD_ROOT%{_sbindir} \
784d94
        $RPM_BUILD_ROOT%{_mandir}/man8 \
784d94
        $RPM_BUILD_ROOT%{_var}/lib/dnsmasq \
784d94
        $RPM_BUILD_ROOT%{_sysconfdir}/dnsmasq.d \
784d94
        $RPM_BUILD_ROOT%{_sysconfdir}/dbus-1/system.d
784d94
install src/dnsmasq $RPM_BUILD_ROOT%{_sbindir}/dnsmasq
784d94
install dnsmasq.conf.example $RPM_BUILD_ROOT%{_sysconfdir}/dnsmasq.conf
784d94
install dbus/dnsmasq.conf $RPM_BUILD_ROOT%{_sysconfdir}/dbus-1/system.d/
784d94
install -m 644 man/dnsmasq.8 $RPM_BUILD_ROOT%{_mandir}/man8/
784d94
install -D trust-anchors.conf $RPM_BUILD_ROOT%{_datadir}/%{name}/trust-anchors.conf
784d94
784d94
# utils sub package
784d94
mkdir -p $RPM_BUILD_ROOT%{_bindir} \
784d94
         $RPM_BUILD_ROOT%{_mandir}/man1
784d94
install -m 755 contrib/lease-tools/dhcp_release $RPM_BUILD_ROOT%{_bindir}/dhcp_release
784d94
install -m 644 contrib/lease-tools/dhcp_release.1 $RPM_BUILD_ROOT%{_mandir}/man1/dhcp_release.1
784d94
install -m 755 contrib/lease-tools/dhcp_release6 $RPM_BUILD_ROOT%{_bindir}/dhcp_release6
784d94
install -m 644 contrib/lease-tools/dhcp_release6.1 $RPM_BUILD_ROOT%{_mandir}/man1/dhcp_release6.1
784d94
install -m 755 contrib/lease-tools/dhcp_lease_time $RPM_BUILD_ROOT%{_bindir}/dhcp_lease_time
784d94
install -m 644 contrib/lease-tools/dhcp_lease_time.1 $RPM_BUILD_ROOT%{_mandir}/man1/dhcp_lease_time.1
784d94
784d94
# Systemd
784d94
mkdir -p %{buildroot}%{_unitdir}
784d94
install -m644 %{SOURCE1} %{buildroot}%{_unitdir}
784d94
rm -rf %{buildroot}%{_initrddir}
784d94
784d94
#install systemd sysuser file
784d94
install -Dpm 644 %{SOURCE2} %{buildroot}%{_sysusersdir}/dnsmasq.conf
784d94
784d94
%pre
784d94
#precreate users so that rpm can install files owned by that user
d08ebc
%sysusers_create_package %{name} %{SOURCE2}
784d94
784d94
%post
784d94
#https://fedoraproject.org/wiki/Changes/SystemdSysusers
784d94
%systemd_post dnsmasq.service
784d94
784d94
%preun
784d94
%systemd_preun dnsmasq.service
784d94
784d94
%postun
784d94
%systemd_postun_with_restart dnsmasq.service
784d94
784d94
%files
784d94
%doc CHANGELOG FAQ doc.html setup.html dbus/DBus-interface
784d94
%license COPYING COPYING-v3
784d94
%defattr(0644,root,dnsmasq,0755)
784d94
%config(noreplace) %{_sysconfdir}/dnsmasq.conf
784d94
%dir %{_sysconfdir}/dnsmasq.d
784d94
%dir %{_var}/lib/dnsmasq
784d94
%defattr(-,root,root,-)
784d94
%config(noreplace) %{_sysconfdir}/dbus-1/system.d/dnsmasq.conf
784d94
%{_unitdir}/%{name}.service
784d94
%{_sbindir}/dnsmasq
784d94
%{_mandir}/man8/dnsmasq*
784d94
%dir %{_datadir}/%{name}
784d94
%{_datadir}/%{name}/trust-anchors.conf
784d94
%{_sysusersdir}/dnsmasq.conf
784d94
784d94
%files utils
784d94
%license COPYING COPYING-v3
784d94
%{_bindir}/dhcp_*
784d94
%{_mandir}/man1/dhcp_*
784d94
784d94
%changelog
d08ebc
* Wed Nov 25 2020 Petr Menšík <pemensik@redhat.com> - 2.79-15
ac771d
- Fix various issues in dnssec validation (CVE-2020-25681)
