git: 8d75a12779af - main - dns/dnsmasq-devel: update to v2.91test9
- Go to: [ bottom of page ] [ top of archives ] [ this month ]
Date: Thu, 23 Jan 2025 21:33:07 UTC
The branch main has been updated by mandree: URL: https://cgit.FreeBSD.org/ports/commit/?id=8d75a12779afbf4c7278a494210be5d2a1a531ac commit 8d75a12779afbf4c7278a494210be5d2a1a531ac Author: Matthias Andree <mandree@FreeBSD.org> AuthorDate: 2025-01-23 21:30:29 +0000 Commit: Matthias Andree <mandree@FreeBSD.org> CommitDate: 2025-01-23 21:32:54 +0000 dns/dnsmasq-devel: update to v2.91test9 Upstream commit history, all changes by Simon Kelley: * a4569c2 2025-01-20 | Correct BNF for --trust-anchor in manpage. * 199e65c 2025-01-20 | Remove misleading comment. * bb8811d 2025-01-20 | Convert DNS names in logs to all lower case. * 995a16c 2025-01-19 | Implement "DNS-0x20 encoding". * 65f9c1a 2025-01-19 | Case-sensitive matching of questions and answers. Upstream CHANGELOG addition: | Implement "DNS-0x20 encoding", for extra protection against | reply-spoof attacks. Since DNS queries are case-insensitive, it's | possible to randomly flip the case of letters in a query and still get | the correct answer back. | This adds an extra dimension for a cache-poisoning attacker to guess | when sending replies in-the-blind since it's expected that the | legitimate answer will have the same pattern of upper and lower case | as the query, so any replies which don't can be ignored as malicious. | The amount of extra entropy clearly depends on the number of a-z and | A-Z characters in the query, and this implementation puts a hard limit | of 32 bits to make rescource allocation easy. This about doubles | entropy over the standard random ID and random port combination. MFH: 2025Q1 --- dns/dnsmasq-devel/Makefile | 2 +- dns/dnsmasq-devel/distinfo | 6 +++--- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/dns/dnsmasq-devel/Makefile b/dns/dnsmasq-devel/Makefile index 568c7d580629..e6155100b5d4 100644 --- a/dns/dnsmasq-devel/Makefile +++ b/dns/dnsmasq-devel/Makefile @@ -1,5 +1,5 @@ PORTNAME= dnsmasq -DISTVERSION= 2.91test8 # remember to bump PORTEPOCH when going from test to rc! +DISTVERSION= 2.91test9 # remember to bump PORTEPOCH when going from test to rc! # Leave the PORTREVISION in even if 0 to avoid accidental PORTEPOCH bumps: PORTREVISION= 0 PORTEPOCH= 5 diff --git a/dns/dnsmasq-devel/distinfo b/dns/dnsmasq-devel/distinfo index c99ed84120bb..b7fba25df124 100644 --- a/dns/dnsmasq-devel/distinfo +++ b/dns/dnsmasq-devel/distinfo @@ -1,3 +1,3 @@ -TIMESTAMP = 1737489636 -SHA256 (dnsmasq-2.91test8.tar.xz) = f23fbdf1863872aa864296e38aa114c51c6e990d8a2ca648d21bf003f3aa5e47 -SIZE (dnsmasq-2.91test8.tar.xz) = 572576 +TIMESTAMP = 1737667671 +SHA256 (dnsmasq-2.91test9.tar.xz) = 0a1301e08622d27da28976b25575fcff9f96085bd0cda749c9cbb83675dc0237 +SIZE (dnsmasq-2.91test9.tar.xz) = 573316