linux/meta-openembedded.git/meta-networking/recipes-support/dnsmasq, branch sumo

dnsmasq: CVE-2017-15107

2018-09-27T01:51:17+00:00

* CVE-2017-15107 A vulnerability was found in Dnsmasq's implementation of DNSSEC. Wildcard synthesized NSEC records could be improperly interpreted to prove the non-existence of hostnames that actually exist. Affects dnsmasq <= 2.78 CVE: CVE-2017-15107 Ref: https://access.redhat.com/security/cve/cve-2017-15107 Signed-off-by: Sinan Kaya Signed-off-by: Armin Kuster

dnsmasq: update SRC_URI for versions 2.69 and earlier

2018-01-08T16:49:19+00:00

Versions 2.16 to 2.69 have now also moved into the archives folder. Signed-off-by: Andre McCurdy Signed-off-by: Armin Kuster Signed-off-by: Joe MacDonald

dnsmasq: upgrade to 2.78

2017-10-11T20:22:50+00:00

This update fixes a number of bugs including the following vulnerabilities: CVE-2017-13704 CVE-2017-14491 CVE-2017-14492 CVE-2017-14493 CVE-2017-14494 CVE-2017-14495 CVE-2017-14496 Further details can be found in the changelog here: http://www.thekelleys.org.uk/dnsmasq/CHANGELOG Signed-off-by: Paul Eggleton Signed-off-by: Martin Jansa Signed-off-by: Joe MacDonald

dnsmasq: add info for port setting

2017-03-23T12:26:59+00:00

The info is taken from CentOS which is usefull when bind (provides named) and dnsmasq are both installed and one may fail to start: | dnsmasq: failed to create listening socket for port 53: Address already in use Signed-off-by: Jackie Huang Signed-off-by: Martin Jansa Signed-off-by: Joe MacDonald

Make use of the new bb.utils.filter() function

2017-03-07T12:30:26+00:00

Signed-off-by: Peter Kjellerstedt Signed-off-by: Martin Jansa

remove some more True options to getVar calls

2017-02-13T17:43:23+00:00

getVar() now defaults to expanding by default, thus remove the True option from getVar() calls. Fix a small number of cases not addressed by the original patch: http://git.openembedded.org/meta-openembedded/commit/?id=efd3696e70a6603f1a45faa4a172433514f0a487 Signed-off-by: Andre McCurdy Signed-off-by: Martin Jansa

dnsmasq: allow for dnsmasq instances to reuse default dnsmasq.conf

2016-12-14T14:20:09+00:00

By defining 'listen-address' in the global dnsmasq.conf file we prevent other instances of dnsmasq from using the global config as we will get an error that the address is already in use. Instead we pass 'local-service' when we start the main dnsmasq instance which will listen on the loopback address as well as any other local subnets. This will allow the main dnsmasq instance to play nice with other instances we might start for network-manager, libvirt, lxc... Signed-off-by: Mark Asselstine Signed-off-by: Martin Jansa Signed-off-by: Joe MacDonald

dnsmasq: read the conf files found in dnsmasq.d

2016-12-14T14:20:09+00:00

The dnsmasq package installs a ${sysconfigdir}/dnsmasq.d directory but doesn't currently use any configuration files that might be placed there. This goes against what the user would expect and doesn't match what you see in other distros. We could ensure this config directory is read when dnsmasq is started, as we are doing here, or by including it in the main dnsmasq.conf file. By doing it here we can have better reuseability of the main dnsmasq.conf file by other instances of dnsmasq. There are currently no files added to the dnsmasq.d directory for core oe images, so this should not result in any runtime behavior changes. Signed-off-by: Mark Asselstine Signed-off-by: Martin Jansa Signed-off-by: Joe MacDonald

dnsmasq: update to version 2.76

2016-08-17T01:26:12+00:00

Correct do_compile_append() and do_install(), as the location of the DHCP lease tools has changed. Signed-off-by: Terry Boese Signed-off-by: Martin Jansa Signed-off-by: Joe MacDonald

meta-networking: use bb.utils.contains() instead of base_contains()

2016-05-05T15:41:28+00:00

base_contains() is a compatibility wrapper and may warn in the future, so replace all instances with bb.utils.contains(). Signed-off-by: Ross Burton Signed-off-by: Martin Jansa Signed-off-by: Joe MacDonald