pemensik pushed to dnsmasq (f33). "Listen only on lo device
(#1852373) (..more)"
by notificationsï¼ fedoraproject.org
Notification time stamped 2020-09-30 23:19:41 UTC
From 549005c7874cdc5f0ad66cb3a72f1fb8c910963a Mon Sep 17 00:00:00 2001
From: Petr MenÅ¡Ãk <pemensik(a)redhat.com>
Date: Sep 30 2020 22:51:03 +0000
Subject: Listen only on lo device (#1852373)
Dnsmasq now accepts in default configuration queries only from
localhost. It received queries from any interface on the computer
before. It just dropped queries coming from wrong interfaces.
This change makes it listen only on specified interfaces. Queries coming
from different interfaces would receive ICMP error right away. Makes it
easier to understand why dnsmasq is not answering to those queries.
---
diff --git a/dnsmasq-2.81-configuration.patch b/dnsmasq-2.81-configuration.patch
index 0cf66c7..3b3cadd 100644
--- a/dnsmasq-2.81-configuration.patch
+++ b/dnsmasq-2.81-configuration.patch
@@ -1,4 +1,4 @@
-From d07d1bcdd739da00d0acb8c4561c33bc4d27a0da Mon Sep 17 00:00:00 2001
+From 3a593d133f91c5126105efd03246b3f61f103dd4 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Petr=20Men=C5=A1=C3=ADk?= <pemensik(a)redhat.com>
Date: Tue, 30 Jun 2020 18:06:29 +0200
Subject: [PATCH] Modify upstream configuration to safe defaults
@@ -7,11 +7,11 @@ Most important change would be to listen only on localhost. Default
configuration should not listen to request from remote hosts. Match also
user and paths to directories shipped in Fedora.
---
- dnsmasq.conf.example | 18 ++++++++++++++----
- 1 file changed, 14 insertions(+), 4 deletions(-)
+ dnsmasq.conf.example | 24 +++++++++++++++++++-----
+ 1 file changed, 19 insertions(+), 5 deletions(-)
diff --git a/dnsmasq.conf.example b/dnsmasq.conf.example
-index bf19424..a130118 100644
+index bf19424..36fba33 100644
--- a/dnsmasq.conf.example
+++ b/dnsmasq.conf.example
@@ -22,7 +22,7 @@
@@ -53,7 +53,20 @@ index bf19424..a130118 100644
# On systems which support it, dnsmasq binds the wildcard address,
# even when it is listening on only some interfaces. It then discards
# requests that it shouldn't reply to. This has the advantage of
-@@ -535,7 +541,7 @@
+@@ -121,7 +127,11 @@
+ # want dnsmasq to really bind only the interfaces it is listening on,
+ # uncomment this option. About the only time you may need this is when
+ # running another nameserver on the same machine.
+-#bind-interfaces
++#
++# To listen only on localhost and do not receive packets on other
++# interfaces, bind only to lo device. Comment out to bind on single
++# wildcard socket.
++bind-interfaces
+
+ # If you don't want dnsmasq to read /etc/hosts, uncomment the
+ # following line.
+@@ -535,7 +545,7 @@
# The DHCP server needs somewhere on disk to keep its lease database.
# This defaults to a sane location, but if you want to change it, use
# the line below.
@@ -62,7 +75,7 @@ index bf19424..a130118 100644
# Set the DHCP server to authoritative mode. In this mode it will barge in
# and take over the lease for any client which broadcasts on the network,
-@@ -673,7 +679,11 @@
+@@ -673,7 +683,11 @@
# Include all files in a directory which end in .conf
#conf-dir=/etc/dnsmasq.d/,*.conf
diff --git a/dnsmasq.spec b/dnsmasq.spec
index 6403de1..a04abaf 100644
--- a/dnsmasq.spec
+++ b/dnsmasq.spec
@@ -20,7 +20,7 @@
Name: dnsmasq
Version: 2.82
-Release: 2%{?extraversion:.%{extraversion}}%{?dist}
+Release: 3%{?extraversion:.%{extraversion}}%{?dist}
Summary: A lightweight DHCP/caching DNS server
License: GPLv2 or GPLv3
@@ -184,6 +184,10 @@ install -Dpm 644 %{SOURCE2} %{buildroot}%{_sysusersdir}/%{name}.conf
%{_mandir}/man1/dhcp_*
%changelog
+* Wed Sep 30 2020 Petr MenÅ¡Ãk <pemensik(a)redhat.com> - 2.82-3
+- Listen only on localhost interface, return port unreachable on all others
+ (#1852373)
+
* Mon Jul 27 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.82-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
https://src.fedoraproject.org/rpms/dnsmasq/c/549005c7874cdc5f0ad66cb3a72f...
