Re: [Bloat] New OpenWrt release fixing several dnsmasq CVEs

2021-01-23 Thread Daniel Sterling
that's great! thanks to the openwrt team for the quick work from that patch: "If identical queries from IPv4 and IPv6 sources are combined by the new code added in 15b60ddf935a531269bb8c68198de012a4967156 then replies can end up being sent via the wrong family of socket. The ->fd should be per qu

Re: [Bloat] New OpenWrt release fixing several dnsmasq CVEs

2021-01-23 Thread Jonathan Foulkes
Hi Seb, someone did just that and even better, compared two builds with the dnsmasq being the only variable, and did not see any differences: https://forum.openwrt.org/t/security-advisory-2021-01-19-1-dnsmasq-multiple-vulnerabilities/85903/85 From other comments, looks like they found the bug and

Re: [Bloat] New OpenWrt release fixing several dnsmasq CVEs

2021-01-22 Thread Sebastian Moeller
Could you try to run top or htop and look at the CPU load? I could imagine that the fixes dnsmasq might have some CPU spikes that simply leave not enough cycles for the traffic shaper? Best Regards Sebastian > On Jan 22, 2021, at 22:25, Jonathan Foulkes wrote: > > I figure there shoul

Re: [Bloat] New OpenWrt release fixing several dnsmasq CVEs

2021-01-22 Thread Toke Høiland-Jørgensen via Bloat
Daniel Sterling writes: > On Fri, Jan 22, 2021 at 4:25 PM Jonathan Foulkes > wrote: >> I did not install .6, I only performed an opkg update of the dnamasq package >> itself. So kernal is the same in my case. > > given you just updated the package -- that's extremely weird. > userspace update

Re: [Bloat] New OpenWrt release fixing several dnsmasq CVEs

2021-01-22 Thread Daniel Sterling
On Fri, Jan 22, 2021 at 4:25 PM Jonathan Foulkes wrote: > I did not install .6, I only performed an opkg update of the dnamasq package > itself. So kernal is the same in my case. given you just updated the package -- that's extremely weird. userspace update shouldn't be able to lock up the kern

Re: [Bloat] New OpenWrt release fixing several dnsmasq CVEs

2021-01-22 Thread Jonathan Foulkes
I figure there should be no inter-dependencies there, but the side-effect of the new dnsmasq is pretty serious. I did not install .6, I only performed an opkg update of the dnamasq package itself. So kernal is the same in my case. But others running a full .6 build report similar QoS issues. I

Re: [Bloat] New OpenWrt release fixing several dnsmasq CVEs

2021-01-22 Thread Toke Høiland-Jørgensen via Bloat
Jonathan Foulkes writes: > I installed the updated package on a 19.07.4 box running cake, and QoS > performance went down the tubes. > Last night it locked up completely while attempting to stream. > > See the PingPlots others have posted to this forum thread, mine look similar, > went from con

Re: [Bloat] New OpenWrt release fixing several dnsmasq CVEs

2021-01-22 Thread Jonathan Foulkes
I installed the updated package on a 19.07.4 box running cake, and QoS performance went down the tubes. Last night it locked up completely while attempting to stream. See the PingPlots others have posted to this forum thread, mine look similar, went from constant sub 50ms to very spiky, then som

[Bloat] New OpenWrt release fixing several dnsmasq CVEs

2021-01-19 Thread Toke Høiland-Jørgensen via Bloat
Hi everyone In case you haven't seen, there's a new OpenWrt release out[0] that fixes several CVEs in dnsmasq; seems like quite a bunch at once[1]. So in the interest of keeping everyone's routers safe, here's a gentle nudge to update :) -Toke [0] https://openwrt.org/releases/19.07/notes-19.07.