-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Fri, 23 Jan 2024 22:52:01 +0000
Source: dnsmasq
Architecture: source
Version: 2.90-1
Distribution: unstable
Urgency: medium
Maintainer: Simon Kelley <simon@thekelleys.org.uk>
Changed-By: Simon Kelley <simon@thekelleys.org.uk>
Closes: 844989 966505 1007041 1033165 1034135 1040923 1050750 1063551
Changes:
dnsmasq (2.90-1) unstable; urgency=medium
.
[ Simon Kelley ]
* New upstream. (closes: #1033165)
* Move hard-coding of Lua version from the upstream Makefile
to d/rules.
* Security fixes for Keytrap - DNSSEC validation CPU exhaustion.
CVE-2023-50387 and CVE-2023-50868
[ Sven Geuer ]
* Introduce autokpgtests per d/tests/* (closes: #1034135).
* Switch to dpkg-source 3.0 (quilt) format (closes: #1007041).
* doc.html: Add patch to eliminate privacy breaches leaving the Donations
paragraph as untouched as possible.
* Prepend dnsmasq. to default, init, preinst, postinst, prerm, postrm.
* Rename d/systemd.service to d/dnsmasq.service.
* Rename d/systemd@.service to d/dnsmasq@.service.
* Refactor d/rules to use the DH sequencer and fix major lintian issues
(closes: #844989, #1040923, #1063551).
Modified files:
- d/rules
Complete rewrite making use of debhelper and its tools, fixes lintian
warning debian-rules-sets-dpkg-architecture-variable.
- d/control
Build-Depends, Pre-Depends, Depends added or changed as needed, lintian
error depends-on-obsolete-package fixed.
- d/dnsmasq.default
ENABLED removed and comment changed to fix lintian error
init.d-script-should-always-start-service.
- d/dnsmasq.init
Remove handling of obsolete ENABLED flag.
Extract code used with System-V-style init and systemd into
d/init-system-common, extract code used with systemd only
into d/systemd-helper. This fixes lintian warning
systemd-service-file-wraps-init-script.
Drop workaround for hypothetically non-existent file
/lib/lsb/init-functions, it has been around for more than a decade.
- d/dnsmasq.service, d/dnsmasq@.service
Adapt these files to make use of init-system-common and systemd-helper.
- d/dnsmasq.{post,pre}{inst,rm}
Rely mostly on the script snippets created by the DH tools to get
things done, implicitly fixes the lintian warnings
maintainer-script-should-not-use-dpkg-maintscript-helper and
command-with-path-in-maintainer-script.
- d/resolvconf*
Change file mode bits to 0755, the installed files need it
New files:
- d/dnsmasq.{install,links,maintscript}
- d/dnsmasq-base.{dirs,docs,install}
- d/dnsmasq-base-lua.{dirs,docs,install,links}
- d/dnsmasq-utils.{install,manpages}
The DH tools use these to install what was scripted explicitly
in the previous version of the d/rules file,
lintian warning dbus-policy-in-etc fixed
- d/init-system-common
- d/systemd-helper
These files contain slightly modified code formerly part of in
d/dnsmasq.init.
Deleted files:
- d/*conffiles
- d/lintian-override
- d/installed-marker
These are not in use anymore.
* Deal with a removed conffile and changed links.
Modified files:
- d/dnsmasq-base.{postinst,postrm}
New files:
- d/dnsmasq-base.maintscript
- d/dnsmasq-base-lua.maintscript
* Add watch file and upstream's signing key.
New files:
- d/watch
- d/u/signing-key.asc
* Remove dependency on package adduser.
Modified files:
- d/control
- d/dnsmasq.post{inst,rm}
* Refactor d/copyright to comply with DEP 5 (closes: #966505).
* Remove trailing whitespace from various files under debian/.
* Bump Standards-Version to 4.6.2.
* Specify Rules-Requires-Root.
* Update http:// to https:// with Homepage, Vcs-Git and Vcs-Browser.
* Introduce d/u/metadata.
* Fix lintian issue duplicate-short-description.
* Fix lintian issue capitalization-error-in-description.
* Bump Lua version to 5.4 (closes: #1050750).
Modified files:
- d/control
- d/t/functions.d/log.patterns
Checksums-Sha1:
078b294b8f10eaf0d398fefc1591b094e47bb69a 2528 dnsmasq_2.90-1.dsc
67789e49191523d8b31d515d8b6e9a03bd57fd29 841075 dnsmasq_2.90.orig.tar.gz
c3da9ffdafda3d6a829fe54ed2a4d847d67bc9aa 833 dnsmasq_2.90.orig.tar.gz.asc
7dd9c0e9d2a67f7e23d79aa436be746382e8f5ad 31172 dnsmasq_2.90-1.debian.tar.xz
62ead3b151276a4255aca0cddedbf2d29fe784ed 10249 dnsmasq_2.90-1_amd64.buildinfo
Checksums-Sha256:
2240fcfc35f7a8944abe72469f1ac0a45612e9bb477b7f55e80b2b088c36686b 2528 dnsmasq_2.90-1.dsc
8f6666b542403b5ee7ccce66ea73a4a51cf19dd49392aaccd37231a2c51b303b 841075 dnsmasq_2.90.orig.tar.gz
55c4ffc04b88b0aaadc0eb6719bec17260fd510f1c9d44a111deb40741f8492a 833 dnsmasq_2.90.orig.tar.gz.asc
7132238326bd840a570ac558e42b5313cf6bb2c7d46324e437e5d63b7bb4d6b3 31172 dnsmasq_2.90-1.debian.tar.xz
3d6c0cc71ed2091218d99d9742145ee6283109867b2e505f56788b12795b805c 10249 dnsmasq_2.90-1_amd64.buildinfo
Files:
f3217ffde01b9b5021118418943c3b45 2528 net optional dnsmasq_2.90-1.dsc
23a767c3a6797d20492d06d352fd926b 841075 net optional dnsmasq_2.90.orig.tar.gz
3b71f1f0f694cc15d141d2dd5f1f49b0 833 net optional dnsmasq_2.90.orig.tar.gz.asc
c624d9fa7ac9488268bd3d307affb3c2 31172 net optional dnsmasq_2.90-1.debian.tar.xz
fb481b08da55a60ea12bffeb4e6b9b9a 10249 net optional dnsmasq_2.90-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=YCIk
-----END PGP SIGNATURE-----
Attachment:
pgpMJs5isXWiw.pgp
Description: PGP signature