2Â years, 4Â months
pemensik pushed to dnsmasq (master). "Listen only on lo device
(#1852373) (..more)"
by notificationsï¼ fedoraproject.org
Notification time stamped 2020-09-30 23:19:03 UTC
From 549005c7874cdc5f0ad66cb3a72f1fb8c910963a Mon Sep 17 00:00:00 2001
From: Petr MenÅ¡Ãk <pemensik(a)redhat.com>
Date: Sep 30 2020 22:51:03 +0000
Subject: Listen only on lo device (#1852373)
Dnsmasq now accepts in default configuration queries only from
localhost. It received queries from any interface on the computer
before. It just dropped queries coming from wrong interfaces.
This change makes it listen only on specified interfaces. Queries coming
from different interfaces would receive ICMP error right away. Makes it
easier to understand why dnsmasq is not answering to those queries.
---
diff --git a/dnsmasq-2.81-configuration.patch b/dnsmasq-2.81-configuration.patch
index 0cf66c7..3b3cadd 100644
--- a/dnsmasq-2.81-configuration.patch
+++ b/dnsmasq-2.81-configuration.patch
@@ -1,4 +1,4 @@
-From d07d1bcdd739da00d0acb8c4561c33bc4d27a0da Mon Sep 17 00:00:00 2001
+From 3a593d133f91c5126105efd03246b3f61f103dd4 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Petr=20Men=C5=A1=C3=ADk?= <pemensik(a)redhat.com>
Date: Tue, 30 Jun 2020 18:06:29 +0200
Subject: [PATCH] Modify upstream configuration to safe defaults
@@ -7,11 +7,11 @@ Most important change would be to listen only on localhost. Default
configuration should not listen to request from remote hosts. Match also
user and paths to directories shipped in Fedora.
---
- dnsmasq.conf.example | 18 ++++++++++++++----
- 1 file changed, 14 insertions(+), 4 deletions(-)
+ dnsmasq.conf.example | 24 +++++++++++++++++++-----
+ 1 file changed, 19 insertions(+), 5 deletions(-)
diff --git a/dnsmasq.conf.example b/dnsmasq.conf.example
-index bf19424..a130118 100644
+index bf19424..36fba33 100644
--- a/dnsmasq.conf.example
+++ b/dnsmasq.conf.example
@@ -22,7 +22,7 @@
@@ -53,7 +53,20 @@ index bf19424..a130118 100644
# On systems which support it, dnsmasq binds the wildcard address,
# even when it is listening on only some interfaces. It then discards
# requests that it shouldn't reply to. This has the advantage of
-@@ -535,7 +541,7 @@
+@@ -121,7 +127,11 @@
+ # want dnsmasq to really bind only the interfaces it is listening on,
+ # uncomment this option. About the only time you may need this is when
+ # running another nameserver on the same machine.
+-#bind-interfaces
++#
++# To listen only on localhost and do not receive packets on other
++# interfaces, bind only to lo device. Comment out to bind on single
++# wildcard socket.
++bind-interfaces
+
+ # If you don't want dnsmasq to read /etc/hosts, uncomment the
+ # following line.
+@@ -535,7 +545,7 @@
# The DHCP server needs somewhere on disk to keep its lease database.
# This defaults to a sane location, but if you want to change it, use
# the line below.
@@ -62,7 +75,7 @@ index bf19424..a130118 100644
# Set the DHCP server to authoritative mode. In this mode it will barge in
# and take over the lease for any client which broadcasts on the network,
-@@ -673,7 +679,11 @@
+@@ -673,7 +683,11 @@
# Include all files in a directory which end in .conf
#conf-dir=/etc/dnsmasq.d/,*.conf
diff --git a/dnsmasq.spec b/dnsmasq.spec
index 6403de1..a04abaf 100644
--- a/dnsmasq.spec
+++ b/dnsmasq.spec
@@ -20,7 +20,7 @@
Name: dnsmasq
Version: 2.82
-Release: 2%{?extraversion:.%{extraversion}}%{?dist}
+Release: 3%{?extraversion:.%{extraversion}}%{?dist}
Summary: A lightweight DHCP/caching DNS server
License: GPLv2 or GPLv3
@@ -184,6 +184,10 @@ install -Dpm 644 %{SOURCE2} %{buildroot}%{_sysusersdir}/%{name}.conf
%{_mandir}/man1/dhcp_*
%changelog
+* Wed Sep 30 2020 Petr MenÅ¡Ãk <pemensik(a)redhat.com> - 2.82-3
+- Listen only on localhost interface, return port unreachable on all others
+ (#1852373)
+
* Mon Jul 27 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.82-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
https://src.fedoraproject.org/rpms/dnsmasq/c/549005c7874cdc5f0ad66cb3a72f...
