[Dnsmasq-discuss] CS ART - dnsmasq bugs

2021-07-20 Thread Max Julian Hofmann via Dnsmasq-discuss

Dear dnsmasq developers,

the Advanced Research Team at CrowdStrike discovered multiple bugs 
affecting dnsmasq. The discovered flaws are estimated as low risk. I 
have attached a PDF file that contains the corresponding technical details.


Please feel free to share the document among other developerts to fix 
the issues. Please let me know if you have any questions.


Best regards
Max Hofmann

--
Max Hofmann
Advanced Research Team, CrowdStrike Intelligence
CrowdStrike Inc.
https://www.crowdstrike.com/


CS-ART-dnsmasq-bugs
Description: Adobe PDF document
___
Dnsmasq-discuss mailing list
Dnsmasq-discuss@lists.thekelleys.org.uk
https://lists.thekelleys.org.uk/cgi-bin/mailman/listinfo/dnsmasq-discuss


Re: [Dnsmasq-discuss] feature: dictionary order import of addn-hosts dirs?

2021-07-20 Thread Geert Stappers via Dnsmasq-discuss
On Mon, Jul 19, 2021 at 06:52:03PM +0100, Ed W wrote:
> Hi, around 2.82 someone posted a little patch to import the config files in 
> dictionary order, which
> is very useful for situations where you have overlapping definitions. I'm 
> using an addn-hosts stanza
> pointing to a directory and files currently import in a somewhat random order 
> (suppose inode
> order?), which can lead to unexpected reverse host definitions in some cases
> 
> Could we have a dictionary order import for add-hosts files please?

Qouting Dominik from 
https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2021q3/015307.html
} Feature submissions via git patches are welcomed also on this list
} and are known to accelerate feature realization drastically.

So it is a good thing to be more precise then
 "around 2.82 someone posted a little patch to import the config files in 
dictionary order"

Visit the mailinglist archive and come back with the URL
of the (meanwhile outdated??) patch.


Groeten
Geert Stappers
-- 
Silence is hard to parse

___
Dnsmasq-discuss mailing list
Dnsmasq-discuss@lists.thekelleys.org.uk
https://lists.thekelleys.org.uk/cgi-bin/mailman/listinfo/dnsmasq-discuss


Re: [Dnsmasq-discuss] CS ART - dnsmasq bugs

2021-07-20 Thread Simon Kelley
On 20/07/2021 10:26, Max Julian Hofmann via Dnsmasq-discuss wrote:
> Dear dnsmasq developers,
> 
> the Advanced Research Team at CrowdStrike discovered multiple bugs
> affecting dnsmasq. The discovered flaws are estimated as low risk. I
> have attached a PDF file that contains the corresponding technical details.
> 
> Please feel free to share the document among other developerts to fix
> the issues. Please let me know if you have any questions.
> 
> Best regards
> Max Hofmann
> 
> 

Thanks for that. I just pushed fixes for all the issues, except a couple
which have been fortuitously fixed a couple of weeks ago. I think
everything is done now.


Cheers,

Simon.


___
Dnsmasq-discuss mailing list
Dnsmasq-discuss@lists.thekelleys.org.uk
https://lists.thekelleys.org.uk/cgi-bin/mailman/listinfo/dnsmasq-discuss