Blame SPECS/dnsmasq.spec

6484a4
%define testrelease 0
6484a4
%define releasecandidate 0
6484a4
%if 0%{testrelease}
6484a4
  %define extrapath test-releases/
6484a4
  %define extraversion test%{testrelease}
6484a4
%endif
6484a4
%if 0%{releasecandidate}
6484a4
  %define extrapath release-candidates/
6484a4
  %define extraversion rc%{releasecandidate}
6484a4
%endif
6484a4
6484a4
%define _hardened_build 1
6484a4
6484a4
Name:           dnsmasq
6484a4
Version:        2.79
ed3ca9
Release:        15%{?extraversion:.%{extraversion}}%{?dist}
6484a4
Summary:        A lightweight DHCP/caching DNS server
6484a4
6484a4
License:        GPLv2 or GPLv3
6484a4
URL:            http://www.thekelleys.org.uk/dnsmasq/
6484a4
Source0:        http://www.thekelleys.org.uk/dnsmasq/%{?extrapath}%{name}-%{version}%{?extraversion}.tar.xz
6484a4
Source1:        %{name}.service
6484a4
Source2:        dnsmasq-systemd-sysusers.conf
6484a4
6484a4
# https://bugzilla.redhat.com/show_bug.cgi?id=1495409
6484a4
Patch1:         dnsmasq-2.77-underflow.patch
6484a4
Patch3:         dnsmasq-2.78-fips.patch
6484a4
Patch4:         dnsmasq-2.80-dnssec.patch
eabdae
Patch5:         dnsmasq-2.79-rh1602477.patch
eabdae
# Few changes not yet in upstream
eabdae
Patch6:         dnsmasq-2.79-rh1602477-2.patch
eabdae
# commit 60ac10d8d86e6f95ab0f06abe6c42596adcedcb8
eabdae
Patch7:         dnsmasq-2.76-rh1752569.patch
eabdae
# Report failure when no release would be sent
eabdae
Patch8:         dnsmasq-2.79-rh1749092-fail.patch
eabdae
Patch9:         dnsmasq-2.76-rh1728698-1.patch
eabdae
Patch10:        dnsmasq-2.79-rh1728698-2.patch
eabdae
Patch11:        dnsmasq-2.76-rh1728698-3.patch
eabdae
Patch12:        dnsmasq-2.79-rh1728698-4.patch
eabdae
Patch13:        dnsmasq-2.79-rh1746411.patch
eabdae
Patch14:        dnsmasq-2.79-rh1700916.patch
c1823a
Patch15:        dnsmasq-2.80-rh1795370.patch
c1823a
# https://bugzilla.redhat.com/show_bug.cgi?id=1779187
c1823a
# http://thekelleys.org.uk/gitweb/?p=dnsmasq.git;a=commit;h=97f876b64c22b2b18412e2e3d8506ee33e42db7c
c1823a
Patch16:        dnsmasq-2.80-unaligned-addresses-in-DHCPv6-packet.patch
c1823a
# http://thekelleys.org.uk/gitweb/?p=dnsmasq.git;a=commit;h=f064188032a829efdcf3988b24ac795ff52785ec
c1823a
# http://thekelleys.org.uk/gitweb/?p=dnsmasq.git;a=commit;h=137286e9baecf6a3ba97722ef1b49c851b531810
c1823a
# http://thekelleys.org.uk/gitweb/?p=dnsmasq.git;a=commit;h=79aba0f10ad0157fb4f48afbbcb03f094caff97a
c1823a
Patch17:        dnsmasq-2.81-prefix-ranges-or-list-of-ipv6-addresses.patch
c1823a
# http://thekelleys.org.uk/gitweb/?p=dnsmasq.git;a=commit;h=52ec7836139e7a11374971905e5ac0d2d02e32c0
c1823a
Patch18:        dnsmasq-2.81-tag-filtering-of-dhcp-host-directives.patch
c1823a
Patch19:        dnsmasq-2.81-correct-range-check-of-dhcp-host-prefix.patch
c1823a
Patch20:        dnsmasq-2.81-optimize-fds-close.patch
c1823a
Patch21:        dnsmasq-2.81-rh1829448.patch
ed3ca9
Patch22:        dnsmasq-2.79-CVE-2020-25681.patch
ed3ca9
Patch23:        dnsmasq-2.79-CVE-2020-25684.patch
ed3ca9
Patch24:        dnsmasq-2.79-CVE-2020-25685.patch
ed3ca9
Patch25:        dnsmasq-2.79-CVE-2020-25686.patch
ed3ca9
Patch26:        dnsmasq-2.79-CVE-2020-25686-2.patch
6484a4
6484a4
# This is workaround to nettle bug #1549190
6484a4
# https://bugzilla.redhat.com/show_bug.cgi?id=1549190
6484a4
Requires:       nettle >= 3.4
6484a4
6484a4
BuildRequires:  dbus-devel
6484a4
BuildRequires:  pkgconfig
6484a4
BuildRequires:  libidn2-devel
6484a4
BuildRequires:  nettle-devel
6484a4
Buildrequires:  gcc
6484a4
6484a4
BuildRequires:  systemd
6484a4
%{?systemd_requires}
6484a4
6484a4
%description
6484a4
Dnsmasq is lightweight, easy to configure DNS forwarder and DHCP server.
