Ah, it looks like Colin did just cherry pick the fix for this bug; from the backport .deb's changelog:
+dnsmasq (2.68-1ubuntu0.1ppa1) trusty; urgency=medium + + * Cherry-pick from 2.73: + - Correctly sanitise DNS header bits in answer when recreating query for + retry. + + -- Colin Watson <cjwat...@ubuntu.com> Mon, 08 Feb 2016 15:46:48 +0000 -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to dnsmasq in Ubuntu. https://bugs.launchpad.net/bugs/1543185 Title: Malformed query causing timeouts due to ignored upstream queries To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/dnsmasq/+bug/1543185/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs