Change log : dnsmasq package : Ubuntu

2.86-1.1ubuntu2.1

Published in kinetic-updates on 2023-04-20

Published in kinetic-security on 2023-04-20

dnsmasq (2.86-1.1ubuntu2.1) kinetic-security; urgency=medium

  * SECURITY UPDATE: IP fragmentation
    - src/config.h: update default max EDNS_PKTSZ to 1232 as agreed on
      dnsflagday 2020.
    - man/dnsmasq.8: updating documentation to reflect new default max
      EDNS_PKTSZ.
    - eb92fb32b746f2104b0f370b5b295bb8dd4bd5e5
    - CVE-2023-28450

 -- Ian Constantin <email address hidden>  Tue, 18 Apr 2023 11:23:04 +0300

Available diffs

diff from 2.86-1.1ubuntu2 (in Ubuntu) to 2.86-1.1ubuntu2.1 (42.7 KiB)

2.86-1.1ubuntu0.3

Published in jammy-updates on 2023-04-20

Published in jammy-security on 2023-04-20

dnsmasq (2.86-1.1ubuntu0.3) jammy-security; urgency=medium

  * SECURITY UPDATE: IP fragmentation
    - src/config.h: update default max EDNS_PKTSZ to 1232 as agreed on
      dnsflagday 2020.
    - man/dnsmasq.8: updating documentation to reflect new default max
      EDNS_PKTSZ.
    - eb92fb32b746f2104b0f370b5b295bb8dd4bd5e5
    - CVE-2023-28450

 -- Ian Constantin <email address hidden>  Tue, 18 Apr 2023 11:11:46 +0300

Available diffs

diff from 2.86-1.1ubuntu0.2 (in Ubuntu) to 2.86-1.1ubuntu0.3 (42.7 KiB)
diff from 2.86-1.1ubuntu0.1 to 2.86-1.1ubuntu0.3 (43.6 KiB)

2.80-1.1ubuntu1.7

Published in focal-updates on 2023-04-20

Published in focal-security on 2023-04-20

dnsmasq (2.80-1.1ubuntu1.7) focal-security; urgency=medium

  * SECURITY UPDATE: IP fragmentation
    - src/config.h: update default max EDNS_PKTSZ to 1232 as agreed on
      dnsflagday 2020.
    - man/dnsmasq.8: updating documentation to reflect new default max
      EDNS_PKTSZ.
    - eb92fb32b746f2104b0f370b5b295bb8dd4bd5e5
    - CVE-2023-28450

 -- Ian Constantin <email address hidden>  Tue, 18 Apr 2023 11:12:00 +0300

Available diffs

diff from 2.80-1.1ubuntu1.6 (in Ubuntu) to 2.80-1.1ubuntu1.7 (39.6 KiB)
diff from 2.80-1.1ubuntu1.5 to 2.80-1.1ubuntu1.7 (39.9 KiB)

2.79-1ubuntu0.7

Published in bionic-updates on 2023-04-20

Published in bionic-security on 2023-04-20

dnsmasq (2.79-1ubuntu0.7) bionic-security; urgency=medium

  * SECURITY UPDATE: IP fragmentation
    - src/config.h: update default max EDNS_PKTSZ to 1232 as agreed on
      dnsflagday 2020.
    - man/dnsmasq.8: updating documentation to reflect new default max
      EDNS_PKTSZ.
    - eb92fb32b746f2104b0f370b5b295bb8dd4bd5e5
    - CVE-2023-28450

 -- Ian Constantin <email address hidden>  Tue, 18 Apr 2023 11:21:55 +0300

Available diffs

diff from 2.79-1ubuntu0.6 to 2.79-1ubuntu0.7 (38.2 KiB)

2.86-1.1ubuntu0.2

Superseded in jammy-updates on 2023-04-20

Deleted in jammy-proposed on 2023-04-21 (Reason: moved to -updates)

dnsmasq (2.86-1.1ubuntu0.2) jammy; urgency=medium

  * src/forward.c: Do not refuse retries from client DNS queries. Behaviour to
    stop infinite loops when all servers return REFUSED was wrongly activated
    on client retries, resulting in incorrect REFUSED replies to client
    retries. The code added here is a cherry pick released in upstream version
    2.87, originating at
    https://thekelleys.org.uk/gitweb/?p=dnsmasq.git;a=commit;h=2561f9fe0eb9c0be
    (LP: #1981794)

 -- Lena Voytek <email address hidden>  Fri, 14 Oct 2022 14:39:41 -0700

Available diffs

2.89-1

Published in mantic-release on 2023-04-25

Published in lunar-release on 2023-02-22

Deleted in lunar-proposed (Reason: Moved to lunar)

dnsmasq (2.89-1) unstable; urgency=low

   * New upstream.