6484a4
It is designed to provide DNS and, optionally, DHCP, to a small network.
6484a4
It can serve the names of local machines which are not in the global
6484a4
DNS. The DHCP server integrates with the DNS server and allows machines
6484a4
with DHCP-allocated addresses to appear in the DNS with names configured
6484a4
either in each host or in a central configuration file. Dnsmasq supports
6484a4
static and dynamic DHCP leases and BOOTP for network booting of diskless
6484a4
machines.
6484a4
6484a4
%package        utils
6484a4
Summary:        Utilities for manipulating DHCP server leases
6484a4
6484a4
%description    utils
6484a4
Utilities that use the standard DHCP protocol to query/remove a DHCP
6484a4
server's leases.
6484a4
6484a4
6484a4
%prep
6484a4
%setup -q -n %{name}-%{version}%{?extraversion}
6484a4
%patch1 -p1 -b .underflow
6484a4
%patch3 -p1 -b .fips
6484a4
%patch4 -p1 -b .dnssec
eabdae
%patch5 -p1 -b .rh1602477
eabdae
%patch6 -p1 -b .rh1602477-2
eabdae
%patch7 -p1 -b .rh1752569
eabdae
%patch8 -p1 -b .rh1752569
eabdae
%patch9 -p1 -b .rh1728698-1
eabdae
%patch10 -p1 -b .rh1728698-2
eabdae
%patch11 -p1 -b .rh1728698-3
eabdae
%patch12 -p1 -b .rh1728698-4
eabdae
%patch13 -p1 -b .rh1746411
eabdae
%patch14 -p1 -b .rh1700916
c1823a
%patch15 -p1 -b .rh1795370
c1823a
%patch16 -p1 -b .rh1779187-1
c1823a
%patch17 -p1 -b .rh1779187-2
c1823a
%patch18 -p1 -b .rh1779187-3
c1823a
%patch19 -p1 -b .rh1779187-4
c1823a
%patch20 -p1 -b .rh1816613
c1823a
%patch21 -p1 -b .rh1829448
ed3ca9
%patch22 -p1 -b .CVE-2020-25681
ed3ca9
%patch23 -p1 -b .CVE-2020-25684
ed3ca9
%patch24 -p1 -b .CVE-2020-25685
ed3ca9
%patch25 -p1 -b .CVE-2020-25686
ed3ca9
%patch26 -p1 -b .CVE-2020-25686-2
6484a4
6484a4
# use /var/lib/dnsmasq instead of /var/lib/misc
6484a4
for file in dnsmasq.conf.example man/dnsmasq.8 man/es/dnsmasq.8 src/config.h; do
6484a4
    sed -i 's|/var/lib/misc/dnsmasq.leases|/var/lib/dnsmasq/dnsmasq.leases|g' "$file"
6484a4
done
6484a4
6484a4
# fix the path to the trust anchor
6484a4
sed -i 's|%%%%PREFIX%%%%|%{_prefix}|' dnsmasq.conf.example
6484a4
6484a4
#set dnsmasq user / group
6484a4
sed -i 's|#user=|user=dnsmasq|' dnsmasq.conf.example
6484a4
sed -i 's|#group=|group=dnsmasq|' dnsmasq.conf.example
6484a4
#set default user /group in src/config.h
6484a4
sed -i 's|#define CHUSER "nobody"|#define CHUSER "dnsmasq"|' src/config.h
6484a4
sed -i 's|#define CHGRP "dip"|#define CHGRP "dnsmasq"|' src/config.h
6484a4
6484a4
# optional parts
6484a4
sed -i 's|^COPTS[[:space:]]*=|\0 -DHAVE_DBUS -DHAVE_LIBIDN2 -DHAVE_DNSSEC|' Makefile
6484a4
6484a4
#enable /etc/dnsmasq.d fix bz 526703, ignore RPM backup files
6484a4
cat << EOF >> dnsmasq.conf.example
6484a4
6484a4
# Include all files in /etc/dnsmasq.d except RPM backup files
6484a4
conf-dir=/etc/dnsmasq.d,.rpmnew,.rpmsave,.rpmorig
6484a4
EOF
6484a4
6484a4
6484a4
%build
6484a4
%make_build CFLAGS="$RPM_OPT_FLAGS" LDFLAGS="$RPM_LD_FLAGS"
6484a4
%make_build -C contrib/lease-tools CFLAGS="$RPM_OPT_FLAGS" LDFLAGS="$RPM_LD_FLAGS"
6484a4
6484a4
6484a4
%install
6484a4
# normally i'd do 'make install'...it's a bit messy, though
6484a4
mkdir -p $RPM_BUILD_ROOT%{_sbindir} \
6484a4
        $RPM_BUILD_ROOT%{_mandir}/man8 \
6484a4
        $RPM_BUILD_ROOT%{_var}/lib/dnsmasq \
6484a4
        $RPM_BUILD_ROOT%{_sysconfdir}/dnsmasq.d \
6484a4
        $RPM_BUILD_ROOT%{_sysconfdir}/dbus-1/system.d
6484a4
install src/dnsmasq $RPM_BUILD_ROOT%{_sbindir}/dnsmasq
6484a4
install dnsmasq.conf.example $RPM_BUILD_ROOT%{_sysconfdir}/dnsmasq.conf
6484a4
install dbus/dnsmasq.conf $RPM_BUILD_ROOT%{_sysconfdir}/dbus-1/system.d/
6484a4
install -m 644 man/dnsmasq.8 $RPM_BUILD_ROOT%{_mandir}/man8/
6484a4
install -D trust-anchors.conf $RPM_BUILD_ROOT%{_datadir}/%{name}/trust-anchors.conf
6484a4
6484a4
# utils sub package
6484a4
mkdir -p $RPM_BUILD_ROOT%{_bindir} \
6484a4
