Bump to the latest release. Upstream has reorganized the source in this
release, and the port has been adapted to path changes where necessary.
Approved by: zi (maintainer)
Sponsored by: Miles AS
This release fixes a number of bugs. It fixes a number of corner
case differences for the output more similar to Bind. The configure
sources are compatible with the new autoconf 2.70.
PR: 253026
Submitted by: jaap@NLnetLabs.nl (maintainer)
Upstream blessed v2.84 rc2 (which 2.83_1 effectively already was)
into v2.84 release, so take it (and patch the upstream bug of
leaving "rc2" in the version out).
MFH: 2021Q1 (regression fixes for security fix release)
Apparently there are situations where dnsmasq 2.83 can confuse
its peers or sockets, and the upstream Git contains fixes for them.
These four fixes essentially take dnsmasq to 2.84test3.
Obtained from: Simon Kelley <simon@thekelleys.org.uk>'s Git repository
CHANGELOG of version 2.83:
Use the values of --min-port and --max-port in outgoing
TCP connections to upstream DNS servers.
Fix a remote buffer overflow problem in the DNSSEC code. Any
dnsmasq with DNSSEC compiled in and enabled is vulnerable to this,
referenced by CVE-2020-25681, CVE-2020-25682, CVE-2020-25683
CVE-2020-25687.
Be sure to only accept UDP DNS query replies at the address
from which the query was originated. This keeps as much entropy
in the {query-ID, random-port} tuple as possible, to help defeat
cache poisoning attacks. Refer: CVE-2020-25684.
Use the SHA-256 hash function to verify that DNS answers
received are for the questions originally asked. This replaces
the slightly insecure SHA-1 (when compiled with DNSSEC) or
the very insecure CRC32 (otherwise). Refer: CVE-2020-25685.
Handle multiple identical near simultaneous DNS queries better.
Previously, such queries would all be forwarded
independently. This is, in theory, inefficent but in practise
not a problem, _except_ that is means that an answer for any
of the forwarded queries will be accepted and cached.
An attacker can send a query multiple times, and for each repeat,
another {port, ID} becomes capable of accepting the answer he is
sending in the blind, to random IDs and ports. The chance of a
succesful attack is therefore multiplied by the number of repeats
of the query. The new behaviour detects repeated queries and
merely stores the clients sending repeats so that when the
first query completes, the answer can be sent to all the
clients who asked. Refer: CVE-2020-25686.
MFH: 2021Q1
Security: 5b5cf6e5-5b51-11eb-95ac-7f9491278677
Security: CVE-2020-25684
Security: CVE-2020-25685
Security: CVE-2020-25686
Security: CVE-2020-25681
Security: CVE-2020-25682
Security: CVE-2020-25683
Security: CVE-2020-25687
January 09, 2021. KDE today announces the release of KDE Frameworks 5.78.0.
KDE Frameworks are 83 addon libraries to Qt which provide a wide variety of
commonly needed functionality in mature, peer reviewed and well tested
libraries with friendly licensing terms. For an introduction see the KDE
Frameworks release announcement.
This release is part of a series of planned monthly releases making
improvements available to developers in a quick and pred
Full Changelog:
https://kde.org/announcements/kde-frameworks-5.78.0
PR: 252591
Exp-run by: antoine
In file included from /usr/include/openssl/bn.h:20,
from /usr/include/openssl/engine.h:18,
from /wrkdirs/usr/ports/dns/yadifa/work/yadifa-2.4.1-9916/lib/dnscore/include/dnscore/digest.h:53,
from /wrkdirs/usr/ports/dns/yadifa/work/yadifa-2.4.1-9916/lib/dnscore/include/dnscore/dnskey.h:50,
from /wrkdirs/usr/ports/dns/yadifa/work/yadifa-2.4.1-9916/lib/dnscore/include/dnscore/tsig.h:48,
from /wrkdirs/usr/ports/dns/yadifa/work/yadifa-2.4.1-9916/lib/dnscore/include/dnscore/message.h:64,
from src/acl.c:57:
/usr/include/openssl/crypto.h:322: error: expected ')' before '__attribute__'
/usr/include/openssl/crypto.h:322: error: expected identifier or '(' before ')' token
MFH: 2021Q1
Resolv is a thread-aware DNS resolver library written in Ruby. Resolv can handle
multiple DNS requests concurrently without blocking the entire Ruby interpreter.
WWW: https://github.com/ruby/resolv
Muhammad Moinur Rahman
Ryan Steinmetz
Neel Chauhan
Kurt Jaeger
Dima Panov
Mathieu Arnold
Bradley T. Hughes
Sunpoet Po-Chuan Hsieh
Bernhard Froehlich
Oleksii Samorukov
Yuri Victorovich
Luca Pizzamiglio
Dmitry Marakasov
Matthias Andree
Vinícius Zavam
Lewis Cook
Tobias C. Berner
Piotr Kubaj
Antoine Brodin
Mikael Urankar
Rene Ladan