dnsmasq

dnsmasq at a glance

dnsmasq is a lightweight, widely used DNS forwarder, DHCP and TFTP server, common on routers, small networks and many Linux systems. dnsmasq ships releases in an unhurried cadence plus coordinated security fixes; as network infrastructure handling untrusted input, its advisories deserve prompt attention.

For admins dnsmasq usually comes from the distribution or device firmware, which backports fixes — for security advisories (past issues like the DNSpooq class of flaws affected many devices), confirm the patched package is installed and the service restarted. Harden the configuration: restrict who can query it (avoid an open resolver), bind interfaces deliberately, and keep it off untrusted networks unless intended. Because it provides both DNS and DHCP on many small networks, an outage affects everything — test changes. After updating, verify resolution and DHCP leases. It's often embedded in routers and appliances, so mind firmware update paths. Patchletter surfaces new dnsmasq releases.