You are absolutely right.
Thanks, I post an update of the patch.
Paul
> Op 20 jun. 2017, om 16:41 heeft e9hack het volgende
> geschreven:
>
> Am 18.06.2017 um 09:46 schrieb Paul Oranje:
>> @@ -854,14 +895,15 @@ dnsmasq_start()
>> config_get_bool cachelocal "$cfg" cachelocal 1
>>
>>
With this patch the dnsmasq init script manages resolv.conf if and only if
when dnsmasq will listen on 127.0.0.1#53 (is main resolver instance).
Also adds ::1 to the resolver file.
For unbound a likewise patch exists (PR#4454).
Fixes (combined with the unbound PR) FS#785
Signed-off-by: Paul Oranj
Fixes some security issues (no remote exploits), and introduces
some changes. See release notes for details:
https://tls.mbed.org/tech-updates/releases/mbedtls-2.5.1-2.1.8-and-1.3.20-released
* Fixes an unlimited overread of heap-based buffers in mbedtls_ssl_read()
* Adds exponent blinding to RSA
Fixes for security and other issues. See security announcement for more details:
https://community.openvpn.net/openvpn/wiki/VulnerabilitiesFixedInOpenVPN243
* Remotely-triggerable ASSERT() on malformed IPv6 packet (CVE-2017-7508)
* Pre-authentication remote crash/information disclosure for clients
Hi,
the dns setup for dnsmasq does have a bug. If option resolvfile is used and its
value isn't '/tmp/resolv.conf.auto',
name resolution doesn't work. The given file is empty. A file
'/tmp/resolv.conf.auto' is generated and contains the
correct dns servers, but it isn't used by dnsmasq. This mak
uhttpd refered to ustream-ssl as PKG_BUILD_DEPENDS. While this
intuitively seems like the correct thing to do, it turns out not to
have the desired effect: PKG_BUILD_DEPENDS needs to list the resulting
package name (ie. one of libustream-*) and not the source package name.
This seems a bit ugly, as
On 06/21/2017 03:42 PM, e9hack wrote:
> Hi,
>
> the dns setup for dnsmasq does have a bug. If option resolvfile is used and
> its value isn't '/tmp/resolv.conf.auto',
> name resolution doesn't work. The given file is empty. A file
> '/tmp/resolv.conf.auto' is generated and contains the
> correct