ac771d
- Accept responses only on correct sockets (CVE-2020-25684)
ac771d
- Use strong verification on queries (CVE-2020-25685)
ac771d
d08ebc
* Wed Aug 26 2020 Tomas Korbar <tkorbar@redhat.com> - 2.79-14
d08ebc
- Honor sysusers.d during installation (#1819684)
d08ebc
f854f6
* Tue May 05 2020 Petr Menšík <pemensik@redhat.com> - 2.79-13
3c5dfd
- Fix mixed address family reservations on DHCP (#1829448)
3c5dfd
f854f6
* Mon Mar 30 2020 Tomas Korbar <tkorbar@redhat.com> - 2.79-12
f854f6
- Minimize count of close syscalls on startup (#1816613)
f854f6
8e0267
* Mon Mar 02 2020 Petr Menšík <pemensik@redhat.com> - 2.79-11
8e0267
- Support multiple static leases for single mac on IPv6 (#1779187)
8e0267
8e0267
* Mon Feb 17 2020 Tomas Korbar <tkorbar@redhat.com> - 2.79-10
8e0267
- Fix memory leak in helper.c (#1795370)
8e0267
8e0267
* Tue Dec 10 2019 Tomas Korbar <tkorbar@redhat.com> - 2.79-9
8e0267
- Fix replies to non-recursive queries (#1700916)
8e0267
8e0267
* Mon Dec 09 2019 Tomas Korbar <tkorbar@redhat.com> - 2.79-8
8e0267
- Fix dhcp_lease_time (#1746411)
8e0267
8e0267
* Mon Dec 09 2019 Tomas Korbar <tkorbar@redhat.com> - 2.79-7
8e0267
- Fix TCP queries after interface recreation (#1728698)
8e0267
88706c
* Mon Sep 30 2019 Petr Menšík <pemensik@redhat.com> - 2.79-6
88706c
- Send dhcp_release even for addresses not on local network (#1749092)
88706c
2bab6f
* Thu Jul 18 2019 Petr Menšík <pemensik@redhat.com> - 2.79-5
2bab6f
- Fix Coverity detected issues (#1602477)
2bab6f
784d94
* Thu Jul 26 2018 Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 2.79-4
784d94
- Fix %%pre scriptlet (#1548050)
784d94
784d94
* Mon Jul 02 2018 Petr Menšík <pemensik@redhat.com> - 2.79-3
784d94
- Make dnsmasq leases writeable by root again (#1554390)
784d94
784d94
* Mon Jul 02 2018 Petr Menšík <pemensik@redhat.com> - 2.79-2
784d94
- Fix passing of dnssec enabled queries (#1597309)
784d94
784d94
* Thu Mar 15 2018 Petr Menšík <pemensik@redhat.com> - 2.79-1
784d94
- Rebase to 2.79
784d94
- Stop using nettle_hashes directly, use access function (#1548060)
784d94
- Do not break on cname with spaces (#1498667)
784d94
- Require nettle 3.4+
784d94
- Do not own sysusers.d directory, already depends on systemd providing it
784d94
784d94
* Fri Mar 02 2018 Petr Menšík <pemensik@redhat.com> - 2.78-7
784d94
- Emit warning with dnssec enabled on FIPS system (#1549507)
784d94
784d94
* Sun Feb 25 2018 Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 2.78-6
784d94
- Create user before installing files (#1548050)
784d94
784d94
* Fri Feb 23 2018 Petr Menšík <pemensik@redhat.com> - 2.78-5
784d94
- Create user first and then restart service
784d94
784d94
* Thu Feb 22 2018 Itamar Reis Peixoto <itamar@ispbrasil.com.br> - 2.78-4
784d94
- add gcc into buildrequires
784d94
- deliver an extra sysusers.d file to create dnsmasq user/group
784d94
- set CHUSER and CHGRP to dnsmasq in src/config.h