2Â years, 4Â months
spontsle pushed to ipmctl (f33). "update to version 02.00.00.3825
from GitHub"
by notificationsï¼ fedoraproject.org
Notification time stamped 2020-09-30 23:07:31 UTC
From a139e9615cd6916fb23c935541b5ace0daa61507 Mon Sep 17 00:00:00 2001
From: Steven Pontsler <steven.pontsler(a)intel.com>
Date: Sep 30 2020 21:13:47 +0000
Subject: update to version 02.00.00.3825 from GitHub
---
diff --git a/.gitignore b/.gitignore
index 0cd5e76..8b0a15d 100644
--- a/.gitignore
+++ b/.gitignore
@@ -18,3 +18,4 @@
/ipmctl-02.00.00.3764.tar.gz
/ipmctl-02.00.00.3791.tar.gz
/ipmctl-02.00.00.3809.tar.gz
+/ipmctl-02.00.00.3825.tar.gz
diff --git a/ipmctl.spec b/ipmctl.spec
index ec53f6a..3ee3e25 100644
--- a/ipmctl.spec
+++ b/ipmctl.spec
@@ -1,5 +1,5 @@
Name: ipmctl
-Version: 02.00.00.3809
+Version: 02.00.00.3825
Release: 1%{?dist}
Summary: Utility for managing Intel Optane DC persistent memory modules
License: BSD
@@ -86,6 +86,7 @@ API for development of Intel Optane DC persistent memory management utilities.
%{_libdir}/libipmctl.so.4*
%dir %{_datadir}/doc/ipmctl
%doc %{_datadir}/doc/ipmctl/ipmctl_default.conf
+%doc %{_datadir}/doc/ipmctl/LICENSE
%config(noreplace) %{_datadir}/ipmctl/ipmctl.conf
%dir %{_localstatedir}/log/ipmctl
%config(noreplace) %{_sysconfdir}/logrotate.d/ipmctl
@@ -99,6 +100,9 @@ API for development of Intel Optane DC persistent memory management utilities.
%{_libdir}/pkgconfig/libipmctl.pc
%changelog
+* Wed Sep 30 2020 Steven Pontsler <steven.pontsler(a)intel.com> - 02.00.00.3825-1
+- Release 02.00.00.3825
+
* Mon Sep 14 2020 Steven Pontsler <steven.pontsler(a)intel.com> - 02.00.00.3809-1
- Release 02.00.00.3809 and update spec file to use cmake macros
diff --git a/sources b/sources
index b025f21..f10feb7 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (ipmctl-02.00.00.3809.tar.gz) = f1981667e8c8b050dba3fb0c84257440f05895e2fce3e43ca136c22a34454c32aebb05543c91531162ebc7c3dfee455d4a53b29be545288407031803f3b2d55d
+SHA512 (ipmctl-02.00.00.3825.tar.gz) = 71b68003986635417f7d8980c3d61f0e0042193ff4d500bfb0b1b7e2cb528f68609d412623a7f97b34d87352fa2638d3c6cb0748dea1609d18569e30edc4e1bc
https://src.fedoraproject.org/rpms/ipmctl/c/a139e9615cd6916fb23c935541b5a...
2Â years, 4Â months
eclipseo pushed to golang-github-containers-ocicrypt (f33). "Fix
check (..more)"
by notificationsï¼ fedoraproject.org
Notification time stamped 2020-09-30 23:05:51 UTC
From 8d51129d66e8e88c7d33e445298bdf13cb01a089 Mon Sep 17 00:00:00 2001
From: Robert-André Mauchin <zebob.m(a)gmail.com>
Date: Sep 30 2020 23:05:15 +0000
Subject: Fix check
Signed-off-by: Robert-André Mauchin <zebob.m(a)gmail.com>
---
diff --git a/golang-github-containers-ocicrypt.spec b/golang-github-containers-ocicrypt.spec
index 332ff0f..9dc880b 100644
--- a/golang-github-containers-ocicrypt.spec
+++ b/golang-github-containers-ocicrypt.spec
@@ -44,7 +44,7 @@ BuildRequires: golang(gopkg.in/square/go-jose.v2)
%if %{with check}
%check
-%gocheck
+%gocheck -d keywrap/pgp
%endif
%gopkgfiles
https://src.fedoraproject.org/rpms/golang-github-containers-ocicrypt/c/8d...
