Conversation
fpletz
left a comment
There was a problem hiding this comment.
Bugfix release: https://thekelleys.org.uk/dnsmasq/CHANGELOG
version 2.89
Fix bug introduced in 2.88 (commit fe91134b) which can result
in corruption of the DNS cache internal data structures and
logging of "cache internal error". This has only been seen
in one place in the wild, and it took considerable effort
to even generate a test case to reproduce it, but there's
no way to be sure it won't strike, and the effect is to break
the cache badly. Installations with DNSSEC enabled are more
likely to see the problem, but not running DNSSEC does not
guarantee that it won't happen. Thanks to Timo van Roermund
for reporting the bug and for his great efforts in chasing
it down.
Automatic update generated by nixpkgs-update tools. This update was made based on information from https://repology.org/metapackage/dnsmasq/versions.
meta.description for dnsmasq is: An integrated DNS, DHCP and TFTP server for small networks
meta.homepage for dnsmasq is: https://www.thekelleys.org.uk/dnsmasq/doc.html
Updates performed
To inspect upstream changes
Impact
Checks done (click to expand)
passthru.tests, if any, passedRebuild report (if merged into master) (click to expand)
Instructions to test this update (click to expand)
Either download from Cachix:
(The Cachix cache is only trusted for this store-path realization.)
For the Cachix download to work, your user must be in the
trusted-userslist or you can usesudosince root is effectively trusted.Or, build yourself:
After you've downloaded or built it, look at the files and if there are any, run the binaries:
Pre-merge build results
NixPkgs review skipped
Maintainer pings
cc @edolstra @fpletz @globin for testing.