         $RPM_BUILD_ROOT%{_mandir}/man1
6484a4
install -m 755 contrib/lease-tools/dhcp_release $RPM_BUILD_ROOT%{_bindir}/dhcp_release
6484a4
install -m 644 contrib/lease-tools/dhcp_release.1 $RPM_BUILD_ROOT%{_mandir}/man1/dhcp_release.1
6484a4
install -m 755 contrib/lease-tools/dhcp_release6 $RPM_BUILD_ROOT%{_bindir}/dhcp_release6
6484a4
install -m 644 contrib/lease-tools/dhcp_release6.1 $RPM_BUILD_ROOT%{_mandir}/man1/dhcp_release6.1
6484a4
install -m 755 contrib/lease-tools/dhcp_lease_time $RPM_BUILD_ROOT%{_bindir}/dhcp_lease_time
6484a4
install -m 644 contrib/lease-tools/dhcp_lease_time.1 $RPM_BUILD_ROOT%{_mandir}/man1/dhcp_lease_time.1
6484a4
6484a4
# Systemd
6484a4
mkdir -p %{buildroot}%{_unitdir}
6484a4
install -m644 %{SOURCE1} %{buildroot}%{_unitdir}
6484a4
rm -rf %{buildroot}%{_initrddir}
6484a4
6484a4
#install systemd sysuser file
6484a4
install -Dpm 644 %{SOURCE2} %{buildroot}%{_sysusersdir}/dnsmasq.conf
6484a4
6484a4
%pre
6484a4
#precreate users so that rpm can install files owned by that user
ed3ca9
%sysusers_create_package %{name} %{SOURCE2}
6484a4
6484a4
%post
6484a4
#https://fedoraproject.org/wiki/Changes/SystemdSysusers
6484a4
%systemd_post dnsmasq.service
6484a4
6484a4
%preun
6484a4
%systemd_preun dnsmasq.service
6484a4
6484a4
%postun
6484a4
%systemd_postun_with_restart dnsmasq.service
6484a4
6484a4
%files
6484a4
%doc CHANGELOG FAQ doc.html setup.html dbus/DBus-interface
6484a4
%license COPYING COPYING-v3
6484a4
%defattr(0644,root,dnsmasq,0755)
6484a4
%config(noreplace) %{_sysconfdir}/dnsmasq.conf
6484a4
%dir %{_sysconfdir}/dnsmasq.d
6484a4
%dir %{_var}/lib/dnsmasq
6484a4
%defattr(-,root,root,-)
6484a4
%config(noreplace) %{_sysconfdir}/dbus-1/system.d/dnsmasq.conf
6484a4
%{_unitdir}/%{name}.service
6484a4
%{_sbindir}/dnsmasq
6484a4
%{_mandir}/man8/dnsmasq*
6484a4
%dir %{_datadir}/%{name}
6484a4
%{_datadir}/%{name}/trust-anchors.conf
6484a4
%{_sysusersdir}/dnsmasq.conf
6484a4
6484a4
%files utils
6484a4
%license COPYING COPYING-v3
6484a4
%{_bindir}/dhcp_*
6484a4
%{_mandir}/man1/dhcp_*
6484a4
6484a4
%changelog
ed3ca9
* Wed Nov 25 2020 Petr Menšík <pemensik@redhat.com> - 2.79-15
ed3ca9
- Fix various issues in dnssec validation (CVE-2020-25681)
ed3ca9
- Accept responses only on correct sockets (CVE-2020-25684)
ed3ca9
- Use strong verification on queries (CVE-2020-25685)
ed3ca9
ed3ca9
* Wed Aug 26 2020 Tomas Korbar <tkorbar@redhat.com> - 2.79-14
ed3ca9
- Honor sysusers.d during installation (#1819684)
ed3ca9
c1823a
* Tue May 05 2020 Petr Menšík <pemensik@redhat.com> - 2.79-13
c1823a
- Fix mixed address family reservations on DHCP (#1829448)
c1823a
c1823a
* Mon Mar 30 2020 Tomas Korbar <tkorbar@redhat.com> - 2.79-12
c1823a
- Minimize count of close syscalls on startup (#1816613)
c1823a
c1823a
* Mon Mar 02 2020 Petr Menšík <pemensik@redhat.com> - 2.79-11
c1823a
- Support multiple static leases for single mac on IPv6 (#1779187)
c1823a
c1823a
* Mon Feb 17 2020 Tomas Korbar <tkorbar@redhat.com> - 2.79-10
c1823a
- Fix memory leak in helper.c (#1795370)
c1823a
eabdae
* Tue Dec 10 2019 Tomas Korbar <tkorbar@redhat.com> - 2.79-9
eabdae
- Fix replies to non-recursive queries (#1700916)
eabdae
eabdae
* Mon Dec 09 2019 Tomas Korbar <tkorbar@redhat.com> - 2.79-8
eabdae
- Fix dhcp_lease_time (#1746411)
eabdae
eabdae
* Mon Dec 09 2019 Tomas Korbar <tkorbar@redhat.com> - 2.79-7
eabdae
- Fix TCP queries after interface recreation (#1728698)
eabdae
eabdae
* Mon Sep 30 2019 Petr Menšík <pemensik@redhat.com> - 2.79-6
eabdae
- Send dhcp_release even for addresses not on local network (#1749092)
eabdae
eabdae
* Thu Jul 18 2019 Petr Menšík <pemensik@redhat.com> - 2.79-5
eabdae
- Fix Coverity detected issues (#1602477)
eabdae
6484a4
* Thu Jul 26 2018 Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 2.79-4
6484a4
- Fix %%pre scriptlet (#1548050)
6484a4
6484a4
* Mon Jul 02 2018 Petr Menšík <pemensik@redhat.com> - 2.79-3
