[Bug 295204] dns/dnsmasq: 2.92rel2 fixes six security vulnerabilities (including privilege escalation and address redirection)

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=295204

--- Comment #4 from commit-hook@FreeBSD.org ---
A commit in branch 2026Q2 references this bug:

URL:
https://cgit.FreeBSD.org/ports/commit/?id=c2ed625a9f7a358a2e55e6518dd45d486d42cb16

commit c2ed625a9f7a358a2e55e6518dd45d486d42cb16
Author:     Matthias Andree <mandree@FreeBSD.org>
AuthorDate: 2026-05-11 21:13:40 +0000
Commit:     Vladimir Druzenko <vvd@FreeBSD.org>
CommitDate: 2026-05-11 21:17:23 +0000

    dns/dnsmasq: Update 2.92 => 2.92rel2 (6 CVEs)

    Including privilege escalation, cache poisoning/rediction, information
    leak, and denial of service.

    See https://www.kb.cert.org/vuls/id/471747
    See
https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2026q2/018471.html

    PR:             295204
    Security:       eeb4d69a-4d74-11f1-9a9c-994b98c88011
    Security:       CVE-2026-2291
    Security:       CVE-2026-4890
    Security:       CVE-2026-4891
    Security:       CVE-2026-4892
    Security:       CVE-2026-4893
    Security:       CVE-2026-5172
    Sponsored by:   UNIS Labs
    MFH:            2026Q2

    (cherry picked from commit b8a4de5ca6ca9d2607d14894dacc9e24852bac50)

 dns/dnsmasq/Makefile | 4 ++--
 dns/dnsmasq/distinfo | 6 +++---
 2 files changed, 5 insertions(+), 5 deletions(-)

-- 
You are receiving this mail because:
You are the assignee for the bug.