diff options
| author | Alan Swanson <reiver@improbability.net> | 2021-04-27 16:24:05 +0100 |
|---|---|---|
| committer | Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk> | 2021-05-05 09:22:36 +0100 |
| commit | d1a056f62052a251789d0a26c025f319bf497f2f (patch) | |
| tree | 5f6065a8fc5387a3737c18014331ef53c779daf8 /config | |
| parent | 08cfc7a0d31fbb8761ed5df26d911ae8c90eb621 (diff) | |
| download | upstream-d1a056f62052a251789d0a26c025f319bf497f2f.tar.gz upstream-d1a056f62052a251789d0a26c025f319bf497f2f.tar.bz2 upstream-d1a056f62052a251789d0a26c025f319bf497f2f.zip | |
dnsmasq: Update to version 2.85
Fixes issue with merged DNS requests in 2.83/2.84 not being
retried on the firsts failed request causing lookup failures.
Also fixes the following security problem in dnsmasq:
* CVE-2021-3448:
If specifiying the source address or interface to be used
when contacting upstream name servers such as:
server=8.8.8.8@1.2.3.4, server=8.8.8.8@1.2.3.4#66 and
server=8.8.8.8@eth0 then all would use the same socket
bound to the explicitly configured port. Now only
server=8.8.8.8@1.2.3.4#66 will use the explicitly
configured port and the others random source ports.
Remove upstreamed patches and update remaining patch.
Signed-off-by: Alan Swanson <reiver@improbability.net>
[refreshed old runtime support patch]
Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
(cherry picked from commit 3980daffa4e284377cd1ae803fba78331c1fc40b)
Diffstat (limited to 'config')
0 files changed, 0 insertions, 0 deletions