 -- Simon Kelley <email address hidden>  Fri, 13 Jan 2023 21:57:01 +0000

Available diffs

diff from 2.88-1 to 2.89-1 (5.8 KiB)

2.88-1

Superseded in lunar-release on 2023-02-22

Deleted in lunar-proposed on 2023-02-23 (Reason: Moved to lunar)

dnsmasq (2.88-1) unstable; urgency=low

   * New upstream.
   * Fix loss of server configuration (closes: #1020830)
     Git commit 930428fb970f4991e5c2933fd5a5d2504c18a551

 -- Simon Kelley <email address hidden>  Wed, 2 Nov 2022 22:15:45 +0000

Available diffs

diff from 2.87-1.1 to 2.88-1 (215.1 KiB)

2.80-1.1ubuntu1.6

Superseded in focal-updates on 2023-04-20

Deleted in focal-proposed on 2023-04-21 (Reason: moved to -updates)

dnsmasq (2.80-1.1ubuntu1.6) focal; urgency=medium

  * src/cache.c: Apply 162e5e0062ce923c494cc64282f293f0ed64fc10 from
    upstream GIT to fix bug in DNS non-terminal code, added in 2.80,
    which could sometimes cause a NODATA rather than an NXDOMAIN
    reply (LP: #1995260).

 -- Miriam España Acebal <email address hidden>  Tue, 15 Nov 2022 10:35:15 +0100

Available diffs

diff from 2.80-1.1ubuntu1.5 (in ~ubuntu-security-proposed/ubuntu/ppa) to 2.80-1.1ubuntu1.6 (625 bytes)
diff from 2.80-1.1ubuntu1 to 2.80-1.1ubuntu1.6 (25.2 KiB)

2.87-1.1

Superseded in lunar-release on 2022-12-15

Deleted in lunar-proposed on 2022-12-17 (Reason: Moved to lunar)

dnsmasq (2.87-1.1) unstable; urgency=medium

  * Non-maintainer upload.
  * No source change upload to rebuild with debhelper 13.10.

 -- Michael Biebl <email address hidden>  Sat, 15 Oct 2022 12:01:25 +0200

Available diffs

diff from 2.86-1.1ubuntu2 (in Ubuntu) to 2.87-1.1 (80.1 KiB)

2.86-1.1ubuntu2

Superseded in lunar-release on 2022-11-25

Published in kinetic-release on 2022-10-08

Deleted in kinetic-proposed (Reason: Moved to kinetic)

dnsmasq (2.86-1.1ubuntu2) kinetic; urgency=medium

  * src/forward.c: Do not refuse retries from client DNS queries. Behaviour to
    stop infinite loops when all servers return REFUSED was wrongly activated
    on client retries, resulting in incorrect REFUSED replies to client
    retries. The code added here is a cherry pick released in upstream version
    2.87, originating at
    https://thekelleys.org.uk/gitweb/?p=dnsmasq.git;a=commit;h=2561f9fe0eb9c0be
    (LP: #1981794)

 -- Lena Voytek <email address hidden>  Fri, 30 Sep 2022 08:42:39 -0700

Available diffs

diff from 2.86-1.1ubuntu1 to 2.86-1.1ubuntu2 (1.3 KiB)

2.86-1.1ubuntu1

Superseded in kinetic-release on 2022-10-08

Deleted in kinetic-proposed on 2022-10-09 (Reason: Moved to kinetic)

dnsmasq (2.86-1.1ubuntu1) kinetic; urgency=medium

  * SECURITY UPDATE: Heap use after free
    - 03345ecefeb0d82e3c3a4c28f27c3554f0611b39: Fix write-after-free error in
      DHCPv6 code in src/rfc3315.c.
    - CVE-2022-0934

 -- Leonidas Da Silva Barbosa <email address hidden>  Wed, 13 Jul 2022 12:10:53 -0300

Available diffs

diff from 2.86-1.1 (in Debian) to 2.86-1.1ubuntu1 (2.2 KiB)

2.86-1.1ubuntu0.1

Superseded in jammy-updates on 2023-03-29

Superseded in jammy-security on 2023-04-20

dnsmasq (2.86-1.1ubuntu0.1) jammy-security; urgency=medium

  * SECURITY UPDATE: Heap use after free
    - debian/patches/CVE-2022-0934.patch: Fix write-after-free error in
      DHCPv6 code in src/rfc3315.c.
    - CVE-2022-0934

 -- Leonidas Da Silva Barbosa <email address hidden>  Mon, 02 May 2022 12:09:51 -0300

