Change log for dnsmasq package in Debian

dnsmasq (2.89-1) unstable; urgency=low

   * New upstream.

 -- Simon Kelley <email address hidden>  Fri, 13 Jan 2023 21:57:01 +0000

Available diffs

• diff from 2.88-1 to 2.89-1 (5.8 KiB)

dnsmasq (2.88-1) unstable; urgency=low

   * New upstream.
   * Fix loss of server configuration (closes: #1020830)
     Git commit 930428fb970f4991e5c2933fd5a5d2504c18a551

 -- Simon Kelley <email address hidden>  Wed, 2 Nov 2022 22:15:45 +0000

Available diffs

• diff from 2.87-1.1 to 2.88-1 (215.1 KiB)

dnsmasq (2.87-1.1) unstable; urgency=medium

  * Non-maintainer upload.
  * No source change upload to rebuild with debhelper 13.10.

 -- Michael Biebl <email address hidden>  Sat, 15 Oct 2022 12:01:25 +0200

Available diffs

• diff from 2.86-1.1ubuntu2 (in Ubuntu) to 2.87-1.1 (80.1 KiB)

dnsmasq (2.87-1) unstable; urgency=low

   * New upstream. (closes: #1001209, #1003156)
   * Include new NFTset support in the build.
   * Fix crash on netboot with DNS server disabled. (closes: #996332)
   * Fix rare lockup in DNSSEC. (closes: #1001576)
   * Close old bug. (closes: #902963)

 -- Simon Kelley <email address hidden>  Wed, 25 Sep 2022 23:11:25 +0000

dnsmasq (2.86-1.1) unstable; urgency=medium

  * Non-maintainer upload.
  * Fix --address=/#/...... which was lost in 2.86. (closes: #995655)

 -- Michael Biebl <email address hidden>  Wed, 10 Nov 2021 22:05:45 +0100

Available diffs

• diff from 2.85-1ubuntu2 (in Ubuntu) to 2.86-1.1 (472.3 KiB)

dnsmasq (2.86-1) unstable; urgency=low

   * Fix debian/changelog format error. (closes: #986626)

 -- Simon Kelley <email address hidden>  Thu, 08 Apr 2021 22:39:00 +0100

dnsmasq (2.85-1) unstable; urgency=low

   * New upstream.
   * Includes fix to CVE-2021-3448.
   * Fix manpage typos. (closes: #986150)

 -- Simon Kelley <email address hidden>  Sat, 03 Apr 2021 22:17:23 +0100

dnsmasq (2.84-1.2) unstable; urgency=medium

  * Non-maintainer upload.
  * Bump old-version in dpkg-maintscript-helper dir_to_symlink calls to also
    clean up after upgrades to an earlier version in testing.

 -- Andreas Beckmann <email address hidden>  Thu, 01 Apr 2021 16:01:51 +0200

dnsmasq (2.84-1.1) unstable; urgency=medium

  * Non-maintainer upload.
  * Fix symlink to directory conversion for /usr/share/doc/dnsmasq.
    This is achieved by directly calling dpkg-maintscript-helper in the preinst,
    postinst, and postrm scripts, since the package does not use debhelper.
    (Closes: #985282)

 -- Sébastien Villemot <email address hidden>  Sun, 28 Mar 2021 10:55:07 +0200

dnsmasq (2.80-1+deb10u1) buster-security; urgency=high

   * Non-maintainer upload by the Security Team.
   * Fix DNSpooq issue: CVE-2020-25681, CVE-2020-25682, CVE-2020-25683,
     CVE-2020-25684, CVE-2020-25685, CVE-2020-25686, CVE-2020-25687.

 -- Sebastien Delafond <email address hidden>  Tue, 02 Feb 2021 07:52:55 +0100

dnsmasq (2.84-1) unstable; urgency=low

   * New upstream.

 -- Simon Kelley <email address hidden>  Sun, 24 Jan 2021 22:02:01 +0000

dnsmasq (2.83-1) unstable; urgency=high

   * New upstream.
   * Includes fixes to CVE-2020-25681 - CVE-2020-25687 inclusive.

 -- Simon Kelley <email address hidden>  Fri, 15 Jan 2021 22:22:41 +0000

dnsmasq (2.82-1) unstable; urgency=low

   * New upstream.