784d94
784d94
* Wed Feb 07 2018 Fedora Release Engineering <releng@fedoraproject.org> - 2.78-3
784d94
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
784d94
784d94
* Mon Jan 22 2018 Petr Menšík <pemensik@redhat.com> - 2.78-2
784d94
- DNSSEC fix for wildcard NSEC records (CVE-2017-15107)
784d94
784d94
* Tue Oct 03 2017 Petr Menšík <pemensik@redhat.com> - 2.78-1
784d94
- Rebase to 2.78
784d94
784d94
* Tue Oct 03 2017 Petr Menšík <pemensik@redhat.com> - 2.77-9
784d94
- More patches related to CVE-2017-14491
784d94
784d94
* Mon Oct 02 2017 Petr Menšík <pemensik@redhat.com> - 2.77-8
784d94
- Security fix, CVE-2017-14491, DNS heap buffer overflow
784d94
- Security fix, CVE-2017-14492, DHCPv6 RA heap overflow
784d94
- Security fix, CVE-2017-14493, DHCPv6 - Stack buffer overflow
784d94
- Security fix, CVE-2017-14494, Infoleak handling DHCPv6
784d94
- Security fix, CVE-2017-14496, Integer underflow in DNS response creation
784d94
- Security fix, CVE-2017-14495, OOM in DNS response creation
784d94
- Misc code cleanups arising from Google analysis
784d94
- Do not include stdio.h before dnsmasq.h
784d94
784d94
* Thu Sep 14 2017 Petr Menšík <pemensik@redhat.com> - 2.77-7
784d94
- Fix CVE-2017-13704
784d94
784d94
* Mon Aug 14 2017 Petr Menšík <pemensik@redhat.com> - 2.77-6
784d94
- Own the /usr/share/dnsmasq dir (#1480856)
784d94
784d94
* Wed Aug 02 2017 Fedora Release Engineering <releng@fedoraproject.org> - 2.77-5
784d94
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
784d94
784d94
* Wed Jul 26 2017 Fedora Release Engineering <releng@fedoraproject.org> - 2.77-4
784d94
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
784d94
784d94
* Wed Jun 07 2017 Petr Menšík <pemensik@redhat.com> - 2.77-3
784d94
- Update to 2.77
784d94
784d94
* Fri May 12 2017 Petr Menšík <pemensik@redhat.com> - 2.77-2.rc2
784d94
- Fix dhcp
784d94
784d94
* Thu May 11 2017 Petr Menšík <pemensik@redhat.com> - 2.77-1
784d94
- Update to 2.77rc2
784d94
784d94
* Thu May 11 2017 Petr Menšík <pemensik@redhat.com>
784d94
- Include dhcp_release6 tool and license in utils
784d94
- Support for IDN 2008 (#1449150)
784d94
784d94
* Fri Feb 10 2017 Fedora Release Engineering <releng@fedoraproject.org> - 2.76-3
784d94
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
784d94
784d94
* Wed Oct 19 2016 Pavel Å imerda <psimerda@redhat.com> - 2.76-2
784d94
- Resolves: #1373485 - dns not updated after sleep and resume laptop
784d94
784d94
* Fri Jul 15 2016 Pavel Å imerda <psimerda@redhat.com> - 2.76-1
784d94
- New version 2.76
784d94
784d94
* Wed Feb 03 2016 Fedora Release Engineering <releng@fedoraproject.org> - 2.75-4
784d94
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
784d94
784d94
* Mon Jan 25 2016 Tomas Hozza <thozza@redhat.com> - 2.75-3
784d94
- Fixed minor bug in dnsmasq.conf (#1295143)
784d94
784d94
* Fri Oct 02 2015 Pavel Å imerda <psimerda@redhat.com> - 2.75-2
