dnsmasq DNSpooq vulnerabilities

Report wireless and/or network connectivity problems in this forum.

Moderator: Moderators

Post Reply
coits
Posts: 118
Joined: Thu Sep 19, 2013 1:58 am
Location: canada

dnsmasq DNSpooq vulnerabilities

Post by coits »

Hi All,

Just want to check if gatgoyle1.12 has a patch for this DNSpooq vulnerabilities.

https://forum.openwrt.org/t/security-a ... ies/85903

Thanks,
Coits
Gargoyle 1.9.x on Buffalo WZR-HP-AG300H
Gargoyle 1.10.x on TP-Link Archer C7 v2.0
Gargoyle 1.11.x on WRT3200 acm

Lantis
Moderator
Posts: 6735
Joined: Mon Jan 05, 2015 5:33 am
Location: Australia

Re: dnsmasq DNSpooq vulnerabilities

Post by Lantis »

I will patch Gargoyle when they sort it all out on their end. There were bugs introduced. They're pretty close now.
For now, you can follow the workaround in the first post to manually block it.
http://lantisproject.com/downloads/gargoyle_ispyisail.php for the latest releases
Please be respectful when posting. I do this in my free time on a volunteer basis.

coits
Posts: 118
Joined: Thu Sep 19, 2013 1:58 am
Location: canada

Re: dnsmasq DNSpooq vulnerabilities

Post by coits »

Thank you in advance!
Gargoyle 1.9.x on Buffalo WZR-HP-AG300H
Gargoyle 1.10.x on TP-Link Archer C7 v2.0
Gargoyle 1.11.x on WRT3200 acm

coits
Posts: 118
Joined: Thu Sep 19, 2013 1:58 am
Location: canada

Re: dnsmasq DNSpooq vulnerabilities

Post by coits »

hi All,

I’m using dnssec feature of dnsmasq-full, for now I will be working on the workaround of this vulrabilities.

Thanks
Gargoyle 1.9.x on Buffalo WZR-HP-AG300H
Gargoyle 1.10.x on TP-Link Archer C7 v2.0
Gargoyle 1.11.x on WRT3200 acm

Lantis
Moderator
Posts: 6735
Joined: Mon Jan 05, 2015 5:33 am
Location: Australia

Re: dnsmasq DNSpooq vulnerabilities

Post by Lantis »

To clarify my previous post, the only fix that will be available for 1.12 will be the manual workaround.
1.13 will have the updated dnsmasq
http://lantisproject.com/downloads/gargoyle_ispyisail.php for the latest releases
Please be respectful when posting. I do this in my free time on a volunteer basis.

coits
Posts: 118
Joined: Thu Sep 19, 2013 1:58 am
Location: canada

Re: dnsmasq DNSpooq vulnerabilities

Post by coits »

I will try to manually install dnsmasq-full with gargoyle1.13.
I hope there will be no dependencies issue.

Thank you.
Gargoyle 1.9.x on Buffalo WZR-HP-AG300H
Gargoyle 1.10.x on TP-Link Archer C7 v2.0
Gargoyle 1.11.x on WRT3200 acm

Post Reply