 -- Simon Kelley <email address hidden>  Fri, 26 Jun 2020 22:22:41 +0000

Available diffs

• diff from 2.81-4build1 (in Ubuntu) to 2.82-1 (10.0 KiB)

dnsmasq (2.81-4) unstable; urgency=low

   * Remove runit support when building for Ubuntu. (closes: #960401)

 -- Simon Kelley <email address hidden>  Fri, 26 Jun 2020 21:52:44 +0000

Available diffs

• diff from 2.81-3ubuntu2 (in Ubuntu) to 2.81-4 (1.4 KiB)

dnsmasq (2.81-3) unstable; urgency=low

   * Fixes to control file for bug 958100

 -- Simon Kelley <email address hidden>  Sun, 19 Apr 2020 21:44:12 +0000

dnsmasq (2.81-2) unstable; urgency=low

   * Fix FTBFS on kFreeBSD. (closes: #958100)
	
 -- Simon Kelley <email address hidden>  Sat, 18 Apr 2020 18:34:15 +0000

dnsmasq (2.81-1) unstable; urgency=low

   * New upstream.
   * Fix nodocs/nodoc confusion in rules. (closes: #922758)
   * Add Vcs-* fields to control. (closes: #922422)
   * Add systemd support for multiple daemon instances. (closes: #914305)
   * Add note explaining that ENABLED is SYSV-init only. (closes: #914755)
   * Replace ash with dash in contrib/reverse-dns. (closes: #920224)
   * Move to libidn2. (closes: #932695)
   * Fix RA problem with two interfaces on same net, but RA service on
     only one of the interfaces. (closes: #949565)
   * Fix breakage of dig +trace. (closes: #942363)
   * Fix build faliure with newer Nettle libraries. (closes: #940985)
   * Support runscript init-system (closes: #929884)
   * Security fix for CVE-2019-14834 (closes: #948373)
	
 -- Simon Kelley <email address hidden>  Wed, 8 Apr 2020 17:33:15 +0000

dnsmasq (2.80-1.1) unstable; urgency=medium

  [ Andreas Metzler ]
  * Non-maintainer upload.
  * Apply ab73a746a0d6fcac2e682c5548eeb87fb9c9c82e from upstream GIT to fix
    build error against nettle 3.5. Closes: #940985

 -- Paul Gevers <email address hidden>  Wed, 18 Dec 2019 21:23:49 +0100

dnsmasq (2.76-5+deb9u2) stretch; urgency=medium

  * Non-maintainer upload.
  * trust-anchors.conf: include latest DNS trust anchor KSK-2017.
    (Closes: #907887)

 -- Santiago Ruano Rincón <email address hidden>  Wed, 10 Oct 2018 08:52:32 +0200

dnsmasq (2.80-1) unstable; urgency=low

   * New upstream. (closes: #837602) (closes: #794640) (closes: #794636)
   * Close old bugs, long agp fixed. (closes: #802845) (closes: #754299)
   * Provide usr/lib/tmpfiles.d/dnsmasq.conf. (closes: #872396)
   * Run restorecon on /run/dnsmasq for SE Linux. (closes: #872397)

 -- Simon Kelley <email address hidden>  Mon, 17 Sep 2018 23:11:25 +0000

Available diffs

• diff from 2.79-1 to 2.80-1 (72.7 KiB)

dnsmasq (2.79-1) unstable; urgency=low

   * New upstream. (closes: #888200)
   * Fix trust-anchor regex in init script. (closes: #884347)
   * Fix exit code for dhcp_release6 (closes: #833596)
   * Add project homepage to control file. (closes: #887764)
   * New binary package dnsmasq-base-lua, includes Lua support.
   * Remove hardwired shlibs dependency for libnettle 3.3 and
     fix code to avoid ABI breakage as long as compiled against
     libnettle 3.4 or later. (closes: #891315)

 -- Simon Kelley <email address hidden>  Fri, 16 Feb 2018 19:54:22 +0000

Available diffs

• diff from 2.78-3 to 2.79-1 (69.1 KiB)

dnsmasq (2.78-3) unstable; urgency=high

   * Make failure of pidfile chown a warning. (closes: #889857)
  