784d94
- Resolves: #1239256 - install trust-anchors.conf
784d94
784d94
* Wed Aug 05 2015 Pavel Å imerda <psimerda@redhat.com> - 2.75-1
784d94
- new version 2.75
784d94
784d94
* Wed Jun 17 2015 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.72-4
784d94
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
784d94
784d94
* Mon Oct 06 2014 Nils Philippsen <nils@redhat.com> - 2.72-3
784d94
- don't include /etc/dnsmasq.d in triplicate, ignore RPM backup files instead
784d94
- package is dual-licensed GPL v2 or v3
784d94
- drop %%triggerun, we're not supposed to automatically migrate from SysV to
784d94
  systemd anyway
784d94
784d94
* Mon Oct 06 2014 Tomas Hozza <thozza@redhat.com> - 2.72-2
784d94
- Fix typo in default configuration (#1149459)
784d94
784d94
* Thu Sep 25 2014 Tomas Hozza <thozza@redhat.com> - 2.72-1
784d94
- Update to 2.72 stable
784d94
784d94
* Sat Aug 16 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.71-3
784d94
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
784d94
784d94
* Sat Jun 07 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.71-2
784d94
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
784d94
784d94
* Tue May 20 2014 Tomas Hozza <thozza@redhat.com> - 2.71-1
784d94
- Update to 2.71 stable
784d94
784d94
* Fri Apr 25 2014 Tomas Hozza <thozza@redhat.com> - 2.70-1
784d94
- Update to 2.70 stable
784d94
784d94
* Fri Apr 11 2014 Tomas Hozza <thozza@redhat.com> - 2.69-1
784d94
- Update to 2.69 stable
784d94
784d94
* Mon Mar 24 2014 Tomas Hozza <thozza@redhat.com> - 2.69-0.1.rc1
784d94
- Update to 2.69rc1
784d94
- enable DNSSEC implementation
784d94
784d94
* Mon Dec 09 2013 Tomas Hozza <thozza@redhat.com> - 2.68-1
784d94
- Update to 2.68 stable
784d94
784d94
* Tue Nov 26 2013 Tomas Hozza <thozza@redhat.com> - 2.68-0.1.rc3
784d94
- Update to 2.68rc3
784d94
784d94
* Fri Nov 01 2013 Tomas Hozza <thozza@redhat.com> - 2.67-1
784d94
- Update to 2.67 stable
784d94
- Include one post release upstream fix for CNAME
784d94
784d94
* Fri Oct 18 2013 Tomas Hozza <thozza@redhat.com> - 2.67-0.9.rc4
784d94
- update to 2.67rc4
784d94
784d94
* Wed Oct 02 2013 Tomas Hozza <thozza@redhat.com> - 2.67-0.8.rc2
784d94
- update to 2.67rc2
784d94
784d94
* Thu Sep 12 2013 Tomas Hozza <thozza@redhat.com> - 2.67-0.7.test13
784d94
- update to 2.67test13
784d94
- use .tar.xz upstream archives
784d94
784d94
* Thu Aug 15 2013 Tomas Hozza <thozza@redhat.com> - 2.67-0.6.test7
784d94
- Use SO_REUSEPORT and SO_REUSEADDR if possible for DHCPv4/6 (#981973)
784d94
784d94
* Mon Aug 12 2013 Tomas Hozza <thozza@redhat.com> - 2.67-0.5.test7
784d94
- Don't use SO_REUSEPORT on DHCPv4 socket to prevent conflicts with ISC DHCP (#981973)
784d94
784d94
* Sat Aug 03 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.67-0.4.test7
784d94
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
784d94
784d94