6484a4
- Make dnsmasq leases writeable by root again (#1554390)
6484a4
6484a4
* Mon Jul 02 2018 Petr Menšík <pemensik@redhat.com> - 2.79-2
6484a4
- Fix passing of dnssec enabled queries (#1597309)
6484a4
6484a4
* Thu Mar 15 2018 Petr Menšík <pemensik@redhat.com> - 2.79-1
6484a4
- Rebase to 2.79
6484a4
- Stop using nettle_hashes directly, use access function (#1548060)
6484a4
- Do not break on cname with spaces (#1498667)
6484a4
- Require nettle 3.4+
6484a4
- Do not own sysusers.d directory, already depends on systemd providing it
6484a4
6484a4
* Fri Mar 02 2018 Petr Menšík <pemensik@redhat.com> - 2.78-7
6484a4
- Emit warning with dnssec enabled on FIPS system (#1549507)
6484a4
6484a4
* Sun Feb 25 2018 Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 2.78-6
6484a4
- Create user before installing files (#1548050)
6484a4
6484a4
* Fri Feb 23 2018 Petr Menšík <pemensik@redhat.com> - 2.78-5
6484a4
- Create user first and then restart service
6484a4
6484a4
* Thu Feb 22 2018 Itamar Reis Peixoto <itamar@ispbrasil.com.br> - 2.78-4
6484a4
- add gcc into buildrequires
6484a4
- deliver an extra sysusers.d file to create dnsmasq user/group
6484a4
- set CHUSER and CHGRP to dnsmasq in src/config.h
6484a4
6484a4
* Wed Feb 07 2018 Fedora Release Engineering <releng@fedoraproject.org> - 2.78-3
6484a4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
6484a4
6484a4
* Mon Jan 22 2018 Petr Menšík <pemensik@redhat.com> - 2.78-2
6484a4
- DNSSEC fix for wildcard NSEC records (CVE-2017-15107)
6484a4
6484a4
* Tue Oct 03 2017 Petr Menšík <pemensik@redhat.com> - 2.78-1
6484a4
- Rebase to 2.78
6484a4
6484a4
* Tue Oct 03 2017 Petr Menšík <pemensik@redhat.com> - 2.77-9
6484a4
- More patches related to CVE-2017-14491
6484a4
6484a4
* Mon Oct 02 2017 Petr Menšík <pemensik@redhat.com> - 2.77-8
6484a4
- Security fix, CVE-2017-14491, DNS heap buffer overflow
6484a4
- Security fix, CVE-2017-14492, DHCPv6 RA heap overflow
6484a4
- Security fix, CVE-2017-14493, DHCPv6 - Stack buffer overflow
6484a4
- Security fix, CVE-2017-14494, Infoleak handling DHCPv6
6484a4
- Security fix, CVE-2017-14496, Integer underflow in DNS response creation
6484a4
- Security fix, CVE-2017-14495, OOM in DNS response creation
6484a4
- Misc code cleanups arising from Google analysis
6484a4
- Do not include stdio.h before dnsmasq.h
6484a4
6484a4
* Thu Sep 14 2017 Petr Menšík <pemensik@redhat.com> - 2.77-7
6484a4
- Fix CVE-2017-13704
6484a4
6484a4
* Mon Aug 14 2017 Petr Menšík <pemensik@redhat.com> - 2.77-6
6484a4
- Own the /usr/share/dnsmasq dir (#1480856)
6484a4
6484a4
* Wed Aug 02 2017 Fedora Release Engineering <releng@fedoraproject.org> - 2.77-5
6484a4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
6484a4
6484a4
* Wed Jul 26 2017 Fedora Release Engineering <releng@fedoraproject.org> - 2.77-4
6484a4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
6484a4
6484a4
* Wed Jun 07 2017 Petr Menšík <pemensik@redhat.com> - 2.77-3
6484a4
- Update to 2.77
6484a4
6484a4
* Fri May 12 2017 Petr Menšík <pemensik@redhat.com> - 2.77-2.rc2
6484a4
- Fix dhcp
6484a4
6484a4
* Thu May 11 2017 Petr Menšík <pemensik@redhat.com> - 2.77-1
6484a4
- Update to 2.77rc2
6484a4
6484a4
* Thu May 11 2017 Petr Menšík <pemensik@redhat.com>
6484a4
- Include dhcp_release6 tool and license in utils
6484a4
- Support for IDN 2008 (#1449150)
6484a4
6484a4
* Fri Feb 10 2017 Fedora Release Engineering <releng@fedoraproject.org> - 2.76-3
6484a4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
6484a4
6484a4
* Wed Oct 19 2016 Pavel Å imerda <psimerda@redhat.com> - 2.76-2
6484a4
- Resolves: #1373485 - dns not updated after sleep and resume laptop
6484a4
6484a4
* Fri Jul 15 2016 Pavel Å imerda <psimerda@redhat.com> - 2.76-1
6484a4
- New version 2.76
6484a4
6484a4
* Wed Feb 03 2016 Fedora Release Engineering <releng@fedoraproject.org> - 2.75-4
