DNSmasq 2.83 "a MUST update..."

Post new topic   Reply to topic    DD-WRT Forum Forum Index -> General Questions
Goto page 1, 2  Next
View previous topic :: View next topic  
Author Message
Alozaros
DD-WRT Guru


Joined: 16 Nov 2015
Posts: 4177
Location: UK, London, just across the river..
PostPosted: Tue Jan 19, 2021 18:08    Post subject: DNSmasq 2.83 "a MUST update..." Reply with quote
www.thekelleys.org.uk/dnsmasq/CHANGELOG

BS... not bad to update to this one 2.83, as lots of new holes will be patched...it seams 2.82 if plain used is open to vulnerabilities of cache poisoning and SAD DNS attacks...
the only way to mitigate those in 2.82 is using a DoT, DoH as well DNScrypt...but still prone to crc32 or sha-1 weakness in DNSSEC verification
I believe im not the first that have found the hot water today... Laughing Cool Embarassed
_________________
Atheros
TP-Link WR740Nv1 -----DD-WRT 45928 BS AP,NAT
TP-Link WR740Nv4 -----DD-WRT 44251 BS WAP/Switch
TP-Link WR1043NDv2 ---DD-WRT 45849 BS AP,NAT,AP Isolation,Firewall,Local DNS,Forced DNS,DoT,VPN,VLAN
TP-Link WR1043NDv2 ---DD-WRT 45928 BS AP,NAT,AD/Block,Firewall,Local DNS,Forced DNS,DoT,VPN,VLAN
TP-Link WR1043NDv2 ---Gargoyle OS 1.12.0 AP,NAT,QoS,Quotas
Qualcomm/IPQ8065
Netgear R7800 -----DD-WRT 45928 BS AP,NAT,AD-Block,AP&Net Isolation,VLAN's,Firewall,Local DNS,DoT
Broadcom
Netgear R7000 -----DD-WRT 45928 BS AP,Wi-Fi OFF,NAT,AD-Block,Firewall,Local DNS,Forced DNS,VLAN's,DoT,VPN
-----------------------------------------------------------------------------------------------
Stubby for DNS over TLS I DNSCrypt v2 by mac913
Back to top View user's profile Send private message
Sponsor
egc
DD-WRT Guru


Joined: 18 Mar 2014
Posts: 7268
Location: Netherlands
PostPosted: Tue Jan 19, 2021 18:54    Post subject: Reply with quote
We are already using that for the last 4 weeks.

DDWRT Rocks Smile
_________________
Routers:Netgear R7800, R6400v1, R6400v2, Linksys EA8500, EA6900 (XvortexCFE), E2000 (converted WRT320N), WRT54GS v1.
WireGuard Documents & Guides:https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=327397
OpenVPN Documents & Guides: https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=327398
IPSET: https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=327261
Install guide R6400v2:http://forum.dd-wrt.com/phpBB2/viewtopic.php?t=316399
Install guide R7800: https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=320614
Forum Guide Lines (important read):https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=324087
Back to top View user's profile Send private message
Alozaros
DD-WRT Guru


Joined: 16 Nov 2015
Posts: 4177
Location: UK, London, just across the river..
PostPosted: Tue Jan 19, 2021 19:13    Post subject: Reply with quote
hmmm... i couldn't find it on SVN....
2.83 came out today, if im not wrong...

'LATEST_IS_2.83 2021-01-19 11:47'

unless BS had a secret 2.83 RC1...???

https://www.thekelleys.org.uk/dnsmasq/test-releases/

on DDWRT 45454 is reported DNSmasq - UNKNOWN

but 448xx builds are still on 2.82...
_________________
Atheros
TP-Link WR740Nv1 -----DD-WRT 45928 BS AP,NAT
TP-Link WR740Nv4 -----DD-WRT 44251 BS WAP/Switch
TP-Link WR1043NDv2 ---DD-WRT 45849 BS AP,NAT,AP Isolation,Firewall,Local DNS,Forced DNS,DoT,VPN,VLAN
TP-Link WR1043NDv2 ---DD-WRT 45928 BS AP,NAT,AD/Block,Firewall,Local DNS,Forced DNS,DoT,VPN,VLAN
TP-Link WR1043NDv2 ---Gargoyle OS 1.12.0 AP,NAT,QoS,Quotas
Qualcomm/IPQ8065
Netgear R7800 -----DD-WRT 45928 BS AP,NAT,AD-Block,AP&Net Isolation,VLAN's,Firewall,Local DNS,DoT
Broadcom
Netgear R7000 -----DD-WRT 45928 BS AP,Wi-Fi OFF,NAT,AD-Block,Firewall,Local DNS,Forced DNS,VLAN's,DoT,VPN
-----------------------------------------------------------------------------------------------
Stubby for DNS over TLS I DNSCrypt v2 by mac913

Last edited by Alozaros on Tue Jan 19, 2021 19:53; edited 3 times in total
Back to top View user's profile Send private message
egc
DD-WRT Guru


Joined: 18 Mar 2014
Posts: 7268
Location: Netherlands
PostPosted: Tue Jan 19, 2021 19:22    Post subject: Reply with quote
Indeed he was on nda until today.