* Tue Jun 11 2013 Tomas Hozza <thozza@redhat.com> - 2.67-0.3.test7
784d94
- update to 2.67test7
784d94
- drop merged patch
784d94
- use _hardened_build macro instead of hardcoded flags
784d94
784d94
* Fri May 17 2013 Tomas Hozza <thozza@redhat.com> - 2.67-0.2.test4
784d94
- Fix failure to start with ENOTSOCK (#962874)
784d94
784d94
* Wed May 15 2013 Tomas Hozza <thozza@redhat.com> - 2.67-0.1.test4
784d94
- update to the latest testing release 2.67test4 (#962246)
784d94
- drop mergerd patches
784d94
784d94
* Tue Apr 30 2013 Tomas Hozza <thozza@redhat.com> - 2.66-5
784d94
- dnsmasq unit file cleanup
784d94
  - drop forking Type and PIDfile and rather start dnsmasq with "-k" option
784d94
  - drop After syslog.target as this is by default
784d94
784d94
* Thu Apr 25 2013 Tomas Hozza <thozza@redhat.com> - 2.66-4
784d94
- include several fixes from upstream repo:
784d94
  - Send TCP DNS messages in one packet
784d94
  - Fix crash on SERVFAIL when using --conntrack option
784d94
  - Fix regression in dhcp_lease_time utility
784d94
  - Man page typos fixes
784d94
  - Note that dhcp_lease_time and dhcp_release work only for IPv4
784d94
  - Fix for --dhcp-match option to work also with BOOTP protocol
784d94
784d94
* Sat Apr 20 2013 Tomas Hozza <thozza@redhat.com> - 2.66-3
784d94
- Use Full RELRO when linking the daemon
784d94
- compile the daemon with PIE
784d94
- include two fixes from upstream git repo
784d94
784d94
* Thu Apr 18 2013 Tomas Hozza <thozza@redhat.com> - 2.66-2
784d94
- New stable version dnsmasq-2.66
784d94
- Drop of merged patch
784d94
784d94
* Fri Apr 12 2013 Tomas Hozza <thozza@redhat.com> - 2.66-1.rc5
784d94
- Update to latest dnsmasq-2.66rc5
784d94
- Include fix for segfault when lease limit is reached
784d94
784d94
* Fri Mar 22 2013 Tomas Hozza <thozza@redhat.com> - 2.66-1.rc1
784d94
- Update to latest dnsmasq-2.66rc1
784d94
- Dropping unneeded patches
784d94
- Enable IDN support
784d94
784d94
* Fri Mar 15 2013 Tomas Hozza <thozza@redhat.com> - 2.65-5
784d94
- Allocate dhcp_buff-ers also if daemon->ra_contexts to prevent SIGSEGV (#920300)
784d94
784d94
* Thu Jan 31 2013 Tomas Hozza <thozza@redhat.com> - 2.65-4
784d94
- Handle locally-routed DNS Queries (#904940)
784d94
784d94
* Thu Jan 24 2013 Tomas Hozza <thozza@redhat.com> - 2.65-3
784d94
- build dnsmasq with $RPM_OPT_FLAGS, $RPM_LD_FLAGS explicitly (#903362) 
784d94
784d94
* Tue Jan 22 2013 Tomas Hozza <thozza@redhat.com> - 2.65-2
784d94
- Fix for CVE-2013-0198 (checking of TCP connection interfaces) (#901555)
784d94
784d94
* Sat Dec 15 2012 Tomas Hozza <thozza@redhat.com> - 2.65-1
784d94
- new version 2.65
784d94
784d94
* Wed Dec 05 2012 Tomas Hozza <thozza@redhat.com> - 2.64-1
784d94
- New version 2.64
784d94
- Merged patches dropped
784d94
784d94
* Tue Nov 20 2012 Tomas Hozza <thozza@redhat.com> - 2.63-4
784d94
- Remove EnvironmentFile from service file (#878343)
784d94
784d94