Available diffs

diff from 2.86-1.1 (in Debian) to 2.86-1.1ubuntu0.1 (2.2 KiB)

2.85-1ubuntu2.1

Obsolete in impish-updates on 2022-07-23

Obsolete in impish-security on 2022-07-23

dnsmasq (2.85-1ubuntu2.1) impish-security; urgency=medium

  * SECURITY UPDATE: Heap use after free
    - debian/patches/CVE-2022-0934.patch: Fix write-after-free error in
      DHCPv6 code in src/rfc3315.c.
    - CVE-2022-0934

 -- Leonidas Da Silva Barbosa <email address hidden>  Mon, 18 Apr 2022 11:55:36 -0300

Available diffs

diff from 2.85-1ubuntu2 (in Ubuntu) to 2.85-1ubuntu2.1 (1.9 KiB)

2.80-1.1ubuntu1.5

Superseded in focal-updates on 2022-12-05

Superseded in focal-security on 2023-04-20

dnsmasq (2.80-1.1ubuntu1.5) focal-security; urgency=medium

  * SECURITY UPDATE: Heap use after free
    - debian/patches/CVE-2022-0934.patch: Fix write-after-free error in
      DHCPv6 code in src/rfc3315.c.
    - CVE-2022-0934

 -- Leonidas Da Silva Barbosa <email address hidden>  Mon, 18 Apr 2022 12:25:39 -0300

Available diffs

diff from 2.80-1.1ubuntu1.4 to 2.80-1.1ubuntu1.5 (1.9 KiB)

2.79-1ubuntu0.6

Superseded in bionic-updates on 2023-04-20

Superseded in bionic-security on 2023-04-20

dnsmasq (2.79-1ubuntu0.6) bionic-security; urgency=medium

  * SECURITY UPDATE: Heap use after free
    - debian/patches/CVE-2022-0934.patch: Fix write-after-free error in
      DHCPv6 code in src/rfc3315.c.
    - CVE-2022-0934

 -- Leonidas Da Silva Barbosa <email address hidden>  Mon, 18 Apr 2022 12:41:06 -0300

Available diffs

diff from 2.79-1ubuntu0.5 (in Ubuntu) to 2.79-1ubuntu0.6 (16.6 KiB)
diff from 2.79-1ubuntu0.4 to 2.79-1ubuntu0.6 (17.0 KiB)

2.86-1.1

Superseded in kinetic-release on 2022-07-27

Published in jammy-release on 2022-01-28

Deleted in jammy-proposed (Reason: Moved to jammy)

dnsmasq (2.86-1.1) unstable; urgency=medium

  * Non-maintainer upload.
  * Fix --address=/#/...... which was lost in 2.86. (closes: #995655)

 -- Michael Biebl <email address hidden>  Wed, 10 Nov 2021 22:05:45 +0100

Available diffs

diff from 2.85-1ubuntu2 (in Ubuntu) to 2.86-1.1 (472.3 KiB)

2.79-1ubuntu0.5

Superseded in bionic-updates on 2022-05-10

Deleted in bionic-proposed on 2022-05-12 (Reason: moved to -updates)

dnsmasq (2.79-1ubuntu0.5) bionic; urgency=medium

  * src/forward.c: add missing EDNS0 section. (LP: #1785383)

 -- Paride Legovini <email address hidden>  Fri, 24 Sep 2021 13:05:51 +0200

Available diffs

diff from 2.79-1ubuntu0.4 (in ~ubuntu-security-proposed/ubuntu/ppa) to 2.79-1ubuntu0.5 (718 bytes)
diff from 2.79-1 (in Debian) to 2.79-1ubuntu0.5 (23.6 KiB)

2.85-1ubuntu2

Superseded in jammy-release on 2022-01-28

Obsolete in impish-release on 2022-07-23

Deleted in impish-proposed (Reason: Moved to impish)

dnsmasq (2.85-1ubuntu2) impish; urgency=medium

  * Revert: "src/radv.c: avoid leases to be issued forever when not set"
    (LP 1894619) according to the bug and upstream discussion.