There is a commit using his private dnsmasq I had to reverse it to keep on building for the community build that is why I know it Smile
_________________
Routers:Netgear R7800, R6400v1, R6400v2, Linksys EA8500, EA6900 (XvortexCFE), E2000 (converted WRT320N), WRT54GS v1.
WireGuard Documents & Guides:https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=327397
OpenVPN Documents & Guides: https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=327398
IPSET: https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=327261
Install guide R6400v2:http://forum.dd-wrt.com/phpBB2/viewtopic.php?t=316399
Install guide R7800: https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=320614
Forum Guide Lines (important read):https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=324087
Back to top View user's profile Send private message
kernel-panic69
DD-WRT Guru


Joined: 08 May 2018
Posts: 8123
Location: Texas, USA
PostPosted: Tue Jan 19, 2021 19:45    Post subject: Reply with quote
I would have to back-track on the driver_changelogs to see, but the public repo is still v2.82:

https://svn.dd-wrt.com/browser/src/router/dnsmasq/CHANGELOG

https://svn.dd-wrt.com/browser/src/router/driver_changelogs

Upstream is v2.83:

http://thekelleys.org.uk/gitweb/?p=dnsmasq.git;a=commit;h=327bbc92bc9ff8672e9cd598ae1b33daba41de2d

(44 hours ago)...
_________________
• Official Forum Rules, Guidelines & Helpful Information • Firmware FAQ • Installation Wiki • Where Do I Download Firmware?
• DON'T use Chromium-based browsers • RTFM/STFW TL;DR is NOT an excuse. • Why Should I Care What Color the Bikeshed Is?
Please DO NOT PM me with questions; Ask in the forum. ---------------------- Linux User #377467 counter.li.org / linuxcounter.net
Back to top View user's profile Send private message
egc
DD-WRT Guru


Joined: 18 Mar 2014
Posts: 7268
Location: Netherlands
PostPosted: Tue Jan 19, 2021 20:00    Post subject: Reply with quote
https://svn.dd-wrt.com/changeset/45026
_________________
Routers:Netgear R7800, R6400v1, R6400v2, Linksys EA8500, EA6900 (XvortexCFE), E2000 (converted WRT320N), WRT54GS v1.
WireGuard Documents & Guides:https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=327397
OpenVPN Documents & Guides: https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=327398
IPSET: https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=327261
Install guide R6400v2:http://forum.dd-wrt.com/phpBB2/viewtopic.php?t=316399
Install guide R7800: https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=320614
Forum Guide Lines (important read):https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=324087
Back to top View user's profile Send private message
Alozaros
DD-WRT Guru


Joined: 16 Nov 2015
Posts: 4177
Location: UK, London, just across the river..
PostPosted: Tue Jan 19, 2021 20:43    Post subject: Reply with quote
egc wrote:
https://svn.dd-wrt.com/changeset/45026


sadly, those are not related to the new 2.83 updates ,that need to be utilized asap...Rolling Eyes
_________________
Atheros
TP-Link WR740Nv1 -----DD-WRT 45928 BS AP,NAT
TP-Link WR740Nv4 -----DD-WRT 44251 BS WAP/Switch
TP-Link WR1043NDv2 ---DD-WRT 45849 BS AP,NAT,AP Isolation,Firewall,Local DNS,Forced DNS,DoT,VPN,VLAN
TP-Link WR1043NDv2 ---DD-WRT 45928 BS AP,NAT,AD/Block,Firewall,Local DNS,Forced DNS,DoT,VPN,VLAN
TP-Link WR1043NDv2 ---Gargoyle OS 1.12.0 AP,NAT,QoS,Quotas
Qualcomm/IPQ8065
Netgear R7800 -----DD-WRT 45928 BS AP,NAT,AD-Block,AP&Net Isolation,VLAN's,Firewall,Local DNS,DoT
Broadcom
Netgear R7000 -----DD-WRT 45928 BS AP,Wi-Fi OFF,NAT,AD-Block,Firewall,Local DNS,Forced DNS,VLAN's,DoT,VPN
-----------------------------------------------------------------------------------------------
Stubby for DNS over TLS I DNSCrypt v2 by mac913
Back to top View user's profile Send private message
egc
DD-WRT Guru


Joined: 18 Mar 2014
Posts: 7268
Location: Netherlands
PostPosted: Tue Jan 19, 2021 20:45    Post subject: Reply with quote
Yes they are.