* Mon Nov 19 2012 Tomas Hozza <thozza@redhat.com> - 2.63-3
784d94
- dhcp6 support fixes (#867054)
784d94
- removed "-s $HOSTNAME" from .service file (#753656, #822797)
784d94
784d94
* Tue Oct 23 2012 Tomas Hozza <thozza@redhat.com> - 2.63-2
784d94
- Introduce new systemd-rpm macros in dnsmasq spec file (#850096)
784d94
784d94
* Thu Aug 23 2012 Douglas Schilling Landgraf <dougsland@redhat.com> - 2.63-1
784d94
- Use .tar.gz compression, in upstream site there is no .lzma anymore
784d94
- New version 2.63
784d94
784d94
* Sat Feb 11 2012 Pádraig Brady <P@draigBrady.com> - 2.59-5
784d94
- Compile DHCP lease management utils with RPM_OPT_FLAGS
784d94
784d94
* Thu Feb  9 2012 Pádraig Brady <P@draigBrady.com> - 2.59-4
784d94
- Include DHCP lease management utils in a subpackage
784d94
784d94
* Fri Jan 13 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.59-3
784d94
- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
784d94
784d94
* Fri Aug 26 2011 Douglas Schilling Landgraf <dougsland@redhat.com> - 2.59-2
784d94
- do not enable service by default
784d94
784d94
* Fri Aug 26 2011 Douglas Schilling Landgraf <dougsland@redhat.com> - 2.59-1
784d94
- New version 2.59
784d94
- Fix regression in 2.58 (IPv6 issue) - bz 744814
784d94
784d94
* Fri Aug 26 2011 Douglas Schilling Landgraf <dougsland@redhat.com> - 2.58-1
784d94
- Fixed License
784d94
- New version 2.58
784d94
784d94
* Mon Aug 08 2011 Patrick "Jima" Laughton <jima@fedoraproject.org> - 2.52-5
784d94
- Include systemd unit file
784d94
784d94
* Mon Aug 08 2011 Patrick "Jima" Laughton <jima@fedoraproject.org> - 2.52-3
784d94
- Applied Jóhann's patch, minor cleanup
784d94
784d94
* Tue Jul 26 2011 Jóhann B. Guðmundsson <johannbg@gmail.com> - 2.52-3
784d94
- Introduce systemd unit file, drop SysV support
784d94
784d94
* Tue Feb 08 2011 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.52-2
784d94
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
784d94
784d94
* Tue Jan 26 2010 Itamar Reis Peixoto <itamar@ispbrasil.com.br> - 2.52-1
784d94
- New Version 2.52
784d94
- fix condrestart() in initscript bz 547605
784d94
- fix sed to enable DBUS(the '*' need some escaping) bz 553161
784d94
784d94
* Sun Nov 22 2009 Itamar Reis Peixoto <itamar@ispbrasil.com.br> - 2.51-2
784d94
- fix bz 512664
784d94
784d94
* Sat Oct 17 2009 Itamar Reis Peixoto <itamar@ispbrasil.com.br> - 2.51-1
784d94
- move initscript from patch to a plain text file
784d94
- drop (dnsmasq-configuration.patch) and use sed instead
784d94
- enable /etc/dnsmasq.d fix bz 526703
784d94
- change requires to package name instead of file
784d94
- new version 2.51
784d94
784d94
* Mon Oct  5 2009 Mark McLoughlin <markmc@redhat.com> - 2.48-4
784d94
- Fix multiple TFTP server vulnerabilities (CVE-2009-2957, CVE-2009-2958)
784d94
784d94
* Wed Aug 12 2009 Ville Skyttä <ville.skytta@iki.fi> - 2.48-3
784d94
- Use lzma compressed upstream tarball.