 -- Christian Ehrhardt <email address hidden>  Tue, 22 Jun 2021 07:18:30 +0200

Available diffs

diff from 2.85-1ubuntu1 to 2.85-1ubuntu2 (128.7 KiB)

2.85-1ubuntu1

Superseded in impish-release on 2021-07-05

Deleted in impish-proposed on 2021-07-07 (Reason: Moved to impish)

dnsmasq (2.85-1ubuntu1) impish; urgency=medium

  * Merge with Debian unstable. Remaining changes:
    - src/radv.c: avoid leases to be issued forever when not set
      (LP 1894619)

 -- Christian Ehrhardt <email address hidden>  Wed, 02 Jun 2021 09:34:26 +0200

Available diffs

diff from 2.84-1ubuntu2 to 2.85-1ubuntu1 (292.2 KiB)

2.79-1ubuntu0.4

Superseded in bionic-updates on 2021-10-20

Superseded in bionic-security on 2022-05-10

dnsmasq (2.79-1ubuntu0.4) bionic-security; urgency=medium

  * SECURITY UPDATE: fixed port use when specific server is requested
    - 74d4fcd756a85bc1823232ea74334f7ccfb9d5d2
    - CVE-2021-3448

 -- Marc Deslauriers <email address hidden>  Thu, 06 May 2021 12:34:24 -0400

Available diffs

diff from 2.79-1ubuntu0.3 to 2.79-1ubuntu0.4 (9.0 KiB)

2.82-1ubuntu1.3

Obsolete in groovy-updates on 2021-12-22

Obsolete in groovy-security on 2021-12-22

dnsmasq (2.82-1ubuntu1.3) groovy-security; urgency=medium

  * SECURITY UPDATE: fixed port use when specific server is requested
    - 74d4fcd756a85bc1823232ea74334f7ccfb9d5d2
    - CVE-2021-3448

 -- Marc Deslauriers <email address hidden>  Thu, 06 May 2021 12:34:24 -0400

Available diffs

diff from 2.82-1ubuntu1.2 to 2.82-1ubuntu1.3 (9.3 KiB)

2.80-1.1ubuntu1.4

Superseded in focal-updates on 2022-05-10

Superseded in focal-security on 2022-05-10

dnsmasq (2.80-1.1ubuntu1.4) focal-security; urgency=medium

  * SECURITY UPDATE: fixed port use when specific server is requested
    - 74d4fcd756a85bc1823232ea74334f7ccfb9d5d2
    - CVE-2021-3448

 -- Marc Deslauriers <email address hidden>  Thu, 06 May 2021 12:34:24 -0400

Available diffs

diff from 2.80-1.1ubuntu1.3 to 2.80-1.1ubuntu1.4 (9.2 KiB)

2.84-1ubuntu2.1

Obsolete in hirsute-updates on 2022-07-23

Obsolete in hirsute-security on 2022-07-23

dnsmasq (2.84-1ubuntu2.1) hirsute-security; urgency=medium

  * SECURITY UPDATE: fixed port use when specific server is requested
    - 74d4fcd756a85bc1823232ea74334f7ccfb9d5d2
    - CVE-2021-3448

 -- Marc Deslauriers <email address hidden>  Thu, 06 May 2021 12:34:24 -0400

Available diffs

diff from 2.84-1ubuntu2 (in Ubuntu) to 2.84-1ubuntu2.1 (9.1 KiB)

2.75-1ubuntu0.16.04.10

Published in xenial-updates on 2021-04-22

Published in xenial-security on 2021-04-22

dnsmasq (2.75-1ubuntu0.16.04.10) xenial-security; urgency=medium

  * SECURITY UPDATE: Multiple security issues
    - CVE-2017-15107: wildcard NSEC records interpretation issue
      + 4fe6744a220eddd3f1749b40cac3dfc510787de6
      + cd7df612b14ec1bf831a966ccaf076be0dae7404
    - CVE-2019-14513: DoS via improper bounds checking
      + d3a8b39c7df2f0debf3b5f274a1c37a9e261f94e

 -- Marc Deslauriers <email address hidden>  Thu, 22 Apr 2021 09:12:18 -0400

Available diffs

diff from 2.75-1ubuntu0.16.04.8 to 2.75-1ubuntu0.16.04.10 (4.5 KiB)
diff from 2.75-1ubuntu0.16.04.9 to 2.75-1ubuntu0.16.04.10 (31.6 KiB)

2.75-1ubuntu0.16.04.8

Superseded in xenial-updates on 2021-04-22

Superseded in xenial-security on 2021-04-22

dnsmasq (2.75-1ubuntu0.16.04.8) xenial-security; urgency=medium

  * SECURITY REGRESSION: issue with multiple queries (LP: #1916462)
    - backport multiple upstream commits to fix regressions
      + 04490bf622ac84891aad6f2dd2edf83725decdee
      + 12af2b171de0d678d98583e2190789e544440e02
      + 3f535da79e7a42104543ef5c7b5fa2bed819a78b
      + 141a26f979b4bc959d8e866a295e24f8cf456920
      + 305cb79c5754d5554729b18a2c06fe7ce699687a

