Changelog for dnsmasq-debugsource-2.45-12.3.i586.rpm :
Mon Aug 24 14:00:00 2009 ugAATTsuse.de
- VUL-0: dnsmasq: remote buffer overflow exploitable
if TFTP server is enabled (bnc#533710)

Tue Nov 11 13:00:00 2008 kukukAATTsuse.de
- Add /usr/sbin/useradd to PreReq

Sat Sep 13 14:00:00 2008 mrueckertAATTsuse.de
- fix manpage.diff to actually apply
- mark files below /etc as config
- do not install README.SUSE in %install as %doc will clean the
directory anyway.

Fri Sep 12 14:00:00 2008 ugAATTsuse.de
- user dnsmasq moved to group nogroup (bnc#401648)
- added README.SUSE
- added warning to init script when /etc/ppp is in use
since it\'s not readable anymore

Tue Aug 19 14:00:00 2008 ugAATTsuse.de
- init script fixed

Mon Aug 11 14:00:00 2008 ugAATTsuse.de
- Fix crash when unknown client attempts to renew a DHCP
lease, problem introduced in version 2.43. Thanks to
Carlos Carvalho for help chasing this down.
- Fix potential crash when a host which doesn\'t have a lease
does DHCPINFORM. Again introduced in 2.43. This bug has
never been reported in the wild.
- Fix crash in netlink code introduced in 2.43. Thanks to
Jean Wolter for finding this.
- Change implementation of min_port to work even if min-port
as large.
- 2.4.45

Mon Jul 14 14:00:00 2008 ugAATTsuse.de
- This release fixes the DNS spoofing vulnerabilities announced in
CERT VU#800113. It adds source port randomization for communication with
upstream nameservers and replaces the C library PRNG with stronger code. It
makes failure to drop root privileges a hard error (previous versions would
log the error and continue, running as root.) Other changes include an
update to avoid triggering Linux kernel messages about an out-of-date
capabilities ABI, support for NAPTR records, and RFC 5107
server-id-override.
- 2.43

Thu Jun 19 14:00:00 2008 ugAATTsuse.de
- running as user dnsmasq now (bnc#401643)

Thu Jun 5 14:00:00 2008 ugAATTsuse.de

* Add --dhcp-alternate-port option. Thanks to Jan Psota for
the suggestion.

* Updated Polish translations - thank to Jan Psota.

* Provide --dhcp-bridge on all BSD variants.

* Define _LARGEFILE_SOURCE which removes an arbitrary 2GB
limit on logfiles. Thanks to Paul Chambers for spotting
the problem.

* Fix RFC3046 agent-id echo code, broken for many
releases. Thanks to Jeremy Laine for spotting the problem
and providing a patch.

* Add --dhcp-scriptuser option.

* Support new capability interface on suitable Linux
kernels, removes \"legacy support in use\" messages. Thanks
to Jorge Bastos for pointing this out.

* Fix subtle bug in cache code which could cause dnsmasq to
lock spinning CPU in rare circumstances. Thanks to Alex
Chekholko for bug reports and help debugging.

* Support netascii transfer mode for TFTP.
- 2.42

Wed Feb 13 13:00:00 2008 ugAATTsuse.de
- Allow the DNS function to be completely disabled, by
setting the port to zero \"--port=0\"
- Fix a bug where NXDOMAIN could be returned for a query
even if the name\'s value was known for a different query
type.
- Fixed possible crash bug in DBus IPv6 code
- Add --dhcp-no-override option
- Add --tftp-port-range option
- Add --stop-dns-rebind option
- Added --all-servers option
- Add --dhcp-optsfile option
- Fixed broken --alias functionality
- Add --dhcp-match flag
- Added --dhcp-broadcast, to force broadcast replies
- multiple bugs fixed
- 2.41

Fri Jan 4 13:00:00 2008 crrodriguezAATTsuse.de
- bzip tarball
- use find_lang macro.

