Simon Kelley e3a26d092e Fix broken client subnet validation. CVE-2026-4893 ...

Bug report from Royce M <royce@xchglabs.com>

Location: forward.c:713, edns0.c:421

With --add-subnet enabled, process_reply() passes the OPT record
length (~23 bytes) instead of the packet length to check_source().
All internal bounds checks fail, and the function always returns 1.
ECS source validation per RFC 7871 Section 9.2 is completely bypassed.

2026-05-10 21:49:40 +01:00

bld

Remove hash-questions.c - no longer required.

2024-11-02 21:29:47 +00:00

contrib

Omit message type from leasequery.c option dump.

2025-05-14 22:36:03 +01:00

dbus

Allow configuring filter-A/AAAA via dbus.

2023-03-08 15:35:05 +00:00

logo

tweak favicon

2012-04-02 20:40:34 +01:00

man

Accept DHCPv6 vendorclasses with any enterprise number in --dhcp-vendorclass

2026-03-17 13:29:49 +00:00

po

Update German translations.

2025-12-07 13:44:40 +00:00

src

Fix broken client subnet validation. CVE-2026-4893

2026-05-10 21:49:40 +01:00

submodules

Move debian submodule to submodules/dnsmasq-debian.

2025-01-24 21:05:43 +00:00

.gitattributes

Add .gitattributes to substitute VERSION on export.

2017-05-12 13:14:17 +01:00

.gitignore

Remove debian directory and replace with a git submodule.

2024-02-22 22:45:37 +00:00

.gitmodules

Move debian submodule to submodules/dnsmasq-debian.

2025-01-24 21:05:43 +00:00

Android.mk

import of dnsmasq-2.57.tar.gz

2012-01-05 17:31:15 +00:00

CHANGELOG

Rework storage allocation for domain names. CVE-2026-2291

2026-05-10 21:49:39 +01:00

CHANGELOG.archive

Spelling fixes.

2018-01-14 17:32:52 +00:00

COPYING

Update GNU GPL file.

2022-05-13 21:22:11 +01:00

COPYING-v3

import of dnsmasq-2.41.tar.gz

2012-01-05 17:31:13 +00:00

debian

Move debian submodule to submodules/dnsmasq-debian.

2025-01-24 21:05:43 +00:00

dnsmasq.conf.example

Remove trailing white space from dnsmasq.conf.example

2025-12-05 15:12:28 +00:00

doc.html

Added a tail to .hmtl files

2025-07-20 15:29:43 +01:00

FAQ

Typo in FAQ.

2021-06-15 23:14:59 +01:00

Makefile

Bump copyrights to 2026.

2026-04-08 12:08:18 +01:00

setup.html

Added a tail to .hmtl files

2025-07-20 15:29:43 +01:00

trust-anchors.conf

Add IANA Root TA 2024.

2024-12-18 23:58:58 +00:00

VERSION

VERSION file

2012-01-05 22:00:08 +00:00

S

Description

No description provided

GPL-2.0

6.2 MiB

0 Stars 1 Watchers 0 Forks

Languages

C 94.3%

Perl 2.2%

HTML 1.2%

Shell 1%

Makefile 0.6%

Other 0.6%