 -- Marc Deslauriers <email address hidden>  Tue, 23 Feb 2021 08:32:59 -0500

Available diffs

2.79-1ubuntu0.3

Superseded in bionic-updates on 2021-06-02

Superseded in bionic-security on 2021-06-02

dnsmasq (2.79-1ubuntu0.3) bionic-security; urgency=medium

  * SECURITY REGRESSION: issue with multiple queries and issue with retries
    (LP: #1916462)
    - backport multiple upstream commits to fix regressions
      + 04490bf622ac84891aad6f2dd2edf83725decdee
      + 12af2b171de0d678d98583e2190789e544440e02
      + 3f535da79e7a42104543ef5c7b5fa2bed819a78b
      + 25e63f1e56f5acdcf91893a1b92ad1e0f2f552d8
      + 141a26f979b4bc959d8e866a295e24f8cf456920
      + 305cb79c5754d5554729b18a2c06fe7ce699687a

 -- Marc Deslauriers <email address hidden>  Tue, 23 Feb 2021 08:02:05 -0500

Available diffs

diff from 2.79-1ubuntu0.2 (in ~ubuntu-security/ubuntu/ppa) to 2.79-1ubuntu0.3 (5.1 KiB)
diff from 2.79-1 (in Debian) to 2.79-1ubuntu0.3 (15.8 KiB)

2.80-1.1ubuntu1.3

Superseded in focal-updates on 2021-06-02

Superseded in focal-security on 2021-06-02

dnsmasq (2.80-1.1ubuntu1.3) focal-security; urgency=medium

  * SECURITY REGRESSION: issue with multiple queries and issue with retries
    (LP: #1916462)
    - backport multiple upstream commits to fix regressions
      + 04490bf622ac84891aad6f2dd2edf83725decdee
      + 12af2b171de0d678d98583e2190789e544440e02
      + 3f535da79e7a42104543ef5c7b5fa2bed819a78b
      + 25e63f1e56f5acdcf91893a1b92ad1e0f2f552d8
      + 141a26f979b4bc959d8e866a295e24f8cf456920
      + 305cb79c5754d5554729b18a2c06fe7ce699687a

 -- Marc Deslauriers <email address hidden>  Tue, 23 Feb 2021 07:58:11 -0500

Available diffs

2.82-1ubuntu1.2

Superseded in groovy-updates on 2021-06-02

Superseded in groovy-security on 2021-06-02

dnsmasq (2.82-1ubuntu1.2) groovy-security; urgency=medium

  * SECURITY REGRESSION: issue with multiple queries and issue with retries
    (LP: #1916462)
    - backport multiple upstream commits to fix regressions
      + 04490bf622ac84891aad6f2dd2edf83725decdee
      + 12af2b171de0d678d98583e2190789e544440e02
      + 3f535da79e7a42104543ef5c7b5fa2bed819a78b
      + 25e63f1e56f5acdcf91893a1b92ad1e0f2f552d8
      + 141a26f979b4bc959d8e866a295e24f8cf456920
      + 305cb79c5754d5554729b18a2c06fe7ce699687a

 -- Marc Deslauriers <email address hidden>  Tue, 23 Feb 2021 07:52:53 -0500

Available diffs

2.84-1ubuntu2

Superseded in impish-release on 2021-06-15

Obsolete in hirsute-release on 2022-07-23

Deleted in hirsute-proposed on 2022-07-24 (Reason: moved to Release)

dnsmasq (2.84-1ubuntu2) hirsute; urgency=medium

  * No change rebuild with fixed ownership.

 -- Dimitri John Ledkov <email address hidden>  Tue, 16 Feb 2021 15:12:23 +0000

Available diffs

diff from 2.82-1ubuntu2 to 2.84-1ubuntu2 (14.1 KiB)
diff from 2.84-1ubuntu1 to 2.84-1ubuntu2 (293 bytes)

2.84-1ubuntu1

Superseded in hirsute-proposed on 2021-02-16

dnsmasq (2.84-1ubuntu1) hirsute; urgency=medium

  * Resynchronize on Debian, remaining change
  * src/radv.c: avoid leases to be issued forever when not set
    LP: #1894619)

Available diffs

diff from 2.82-1ubuntu2 to 2.84-1ubuntu1 (14.0 KiB)

2.82-1ubuntu2

Superseded in hirsute-release on 2021-03-01

Deleted in hirsute-proposed on 2021-03-03 (Reason: moved to Release)

dnsmasq (2.82-1ubuntu2) hirsute; urgency=medium

  * SECURITY UPDATE: Multiple security issues
    - CVE-2020-25681: heap overflow in RRSets sorting
    - CVE-2020-25682: buffer overflow in extracting names from DNS packets
    - CVE-2020-25683: heap overflow in DNSSEC validation
    - CVE-2020-25684: cache poisoning issue via address/port
    - CVE-2020-25685: cache poisoning issue via weak hash
    - CVE-2020-25686: birthday attack via incorrect existing requests check
    - CVE-2020-25687: heap overflow in DNSSEC validation