784d94
784d94
* Fri Jul 24 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.48-2
784d94
- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild
784d94
784d94
* Wed Jun 10 2009 Patrick "Jima" Laughton <jima@beer.tclug.org> 2.48-1
784d94
- Bugfix/feature enhancement update
784d94
- Fixing BZ#494094
784d94
784d94
* Fri May 29 2009 Patrick "Jima" Laughton <jima@beer.tclug.org> 2.47-1
784d94
- Bugfix/feature enhancement update
784d94
784d94
* Tue Feb 24 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.46-2
784d94
- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild
784d94
784d94
* Mon Dec 29 2008 Matěj Cepl <mcepl@redhat.com> - 2.45-2
784d94
- rebuilt
784d94
784d94
* Mon Jul 21 2008 Patrick "Jima" Laughton <jima@beer.tclug.org> 2.45-1
784d94
- Upstream release (bugfixes)
784d94
784d94
* Wed Jul 16 2008 Patrick "Jima" Laughton <jima@beer.tclug.org> 2.43-2
784d94
- New upstream release, contains fixes for CVE-2008-1447/CERT VU#800113
784d94
- Dropped patch for newer glibc (merged upstream)
784d94
784d94
* Wed Feb 13 2008 Patrick "Jima" Laughton <jima@beer.tclug.org> 2.41-0.8
784d94
- Added upstream-authored patch for newer glibc (thanks Simon!)
784d94
784d94
* Wed Feb 13 2008 Patrick "Jima" Laughton <jima@beer.tclug.org> 2.41-0.7
784d94
- New upstream release
784d94
784d94
* Wed Jan 30 2008 Patrick "Jima" Laughton <jima@beer.tclug.org> 2.41-0.6.rc1
784d94
- Release candidate
784d94
- Happy Birthday Isaac!
784d94
784d94
* Wed Jan 23 2008 Patrick "Jima" Laughton <jima@beer.tclug.org> 2.41-0.5.test30
784d94
- Bugfix update
784d94
784d94
* Mon Dec 31 2007 Patrick "Jima" Laughton <jima@beer.tclug.org> 2.41-0.4.test26
784d94
- Bugfix/feature enhancement update
784d94
784d94
* Thu Dec 13 2007 Patrick "Jima" Laughton <jima@beer.tclug.org> 2.41-0.3.test24
784d94
- Upstream fix for fairly serious regression
784d94
784d94
* Tue Dec 04 2007 Patrick "Jima" Laughton <jima@beer.tclug.org> 2.41-0.2.test20
784d94
- New upstream test release
784d94
- Moving dnsmasq.leases to /var/lib/dnsmasq/ as per BZ#407901
784d94
- Ignoring dangerous-command-in-%%post rpmlint warning (as per above fix)
784d94
- Patch consolidation/cleanup
784d94
- Removed conditionals for Fedora <= 3 and Aurora 2.0
784d94
784d94
* Tue Sep 18 2007 Patrick "Jima" Laughton <jima@beer.tclug.org> 2.40-1
784d94
- Finalized upstream release
784d94
- Removing URLs from patch lines (CVS is the authoritative source)
784d94
- Added more magic to make spinning rc/test packages more seamless
784d94
784d94
* Sun Aug 26 2007 Patrick "Jima" Laughton <jima@beer.tclug.org> 2.40-0.1.rc2
784d94
- New upstream release candidate (feature-frozen), thanks Simon!
784d94
- License clarification
784d94
784d94
* Tue May 29 2007 Patrick "Jima" Laughton <jima@beer.tclug.org> 2.39-1
784d94
- New upstream version (bugfixes, enhancements)
784d94
784d94
* Mon Feb 12 2007 Patrick "Jima" Laughton <jima@beer.tclug.org> 2.38-1
784d94
- New upstream version with bugfix for potential hang
784d94
784d94
* Tue Feb 06 2007 Patrick "Jima" Laughton <jima@beer.tclug.org> 2.37-1
784d94
- New upstream version
784d94
784d94
* Wed Jan 24 2007 Patrick "Jima" Laughton <jima@beer.tclug.org> 2.36-1
784d94
- New upstream version
784d94
784d94
* Mon Nov 06 2006 Patrick "Jima" Laughton <jima@beer.tclug.org> 2.35-2
784d94
- Stop creating /etc/sysconfig on %%install
784d94
- Create /etc/dnsmasq.d on %%install
784d94
784d94
* Mon Nov 06 2006 Patrick "Jima" Laughton <jima@beer.tclug.org> 2.35-1
784d94
- Update to 2.35
784d94
- Removed UPGRADING_to_2.0 from %%doc as per upstream change
784d94
- Enabled conf-dir in default config as per RFE BZ#214220 (thanks Chris!)