 -- Simon Kelley <email address hidden>  Thu, 8 Feb 2018 21:26:30 +0000

Available diffs

• diff from 2.78-1 to 2.78-3 (996 bytes)
• diff from 2.78-2 to 2.78-3 (870 bytes)

dnsmasq (2.78-2) unstable; urgency=high

   * Change ownership of pid file, to keep systemd happy. (closes: #889336)
  
 -- Simon Kelley <email address hidden>  Tue, 6 Feb 2018 17:21:30 +0000

dnsmasq (2.72-3+deb8u2) jessie-security; urgency=high

  * Non-maintainer upload by the Security Team.
  * CVE-2017-14491: DNS heap buffer overflow
  * CVE-2017-14492: DHCPv6 RA heap overflow
  * CVE-2017-14493: DHCPv6 - Stack buffer overflow
  * CVE-2017-14494: Infoleak handling DHCPv6 forwarded requests
  * CVE-2017-14491: DNS heap buffer overflow (further fix)

 -- Salvatore Bonaccorso <email address hidden>  Sun, 01 Oct 2017 19:14:59 +0200

dnsmasq (2.76-5+deb9u1) stretch-security; urgency=high

  * Non-maintainer upload by the Security Team.
  * CVE-2017-14491: DNS heap buffer overflow
  * CVE-2017-14492: DHCPv6 RA heap overflow
  * CVE-2017-14493: DHCPv6 - Stack buffer overflow
  * CVE-2017-14494: Infoleak handling DHCPv6 forwarded requests
  * CVE-2017-14496: Integer underflow in DNS response creation
  * CVE-2017-14495: OOM in DNS response creation
  * Misc code cleanups arising from Google analysis
  * CVE-2017-14491: DNS heap buffer overflow (further fix)

 -- Salvatore Bonaccorso <email address hidden>  Sun, 01 Oct 2017 17:20:45 +0200

dnsmasq (2.78-1) unstable; urgency=high

   * New upstream.
     Security fixes for CVE-2017-13704  (closes: #877102)
     Security fixes for CVE-2017-14491 - CVE-2017-14496 inclusive.	

 -- Simon Kelley <email address hidden>  Sun, 29 Sep 2017 21:34:00 +0000

Available diffs

• diff from 2.77-2 to 2.78-1 (184.4 KiB)

dnsmasq (2.77-2) unstable; urgency=low

   * Improve sed regexp for parsing root.ds.

 -- Simon Kelley <email address hidden>  Mon, 5 Jun 2017 20:46:32 +0000

Available diffs

• diff from 2.77-1 to 2.77-2 (480 bytes)

dnsmasq (2.77-1) unstable; urgency=low

   * New upstream.
   * Don't register as a resolvconf source when config file
     includes port=0 to disable DNS.
   * Handle gratuitous format change in /usr/share/dns/root.ds
     (closes: #858506) (closes: #860064)
   * Add lsb-base dependancy.

 -- Simon Kelley <email address hidden>  Tue, 11 Apr 2017 14:19:20 +0000

Available diffs

• diff from 2.76-5 to 2.77-1 (85.6 KiB)

dnsmasq (2.76-5) unstable; urgency=medium

  * Nail libnettle dependency to avoid ABI incompatibility.
    (closes: #846642)

 -- Simon Kelley <email address hidden>  Sat, 13 Aug 2016 21:43:10 +0000

Available diffs

• diff from 2.76-4.1 to 2.76-5 (357 bytes)

dnsmasq (2.76-4.1) unstable; urgency=medium

  * Non-maintainer upload.
  * Add two upstream patches to fix binding to an interface being
    destroyed and recreated. Closes: #834722.
      + 2675f2061525bc954be14988d64384b74aa7bf8b
      + 16800ea072dd0cdf14d951c4bb8d2808b3dfe53d

 -- Vincent Bernat <email address hidden>  Sat, 26 Nov 2016 20:15:34 +0100

Available diffs

• diff from 2.76-4build1 (in Ubuntu) to 2.76-4.1 (1.6 KiB)

dnsmasq (2.76-4) unstable; urgency=medium

  * Non-maintainer upload.
  * Fix FTCBFS: Use triplet-prefixed tools. (closes: #836072)

 -- Helmut Grohne <email address hidden>  Tue, 30 Aug 2016 13:59:12 +0200

Available diffs

• diff from 2.76-3 to 2.76-4 (1.3 KiB)

dnsmasq (2.76-3) unstable; urgency=medium

   * Bump auth zone serial on SIGHUP. (closes: #833733)