 -- Marc Deslauriers <email address hidden>  Fri, 08 Jan 2021 09:50:21 -0500

Available diffs

diff from 2.82-1ubuntu1 to 2.82-1ubuntu2 (13.1 KiB)

2.79-1ubuntu0.2

Superseded in bionic-updates on 2021-02-24

Superseded in bionic-security on 2021-02-24

dnsmasq (2.79-1ubuntu0.2) bionic-security; urgency=medium

  * SECURITY UPDATE: Multiple security issues
    - CVE-2020-25681: heap overflow in RRSets sorting
    - CVE-2020-25682: buffer overflow in extracting names from DNS packets
    - CVE-2020-25683: heap overflow in DNSSEC validation
    - CVE-2020-25684: cache poisoning issue via address/port
    - CVE-2020-25685: cache poisoning issue via weak hash
    - CVE-2020-25686: birthday attack via incorrect existing requests check
    - CVE-2020-25687: heap overflow in DNSSEC validation
    - CVE-2019-14834: memory leak via DHCP response creation

 -- Marc Deslauriers <email address hidden>  Fri, 08 Jan 2021 09:59:59 -0500

Available diffs

diff from 2.79-1ubuntu0.1 to 2.79-1ubuntu0.2 (925 bytes)

2.75-1ubuntu0.16.04.7

Superseded in xenial-updates on 2021-02-24

Superseded in xenial-security on 2021-02-24

dnsmasq (2.75-1ubuntu0.16.04.7) xenial-security; urgency=medium

  * SECURITY UPDATE: Multiple security issues
    - CVE-2020-25681: heap overflow in RRSets sorting
    - CVE-2020-25682: buffer overflow in extracting names from DNS packets
    - CVE-2020-25683: heap overflow in DNSSEC validation
    - CVE-2020-25684: cache poisoning issue via address/port
    - CVE-2020-25685: cache poisoning issue via weak hash
    - CVE-2020-25686: birthday attack via incorrect existing requests check
    - CVE-2020-25687: heap overflow in DNSSEC validation
    - CVE-2019-14834: memory leak via DHCP response creation

 -- Marc Deslauriers <email address hidden>  Fri, 08 Jan 2021 12:34:33 -0500

Available diffs

2.80-1.1ubuntu1.2

Superseded in focal-updates on 2021-02-24

Superseded in focal-security on 2021-02-24

dnsmasq (2.80-1.1ubuntu1.2) focal-security; urgency=medium

  * SECURITY UPDATE: Multiple security issues
    - CVE-2020-25681: heap overflow in RRSets sorting
    - CVE-2020-25682: buffer overflow in extracting names from DNS packets
    - CVE-2020-25683: heap overflow in DNSSEC validation
    - CVE-2020-25684: cache poisoning issue via address/port
    - CVE-2020-25685: cache poisoning issue via weak hash
    - CVE-2020-25686: birthday attack via incorrect existing requests check
    - CVE-2020-25687: heap overflow in DNSSEC validation
    - CVE-2019-14834: memory leak via DHCP response creation

 -- Marc Deslauriers <email address hidden>  Fri, 08 Jan 2021 09:59:59 -0500

Available diffs

diff from 2.80-1.1ubuntu1.1 to 2.80-1.1ubuntu1.2 (930 bytes)

2.82-1ubuntu1.1

Superseded in groovy-updates on 2021-02-24

Superseded in groovy-security on 2021-02-24

dnsmasq (2.82-1ubuntu1.1) groovy-security; urgency=medium

  * SECURITY UPDATE: Multiple security issues
    - CVE-2020-25681: heap overflow in RRSets sorting
    - CVE-2020-25682: buffer overflow in extracting names from DNS packets
    - CVE-2020-25683: heap overflow in DNSSEC validation
    - CVE-2020-25684: cache poisoning issue via address/port
    - CVE-2020-25685: cache poisoning issue via weak hash
    - CVE-2020-25686: birthday attack via incorrect existing requests check
    - CVE-2020-25687: heap overflow in DNSSEC validation

 -- Marc Deslauriers <email address hidden>  Fri, 08 Jan 2021 09:50:21 -0500

Available diffs

diff from 2.82-1ubuntu1 (in Ubuntu) to 2.82-1ubuntu1.1 (13.1 KiB)