That commit did ddwrt switch to 2.83
_________________
Routers:Netgear R7800, R6400v1, R6400v2, Linksys EA8500, EA6900 (XvortexCFE), E2000 (converted WRT320N), WRT54GS v1.
WireGuard Documents & Guides:https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=327397
OpenVPN Documents & Guides: https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=327398
IPSET: https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=327261
Install guide R6400v2:http://forum.dd-wrt.com/phpBB2/viewtopic.php?t=316399
Install guide R7800: https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=320614
Forum Guide Lines (important read):https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=324087
Back to top View user's profile Send private message
Alozaros
DD-WRT Guru


Joined: 16 Nov 2015
Posts: 4177
Location: UK, London, just across the river..
PostPosted: Tue Jan 19, 2021 20:52    Post subject: Reply with quote
like a little kiddos, nope they are not... Laughing

https://ubuntu.com/security/CVE-2020-25682
https://ubuntu.com/security/CVE-2020-25681
https://ubuntu.com/security/CVE-2020-25683
https://www.jsof-tech.com/disclosures/dnspooq/
https://ubuntu.com/security/notices/USN-4698-1
those holes are fresh like, a clean new pussy's... Twisted Evil
there was a known buffer overflow in dnsmasq's DNSSEC code but not well mitigated by the both end, till now...

not patched in DDWRT 45493, so we expect a new build soon... Rolling Eyes
_________________
Atheros
TP-Link WR740Nv1 -----DD-WRT 45928 BS AP,NAT
TP-Link WR740Nv4 -----DD-WRT 44251 BS WAP/Switch
TP-Link WR1043NDv2 ---DD-WRT 45849 BS AP,NAT,AP Isolation,Firewall,Local DNS,Forced DNS,DoT,VPN,VLAN
TP-Link WR1043NDv2 ---DD-WRT 45928 BS AP,NAT,AD/Block,Firewall,Local DNS,Forced DNS,DoT,VPN,VLAN
TP-Link WR1043NDv2 ---Gargoyle OS 1.12.0 AP,NAT,QoS,Quotas
Qualcomm/IPQ8065
Netgear R7800 -----DD-WRT 45928 BS AP,NAT,AD-Block,AP&Net Isolation,VLAN's,Firewall,Local DNS,DoT
Broadcom
Netgear R7000 -----DD-WRT 45928 BS AP,Wi-Fi OFF,NAT,AD-Block,Firewall,Local DNS,Forced DNS,VLAN's,DoT,VPN
-----------------------------------------------------------------------------------------------
Stubby for DNS over TLS I DNSCrypt v2 by mac913
Back to top View user's profile Send private message
egc
DD-WRT Guru


Joined: 18 Mar 2014
Posts: 7268
Location: Netherlands
PostPosted: Tue Jan 19, 2021 21:09    Post subject: Reply with quote
That is why starting with that commit on 16 December, BS was building from his private repo because it was still under nda until 19 January.

I know that because I asked as we could no longer build and that is what he told me and of course I had to keep quiet too.
_________________
Routers:Netgear R7800, R6400v1, R6400v2, Linksys EA8500, EA6900 (XvortexCFE), E2000 (converted WRT320N), WRT54GS v1.
WireGuard Documents & Guides:https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=327397
OpenVPN Documents & Guides: https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=327398
IPSET: https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=327261
Install guide R6400v2:http://forum.dd-wrt.com/phpBB2/viewtopic.php?t=316399
Install guide R7800: https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=320614
Forum Guide Lines (important read):https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=324087
Back to top View user's profile Send private message
kernel-panic69
DD-WRT Guru


Joined: 08 May 2018
Posts: 8123
Location: Texas, USA
PostPosted: Tue Jan 19, 2021 21:51    Post subject: Reply with quote
"dnsmasq-pre-2.83" is _not_ v2.83. I don't know of anything that is ever pre-public release of any package that is ever merged into DD-WRT, but if you say so...
_________________
• Official Forum Rules, Guidelines & Helpful Information • Firmware FAQ • Installation Wiki • Where Do I Download Firmware?
• DON'T use Chromium-based browsers • RTFM/STFW TL;DR is NOT an excuse. • Why Should I Care What Color the Bikeshed Is?
Please DO NOT PM me with questions; Ask in the forum. ---------------------- Linux User #377467 counter.li.org / linuxcounter.net
Back to top View user's profile Send private message
egc
DD-WRT Guru


Joined: 18 Mar 2014
Posts: 7268
Location: Netherlands
PostPosted: Tue Jan 19, 2021 22:27    Post subject: Reply with quote
That is what BS told me he had a private pre-release version necessary because of serious security problems.