Thu Dec 6 13:00:00 2007 ugAATTsuse.de
- version 2.40
- Fix handling of fully-qualified names in --dhcp-host
- Fixed error in manpage
- Fixed misaligned memory access which caused problems on
Blackfin CPUs
- lots of new options (see changelog for details)

Wed May 2 14:00:00 2007 ugAATTsuse.de
- version 2.39
- names like \"localhost.\" in /etc/hosts with trailing period
are treated as fully-qualified.
- Tolerate and ignore spaces around commas in the
configuration file in all circumstances
- /a is no longer a valid escape in quoted strings.
- Added symbolic DHCP option names
- Overhauled the log code
- --log-facility can now take a file-name
- Added --log-dhcp flag
- Added 127.0.0.0/8 and 169.254.0.0/16 to the address
ranges affected by --bogus-priv
- Fixed failure of TFTP server with --listen-address
- Added --dhcp-circuitid and --dhcp-remoteid for RFC3046
- Added --dhcp-subscrid for RFC3993 subscriber-id relay
- Corrected garbage-collection
- Allow absolute paths for TFTP transfers even when
- -tftp-root is set, as long as the path matches the root
- Updated translations
- Added --interface-name option

Thu Mar 15 13:00:00 2007 ugAATTsuse.de
- SuSEFirewall service files fixed and enhanced

Tue Mar 6 13:00:00 2007 ugAATTsuse.de
- SuSEFirewall service file added

Tue Feb 13 13:00:00 2007 ugAATTsuse.de
- version 2.38
Don\'t send length zero DHCP option 43 and cope with
encapsulated options whose total length exceeds 255 octets
by splitting them into multiple option 43 pieces.
Avoid queries being retried forever when --strict-order is
set and an upstream server returns a SERVFAIL
error. Thanks to Johannes Stezenbach for spotting this.
Fix BOOTP support, broken in version 2.37.
Add example dhcp-options for Etherboot.
Add \\e (for ASCII ESCape) to the set of valid escapes
in config-file strings.
Added --dhcp-option-force flag and examples in the
configuration file which use this to control PXELinux.
Added --tftp-no-blocksize option.
Set netid tag \"bootp\" when BOOTP (rather than DHCP) is in
use. This makes it easy to customise which options are
sent to BOOTP clients. (BOOTP allows only 64 octets for
options, so it can be necessary to trim things.)
Fix rare hang in cache code, a 2.37 regression. This
probably needs an infinite DHCP lease and some bad luck to
trigger. Thanks to Detlef Reichelt for bug reports and
testing.

Mon Feb 5 13:00:00 2007 ugAATTsuse.de
Add better support for RFC-2855 DHCP-over-firewire and RFC
-4390 DHCP-over-InfiniBand. A good suggestion from Karl Svec.
Some efficiency tweaks to the cache code for very large
/etc/hosts files. Should improve reverse (address->name)
lookups and garbage collection. Thanks to Jan \'RedBully\'
Seiffert for input on this.
Fix regression in 2.36 which made bogus-nxdomain
and DNS caching unreliable. Thanks to Dennis DeDonatis
and Jan Seiffert for bug reports.
Make DHCP encapsulated vendor-class options sane. Be
warned that some conceivable existing configurations
using these may break, but they work in a much
simpler and more logical way now. Prepending
\"vendor:\" to an option encapsulates it
in option 43, and the option is sent only if the
client-supplied vendor-class substring-matches with
the given client-id. Thanks to Dennis DeDonatis for
help with this.
Apply patch from Jan Seiffert to tidy up tftp.c
Add support for overloading the filename and servername
fields in DHCP packet. This gives extra option-space when
these fields are not being used or with a modern client
which supports moving them into options.
Added a LIMITS section to the man-page, with guidance on
maximum numbers of clients, file sizes and tuning.
- version 2.37

Mon Jan 22 13:00:00 2007 ugAATTsuse.de
- version 2.36

Mon Oct 30 13:00:00 2006 ugAATTsuse.de
- version 2.35
- better performance on parsing huge /etc/hosts files

Tue Oct 17 14:00:00 2006 ugAATTsuse.de
- version 2.34
- Tweak network-determination code
- Improve handling of high DNS loads
- Fixed intermittent infinite loop when re-reading
/etc/ethers after SIGHUP
- Provide extra information to the lease-change script
- Run the lease change script as root
- Add contrib/port-forward/
* which is a script to set up
port-forwards using the DHCP lease-change script
- Fix unaligned access problem
- Fixed problem with DHCPRELEASE
- Updated French translation
- Upgraded the name hash function in the DNS cache
- Added --clear-on-reload flag
- Treat a nameserver address of 0.0.0.0 as \"nothing\"
- Added Webmin module in contrib/webmin

Fri Aug 11 14:00:00 2006 ugAATTsuse.de
- init-script more LSB conform
patch by Matthias Andree

Mon Aug 7 14:00:00 2006 ugAATTsuse.de
- version 2.33
- Provide extra information to lease-change script
- Fix breakage with some DHCP relay implementations
- compilation warning fixes
- minor DNS and DHCP fixes and enhancements