2Â years, 4Â months
eclipseo pushed to golang-github-containers-ocicrypt (master). "Fix
check (..more)"
by notificationsï¼ fedoraproject.org
Notification time stamped 2020-09-30 23:05:25 UTC
From 8d51129d66e8e88c7d33e445298bdf13cb01a089 Mon Sep 17 00:00:00 2001
From: Robert-André Mauchin <zebob.m(a)gmail.com>
Date: Sep 30 2020 23:05:15 +0000
Subject: Fix check
Signed-off-by: Robert-André Mauchin <zebob.m(a)gmail.com>
---
diff --git a/golang-github-containers-ocicrypt.spec b/golang-github-containers-ocicrypt.spec
index 332ff0f..9dc880b 100644
--- a/golang-github-containers-ocicrypt.spec
+++ b/golang-github-containers-ocicrypt.spec
@@ -44,7 +44,7 @@ BuildRequires: golang(gopkg.in/square/go-jose.v2)
%if %{with check}
%check
-%gocheck
+%gocheck -d keywrap/pgp
%endif
%gopkgfiles
https://src.fedoraproject.org/rpms/golang-github-containers-ocicrypt/c/8d...
2Â years, 4Â months
packagerbot pushed to dummy-test-package-rubino (master). "Bump
release (..more)"
by notificationsï¼ fedoraproject.org
Notification time stamped 2020-09-30 23:00:08 UTC
From baf6686218561e7b63efe6c9e0983368dc2745bd Mon Sep 17 00:00:00 2001
From: packagerbot <admin(a)fedoraproject.org>
Date: Sep 30 2020 23:00:02 +0000
Subject: Bump release
Signed-off-by: packagerbot <admin(a)fedoraproject.org>
---
diff --git a/dummy-test-package-rubino.spec b/dummy-test-package-rubino.spec
index 7811322..bdbebc0 100644
--- a/dummy-test-package-rubino.spec
+++ b/dummy-test-package-rubino.spec
@@ -3,7 +3,7 @@
Name: dummy-test-package-rubino
Version: 0
-Release: 1711
+Release: 1712
Summary: Dummy Test Package called Rubino
License: CC0
URL: http://fedoraproject.org/wiki/DummyTestPackages
@@ -34,6 +34,9 @@ cp -p uuid %{buildroot}%{_datadir}/%{name}
%{_datadir}/%{name}
%changelog
+* Wed Sep 30 2020 packagerbot <admin(a)fedoraproject.org> - 0-1712
+- rebuilt
+
* Wed Sep 30 2020 packagerbot <admin(a)fedoraproject.org> - 0-1711
- rebuilt
https://src.fedoraproject.org/rpms/dummy-test-package-rubino/c/baf6686218...
2Â years, 4Â months
packagerbot pushed to dummy-test-package-crested (master). "Bump
release (..more)"
by notificationsï¼ fedoraproject.org
Notification time stamped 2020-09-30 22:59:56 UTC
From e29c0adcaefd6ee50cd000aeb600ade46692fc84 Mon Sep 17 00:00:00 2001
From: packagerbot <admin(a)fedoraproject.org>
Date: Sep 30 2020 22:59:51 +0000
Subject: Bump release
Signed-off-by: packagerbot <admin(a)fedoraproject.org>
---
diff --git a/dummy-test-package-crested.spec b/dummy-test-package-crested.spec
index dfe2cf5..cd98b23 100644
--- a/dummy-test-package-crested.spec
+++ b/dummy-test-package-crested.spec
@@ -3,7 +3,7 @@
Name: dummy-test-package-crested
Version: 0
-Release: 1711
+Release: 1712
Summary: Dummy Test Package called Crested
License: CC0
URL: http://fedoraproject.org/wiki/DummyTestPackages
@@ -32,6 +32,9 @@ cp -p uuid %{buildroot}%{_datadir}/%{name}
%{_datadir}/%{name}
%changelog
+* Wed Sep 30 2020 packagerbot <admin(a)fedoraproject.org> - 0-1712
+- rebuilt
+
* Wed Sep 30 2020 packagerbot <admin(a)fedoraproject.org> - 0-1711
- rebuilt
https://src.fedoraproject.org/rpms/dummy-test-package-crested/c/e29c0adca...
2Â years, 4Â months