It had to stay private until 19th January as the official release would then came out and the disclosure of the security problems.

As it is private we cannot check, but that is probably why the DNSMASQ version shows UNKNOWN.
_________________
Routers:Netgear R7800, R6400v1, R6400v2, Linksys EA8500, EA6900 (XvortexCFE), E2000 (converted WRT320N), WRT54GS v1.
WireGuard Documents & Guides:https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=327397
OpenVPN Documents & Guides: https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=327398
IPSET: https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=327261
Install guide R6400v2:http://forum.dd-wrt.com/phpBB2/viewtopic.php?t=316399
Install guide R7800: https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=320614
Forum Guide Lines (important read):https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=324087
Back to top View user's profile Send private message
blkt
DD-WRT Guru


Joined: 20 Jan 2019
Posts: 2452
PostPosted: Tue Jan 19, 2021 22:33    Post subject: Reply with quote
Thank you BrainSlayer and egc!
Back to top View user's profile Send private message
Alozaros
DD-WRT Guru


Joined: 16 Nov 2015
Posts: 4177
Location: UK, London, just across the river..
PostPosted: Wed Jan 20, 2021 9:08    Post subject: Reply with quote
hmmm... the only thing i could see in SVN was regarding DHCP, ipv6 and some stuff about DNSSEC... + DNSmasq - UNKNOWN at the current builds...
Yes DNSSEC issues ware known, before those holes ware exposed to public...as well some others...so good move from BS side...patching those, in advance if so...
But DDWRT still needs the proper full version of it (2.83), as its has more complex approach...to the known issues..
https://svn.dd-wrt.com/changeset/45503 Embarassed

Thanks for letting us know egc and thanks to BS too... Cool

p.s. im sorry if i opened an inappropriate thread, mods can delete it now...
_________________
Atheros
TP-Link WR740Nv1 -----DD-WRT 45928 BS AP,NAT
TP-Link WR740Nv4 -----DD-WRT 44251 BS WAP/Switch
TP-Link WR1043NDv2 ---DD-WRT 45849 BS AP,NAT,AP Isolation,Firewall,Local DNS,Forced DNS,DoT,VPN,VLAN
TP-Link WR1043NDv2 ---DD-WRT 45928 BS AP,NAT,AD/Block,Firewall,Local DNS,Forced DNS,DoT,VPN,VLAN
TP-Link WR1043NDv2 ---Gargoyle OS 1.12.0 AP,NAT,QoS,Quotas
Qualcomm/IPQ8065
Netgear R7800 -----DD-WRT 45928 BS AP,NAT,AD-Block,AP&Net Isolation,VLAN's,Firewall,Local DNS,DoT
Broadcom
Netgear R7000 -----DD-WRT 45928 BS AP,Wi-Fi OFF,NAT,AD-Block,Firewall,Local DNS,Forced DNS,VLAN's,DoT,VPN
-----------------------------------------------------------------------------------------------
Stubby for DNS over TLS I DNSCrypt v2 by mac913
Back to top View user's profile Send private message
kernel-panic69
DD-WRT Guru


Joined: 08 May 2018
Posts: 8123
Location: Texas, USA
PostPosted: Wed Jan 20, 2021 16:56    Post subject: Reply with quote
Not an inappropriate thread. And yes, v2.83 official is now merged in and will be available in the next release Cool

@egc: Indeed, you are probably right. All good, moving forward Wink
_________________
• Official Forum Rules, Guidelines & Helpful Information • Firmware FAQ • Installation Wiki • Where Do I Download Firmware?
• DON'T use Chromium-based browsers • RTFM/STFW TL;DR is NOT an excuse. • Why Should I Care What Color the Bikeshed Is?
Please DO NOT PM me with questions; Ask in the forum. ---------------------- Linux User #377467 counter.li.org / linuxcounter.net
Back to top View user's profile Send private message
Goto page 1, 2  Next Display posts from previous:    Page 1 of 2
Post new topic   Reply to topic    DD-WRT Forum Forum Index -> General Questions All times are GMT

Navigation

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You can download files in this forum