6484a4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
6484a4
6484a4
* Mon Jan 25 2016 Tomas Hozza <thozza@redhat.com> - 2.75-3
6484a4
- Fixed minor bug in dnsmasq.conf (#1295143)
6484a4
6484a4
* Fri Oct 02 2015 Pavel Å imerda <psimerda@redhat.com> - 2.75-2
6484a4
- Resolves: #1239256 - install trust-anchors.conf
6484a4
6484a4
* Wed Aug 05 2015 Pavel Å imerda <psimerda@redhat.com> - 2.75-1
6484a4
- new version 2.75
6484a4
6484a4
* Wed Jun 17 2015 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.72-4
6484a4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
6484a4
6484a4
* Mon Oct 06 2014 Nils Philippsen <nils@redhat.com> - 2.72-3
6484a4
- don't include /etc/dnsmasq.d in triplicate, ignore RPM backup files instead
6484a4
- package is dual-licensed GPL v2 or v3
6484a4
- drop %%triggerun, we're not supposed to automatically migrate from SysV to
6484a4
  systemd anyway
6484a4
6484a4
* Mon Oct 06 2014 Tomas Hozza <thozza@redhat.com> - 2.72-2
6484a4
- Fix typo in default configuration (#1149459)
6484a4
6484a4
* Thu Sep 25 2014 Tomas Hozza <thozza@redhat.com> - 2.72-1
6484a4
- Update to 2.72 stable
6484a4
6484a4
* Sat Aug 16 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.71-3
6484a4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
6484a4
6484a4
* Sat Jun 07 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.71-2
6484a4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
6484a4
6484a4
* Tue May 20 2014 Tomas Hozza <thozza@redhat.com> - 2.71-1
6484a4
- Update to 2.71 stable
6484a4
6484a4
* Fri Apr 25 2014 Tomas Hozza <thozza@redhat.com> - 2.70-1
6484a4
- Update to 2.70 stable
6484a4
6484a4
* Fri Apr 11 2014 Tomas Hozza <thozza@redhat.com> - 2.69-1
6484a4
- Update to 2.69 stable
6484a4
6484a4
* Mon Mar 24 2014 Tomas Hozza <thozza@redhat.com> - 2.69-0.1.rc1
6484a4
- Update to 2.69rc1
6484a4
- enable DNSSEC implementation
6484a4
6484a4
* Mon Dec 09 2013 Tomas Hozza <thozza@redhat.com> - 2.68-1
6484a4
- Update to 2.68 stable
6484a4
6484a4
* Tue Nov 26 2013 Tomas Hozza <thozza@redhat.com> - 2.68-0.1.rc3
6484a4
- Update to 2.68rc3
6484a4
6484a4
* Fri Nov 01 2013 Tomas Hozza <thozza@redhat.com> - 2.67-1
6484a4
- Update to 2.67 stable
6484a4
- Include one post release upstream fix for CNAME
6484a4
6484a4
* Fri Oct 18 2013 Tomas Hozza <thozza@redhat.com> - 2.67-0.9.rc4
6484a4
- update to 2.67rc4
6484a4
6484a4
* Wed Oct 02 2013 Tomas Hozza <thozza@redhat.com> - 2.67-0.8.rc2
6484a4
- update to 2.67rc2
6484a4
6484a4
* Thu Sep 12 2013 Tomas Hozza <thozza@redhat.com> - 2.67-0.7.test13
6484a4
- update to 2.67test13
6484a4
- use .tar.xz upstream archives
6484a4
6484a4
* Thu Aug 15 2013 Tomas Hozza <thozza@redhat.com> - 2.67-0.6.test7
6484a4
- Use SO_REUSEPORT and SO_REUSEADDR if possible for DHCPv4/6 (#981973)
6484a4
6484a4
* Mon Aug 12 2013 Tomas Hozza <thozza@redhat.com> - 2.67-0.5.test7
6484a4
- Don't use SO_REUSEPORT on DHCPv4 socket to prevent conflicts with ISC DHCP (#981973)
6484a4
6484a4
* Sat Aug 03 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.67-0.4.test7
6484a4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
6484a4
6484a4
* Tue Jun 11 2013 Tomas Hozza <thozza@redhat.com> - 2.67-0.3.test7
6484a4
- update to 2.67test7
6484a4
- drop merged patch
6484a4
- use _hardened_build macro instead of hardcoded flags
6484a4
6484a4
* Fri May 17 2013 Tomas Hozza <thozza@redhat.com> - 2.67-0.2.test4
6484a4
- Fix failure to start with ENOTSOCK (#962874)
6484a4
6484a4
* Wed May 15 2013 Tomas Hozza <thozza@redhat.com> - 2.67-0.1.test4
6484a4
- update to the latest testing release 2.67test4 (#962246)
6484a4
- drop mergerd patches
6484a4
6484a4
* Tue Apr 30 2013 Tomas Hozza <thozza@redhat.com> - 2.66-5
6484a4
- dnsmasq unit file cleanup
6484a4
  - drop forking Type and PIDfile and rather start dnsmasq with "-k" option
6484a4
  - drop After syslog.target as this is by default