784d94
- Added %%dir /etc/dnsmasq.d to %%files as per above RFE
784d94
784d94
* Tue Oct 24 2006 Patrick "Jima" Laughton <jima@beer.tclug.org> 2.34-2
784d94
- Fixed BZ#212005
784d94
- Moved %%postun scriptlet to %%post, where it made more sense
784d94
- Render scriptlets safer
784d94
- Minor cleanup for consistency
784d94
784d94
* Thu Oct 19 2006 Patrick "Jima" Laughton <jima@beer.tclug.org> 2.34-1
784d94
- Hardcoded version in patches, as I'm getting tired of updating them
784d94
- Update to 2.34
784d94
784d94
* Mon Aug 28 2006 Patrick "Jima" Laughton <jima@beer.tclug.org> 2.33-2
784d94
- Rebuild for FC6
784d94
784d94
* Tue Aug 15 2006 Patrick "Jima" Laughton <jima@beer.tclug.org> 2.33-1
784d94
- Update
784d94
784d94
* Sat Jul 22 2006 Patrick "Jima" Laughton <jima@beer.tclug.org> 2.32-3
784d94
- Added pkgconfig BuildReq due to reduced buildroot
784d94
784d94
* Thu Jul 20 2006 Patrick "Jima" Laughton <jima@beer.tclug.org> 2.32-2
784d94
- Forced update due to dbus version bump
784d94
784d94
* Mon Jun 12 2006 Patrick "Jima" Laughton <jima@beer.tclug.org> 2.32-1
784d94
- Update from upstream
784d94
- Patch from Dennis Gilmore fixed the conditionals to detect Aurora Linux
784d94
784d94
* Mon May  8 2006 Patrick "Jima" Laughton <jima@auroralinux.org> 2.31-1
784d94
- Removed dbus config patch (now provided upstream)
784d94
- Patched in init script (no longer provided upstream)
784d94
- Added DBus-interface to docs
784d94
784d94
* Tue May  2 2006 Patrick "Jima" Laughton <jima@auroralinux.org> 2.30-4.2
784d94
- More upstream-recommended cleanups :)
784d94
- Killed sysconfig file (provides unneeded functionality)
784d94
- Tweaked init script a little more
784d94
784d94
* Tue May  2 2006 Patrick "Jima" Laughton <jima@auroralinux.org> 2.30-4
784d94
- Moved options out of init script and into /etc/sysconfig/dnsmasq
784d94
- Disabled DHCP_LEASE in sysconfig file, fixing bug #190379
784d94
- Simon Kelley provided dbus/dnsmasq.conf, soon to be part of the tarball
784d94
784d94
* Thu Apr 27 2006 Patrick "Jima" Laughton <jima@auroralinux.org> 2.30-3
784d94
- Un-enabled HAVE_ISC_READER, a hack to enable a deprecated feature (request)
784d94
- Split initscript & enable-dbus patches, conditionalized dbus for FC3
784d94
- Tweaked name field in changelog entries (trying to be consistent)
784d94
784d94
* Mon Apr 24 2006 Patrick "Jima" Laughton <jima@auroralinux.org> 2.30-2
784d94
- Disabled stripping of binary while installing (oops)
784d94
- Enabled HAVE_ISC_READER/HAVE_DBUS via patch
784d94
- Added BuildReq for dbus-devel
784d94
784d94
* Mon Apr 24 2006 Patrick "Jima" Laughton <jima@auroralinux.org> 2.30-1
784d94
- Initial Fedora Extras RPM