[MacPorts] #16158: dnsmasq 2.45 Security update, Portfile update
#16158: dnsmasq 2.45 Security update, Portfile update ---------------------------------------------+------------------------------ Reporter: davidgilman1+macports@gmail.com | Owner: macports-tickets@lists.macosforge.org Type: defect | Status: new Priority: Normal | Milestone: Component: ports | Version: 1.6.0 Keywords: security, dns | ---------------------------------------------+------------------------------ This patch has a number of fixes: 1) Updating to the latest upstream version of dnsmasq comes with bug fixes and a fix for the dns poisoning attack that's been publicized recently. 2) dnsmasq's pidfile is stored properly in the destroot instead of /var/run/. 3) Changed the hardcoded nawk in the Makefile to awk. -- Ticket URL: <http://trac.macports.org/ticket/16158> MacPorts <http://www.macports.org/> Ports system for Mac OS
#16158: dnsmasq 2.45 Security update, Portfile update ----------------------------------------------+----------------------------- Reporter: davidgilman1+macports@gmail.com | Owner: macports-tickets@lists.macosforge.org Type: defect | Status: new Priority: Normal | Milestone: Component: ports | Version: 1.6.0 Resolution: | Keywords: security, dns ----------------------------------------------+----------------------------- Comment (by davidgilman1+macports@gmail.com): Ack, disregard that patch-config.h.diff file. It forced the software to look in ${destroot}/etc/resolv.conf for upstream DNS information. The default config of dnsmasq expects that file to be updated by the system as connections are made and new DNS servers are made available, however macos x doesn't know to update macport's resolv.conf. I'm attaching a new config.h patch that keeps dnsmasq checking the resolv.conf file that is updated by the system as most users would expect the software to do. -- Ticket URL: <http://trac.macports.org/ticket/16158#comment:1> MacPorts <http://www.macports.org/> Ports system for Mac OS
#16158: dnsmasq 2.45 Security update, Portfile update ----------------------------------------------+----------------------------- Reporter: davidgilman1+macports@gmail.com | Owner: ryandesign@macports.org Type: defect | Status: assigned Priority: Normal | Milestone: Port Updates Component: ports | Version: 1.6.0 Resolution: | Keywords: security, dns Port: dnsmasq | ----------------------------------------------+----------------------------- Changes (by ryandesign@macports.org): * owner: macports-tickets@lists.macosforge.org => ryandesign@macports.org * status: new => assigned * port: => dnsmasq * milestone: => Port Updates -- Ticket URL: <http://trac.macports.org/ticket/16158#comment:2> MacPorts <http://www.macports.org/> Ports system for Mac OS
#16158: dnsmasq 2.45 Security update, Portfile update ----------------------------------------------+----------------------------- Reporter: davidgilman1+macports@gmail.com | Owner: ryandesign@macports.org Type: enhancement | Status: closed Priority: Normal | Milestone: Port Updates Component: ports | Version: 1.6.0 Resolution: fixed | Keywords: security, dns Port: dnsmasq | ----------------------------------------------+----------------------------- Changes (by ryandesign@macports.org): * status: assigned => closed * type: defect => enhancement * resolution: => fixed Comment: Thanks for the update! I committed it in r39895. -- Ticket URL: <http://trac.macports.org/ticket/16158#comment:3> MacPorts <http://www.macports.org/> Ports system for Mac OS
participants (1)
-
MacPorts