Commit Graph

Select branches

Hide Pull Requests

master

v2.0

v2.1

v2.10

v2.11

v2.12

v2.13

v2.14

v2.15

v2.16

v2.17

v2.18

v2.19

v2.2

v2.20

v2.21

v2.22

v2.23

v2.24

v2.25

v2.26

v2.27

v2.28

v2.29

v2.3

v2.30

v2.31

v2.32

v2.33

v2.34

v2.35

v2.36

v2.37

v2.38

v2.39

v2.4

v2.40

v2.41

v2.42

v2.43

v2.44

v2.45

v2.46

v2.47

v2.48

v2.49

v2.5

v2.50

v2.51

v2.52

v2.53

v2.55

v2.56

v2.57

v2.58

v2.59

v2.6

v2.60

v2.60rc1

v2.60rc2

v2.60rc3

v2.60rc4

v2.60rc5

v2.60test10

v2.60test11

v2.60test12

v2.60test13

v2.60test14

v2.60test15

v2.60test16

v2.60test17

v2.60test18

v2.60test7

v2.60test8

v2.60test9

v2.61

v2.61rc1

v2.61rc2

v2.61rc3

v2.61rc4

v2.61test10

v2.61test11

v2.61test2

v2.61test3

v2.61test4

v2.61test5

v2.61test6

v2.61test7

v2.61test8

v2.61test9

v2.62

v2.62rc1

v2.62rc2

v2.62rc3

v2.62test1

v2.62test2

v2.62test3

v2.62test4

v2.63

v2.63rc1

v2.63rc2

v2.63rc3

v2.63rc4

v2.63rc5

v2.63rc6

v2.63test1

v2.63test2

v2.63test3

v2.64

v2.64rc1

v2.64rc2

v2.64rc3

v2.64test1

v2.64test2

v2.64test3

v2.64test4

v2.64test5

v2.64test6

v2.64test7

v2.65

v2.65test1

v2.65test2

v2.65test3

v2.65test4

v2.66

v2.66rc1

v2.66rc2

v2.66rc3

v2.66rc4

v2.66rc5

v2.66test1

v2.66test10

v2.66test11

v2.66test12

v2.66test13

v2.66test14

v2.66test15

v2.66test16

v2.66test17

v2.66test18

v2.66test19

v2.66test2

v2.66test20

v2.66test21

v2.66test22

v2.66test23

v2.66test3

v2.66test4

v2.66test5

v2.66test6

v2.66test7

v2.66test8

v2.66test9

v2.67

v2.67rc1

v2.67rc2

v2.67rc3

v2.67rc4

v2.67test1

v2.67test10

v2.67test11

v2.67test12

v2.67test13

v2.67test14

v2.67test15

v2.67test16

v2.67test17

v2.67test18

v2.67test2

v2.67test3

v2.67test4

v2.67test5

v2.67test6

v2.67test7

v2.67test8

v2.67test9

v2.68

v2.68rc1

v2.68rc2

v2.68rc3

v2.68rc4

v2.68rc5

v2.68test1

v2.68test2

v2.69

v2.69rc1

v2.69rc2

v2.69rc3

v2.69rc4

v2.69test1

v2.69test10

v2.69test11

v2.69test2

v2.69test3

v2.69test4

v2.69test5

v2.69test6

v2.69test7

v2.69test8

v2.69test9

v2.7

v2.70

v2.71

v2.71test1

v2.71test2

v2.72

v2.72rc1

v2.72rc2

v2.72test1

v2.72test2

v2.72test3

v2.73

v2.73rc1

v2.73rc10

v2.73rc2

v2.73rc3

v2.73rc4

v2.73rc5

v2.73rc6

v2.73rc7

v2.73rc8

v2.73rc9

v2.73test1

v2.73test2

v2.73test3

v2.73test4

v2.73test5

v2.73test6

v2.74

v2.74rc1

v2.74rc2

v2.74rc3

v2.74rc4

v2.74test1

v2.74test2

v2.75

v2.76

v2.76rc1

v2.76rc2

v2.76test1

v2.76test10

v2.76test11

v2.76test12

v2.76test13

v2.76test2

v2.76test3

v2.76test4

v2.76test5

v2.76test6

v2.76test7

v2.76test8

v2.76test9

v2.77

v2.77rc1

v2.77rc2

v2.77rc3

v2.77rc4

v2.77rc5

v2.77test1

v2.77test2

v2.77test3

v2.77test4

v2.77test5

v2.78

v2.78test1

v2.78test2

v2.79

v2.79rc1

v2.79rc2

v2.79test1

v2.8

v2.80

v2.80rc1

v2.80test1

v2.80test2

v2.80test3

v2.80test4

v2.80test5

v2.80test6

v2.80test7

v2.80test8

v2.81

v2.81rc1

v2.81rc2

v2.81rc3

v2.81rc4

v2.81rc5

v2.82

v2.82rc1

v2.82test1

v2.83

v2.83test1

v2.84

v2.84rc1

v2.84rc2

v2.84test1

v2.84test2

v2.84test3

v2.85

v2.85rc1

v2.85rc2

v2.85rc3

v2.86

v2.86rc1

v2.86rc2

v2.86rc3

v2.86test1

v2.86test2

v2.86test3

v2.86test4

v2.86test5

v2.86test6

v2.86test7

v2.87

v2.87rc1

v2.87test1

v2.87test2

v2.87test3

v2.87test4

v2.87test5

v2.87test6

v2.87test7

v2.87test8

v2.87test9

v2.88

v2.88rc1

v2.88rc2

v2.88rc3

v2.88rc4

v2.88rc5

v2.88test1

v2.88test2

v2.88test3

v2.89

v2.89test1

v2.9

v2.90

v2.90deb2

v2.90test1

v2.90test2

v2.90test3

v2.90test4

v2.91

v2.91rc1

v2.91rc2

v2.91rc3

v2.91rc4

v2.91rc5

v2.91rc6

v2.91test1

v2.91test10

v2.91test2

v2.91test4

v2.91test5

v2.91test6

v2.91test7

v2.91test8

v2.91test9

v2.92

v2.92rc1

v2.92rc2

v2.92rc3

v2.92test1

v2.92test10

v2.92test11

v2.92test12

v2.92test13

v2.92test14

v2.92test15

v2.92test16

v2.92test17

v2.92test18

v2.92test19

v2.92test2

v2.92test20

v2.92test21

v2.92test22

v2.92test3

v2.92test4

v2.92test5

v2.92test6

v2.92test7

v2.92test8

v2.92test9

v2.93

v2.93rc1

v2.93rc2

v2.93rc3

v2.93test1

v2.93test10

v2.93test2

v2.93test3

v2.93test4

v2.93test5

v2.93test6

v2.93test7

v2.93test8

v2.93test9

Mono Color

• a9880c595f Close listening socket on fatal accept() errors to prevent busy loop master Yuefu Zhou 2026-08-20 14:39:41 +08:00
• ad9208358e fix --no-dhcpv4-interface also disables RA/DHCPv6 on constructed (constructor:) ranges David Nichols 2026-09-02 22:24:54 +01:00
• baf85a8f38 Tune store_name() fix in a9cb3971c6 Simon Kelley 2026-09-02 21:43:49 +01:00
• a9cb3971c6 Fix severe SIGHUP reload slowdown caused by store_name quadratic search Pank 2026-09-02 11:50:00 +08:00
• f031f5b4b3 Don't loop when a DS reply carries no proof of non-existence DL6ER 2026-08-05 19:18:07 +02:00
• cf9c9c74e0 Fix typo in the TCP fork comments. DL6ER 2026-08-09 10:34:02 +02:00
• b518bc425d Define the fork handshake byte unconditionally. DL6ER 2026-08-09 10:34:01 +02:00
• 0c177ad607 Validate the enterprise ID in the DHCPv6 vendor-class parser. Simon Kelley 2026-08-17 12:53:51 +01:00
• 4388c38468 Fix bogus 256-byte DHCPv6 vendor-class option. DL6ER 2026-08-09 10:34:01 +02:00
• 0a31ade4db Add man page warning about untrusted data in the environment of DHCP-script. Simon Kelley 2026-08-15 15:59:57 +01:00
• a4ebe438df radv: explicit lease time as a floor for constructed-prefix RA lifetimes. Giuseppe Piscitelli 2026-08-13 16:08:08 +01:00
• 8d8ad76d89 Expand man page for --group Simon Kelley 2026-08-09 21:07:21 +01:00
• b50b55e227 Allow enviroment variables in dhcp-script to contain '=' Simon Kelley 2026-08-09 17:13:19 +01:00
• 7a663fd46b Don't pass arbitrary characters to DNSMASQ_SUPPLIED_HOSTNAME. Simon Kelley 2026-08-09 16:14:23 +01:00
• 1f122521bb Make configuration for DHCPv4 options and DHCPv6 options consistent. Simon Kelley 2026-07-27 21:02:53 +01:00
• 8af20e56ed Fix typos throughout the codebase Pooyan Khanjankhani 2026-06-23 13:13:09 +03:30
• 8aa607d322 Fix typo in man pages --dynamic-host Pooyan Khanjankhani 2026-06-23 13:13:18 +03:30
