Ubuntu
dnsmasq package

  1. Bug #1785383
  2. Comment #12

Comment 12 for bug 1785383

Revision history for this message
Dan Streetman (ddstreet) wrote :

> although from comment #4 it sounds like it might be a regression caused by a security fix.

it's not a security fix, it's a patch to get resolved working with specific broken captive portals, from bug 1727237 and bug 1766969. It was proposed upstream in this PR:
https://github.com/systemd/systemd/pull/8608

but was never accepted upstream, only added to Ubuntu. As this bug shows, the patch does appear to actually still cause problems for people even without DNSSEC on (that problem was fixed in Ubuntu separately with bug 1796501).

Fixing dnsmasq is good, but at some point we'll need to properly fix upstream to workaround buggy captive portals in a way that doesn't cause other problems.