Comment by TacticalCoder
5 hours ago
Sidenote but... I read this on that link:
dnsmasq: Codex Security independently identified vulnerable patterns corresponding to four of the six dnsmasq CVEs later fixed in 2.92rel2: CVE-2026-4890 (opens in a new window), CVE-2026-4891 (opens in a new window), CVE-2026-4892 (opens in a new window), and CVE-2026-517
dnsmasq has had so many freaking security holes in 2025 and 2026 that atm I decided to just remove that thing from all my machines.
I would love to, but apparently its needed for libvirt.
"dnsmasq has had so many freaking security holes in 2025 and 2026 that atm I decided to just remove that thing from all my machines."
Would be nice if OpenWRT would stop including it by default
What else is out there that fits openWRT's use case? BIND seems like it would be a bit "heavy"
For caching recursive dns, unbound?
I got the feeling that dnsmasq does more than just recursive dns though?
1 reply →