git: 8d75a12779af - main - dns/dnsmasq-devel: update to v2.91test9
- Go to: [ bottom of page ] [ top of archives ] [ this month ]
Date: Thu, 23 Jan 2025 21:33:07 UTC
The branch main has been updated by mandree:
URL: https://cgit.FreeBSD.org/ports/commit/?id=8d75a12779afbf4c7278a494210be5d2a1a531ac
commit 8d75a12779afbf4c7278a494210be5d2a1a531ac
Author: Matthias Andree <mandree@FreeBSD.org>
AuthorDate: 2025-01-23 21:30:29 +0000
Commit: Matthias Andree <mandree@FreeBSD.org>
CommitDate: 2025-01-23 21:32:54 +0000
dns/dnsmasq-devel: update to v2.91test9
Upstream commit history, all changes by Simon Kelley:
* a4569c2 2025-01-20 | Correct BNF for --trust-anchor in manpage.
* 199e65c 2025-01-20 | Remove misleading comment.
* bb8811d 2025-01-20 | Convert DNS names in logs to all lower case.
* 995a16c 2025-01-19 | Implement "DNS-0x20 encoding".
* 65f9c1a 2025-01-19 | Case-sensitive matching of questions and answers.
Upstream CHANGELOG addition:
| Implement "DNS-0x20 encoding", for extra protection against
| reply-spoof attacks. Since DNS queries are case-insensitive, it's
| possible to randomly flip the case of letters in a query and still get
| the correct answer back.
| This adds an extra dimension for a cache-poisoning attacker to guess
| when sending replies in-the-blind since it's expected that the
| legitimate answer will have the same pattern of upper and lower case
| as the query, so any replies which don't can be ignored as malicious.
| The amount of extra entropy clearly depends on the number of a-z and
| A-Z characters in the query, and this implementation puts a hard limit
| of 32 bits to make rescource allocation easy. This about doubles
| entropy over the standard random ID and random port combination.
MFH: 2025Q1
---
dns/dnsmasq-devel/Makefile | 2 +-
dns/dnsmasq-devel/distinfo | 6 +++---
2 files changed, 4 insertions(+), 4 deletions(-)
diff --git a/dns/dnsmasq-devel/Makefile b/dns/dnsmasq-devel/Makefile
index 568c7d580629..e6155100b5d4 100644
--- a/dns/dnsmasq-devel/Makefile
+++ b/dns/dnsmasq-devel/Makefile
@@ -1,5 +1,5 @@
PORTNAME= dnsmasq
-DISTVERSION= 2.91test8 # remember to bump PORTEPOCH when going from test to rc!
+DISTVERSION= 2.91test9 # remember to bump PORTEPOCH when going from test to rc!
# Leave the PORTREVISION in even if 0 to avoid accidental PORTEPOCH bumps:
PORTREVISION= 0
PORTEPOCH= 5
diff --git a/dns/dnsmasq-devel/distinfo b/dns/dnsmasq-devel/distinfo
index c99ed84120bb..b7fba25df124 100644
--- a/dns/dnsmasq-devel/distinfo
+++ b/dns/dnsmasq-devel/distinfo
@@ -1,3 +1,3 @@
-TIMESTAMP = 1737489636
-SHA256 (dnsmasq-2.91test8.tar.xz) = f23fbdf1863872aa864296e38aa114c51c6e990d8a2ca648d21bf003f3aa5e47
-SIZE (dnsmasq-2.91test8.tar.xz) = 572576
+TIMESTAMP = 1737667671
+SHA256 (dnsmasq-2.91test9.tar.xz) = 0a1301e08622d27da28976b25575fcff9f96085bd0cda749c9cbb83675dc0237
+SIZE (dnsmasq-2.91test9.tar.xz) = 573316