From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from smtp91.ord1c.emailsrvr.com (smtp91.ord1c.emailsrvr.com [108.166.43.91]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by lists.bufferbloat.net (Postfix) with ESMTPS id BCA233B29E for ; Fri, 22 Jan 2021 14:33:48 -0500 (EST) X-Auth-ID: jf@jonathanfoulkes.com Received: by smtp28.relay.ord1c.emailsrvr.com (Authenticated sender: jf-AT-jonathanfoulkes.com) with ESMTPSA id 140E24017A; Fri, 22 Jan 2021 14:33:48 -0500 (EST) Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 13.4 \(3608.120.23.2.4\)) From: Jonathan Foulkes In-Reply-To: <87turceco5.fsf@toke.dk> Date: Fri, 22 Jan 2021 14:33:47 -0500 Cc: bloat@lists.bufferbloat.net, cerowrt-devel@lists.bufferbloat.net Content-Transfer-Encoding: quoted-printable Message-Id: <557C22F5-BF2E-478A-8C48-BE52F9C75256@jonathanfoulkes.com> References: <87turceco5.fsf@toke.dk> To: =?utf-8?Q?Toke_H=C3=B8iland-J=C3=B8rgensen?= X-Mailer: Apple Mail (2.3608.120.23.2.4) X-Classification-ID: 76c3cb3a-fa8a-484c-b831-c6f4db56c55b-1-1 Subject: Re: [Bloat] New OpenWrt release fixing several dnsmasq CVEs X-BeenThere: bloat@lists.bufferbloat.net X-Mailman-Version: 2.1.20 Precedence: list List-Id: General list for discussing Bufferbloat List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 22 Jan 2021 19:33:48 -0000 I installed the updated package on a 19.07.4 box running cake, and QoS = performance went down the tubes. Last night it locked up completely while attempting to stream. See the PingPlots others have posted to this forum thread, mine look = similar, went from constant sub 50ms to very spiky, then some loss, loss = increasing, and if high traffic, lock-up. = https://forum.openwrt.org/t/security-advisory-2021-01-19-1-dnsmasq-multipl= e-vulnerabilities/85903/39 load is low, sirq is low, so box does not seem stressed. Any reason Cake would be sensitive to a dnsmasq bug? Anyway, heads-up to wait before deploying the update, A new one should = be forthcoming. Thanks, Jonathan Foulkes > On Jan 19, 2021, at 6:20 PM, Toke H=C3=B8iland-J=C3=B8rgensen via = Bloat wrote: >=20 > Hi everyone >=20 > In case you haven't seen, there's a new OpenWrt release out[0] that > fixes several CVEs in dnsmasq; seems like quite a bunch at once[1]. >=20 > So in the interest of keeping everyone's routers safe, here's a gentle > nudge to update :) >=20 > -Toke >=20 > [0] https://openwrt.org/releases/19.07/notes-19.07.6 > [1] https://www.jsof-tech.com/disclosures/dnspooq/ > _______________________________________________ > Bloat mailing list > Bloat@lists.bufferbloat.net > https://lists.bufferbloat.net/listinfo/bloat