2.82-1ubuntu1

Superseded in hirsute-release on 2021-01-25

Obsolete in groovy-release on 2021-12-22

Deleted in groovy-proposed on 2022-07-23 (Reason: moved to Release)

dnsmasq (2.82-1ubuntu1) groovy; urgency=medium

  * src/radv.c: avoid leases to be issued forever when not set (LP: #1894619)

 -- Christian Ehrhardt <email address hidden>  Wed, 16 Sep 2020 14:26:58 +0200

Available diffs

diff from 2.81-4build1 to 2.82-1ubuntu1 (9.9 KiB)
diff from 2.82-1 (in Debian) to 2.82-1ubuntu1 (810 bytes)

2.82-1

Superseded in groovy-proposed on 2020-09-17

Deleted in groovy-proposed on 2020-07-21 (Reason: Reverting to avoid delaying nettle transition)

dnsmasq (2.82-1) unstable; urgency=low

   * New upstream.

 -- Simon Kelley <email address hidden>  Fri, 26 Jun 2020 22:22:41 +0000

Available diffs

diff from 2.81-4build1 (in Ubuntu) to 2.82-1 (10.0 KiB)

2.81-4build1

Superseded in groovy-release on 2020-09-17

Deleted in groovy-proposed on 2020-09-18 (Reason: moved to Release)

Superseded in groovy-proposed on 2020-07-20

dnsmasq (2.81-4build1) groovy; urgency=medium

  * No change rebuild against new libnettle8 and libhogweed6 ABI.

 -- Dimitri John Ledkov <email address hidden>  Mon, 29 Jun 2020 22:23:32 +0100

Available diffs

diff from 2.82-1 (in Debian) to 2.81-4build1 (10.0 KiB)
diff from 2.81-4 (in Debian) to 2.81-4build1 (587 bytes)

2.81-4

Superseded in groovy-release on 2020-07-21

Deleted in groovy-proposed on 2020-07-22 (Reason: moved to Release)

dnsmasq (2.81-4) unstable; urgency=low

   * Remove runit support when building for Ubuntu. (closes: #960401)

 -- Simon Kelley <email address hidden>  Fri, 26 Jun 2020 21:52:44 +0000

Available diffs

diff from 2.81-3ubuntu2 (in Ubuntu) to 2.81-4 (1.4 KiB)

2.81-3ubuntu2

Superseded in groovy-release on 2020-06-29

Deleted in groovy-proposed on 2020-07-01 (Reason: moved to Release)

dnsmasq (2.81-3ubuntu2) groovy; urgency=medium

  * Additional fix for build without dh_runit.

 -- Steve Langasek <email address hidden>  Thu, 07 May 2020 22:13:42 +0000

Available diffs

diff from 2.80-1.1ubuntu1 to 2.81-3ubuntu2 (264.6 KiB)
diff from 2.81-3ubuntu1 to 2.81-3ubuntu2 (890 bytes)

2.81-3ubuntu1

Superseded in groovy-proposed on 2020-05-07

dnsmasq (2.81-3ubuntu1) groovy; urgency=medium

  * Drop dh_runit handling, unsupported in Ubuntu and causes a build
    failure.

 -- Steve Langasek <email address hidden>  Thu, 07 May 2020 14:30:53 -0700

Available diffs

diff from 2.81-3 (in Debian) to 2.81-3ubuntu1 (844 bytes)

2.81-3

Superseded in groovy-proposed on 2020-05-07

dnsmasq (2.81-3) unstable; urgency=low

   * Fixes to control file for bug 958100

 -- Simon Kelley <email address hidden>  Sun, 19 Apr 2020 21:44:12 +0000

2.80-1.1ubuntu1

Superseded in groovy-release on 2020-05-08

Published in focal-release on 2020-02-15

Deleted in focal-proposed (Reason: moved to Release)

dnsmasq (2.80-1.1ubuntu1) focal; urgency=low

  * Merge from Debian unstable.  Remaining changes:
    - Revert upstream commit 3af747d94bae66a2a1b564b2d04161a78159a434:
      "Do unsolicited RAs for interfaces which appear after dnsmasq startup."
      - it caused a regression in the network-manager autopkgtests.
    - Fix FTBFS in eoan due to glibc 2.30 SIOCGSTAMP changes
    - Apply ab73a746a0d6fcac2e682c5548eeb87fb9c9c82e from upstream GIT to fix
      build error against nettle 3.5.

Available diffs

diff from 2.80-1ubuntu4 to 2.80-1.1ubuntu1 (1.8 KiB)

2.80-1ubuntu4

Superseded in focal-release on 2020-02-15

Deleted in focal-proposed on 2020-02-16 (Reason: moved to Release)

dnsmasq (2.80-1ubuntu4) focal; urgency=medium

  * Apply ab73a746a0d6fcac2e682c5548eeb87fb9c9c82e from upstream GIT to fix
    build error against nettle 3.5. Closes: #940985; thanks to Andreas
    Metzler <email address hidden>.

