From e0a4c5c8be306418d09950162d513a6cedab613a Mon Sep 17 00:00:00 2001 From: Matthias Andree Date: Thu, 8 Apr 2021 23:48:18 +0200 Subject: [PATCH] dns/dnsmasq: security update to v2.85 release Changelog: https://thekelleys.org.uk/gitweb/?p=dnsmasq.git;a=blob_plain;f=CHANGELOG;hb=v2.85 Configurations where server lines contain a @ character, f.i. server=1.1.1.1@em0 or server=1.1.1.1@192.0.2.1, disabled source port randomization, making cache poisoning attacks possible. v2.85 mitigates this. MFH: 2021Q2 Security: CVE-2021-3448 Security: 5b72b1ff-877c-11eb-bd4f-2f1d57dafe46 (VuXML) --- dns/dnsmasq/Makefile | 3 +-- dns/dnsmasq/distinfo | 6 +++--- 2 files changed, 4 insertions(+), 5 deletions(-) diff --git a/dns/dnsmasq/Makefile b/dns/dnsmasq/Makefile index be4ff2e379b52..ce494dc571333 100644 --- a/dns/dnsmasq/Makefile +++ b/dns/dnsmasq/Makefile @@ -1,7 +1,7 @@ # Created by: Steven Honson PORTNAME= dnsmasq -DISTVERSION= 2.84 +DISTVERSION= 2.85 # Leave the PORTREVISION in even if 0 to avoid accidental PORTEPOCH bumps: PORTREVISION= 0 PORTEPOCH= 1 @@ -105,7 +105,6 @@ LDFLAGS+= -L${LOCALBASE}/lib ${_intllibs} ${ICONV_LIB} post-patch: ${REINPLACE_CMD} -e '/^lua_/s/lua5\.2/lua-${LUA_VER}/' ${WRKSRC}/Makefile - ${REINPLACE_CMD} -e 's/2\.84rc2/2.84/' ${WRKSRC}/VERSION pre-configure: pretty-print-config .if ${PORT_OPTIONS:MIDN} diff --git a/dns/dnsmasq/distinfo b/dns/dnsmasq/distinfo index 1c5c55e3afb24..68e571b8cce05 100644 --- a/dns/dnsmasq/distinfo +++ b/dns/dnsmasq/distinfo @@ -1,3 +1,3 @@ -TIMESTAMP = 1611563398 -SHA256 (dnsmasq-2.84.tar.xz) = 603195c64b73137609b07e1024ae0b37f652b2f5fe467dce66985b3d1850050c -SIZE (dnsmasq-2.84.tar.xz) = 514216 +TIMESTAMP = 1617893689 +SHA256 (dnsmasq-2.85.tar.xz) = ad98d3803df687e5b938080f3d25c628fe41c878752d03fbc6199787fee312fa +SIZE (dnsmasq-2.85.tar.xz) = 518316