All of lore.kernel.org
 help / color / mirror / Atom feed
* [Buildroot] [PATCH 2025.02.x 1/1] package/dnsmasq: bump to version 2.93
@ 2026-09-04  9:00 Stefan Mueller via buildroot
  2026-09-04 12:20 ` Thomas Perale via buildroot
  0 siblings, 1 reply; 2+ messages in thread
From: Stefan Mueller via buildroot @ 2026-09-04  9:00 UTC (permalink / raw)
  To: buildroot; +Cc: Stefan Müller, Bernd Kuhls

From: Stefan Müller <stefan.mueller@rey-technology.com>

Backport the dnsmasq 2.93 version bump to the 2025.02.x maintenance
branch. It is already present in master.

This fixes CVE-2026-12725, a heap buffer overflow in log_query(),
and CVE-2026-12969, an out-of-bounds read in find_soa().

Signed-off-by: Stefan Müller <stefan.mueller@rey-technology.com>
---
 package/dnsmasq/dnsmasq.hash | 4 ++--
 package/dnsmasq/dnsmasq.mk   | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/package/dnsmasq/dnsmasq.hash b/package/dnsmasq/dnsmasq.hash
index 74ee5c415b..176e73899e 100644
--- a/package/dnsmasq/dnsmasq.hash
+++ b/package/dnsmasq/dnsmasq.hash
@@ -1,6 +1,6 @@
 # Locally calculated after checking pgp signature
-# https://thekelleys.org.uk/dnsmasq/dnsmasq-2.92rel2.tar.xz.asc
-sha256  43d72b8c129bdf33d17bafedc98823f63e46b5005128066bf0d2a472a32ce06a  dnsmasq-2.92rel2.tar.xz
+# https://thekelleys.org.uk/dnsmasq/dnsmasq-2.93.tar.xz.asc
+sha256  0c00d4e5c97c8306e5fb932b348b34269c9c29a0e7df0e8e82958b407092bc19  dnsmasq-2.93.tar.xz
 # Locally calculated
 sha256  8177f97513213526df2cf6184d8ff986c675afb514d4e68a404010521b880643  COPYING
 sha256  8ceb4b9ee5adedde47b31e975c1d90c73ad27b6b165a1dcd80c7c545eb65b903  COPYING-v3
diff --git a/package/dnsmasq/dnsmasq.mk b/package/dnsmasq/dnsmasq.mk
index d7ae8a3312..b9a76fd5cc 100644
--- a/package/dnsmasq/dnsmasq.mk
+++ b/package/dnsmasq/dnsmasq.mk
@@ -4,7 +4,7 @@
 #
 ################################################################################
 
-DNSMASQ_VERSION = 2.92rel2
+DNSMASQ_VERSION = 2.93
 DNSMASQ_SOURCE = dnsmasq-$(DNSMASQ_VERSION).tar.xz
 DNSMASQ_SITE = https://thekelleys.org.uk/dnsmasq
 DNSMASQ_MAKE_ENV = $(TARGET_MAKE_ENV) CC="$(TARGET_CC)"
-- 
2.25.1

_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot

^ permalink raw reply related	[flat|nested] 2+ messages in thread
* Re: [Buildroot] [PATCH 2025.02.x 1/1] package/dnsmasq: bump to version 2.93
  2026-09-04  9:00 [Buildroot] [PATCH 2025.02.x 1/1] package/dnsmasq: bump to version 2.93 Stefan Mueller via buildroot
@ 2026-09-04 12:20 ` Thomas Perale via buildroot
  0 siblings, 0 replies; 2+ messages in thread
From: Thomas Perale via buildroot @ 2026-09-04 12:20 UTC (permalink / raw)
  To: Stefan Mueller; +Cc: Thomas Perale, buildroot, Stefan Müller, Bernd Kuhls

Hi Stefan,

In reply of:
> Backport the dnsmasq 2.93 version bump to the 2025.02.x maintenance
> branch. It is already present in master.
> 
> This fixes CVE-2026-12725, a heap buffer overflow in log_query(),
> and CVE-2026-12969, an out-of-bounds read in find_soa().
> 
> Signed-off-by: Stefan Müller <stefan.mueller@rey-technology.com>

Thanks for the notice. I applied your patch with the addition of the changelog
and the master branch commit.

PERALE Thomas

> ---
>  package/dnsmasq/dnsmasq.hash | 4 ++--
>  package/dnsmasq/dnsmasq.mk   | 2 +-
>  2 files changed, 3 insertions(+), 3 deletions(-)
> 
> diff --git a/package/dnsmasq/dnsmasq.hash b/package/dnsmasq/dnsmasq.hash
> index 74ee5c415b..176e73899e 100644
> --- a/package/dnsmasq/dnsmasq.hash
> +++ b/package/dnsmasq/dnsmasq.hash
> @@ -1,6 +1,6 @@
>  # Locally calculated after checking pgp signature
> -# https://thekelleys.org.uk/dnsmasq/dnsmasq-2.92rel2.tar.xz.asc
> -sha256  43d72b8c129bdf33d17bafedc98823f63e46b5005128066bf0d2a472a32ce06a  dnsmasq-2.92rel2.tar.xz
> +# https://thekelleys.org.uk/dnsmasq/dnsmasq-2.93.tar.xz.asc
> +sha256  0c00d4e5c97c8306e5fb932b348b34269c9c29a0e7df0e8e82958b407092bc19  dnsmasq-2.93.tar.xz
>  # Locally calculated
>  sha256  8177f97513213526df2cf6184d8ff986c675afb514d4e68a404010521b880643  COPYING
>  sha256  8ceb4b9ee5adedde47b31e975c1d90c73ad27b6b165a1dcd80c7c545eb65b903  COPYING-v3
> diff --git a/package/dnsmasq/dnsmasq.mk b/package/dnsmasq/dnsmasq.mk
> index d7ae8a3312..b9a76fd5cc 100644
> --- a/package/dnsmasq/dnsmasq.mk
> +++ b/package/dnsmasq/dnsmasq.mk
> @@ -4,7 +4,7 @@
>  #
>  ################################################################################
>  
> -DNSMASQ_VERSION = 2.92rel2
> +DNSMASQ_VERSION = 2.93
>  DNSMASQ_SOURCE = dnsmasq-$(DNSMASQ_VERSION).tar.xz
>  DNSMASQ_SITE = https://thekelleys.org.uk/dnsmasq
>  DNSMASQ_MAKE_ENV = $(TARGET_MAKE_ENV) CC="$(TARGET_CC)"
> -- 
> 2.25.1
> 
> _______________________________________________
> buildroot mailing list
> buildroot@buildroot.org
> https://lists.buildroot.org/mailman/listinfo/buildroot
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot

^ permalink raw reply	[flat|nested] 2+ messages in thread
end of thread, other threads:[~2026-09-04 12:20 UTC | newest]

Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2026-09-04  9:00 [Buildroot] [PATCH 2025.02.x 1/1] package/dnsmasq: bump to version 2.93 Stefan Mueller via buildroot
2026-09-04 12:20 ` Thomas Perale via buildroot

This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.