 -- Steve Langasek <email address hidden>  Mon, 04 Nov 2019 17:28:11 -0800

Available diffs

diff from 2.80-1ubuntu2 to 2.80-1ubuntu4 (803 bytes)
diff from 2.80-1ubuntu3 to 2.80-1ubuntu4 (720 bytes)

2.80-1ubuntu3

Superseded in focal-proposed on 2019-11-05

dnsmasq (2.80-1ubuntu3) focal; urgency=medium

  * No-change rebuild against libnettle7

 -- Steve Langasek <email address hidden>  Thu, 31 Oct 2019 22:10:11 +0000

Available diffs

diff from 2.80-1ubuntu2 to 2.80-1ubuntu3 (317 bytes)

2.80-1ubuntu2

Superseded in focal-release on 2019-11-07

Obsolete in eoan-release on 2020-12-29

Deleted in eoan-proposed on 2020-12-29 (Reason: moved to release)

dnsmasq (2.80-1ubuntu2) eoan; urgency=medium

  * Fix FTBFS in eoan due to glibc 2.30 SIOCGSTAMP changes (LP: #1843430)

 -- Christian Ehrhardt <email address hidden>  Tue, 10 Sep 2019 15:00:04 +0200

Available diffs

diff from 2.80-1ubuntu1 to 2.80-1ubuntu2 (526 bytes)

2.80-1ubuntu1

Superseded in eoan-release on 2019-09-12

Obsolete in disco-release on 2020-07-14

Deleted in disco-proposed on 2020-07-14 (Reason: moved to release)

dnsmasq (2.80-1ubuntu1) disco; urgency=medium

  * Revert upstream commit 3af747d94bae66a2a1b564b2d04161a78159a434:
    "Do unsolicited RAs for interfaces which appear after dnsmasq startup."
    - it caused a regression in the network-manager autopkgtests.

 -- Julian Andres Klode <email address hidden>  Tue, 08 Jan 2019 16:34:58 +0100

Available diffs

diff from 2.80-1 (in Debian) to 2.80-1ubuntu1 (902 bytes)

2.80-1

Superseded in disco-release on 2019-01-22

Deleted in disco-proposed on 2019-01-23 (Reason: moved to release)

dnsmasq (2.80-1) unstable; urgency=low

   * New upstream. (closes: #837602) (closes: #794640) (closes: #794636)
   * Close old bugs, long agp fixed. (closes: #802845) (closes: #754299)
   * Provide usr/lib/tmpfiles.d/dnsmasq.conf. (closes: #872396)
   * Run restorecon on /run/dnsmasq for SE Linux. (closes: #872397)

 -- Simon Kelley <email address hidden>  Mon, 17 Sep 2018 23:11:25 +0000

Available diffs

diff from 2.79-1 to 2.80-1 (72.7 KiB)

2.75-1ubuntu0.16.04.5

Superseded in xenial-updates on 2021-01-19

Superseded in xenial-security on 2021-01-19

dnsmasq (2.75-1ubuntu0.16.04.5) xenial-security; urgency=medium

  * trusty-anchors.conf: Update DNSSEC trust anchors
    - 05da782f8f45933915af0ef3cc1ba35e31d20c59

 -- Marc Deslauriers <email address hidden>  Thu, 12 Jul 2018 09:39:42 -0400

Available diffs

2.79-1

Superseded in disco-release on 2018-12-18

Obsolete in cosmic-release on 2020-07-13

Published in bionic-release on 2018-04-02

Deleted in bionic-proposed (Reason: moved to release)

dnsmasq (2.79-1) unstable; urgency=low

   * New upstream. (closes: #888200)
   * Fix trust-anchor regex in init script. (closes: #884347)
   * Fix exit code for dhcp_release6 (closes: #833596)
   * Add project homepage to control file. (closes: #887764)
   * New binary package dnsmasq-base-lua, includes Lua support.
   * Remove hardwired shlibs dependency for libnettle 3.3 and
     fix code to avoid ABI breakage as long as compiled against
     libnettle 3.4 or later. (closes: #891315)

 -- Simon Kelley <email address hidden>  Fri, 16 Feb 2018 19:54:22 +0000

Available diffs

diff from 2.78-3 to 2.79-1 (69.1 KiB)

Ubuntudnsmasq package

Change log for dnsmasq package in Ubuntu

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Ubuntu
dnsmasq package