linux/meta-openembedded.git/meta-networking/recipes-support/dnsmasq, branch master

dnsmasq: upgrade 2.92 -> 2.93

2026-06-08T01:21:50+00:00

ChangeLog: https://dnsmasq.org/CHANGELOG - Update checksum - Remove obsolete patches - Verified build and runtime functionality Security fixes (included upstream in 2.93) : - CVE-2026-2291 - CVE-2026-4890 - CVE-2026-4891 - CVE-2026-4892 - CVE-2026-4893 - CVE-2026-5172 - Removed patches corresponding to the above CVEs as fixes are now part of upstream release Signed-off-by: Abhishek Bachiphale Signed-off-by: Khem Raj

dnsmasq: fix CVE-2026-5172

2026-05-21T04:18:31+00:00

A buffer overflow in dnsmasq’s extract_addresses() function allows an attacker to trigger a heap out-of-bounds read and crash by exploiting a malformed DNS response, enabling extract_name() to advance the pointer past the record’s end. Reference: [ https://nvd.nist.gov/vuln/detail/CVE-2026-5172 ] Signed-off-by: Abhishek Bachiphale Signed-off-by: Khem Raj

dnsmasq: fix CVE-2026-4893

2026-05-21T04:18:31+00:00

An information disclosure vulnerability in dnsmasq allows remote attackers to bypass source checks via a crafted DNS packet with RFC 7871 client subnet information. Reference: [ https://nvd.nist.gov/vuln/detail/CVE-2026-4893 ] Signed-off-by: Abhishek Bachiphale Signed-off-by: Khem Raj

dnsmasq: fix CVE-2026-4892

2026-05-21T04:18:31+00:00

A heap-based out-of-bounds write vulnerability in the DHCPv6 implementation of dnsmasq allows local attackers to execute arbitrary code with root privileges via a crafted DHCPv6 packet. Reference: [ https://nvd.nist.gov/vuln/detail/CVE-2026-4892 ] Signed-off-by: Abhishek Bachiphale Signed-off-by: Khem Raj

dnsmasq: fix CVE-2026-4891

2026-05-21T04:18:31+00:00

A heap-based out-of-bounds read vulnerability in the DNSSEC validation of dnsmasq allows remote attackers to cause a denial of service via a crafted DNS packet. Reference: [ https://nvd.nist.gov/vuln/detail/CVE-2026-4891 ] Signed-off-by: Abhishek Bachiphale Signed-off-by: Khem Raj

dnsmasq: fix CVE-2026-4890

2026-05-21T04:18:30+00:00

A Denial of Service (DoS) vulnerability in the DNSSEC validation of dnsmasq allows remote attackers to cause a denial of service via a crafted DNS packet. Reference: [ https://nvd.nist.gov/vuln/detail/CVE-2026-4890 ] Signed-off-by: Abhishek Bachiphale Signed-off-by: Khem Raj

dnsmasq: fix CVE-2026-2291

2026-05-21T04:18:30+00:00

dnsmasqs extract_name() function can be abused to cause a heap buffer overflow, allowing an attacker to inject false DNS cache entries, which could result in DNS lookups to redirect to an attacker-controlled IP address, or to cause a DoS. Reference: [ https://nvd.nist.gov/vuln/detail/CVE-2026-2291 ] Signed-off-by: Abhishek Bachiphale Signed-off-by: Khem Raj

dnsmasq: upgrade 2.91 -> 2.92

2026-01-23T06:01:04+00:00

Signed-off-by: Wang Mingyu Signed-off-by: Khem Raj

dnsmasq: upgrade 2.90 -> 2.91

2025-03-24T14:29:13+00:00

ChangeLog: https://thekelleys.org.uk/dnsmasq/CHANGELOG Signed-off-by: Yi Zhao Signed-off-by: Khem Raj

dnsmasq: set config dhcp6, broken-rtc by FEATURES

2024-08-16T14:30:56+00:00

Some of the PACKAGECONFIG can be derived from the DISTRO_FEATURES and MACHINE_FEATURES. Signed-off-by: Jörg Sommer Signed-off-by: Khem Raj