6484a4
6484a4
* Thu Apr 25 2013 Tomas Hozza <thozza@redhat.com> - 2.66-4
6484a4
- include several fixes from upstream repo:
6484a4
  - Send TCP DNS messages in one packet
6484a4
  - Fix crash on SERVFAIL when using --conntrack option
6484a4
  - Fix regression in dhcp_lease_time utility
6484a4
  - Man page typos fixes
6484a4
  - Note that dhcp_lease_time and dhcp_release work only for IPv4
6484a4
  - Fix for --dhcp-match option to work also with BOOTP protocol
6484a4
6484a4
* Sat Apr 20 2013 Tomas Hozza <thozza@redhat.com> - 2.66-3
6484a4
- Use Full RELRO when linking the daemon
6484a4
- compile the daemon with PIE
6484a4
- include two fixes from upstream git repo
6484a4
6484a4
* Thu Apr 18 2013 Tomas Hozza <thozza@redhat.com> - 2.66-2
6484a4
- New stable version dnsmasq-2.66
6484a4
- Drop of merged patch
6484a4
6484a4
* Fri Apr 12 2013 Tomas Hozza <thozza@redhat.com> - 2.66-1.rc5
6484a4
- Update to latest dnsmasq-2.66rc5
6484a4
- Include fix for segfault when lease limit is reached
6484a4
6484a4
* Fri Mar 22 2013 Tomas Hozza <thozza@redhat.com> - 2.66-1.rc1
6484a4
- Update to latest dnsmasq-2.66rc1
6484a4
- Dropping unneeded patches
6484a4
- Enable IDN support
6484a4
6484a4
* Fri Mar 15 2013 Tomas Hozza <thozza@redhat.com> - 2.65-5
6484a4
- Allocate dhcp_buff-ers also if daemon->ra_contexts to prevent SIGSEGV (#920300)
6484a4
6484a4
* Thu Jan 31 2013 Tomas Hozza <thozza@redhat.com> - 2.65-4
6484a4
- Handle locally-routed DNS Queries (#904940)
6484a4
6484a4
* Thu Jan 24 2013 Tomas Hozza <thozza@redhat.com> - 2.65-3
6484a4
- build dnsmasq with $RPM_OPT_FLAGS, $RPM_LD_FLAGS explicitly (#903362) 
6484a4
6484a4
* Tue Jan 22 2013 Tomas Hozza <thozza@redhat.com> - 2.65-2
6484a4
- Fix for CVE-2013-0198 (checking of TCP connection interfaces) (#901555)
6484a4
6484a4
* Sat Dec 15 2012 Tomas Hozza <thozza@redhat.com> - 2.65-1
6484a4
- new version 2.65
6484a4
6484a4
* Wed Dec 05 2012 Tomas Hozza <thozza@redhat.com> - 2.64-1
6484a4
- New version 2.64
6484a4
- Merged patches dropped
6484a4
6484a4
* Tue Nov 20 2012 Tomas Hozza <thozza@redhat.com> - 2.63-4
6484a4
- Remove EnvironmentFile from service file (#878343)
6484a4
6484a4
* Mon Nov 19 2012 Tomas Hozza <thozza@redhat.com> - 2.63-3
6484a4
- dhcp6 support fixes (#867054)
6484a4
- removed "-s $HOSTNAME" from .service file (#753656, #822797)
6484a4
6484a4
* Tue Oct 23 2012 Tomas Hozza <thozza@redhat.com> - 2.63-2
6484a4
- Introduce new systemd-rpm macros in dnsmasq spec file (#850096)
6484a4
6484a4
* Thu Aug 23 2012 Douglas Schilling Landgraf <dougsland@redhat.com> - 2.63-1
6484a4
- Use .tar.gz compression, in upstream site there is no .lzma anymore
6484a4
- New version 2.63
6484a4
6484a4
* Sat Feb 11 2012 Pádraig Brady <P@draigBrady.com> - 2.59-5
6484a4
- Compile DHCP lease management utils with RPM_OPT_FLAGS
6484a4
6484a4
* Thu Feb  9 2012 Pádraig Brady <P@draigBrady.com> - 2.59-4
6484a4
- Include DHCP lease management utils in a subpackage
6484a4
6484a4
* Fri Jan 13 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.59-3
6484a4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
6484a4
6484a4
* Fri Aug 26 2011 Douglas Schilling Landgraf <dougsland@redhat.com> - 2.59-2
6484a4
- do not enable service by default
6484a4
6484a4
* Fri Aug 26 2011 Douglas Schilling Landgraf <dougsland@redhat.com> - 2.59-1
6484a4
- New version 2.59
6484a4
- Fix regression in 2.58 (IPv6 issue) - bz 744814
6484a4
6484a4
* Fri Aug 26 2011 Douglas Schilling Landgraf <dougsland@redhat.com> - 2.58-1
6484a4
- Fixed License
6484a4
- New version 2.58
6484a4
6484a4
* Mon Aug 08 2011 Patrick "Jima" Laughton <jima@fedoraproject.org> - 2.52-5
6484a4
- Include systemd unit file
6484a4
6484a4
* Mon Aug 08 2011 Patrick "Jima" Laughton <jima@fedoraproject.org> - 2.52-3
6484a4
- Applied Jóhann's patch, minor cleanup
6484a4
6484a4
* Tue Jul 26 2011 Jóhann B. Guðmundsson <johannbg@gmail.com> - 2.52-3