 -- Simon Kelley <email address hidden>  Sat, 13 Aug 2016 21:43:10 +0000

Available diffs

• diff from 2.76-2 to 2.76-3 (487 bytes)

dnsmasq (2.76-2) unstable; urgency=medium

   * Fix to systemd to fix failure to start with bridge interface.
     (Closes: #831372)

 -- Simon Kelley <email address hidden>  Sat, 16 Jul 2016 22:09:10 +0000

Available diffs

• diff from 2.76-1.1 to 2.76-2 (1011 bytes)

dnsmasq (2.76-1.1) unstable; urgency=medium

  * Non-maintainer upload.
  * Provide nss-lookup.target for systemd, without relying on insserv.
    Patch from Michael Biebl <email address hidden>. (Closes: #826242)

 -- Christian Hofstaedtler <email address hidden>  Fri, 01 Jul 2016 13:41:11 +0000

Available diffs

• diff from 2.76-1 to 2.76-1.1 (489 bytes)

dnsmasq (2.76-1) unstable; urgency=low

   * New upstream. (closes: #798586)
   * Use /run/dnsmasq directly, rather than relying on link from /var/run
     to avoid problems before /var is mounted. (closes: #800351)
   * Test for the existance of /usr/share/doc/dnsmasq rather then
     /etc/dnsmasq.d/README in the daemon startup script. (closes: #819856)
   * Add --help to manpage and mention dhcp6 in summary. (closes: #821226)

 -- Simon Kelley <email address hidden>  Thu, 10 Sep 2015 23:07:21 +0000

Available diffs

• diff from 2.75-1 to 2.76-1 (211.5 KiB)

dnsmasq (2.62-3+deb7u3) wheezy-security; urgency=high

  * Non-maintainer upload by the Security Team.
  * Handle case where SO_REUSEPORT may be defined but not supported by
    the running kernel.
    The update for CVE-2015-3294 caused a regression for the armel and armhf
    builds due to a newer linux-libc-dev package installed in the wheezy
    chroots used for the build. The libc headers defined SO_REUSEPORT,
    whereas the kernel in wheezy does not support it uncovering this
    problem. (Closes: #784571)
  * Set SO_REUSEADDR as well as SO_REUSEPORT on DHCP sockets when
    both are available

 -- Salvatore Bonaccorso <email address hidden>  Wed, 06 May 2015 21:37:29 +0200

dnsmasq (2.75-1) unstable; urgency=low

   * New upstream. (closes: #794095)
	
 -- Simon Kelley <email address hidden>  Thur, 30 Jul 2015 20:58:31 +0000

Available diffs

• diff from 2.74-1 to 2.75-1 (707 bytes)

dnsmasq (2.74-1) unstable; urgency=low

   * New upstream. (LP: #1468611)
	
 -- Simon Kelley <email address hidden>  Wed, 15 Jul 2015 21:54:11 +0000

Available diffs

• diff from 2.73-2 to 2.74-1 (21.2 KiB)

dnsmasq (2.73-2) unstable; urgency=low

   * Fix behaviour of empty --conf-file (closes: #790341)

 -- Simon Kelley <email address hidden>  Thu, 7 Jul 2015 21:46:42 +0000

Available diffs

• diff from 2.73-1 to 2.73-2 (561 bytes)

dnsmasq (2.73-1) unstable; urgency=low

   * New upstream. (closes: #786996)
   * Tweak field width in cache dump to avoid truncating IPv6
     addresses. (closes: #771557)
   * Add newline at the end of example config file. (LP: #1416895)
   * Make Debian package build reproducible. (closes: #777323)
   * Add Requires=network.target to systemd unit.

