Frustratingly, the dnsmasq crash still hasn't been addressed:
RC1 and RC4 both have (different!) interesting dnsmasq bugs.
If you try to disable AAAA records for a specific domain, for example...the following stanza in /etc/config/dhcp:
config dnsmasq
...
list server '/netflix.com/#'
list address '/netflix.com/::'
that should suppress AAAA records for *.netflix.com will:
be completely ignored on RC1 (i.e. it becomes part of the parsed dnsmasq config but dnsmasq does nothing with it)
cause dnsmasq on RC4 to crash immediately upon the second AAAA DNS…
(which in theory would have been corrected by)
I believe 2.87 is being tested (I see it in at least one of the dev's personal branches) and I think it is necessary anyway for the nftables equivalent to ipsets to be supported by dnsmasq.
Maybe a cherry pick of the upstream fix would be in order? (It's referenced in that thread, but I do not know the specific commit that was supposed to address it.)
UPDATE: It may have been https://thekelleys.org.uk/gitweb/?p=dnsmasq.git;a=commit;h=26bbf5a314d833beaf0f147d24409969f05f3dba but I have no means to confirm.