6484a4
- Introduce systemd unit file, drop SysV support
6484a4
6484a4
* Tue Feb 08 2011 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.52-2
6484a4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
6484a4
6484a4
* Tue Jan 26 2010 Itamar Reis Peixoto <itamar@ispbrasil.com.br> - 2.52-1
6484a4
- New Version 2.52
6484a4
- fix condrestart() in initscript bz 547605
6484a4
- fix sed to enable DBUS(the '*' need some escaping) bz 553161
6484a4
6484a4
* Sun Nov 22 2009 Itamar Reis Peixoto <itamar@ispbrasil.com.br> - 2.51-2
6484a4
- fix bz 512664
6484a4
6484a4
* Sat Oct 17 2009 Itamar Reis Peixoto <itamar@ispbrasil.com.br> - 2.51-1
6484a4
- move initscript from patch to a plain text file
6484a4
- drop (dnsmasq-configuration.patch) and use sed instead
6484a4
- enable /etc/dnsmasq.d fix bz 526703
6484a4
- change requires to package name instead of file
6484a4
- new version 2.51
6484a4
6484a4
* Mon Oct  5 2009 Mark McLoughlin <markmc@redhat.com> - 2.48-4
6484a4
- Fix multiple TFTP server vulnerabilities (CVE-2009-2957, CVE-2009-2958)
6484a4
6484a4
* Wed Aug 12 2009 Ville Skyttä <ville.skytta@iki.fi> - 2.48-3
6484a4
- Use lzma compressed upstream tarball.
6484a4
6484a4
* Fri Jul 24 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.48-2
6484a4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild
6484a4
6484a4
* Wed Jun 10 2009 Patrick "Jima" Laughton <jima@beer.tclug.org> 2.48-1
6484a4
- Bugfix/feature enhancement update
6484a4
- Fixing BZ#494094
6484a4
6484a4
* Fri May 29 2009 Patrick "Jima" Laughton <jima@beer.tclug.org> 2.47-1
6484a4
- Bugfix/feature enhancement update
6484a4
6484a4
* Tue Feb 24 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.46-2
6484a4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild
6484a4
6484a4
* Mon Dec 29 2008 Matěj Cepl <mcepl@redhat.com> - 2.45-2
6484a4
- rebuilt
6484a4
6484a4
* Mon Jul 21 2008 Patrick "Jima" Laughton <jima@beer.tclug.org> 2.45-1
6484a4
- Upstream release (bugfixes)
6484a4
6484a4
* Wed Jul 16 2008 Patrick "Jima" Laughton <jima@beer.tclug.org> 2.43-2
6484a4
- New upstream release, contains fixes for CVE-2008-1447/CERT VU#800113
6484a4
- Dropped patch for newer glibc (merged upstream)
6484a4
6484a4
* Wed Feb 13 2008 Patrick "Jima" Laughton <jima@beer.tclug.org> 2.41-0.8
6484a4
- Added upstream-authored patch for newer glibc (thanks Simon!)
6484a4
6484a4
* Wed Feb 13 2008 Patrick "Jima" Laughton <jima@beer.tclug.org> 2.41-0.7
6484a4
- New upstream release
6484a4
6484a4
* Wed Jan 30 2008 Patrick "Jima" Laughton <jima@beer.tclug.org> 2.41-0.6.rc1
6484a4
- Release candidate
6484a4
- Happy Birthday Isaac!
6484a4
6484a4
* Wed Jan 23 2008 Patrick "Jima" Laughton <jima@beer.tclug.org> 2.41-0.5.test30
6484a4
- Bugfix update
6484a4
6484a4
* Mon Dec 31 2007 Patrick "Jima" Laughton <jima@beer.tclug.org> 2.41-0.4.test26
6484a4
- Bugfix/feature enhancement update
6484a4
6484a4
* Thu Dec 13 2007 Patrick "Jima" Laughton <jima@beer.tclug.org> 2.41-0.3.test24
6484a4
- Upstream fix for fairly serious regression
6484a4
6484a4
* Tue Dec 04 2007 Patrick "Jima" Laughton <jima@beer.tclug.org> 2.41-0.2.test20
6484a4
- New upstream test release
6484a4
- Moving dnsmasq.leases to /var/lib/dnsmasq/ as per BZ#407901
6484a4
- Ignoring dangerous-command-in-%%post rpmlint warning (as per above fix)
6484a4
- Patch consolidation/cleanup
6484a4
- Removed conditionals for Fedora <= 3 and Aurora 2.0
6484a4
6484a4
* Tue Sep 18 2007 Patrick "Jima" Laughton <jima@beer.tclug.org> 2.40-1
6484a4
- Finalized upstream release
6484a4
- Removing URLs from patch lines (CVS is the authoritative source)
6484a4
- Added more magic to make spinning rc/test packages more seamless
6484a4
6484a4
* Sun Aug 26 2007 Patrick "Jima" Laughton <jima@beer.tclug.org> 2.40-0.1.rc2
6484a4
- New upstream release candidate (feature-frozen), thanks Simon!
