git: 8d75a12779af - main - dns/dnsmasq-devel: update to v2.91test9

From: Matthias Andree <mandree_at_FreeBSD.org>
Date: Thu, 23 Jan 2025 21:33:07 UTC
The branch main has been updated by mandree:

URL: https://cgit.FreeBSD.org/ports/commit/?id=8d75a12779afbf4c7278a494210be5d2a1a531ac

commit 8d75a12779afbf4c7278a494210be5d2a1a531ac
Author:     Matthias Andree <mandree@FreeBSD.org>
AuthorDate: 2025-01-23 21:30:29 +0000
Commit:     Matthias Andree <mandree@FreeBSD.org>
CommitDate: 2025-01-23 21:32:54 +0000

    dns/dnsmasq-devel:  update to v2.91test9
    
    Upstream commit history, all changes by Simon Kelley:
    
    * a4569c2 2025-01-20 | Correct BNF for --trust-anchor in manpage.
    * 199e65c 2025-01-20 | Remove misleading comment.
    * bb8811d 2025-01-20 | Convert DNS names in logs to all lower case.
    * 995a16c 2025-01-19 | Implement "DNS-0x20 encoding".
    * 65f9c1a 2025-01-19 | Case-sensitive matching of questions and answers.
    
    Upstream CHANGELOG addition:
    
    | Implement "DNS-0x20 encoding", for extra protection against
    | reply-spoof attacks. Since DNS queries are case-insensitive, it's
    | possible to randomly flip the case of letters in a query and still get
    | the correct answer back.
    | This adds an extra dimension for a cache-poisoning attacker to guess
    | when sending replies in-the-blind since it's expected that the
    | legitimate answer will have the same  pattern of upper and lower case
    | as the query, so any replies which don't can be ignored as malicious.
    | The amount of extra entropy clearly depends on the number of a-z and
    | A-Z characters in the query, and this implementation puts a hard limit
    | of 32 bits to make rescource allocation easy. This about doubles
    | entropy over the standard random ID and random port combination.
    
    MFH:            2025Q1
---
 dns/dnsmasq-devel/Makefile | 2 +-
 dns/dnsmasq-devel/distinfo | 6 +++---
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/dns/dnsmasq-devel/Makefile b/dns/dnsmasq-devel/Makefile
index 568c7d580629..e6155100b5d4 100644
--- a/dns/dnsmasq-devel/Makefile
+++ b/dns/dnsmasq-devel/Makefile
@@ -1,5 +1,5 @@
 PORTNAME=	dnsmasq
-DISTVERSION=	2.91test8 # remember to bump PORTEPOCH when going from test to rc!
+DISTVERSION=	2.91test9 # remember to bump PORTEPOCH when going from test to rc!
 # Leave the PORTREVISION in even if 0 to avoid accidental PORTEPOCH bumps:
 PORTREVISION=	0
 PORTEPOCH=	5
diff --git a/dns/dnsmasq-devel/distinfo b/dns/dnsmasq-devel/distinfo
index c99ed84120bb..b7fba25df124 100644
--- a/dns/dnsmasq-devel/distinfo
+++ b/dns/dnsmasq-devel/distinfo
@@ -1,3 +1,3 @@
-TIMESTAMP = 1737489636
-SHA256 (dnsmasq-2.91test8.tar.xz) = f23fbdf1863872aa864296e38aa114c51c6e990d8a2ca648d21bf003f3aa5e47
-SIZE (dnsmasq-2.91test8.tar.xz) = 572576
+TIMESTAMP = 1737667671
+SHA256 (dnsmasq-2.91test9.tar.xz) = 0a1301e08622d27da28976b25575fcff9f96085bd0cda749c9cbb83675dc0237
+SIZE (dnsmasq-2.91test9.tar.xz) = 573316