dnsmasq (2.69-1) unstable; urgency=low

   * New upstream.
   * Set --local-service. (closes: #732610)
     This tells dnsmasq to ignore DNS requests that don't come from a local network.
     It's automatically ignored if  --interface --except-interface, --listen-address
     or --auth-server exist in the configuration, so for most installations, it will
     have no effect, but for otherwise-unconfigured installations, it stops dnsmasq
     from being vulnerable to DNS-reflection attacks.