Subject: CVS commit: pkgsrc/net/dnsmasq
From: Adam Ciarcinski
Date: 2017-06-02 10:37:49
Message id: 20170602083749.C94EEFBEE@cvs.NetBSD.org

Log Message:
version 2.77
	    Generate an error when configured with a CNAME loop,
	    rather than a crash. Thanks to George Metz for
	    spotting this problem.

	    Calculate the length of TFTP error reply packet
	    correctly. This fixes a problem when the error
	    message in a TFTP packet exceeds the arbitrary
	    limit of 500 characters. The message was correctly
	    truncated, but not the packet length, so
	    extra data was appended. This is a possible
	    security risk, since the extra data comes from
	    a buffer which is also used for DNS, so that
	    previous DNS queries or replies may be leaked.

	    Fix logic error in Linux netlink code. This could
	    cause dnsmasq to enter a tight loop on systems
	    with a very large number of network interfaces.

	    Fix problem with --dnssec-timestamp whereby receipt
	    of SIGHUP would erroneously engage timestamp checking.

	    Bump zone serial on reloading /etc/hosts and friends
	    when providing authoritative DNS.

	    Handle v4-mapped IPv6 addresses sanely in --synth-domain.
	    These have standard representation like ::ffff:1.2.3.4
	    and are now converted to names like
	    <prefix>--ffff-1-2-3-4.<domain>

	    Handle binding upstream servers to an interface
	    (--server=1.2.3.4@eth0) when the named interface
	    is destroyed and recreated in the kernel.

	    Allow wildcard CNAME records in authoritative zones.
	    For example --cname=*.example.com,default.example.com

more...

Files:
RevisionActionfile
1.34modifypkgsrc/net/dnsmasq/Makefile
1.5modifypkgsrc/net/dnsmasq/PLIST
1.33modifypkgsrc/net/dnsmasq/distinfo
1.4addpkgsrc/net/dnsmasq/options.mk
1.2removepkgsrc/net/dnsmasq/patches/patch-dnsmasq.conf.example