[ubuntu/noble-updates] dnsmasq 2.91-0ubuntu0.24.04.1 (Accepted)

[Matthew Ruffell]

dnsmasq (2.91-0ubuntu0.24.04.1) noble; urgency=medium

  * New upstream release 2.91 (LP: #2138412)
    - Security fixes:
      + Fix out-of-bounds heap read in order_qsort() (potential SIGSEGV).
      + Fix buffer overflow with overly long lease-change script names.
    - Bug fixes:
      + Fix crash when no upstream servers are defined.
      + Fix erroneous "DNSSEC validated" state with non-DNSSEC upstream servers.
      + Fix TFTP off-by-2 bug.
      + Fix handling of EDNS0 UDP packet sizes.
      + Improve behaviour with non-responsive upstream TCP DNS servers.
      + Improve handling of truncated upstream answers.
    - New features:
      + Implement DNS-0x20 encoding (--do-0x20-encode, default off).
      + Add --dhcp-option-pxe for PXE-only DHCP options, including proxy mode.
      + Support PXE proxy-DHCP and DHCP-relay simultaneously.
      + Set --fast-dns-retries by default when DNSSEC is enabled.
    - Remove patches fixed upstream:
      + d/p/fix-crash-when-reloading-DHCP-config-on-SIGHUP.patch
    - d/patches: Refresh all patches to apply on top of new upstream version.
    - d/t/functions.d/options*.patterns: remove cryptohash compile-time option.
  * d/patches/CVE-*: add Origin headers.

Date: 2026-08-10 17:13:11.228026+00:00
Changed-By: Guilherme Puida Moreira <guilherme.moreira at canonical.com>
Signed-By: Matthew Ruffell <matthew.ruffell at canonical.com>
https://launchpad.net/ubuntu/+source/dnsmasq/2.91-0ubuntu0.24.04.1
-------------- next part --------------
Sorry, changesfile not available.