• 52982cfe8f Fix name change of a flag in comments Pooyan Khanjankhani 2026-06-23 14:27:29 +03:30
• 81d78d9c75 Fix a typo in man pages Pooyan Khanjankhani 2026-06-23 14:48:31 +03:30
• 7ebe7ebb93 Extend closing the netlink in TCP handler processes to *BSD. Simon Kelley 2026-07-09 21:45:40 +01:00
• 1da5cc2951 Close inherited listening sockets in forked TCP child processes Zhou Yuefu 2026-07-07 11:13:44 +08:00
• 5990261a57 Add CVE-2026-12969 to the record. Simon Kelley 2026-07-09 13:08:25 +01:00
• b6b7e5a6fd Fix packet dump code. Simon Kelley 2026-07-06 21:22:04 +01:00
• f8c162b8b0 Fix logic suppressing multiple warnings in bound interfaces. Simon Kelley 2026-07-03 22:59:22 +01:00
• c93e9ce592 Don't chown a log file unless it is a regular file. Simon Kelley 2026-07-03 22:26:36 +01:00
• bf80262874 Fix file-descriptor leak in TFTP code. Simon Kelley 2026-06-15 22:31:22 +01:00
• ea4645d52c Extend ea9bd30cd4 Simon Kelley 2026-06-11 12:27:24 +01:00
• ea9bd30cd4 Fix information disclosure. Simon Kelley 2026-06-10 15:43:53 +01:00
• 1af6ee6468 dhcp6: implement vendor class support Luiz Angelo Daros de Luca 2026-06-10 14:48:45 -03:00
• c310853907 Fix double-free in blockdata_expand(). Simon Kelley 2026-06-09 22:11:21 +01:00
• 3ff66da573 Fix two typos in v2.93 CHANGELOG v2.93 Matthias Andree 2026-06-02 20:46:57 +02:00
• d823d8e9cd Fix OOB-read crash in get_rdata(). Simon Kelley 2026-06-03 23:26:41 +01:00
• 2c78b6db6c Better code to make human-friendly tokens for pointers in log-malloc. Simon Kelley 2026-06-02 13:00:18 +01:00
• 4bf46ceb37 Add the ability to bail before EOF to get_line_alloc(); Simon Kelley 2026-06-02 00:22:05 +01:00
• 7d42376a3a Fix get_line_alloc() v2.93rc3 Simon Kelley 2026-06-01 22:56:23 +01:00
• 08cc209e7a Add --log-debug to man page. Simon Kelley 2026-06-01 22:45:49 +01:00
• ff4964d01d Re-implement print_mac() to do its own buffer managment. v2.93rc2 Simon Kelley 2026-05-31 11:50:22 +01:00
• 45771dc92c Fix OOB writes in contrib/leasequesry/leasequery.c Michalis Vasileiadis 2026-05-30 15:58:52 +01:00
• af73e48067 Include fc00::/8 in the set of local addresses. Simon Kelley 2026-05-30 13:46:44 +01:00
• 77d4749a5e Fix DNSSEC frec use-after-free in TCP validation path. Simon Kelley 2026-05-29 17:24:54 +01:00
• 0375e40824 Fix bounds-checking in contrib/lease-tools/dhcp_release6.c OpenAI Security Research Team 2026-05-29 16:22:06 +01:00
• 18a139f48f Change "limit" arg to add_pseudoheader() to a length. Simon Kelley 2026-05-17 13:06:17 +01:00
• d5d2bfb74a Change "limit" arg to make_local_answer() to a length. Simon Kelley 2026-05-17 12:30:21 +01:00
• 7f5802c144 Tidy up get_line_alloc() Simon Kelley 2026-05-17 00:33:55 +01:00
• 7280e46aa5 Check for too-small packets in relay_upstream6() Simon Kelley 2026-05-17 00:24:57 +01:00
• 754177b368 Fix hostname_issubdomain() confusion. Simon Kelley 2026-05-16 23:26:56 +01:00
• 228d7ff964 Remove arbitrary limit on config file line lengths. Simon Kelley 2026-05-14 17:31:37 +01:00