 -- Simon Kelley <email address hidden>  Thu, 4 Jun 2015 22:31:42 +0000

Available diffs

• diff from 2.72-3.1 to 2.73-1 (189.1 KiB)
• diff from 2.72-3.1build1 (in Ubuntu) to 2.73-1 (189.2 KiB)

dnsmasq (2.72-3+deb8u1) jessie-security; urgency=high

  * Non-maintainer upload by the Security Team.
  * CVE-2015-3294: denial of service and memory disclosure via malformed
    DNS requests (Closes: #783459)

 -- Salvatore Bonaccorso <email address hidden>  Tue, 05 May 2015 11:15:01 +0200

dnsmasq (2.72-3.1) unstable; urgency=medium

  * Non-maintainer upload.
  * CVE-2015-3294: denial of service and memory disclosure via malformed
    DNS requests (Closes: #783459)

 -- Salvatore Bonaccorso <email address hidden>  Tue, 05 May 2015 16:09:06 +0200

Available diffs

• diff from 2.72-3 to 2.72-3.1 (836 bytes)

dnsmasq (2.72-3) unstable; urgency=medium


   * debian/systemd.service: switch from Type=dbus to Type=forking.
     dnsmasq does not depend on dbus, but Type=dbus systemd services cannot
     work without it. (Closes: #769486, #776530)
     - debian/init: when called with systemd-exec argument, let dnsmasq
       go into the background, so Type=forking can detect when it is ready
   * Remove line containing only whitespace in debian/contol.
     (closes: #777571)

 -- Simon Kelley <email address hidden>  Wed, 11 Feb 2015 21:56:12 +0000

Available diffs

• diff from 2.72-2 to 2.72-3 (1.1 KiB)

dnsmasq (2.72-2) unstable; urgency=low


   * Fix build in Debian-kFreeBSD. (closes: #763693)

 -- Simon Kelley <email address hidden>  Thu, 02 Oct 2014 22:34:12 +0000

Available diffs

• diff from 2.71-1 to 2.72-2 (148.2 KiB)

dnsmasq (2.72-1) unstable; urgency=low


   * New upstream.
   * If dns-root-data package is installed, use it to set the DNSSEC
     trust anchor(s). Recommend dns-root-data. (closes: #760460)
   * Handle AD bit correctly in replies from cache. (closes: #761654)

 -- Simon Kelley <email address hidden>  Tue, 20 May 2014 21:01:11 +0000

dnsmasq (2.71-1) unstable; urgency=low


   * New upstream.
   * Fix 100% CPU-usage bug when dnsmasq started with cachesize 
     set to zero. (LP: #1314697)
	
 -- Simon Kelley <email address hidden>  Fri, 16 May 2014 20:17:10 +0000

Available diffs

• diff from 2.70-2 to 2.71-1 (11.5 KiB)
• diff from 2.70-3 to 2.71-1 (10.2 KiB)

dnsmasq (2.70-3) unstable; urgency=medium


   * Write a pid-file, even when being started using systemd, since
     other components may wish to signal dnsmasq.
   * Enable dnsmasq systemd unit on install. Otherwise dnsmasq does not run on
     fresh installations (without administrator handholding) and even worse it
     is disabled on systems switching from sysv to systemd. Modify
     postinst/postrm exactly as dh_systemd would, add dependency on
     init-system-helpers. Closes: #724602

 -- Simon Kelley <email address hidden> Sun, 11 May 2014 17:45:21 +0000

Available diffs

• diff from 2.70-2 to 2.70-3 (1.6 KiB)

dnsmasq (2.70-2) unstable; urgency=low


   * Ensure daemon not stared if dnsmasq package has been removed,
     even if dnsmasq-base is still installed. (closes: #746941)
   * Tidy cruft in initscript. (closes: #746940)

 -- Simon Kelley <email address hidden>  Sun, 04 May 2014 21:34:11 +0000

Available diffs

• diff from 2.70-1 to 2.70-2 (738 bytes)

dnsmasq (2.70-1) unstable; urgency=low


   * New upstream.

 -- Simon Kelley <email address hidden>  Wed, 23 Apr 2014 15:14:42 +0000

Available diffs

• diff from 2.68-1 to 2.70-1 (78.7 KiB)

dnsmasq (2.69-1) unstable; urgency=low


   * New upstream.
   * Set --local-service. (closes: #732610)
     This tells dnsmasq to ignore DNS requests that don't come from a local network.
     It's automatically ignored if  --interface --except-interface, --listen-address
     or --auth-server exist in the configuration, so for most installations, it will
     have no effect, but for otherwise-unconfigured installations, it stops dnsmasq
     from being vulnerable to DNS-reflection attacks.

 -- Simon Kelley <email address hidden>  Tue, 4 Feb 2014 16:28:12 +0000