https://bugzilla.suse.com/show_bug.cgi?id=1207174 Bug ID: 1207174 Summary: dnsmasq 2.88: bug�which�can�break�the�invariants�on the�order�of�a�hash�chain. Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Network Assignee: screening-team-bugs@suse.de Reporter: martin.wilck@suse.com QA Contact: qa-bugs@suse.de Found By: --- Blocker: --- This was posted last Friday on the dnsmasq-discuss mailing list: https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2023q1/016821.html 1) This is a bug introduced in 2.88 2) If it's triggered, it's bad: dnsmasq logs about cache internal error and the DNS subsystem becomes broken. 3) Actually triggering the bug is pretty unlikely: I've only seen one report of it, and it took a weeks work to be able to reproduce it. 4) The bug is more likely to occur when DNSSEC validation is in use, but still quite unlikely: I have several production instances with DNSSEC validation and have not seen it. Since the bug is quite bad, and since there's no workaround that guarantees to suppress it, even though the chances of seeing the problem are very low, I think it makes sense to make a new, fixed, release fairly rapidly. I'll work though the uncontroversial patches in my queue, with the aim of making a 2.89 release towards the end of the week. Fix:

https://thekelleys.org.uk/gitweb/?p=dnsmasq.git;a=commit;h=f172fdbb77c422e27...

Given that upstream aims to release 2.89 this week and the but is hard to reproduce, I suppose it's sufficient to wait for 2.89 and push it to factory asap once released. -- You are receiving this mail because: You are on the CC list for the bug.