12.05.2026 14:36, Stuart Henderson пишет:
> https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2026q2/018471.html
> 
>     Fix buffer overflow in struct bigname.  CVE-2026-2291
>     Fix NSEC bitmap parsing infinite loop. CVE-2026-4890
>     Verify rdlen field in RRSIG packets. CVE-2026-4891
>     Fix buffer overflow in helper.c with large CLIDs. CVE-2026-4892
>     Fix broken client subnet validation. CVE-2026-4893
>     Fix buffer overflow vulnerability in extract_addresses() CVE-2026-5172
> 
> ok?

OK kn

> 
> Index: Makefile
> ===================================================================
> RCS file: /cvs/ports/net/dnsmasq/Makefile,v
> diff -u -p -r1.71 Makefile
> --- Makefile	9 Feb 2026 18:10:36 -0000	1.71
> +++ Makefile	12 May 2026 11:34:08 -0000
> @@ -1,6 +1,7 @@
>  COMMENT=	lightweight caching DNS forwarder, DHCP and TFTP server
>  
> -DISTNAME=	dnsmasq-2.92
> +DISTNAME=	dnsmasq-2.92rel2
> +PKGNAME=	${DISTNAME:S/rel/pl/}

Looks like even "rel" would work, but I do prefer "pl" as well:

	$ pkg_check-version -v dnsmasq-2.92{,rel2}
	dnsmasq-2.92 has no issues
	dnsmasq-2.92rel2 has no issues
	dnsmasq-*- sorts as (older to newer): dnsmasq-2.92 dnsmasq-2.92rel2

>  CATEGORIES=	net
>  SITES=		https://thekelleys.org.uk/dnsmasq/
>  EXTRACT_SUFX=	.tar.xz
> Index: distinfo
> ===================================================================
> RCS file: /cvs/ports/net/dnsmasq/distinfo,v
> diff -u -p -r1.47 distinfo
> --- distinfo	9 Feb 2026 18:10:36 -0000	1.47
> +++ distinfo	12 May 2026 11:34:08 -0000
> @@ -1,2 +1,2 @@
> -SHA256 (dnsmasq-2.92.tar.xz) = S/UMLBAY+fvCYDffUbkOzqDLc9RhYoRnY7kt8NbDpFg=
> -SIZE (dnsmasq-2.92.tar.xz) = 637752
> +SHA256 (dnsmasq-2.92rel2.tar.xz) = Q9crjBKb3zPRe6/tyYgj9j5GtQBRKAZr8NKkcqMs4Go=
> +SIZE (dnsmasq-2.92rel2.tar.xz) = 638020
>