• 14094e88be Fix buffer OOB read in find_soa() v2.93rc1 do litli 2026-05-09 22:21:18 +01:00
• c705607122 Fix problen in from_wire() when names contain escape chars. Simon Kelley 2026-04-06 21:35:51 +01:00
• 9d2c93b608 Sync 3ea905b98b with 7cd050075ea73cd7707fce5b70f0fec25f722f67 Simon Kelley 2026-03-30 18:15:40 +01:00
• 073082ddc0 Fix buffer overflow vulnerability in extract_addresses() CVE-2026-5172 Simon Kelley 2026-03-30 16:24:33 +01:00
• 9f651f3398 Updates to a345b075b3b8696a18631b46e53ab654354ed961 following review. Simon Kelley 2026-03-30 15:32:54 +01:00
• e3a26d092e Fix broken client subnet validation. CVE-2026-4893 Simon Kelley 2026-03-25 23:22:37 +00:00
• 10e6b5b83e Fix buffer overflow in helper.c with large CLIDs. CVE-2026-4892 Simon Kelley 2026-03-25 23:16:35 +00:00
• 788b4e0f6c Verify rdlen field in RRSIG packets. CVE-2026-4891 Simon Kelley 2026-03-25 23:04:08 +00:00
• 7b151eb606 Fix NSEC bitmap parsing infinite loop. CVE-2026-4890 Simon Kelley 2026-03-25 22:23:51 +00:00
• 014e909f78 Rework storage allocation for domain names. CVE-2026-2291 Simon Kelley 2026-02-12 16:23:42 +00:00
• 29f8712f02 Fix OOB read/write of rr_status. Simon Kelley 2026-05-10 21:47:12 +01:00
• 0450f9e28a Fix OOB read when parsing DHCPv6 userclass or vendorclass options. Simon Kelley 2026-05-10 16:49:59 +01:00
• 0637bcf010 Add support for IPV6 when reading ARP/ND table on *BSD. Sagie D. 2026-05-09 21:44:38 +01:00
• 4bcc9650fa Fix memory leak reading ARP cache on *BSD. Simon Kelley 2026-05-04 16:18:33 +01:00
• fc2286805f Preserve existing log file permissions when adding group-write bit. v2.93test10 Florian MargaineandClaude Opus 4.6 2026-04-21 22:41:10 +01:00
• d158aeca75 Increase default limit on TCP handler processes from 20 to 30. Simon Kelley 2026-04-21 22:27:07 +01:00
• 36d081e374 Fix buffer overlow in log_query() Simon Kelley 2026-04-21 22:14:41 +01:00
• 9eb0757da9 Fix crash with mal-formed config option. Toliak Purple 2026-04-21 21:49:35 +01:00
• 2d0e0c7a54 Tweak DHCPv6 replay decapsulation. Simon Kelley 2026-04-10 12:40:29 +01:00
• cfc2244c2a Bump copyrights to 2026. Simon Kelley 2026-04-08 12:08:18 +01:00
• 9ad74926d4 Fix 1-byte buffer overflow in relay_reply4() v2.93test9 Simon Kelley 2026-04-06 22:22:43 +01:00
• a6069da373 Check DNS query via TCP doesn't have QR bit set. Simon Kelley 2026-04-05 22:50:43 +01:00
• 14f53171ca Sanity checking on DNS replies via TCP. Simon Kelley 2026-04-05 22:25:56 +01:00
• 8fd06d2cc0 OOB buffer check with DNS bitstring labels. Simon Kelley 2026-03-30 21:19:26 +01:00
• d152e81e42 Tighten check on TFTP pathnames to avoid directory escape. Simon Kelley 2026-03-30 21:18:11 +01:00
• e0bec3342b Move logging on TCP timeout from child process to main process. Simon Kelley 2026-03-30 20:23:56 +01:00
• dd707937d5 dump: check lseek() return in pcap record-counting loop Dominik 2026-03-20 16:21:00 +01:00
• c5f46412a3 domain: fix strncat buffer-size argument in is_rev_synth() Dominik 2026-03-19 23:41:22 +01:00
• cd04c0ce20 lease: check parse_hex() return value before use as length DominikandClaude Sonnet 4.6 2026-03-19 23:11:46 +01:00