6484a4
- License clarification
6484a4
6484a4
* Tue May 29 2007 Patrick "Jima" Laughton <jima@beer.tclug.org> 2.39-1
6484a4
- New upstream version (bugfixes, enhancements)
6484a4
6484a4
* Mon Feb 12 2007 Patrick "Jima" Laughton <jima@beer.tclug.org> 2.38-1
6484a4
- New upstream version with bugfix for potential hang
6484a4
6484a4
* Tue Feb 06 2007 Patrick "Jima" Laughton <jima@beer.tclug.org> 2.37-1
6484a4
- New upstream version
6484a4
6484a4
* Wed Jan 24 2007 Patrick "Jima" Laughton <jima@beer.tclug.org> 2.36-1
6484a4
- New upstream version
6484a4
6484a4
* Mon Nov 06 2006 Patrick "Jima" Laughton <jima@beer.tclug.org> 2.35-2
6484a4
- Stop creating /etc/sysconfig on %%install
6484a4
- Create /etc/dnsmasq.d on %%install
6484a4
6484a4
* Mon Nov 06 2006 Patrick "Jima" Laughton <jima@beer.tclug.org> 2.35-1
6484a4
- Update to 2.35
6484a4
- Removed UPGRADING_to_2.0 from %%doc as per upstream change
6484a4
- Enabled conf-dir in default config as per RFE BZ#214220 (thanks Chris!)
6484a4
- Added %%dir /etc/dnsmasq.d to %%files as per above RFE
6484a4
6484a4
* Tue Oct 24 2006 Patrick "Jima" Laughton <jima@beer.tclug.org> 2.34-2
6484a4
- Fixed BZ#212005
6484a4
- Moved %%postun scriptlet to %%post, where it made more sense
6484a4
- Render scriptlets safer
6484a4
- Minor cleanup for consistency
6484a4
6484a4
* Thu Oct 19 2006 Patrick "Jima" Laughton <jima@beer.tclug.org> 2.34-1
6484a4
- Hardcoded version in patches, as I'm getting tired of updating them
6484a4
- Update to 2.34
6484a4
6484a4
* Mon Aug 28 2006 Patrick "Jima" Laughton <jima@beer.tclug.org> 2.33-2
6484a4
- Rebuild for FC6
6484a4
6484a4
* Tue Aug 15 2006 Patrick "Jima" Laughton <jima@beer.tclug.org> 2.33-1
6484a4
- Update
6484a4
6484a4
* Sat Jul 22 2006 Patrick "Jima" Laughton <jima@beer.tclug.org> 2.32-3
6484a4
- Added pkgconfig BuildReq due to reduced buildroot
6484a4
6484a4
* Thu Jul 20 2006 Patrick "Jima" Laughton <jima@beer.tclug.org> 2.32-2
6484a4
- Forced update due to dbus version bump
6484a4
6484a4
* Mon Jun 12 2006 Patrick "Jima" Laughton <jima@beer.tclug.org> 2.32-1
6484a4
- Update from upstream
6484a4
- Patch from Dennis Gilmore fixed the conditionals to detect Aurora Linux
6484a4
6484a4
* Mon May  8 2006 Patrick "Jima" Laughton <jima@auroralinux.org> 2.31-1
6484a4
- Removed dbus config patch (now provided upstream)
6484a4
- Patched in init script (no longer provided upstream)
6484a4
- Added DBus-interface to docs
6484a4
6484a4
* Tue May  2 2006 Patrick "Jima" Laughton <jima@auroralinux.org> 2.30-4.2
6484a4
- More upstream-recommended cleanups :)
6484a4
- Killed sysconfig file (provides unneeded functionality)
6484a4
- Tweaked init script a little more
6484a4
6484a4
* Tue May  2 2006 Patrick "Jima" Laughton <jima@auroralinux.org> 2.30-4
6484a4
- Moved options out of init script and into /etc/sysconfig/dnsmasq
6484a4
- Disabled DHCP_LEASE in sysconfig file, fixing bug #190379
6484a4
- Simon Kelley provided dbus/dnsmasq.conf, soon to be part of the tarball
6484a4
6484a4
* Thu Apr 27 2006 Patrick "Jima" Laughton <jima@auroralinux.org> 2.30-3
6484a4
- Un-enabled HAVE_ISC_READER, a hack to enable a deprecated feature (request)
6484a4
- Split initscript & enable-dbus patches, conditionalized dbus for FC3
6484a4
- Tweaked name field in changelog entries (trying to be consistent)
6484a4
6484a4
* Mon Apr 24 2006 Patrick "Jima" Laughton <jima@auroralinux.org> 2.30-2
6484a4
- Disabled stripping of binary while installing (oops)
6484a4
- Enabled HAVE_ISC_READER/HAVE_DBUS via patch
6484a4
- Added BuildReq for dbus-devel
6484a4
6484a4
* Mon Apr 24 2006 Patrick "Jima" Laughton <jima@auroralinux.org> 2.30-1
6484a4
- Initial Fedora Extras RPM