diff options
| author | Alan Swanson <reiver@improbability.net> | 2021-04-27 16:24:05 +0100 |
|---|---|---|
| committer | Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk> | 2021-05-05 09:19:46 +0100 |
| commit | 3980daffa4e284377cd1ae803fba78331c1fc40b (patch) | |
| tree | 14ce912bccd92a7a970e1e417302e32692528a4a /package/system/ca-certificates | |
| parent | 454d514f4647d6f1f0d93d8f67abdef94cd66a7d (diff) | |
| download | upstream-3980daffa4e284377cd1ae803fba78331c1fc40b.tar.gz upstream-3980daffa4e284377cd1ae803fba78331c1fc40b.tar.bz2 upstream-3980daffa4e284377cd1ae803fba78331c1fc40b.zip | |
dnsmasq: Update to version 2.85
Fixes issue with merged DNS requests in 2.83/2.84 not being
retried on the firsts failed request causing lookup failures.
Also fixes the following security problem in dnsmasq:
* CVE-2021-3448:
If specifiying the source address or interface to be used
when contacting upstream name servers such as:
server=8.8.8.8@1.2.3.4, server=8.8.8.8@1.2.3.4#66 and
server=8.8.8.8@eth0 then all would use the same socket
bound to the explicitly configured port. Now only
server=8.8.8.8@1.2.3.4#66 will use the explicitly
configured port and the others random source ports.
Remove upstreamed patches and update remaining patch.
Signed-off-by: Alan Swanson <reiver@improbability.net>
[refreshed old runtime support patch]
Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
Diffstat (limited to 'package/system/ca-certificates')
0 files changed, 0 insertions, 0 deletions