Re: dnsmasq vulnerabilities, including attacker DNS redirect, privilege escalation, and heap manipulation

[Alan Coopersmith <alan.coopersmith () oracle com>]

On 5/11/26 11:11, Alan Coopersmith wrote:
> https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2026q2/018471.html 
> announces:
> > and I have made "2.92rel2" release of the current 2.92 dnsmasq stable release 
> > which is downloadable from the usual place and has had these patches applied.

> https://www.kb.cert.org/vuls/id/471747 provides additional details:
> > dnsmasq has released version 2.93 to fix the above vulnerabilities, and
> > various vendors have published patches to address individual remediations.

CERT has now corrected their advisory to list version 2.92rel2 as well.

--
        -Alan Coopersmith-                 alan.coopersmith () oracle com
         Oracle Solaris Engineering - https://blogs.oracle.com/solaris