• 0630a45ae1 edns0: bounds-check option length before memcmp in check_source() Dominik 2026-03-19 22:41:55 +01:00
• 3ea905b98b rfc3315: fix integer underflow and heap overflow in log6_opts STATUS_CODE Dominik 2026-03-19 22:33:02 +01:00
• ca509cb611 dhcp-common: fix OOB reads in DHCPv6 option_string() decoders Dominik 2026-03-19 22:11:06 +01:00
• 8ceb8ee9b5 dhcp-common: bounds-check label index before reading in OT_RFC1035_NAME decoder Dominik 2026-03-19 21:57:11 +01:00
• 1c4a97edb5 rfc2131: fix off-by-one in BOOTP filename netid NUL termination Dominik 2026-03-19 21:51:47 +01:00
• 9e3e0465cd helper: fix OOB read in grab_extradata_lua bounds check Dominik 2026-03-19 21:45:11 +01:00
• b12a9249f6 fix: NUL-terminate buf in prettyprint_time() when t == 0 Dominik 2026-03-19 21:35:47 +01:00
• 9dec84ca42 fix: rand64() must share global outleft with rand16()/rand32() Dominik 2026-03-19 21:26:11 +01:00
• 68c149e9dd fix: move fd-match guard out of loop in reply_query() Dominik 2026-03-19 21:08:47 +01:00
• 5ea054b264 fix: zero correct byte count in expand_workspace_real() Dominik 2026-03-19 20:59:11 +01:00
• b95d5a2577 Further tidying of DHCPv6 packet dissection code. v2.93test8 Simon Kelley 2026-03-24 22:07:49 +00:00
• 5be5dc1f16 New heuristic for disabling DNSSEC for domain-specific nameservers. Simon Kelley 2026-03-24 12:30:45 +00:00
• 48348a2d77 Fix broken DHCPv6 userclass data in DHCP script. Simon Kelley 2026-03-17 13:40:10 +00:00
• b4a0663654 Accept DHCPv6 vendorclasses with any enterprise number in --dhcp-vendorclass if not enterprise number is specified. Also accept and match on enterprise number only. Simon Kelley 2026-03-17 12:12:59 +00:00
• 53313014b5 Fix broken DHCPv6 vendorclass data in DHCP script. Simon Kelley 2026-03-17 12:09:36 +00:00
• cf08eeee12 Complete 32a54fc8a5 v2.93test7 Simon Kelley 2026-03-15 16:03:29 +00:00
• 0597828b74 Tighten length checking to avoid possible buffer read-overrun in DHCPv6. Simon Kelley 2026-03-10 22:06:50 +00:00
• c8168e888e Don't call qsort() with a NULL array when no servers defined. Simon Kelley 2026-03-10 21:17:41 +00:00
• 3a052d55fb Fix regression handling non-QUERY requests over TCP. Simon Kelley 2026-03-08 22:19:30 +00:00
• 1eab169173 Fix missed hash->digest calls in 4070a74862 Simon Kelley 2026-03-01 12:33:38 +00:00
• 4070a74862 Fix FTBFS with nettle 4.0. Simon Kelley 2026-03-01 12:01:12 +00:00
• 65adc53130 Modify the inotify implementation so that inotify watches are only created after dnsmasq has changed permissions and userid. This means that the permissions used when creating the watches are the same as used for accessing watched files, which makes more sense and avoids odd and confusing error conditions. v2.93test6 Simon Kelley 2026-02-28 21:30:57 +00:00
• 66d9658f5f Fix crash with empty DHCP SNAME option. v2.93test5 Simon Kelley 2026-02-26 15:10:41 +00:00
• ca30c82647 Fix broken NS responses in certain auth-zone configurations. Thomas Erbesdobler 2026-02-26 13:30:44 +00:00