Dnsmasq security issues

For Developers
1

To the kind attention of dnsmasq package maintainers https://lede-project.org/packages/start?dataflt[Name_pkg-dependencies*~]=dnsmasq

2

The latest release can use v2.78 with this simple patch:

diff --git a/package/network/services/dnsmasq/Makefile b/package/network/services/dnsmasq/Makefile
index 85308d2b0d..7fbf8e9aa5 100644
--- a/package/network/services/dnsmasq/Makefile
+++ b/package/network/services/dnsmasq/Makefile
@@ -8,12 +8,12 @@
 include $(TOPDIR)/rules.mk

 PKG_NAME:=dnsmasq
-PKG_VERSION:=2.77
+PKG_VERSION:=2.78
 PKG_RELEASE:=1

 PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.xz
 PKG_SOURCE_URL:=http://thekelleys.org.uk/dnsmasq/
-PKG_HASH:=6eac3b1c50ae25170e3ff8c96ddb55236cf45007633fdb8a35b1f3e02f5f8b8a
+PKG_HASH:=89949f438c74b0c7543f06689c319484bd126cc4b1f8c745c742ab397681252b

 PKG_LICENSE:=GPL-2.0
 PKG_LICENSE_FILES:=COPYING
3

It is already in Master and Stable, not sure if the stable images have been built, but easy enough to check.

4

Indeed; 2.78 is part of version 17.01.3 branch that was just updated a couple hours ago:

1 Like