The dnsmasq and connman may conflict (patch available)

[robang74]

@nephros

It is vulnerable to “sloppy developer” and “careless “power user”” attack.

Thanks for both the compliments!

Your code is sloppy (unless you’re a computer scientist)

I have been beaten twice by @olf for having suggested using APToide in the quick start guide

@olf

You seem to have missed the point: All APKs at Aptoide are potentially malicious, because anyone can upload anything there. Consequently any new version of a formerly benign APK at Aptoide might be malicious. Hence one shall not use Aptoide at all. All software at Aptoide is available elsewhere, because it only hosts APKs uploaded by users!

and now, we discover that Patch Manager can do much more damage…

However, I promply put in ALPHA state the patch that I have uploaded.

---

Name: dnsmasq-connman-integration

Display name: dnsmasq connman integration (ALPHA)

Author: robang74

Updated at: June 21, 2023, 12:43 a.m.

Sources

Description: *** DO NOT INSTALL - DANGEROUS BETA TESTING ***

---

UPDATE #1

Published on Tue, 25 Jan 2022, it refers to CVE-2021-33833 first noticed on 06/09/2021 and last update on 02/09/2022.

• oss-security - Multiple vulnerabilities in connman's dnsproxy component

Querying the pakages database, I have found installed

• connman-1.32+git194-1.19.1.jolla.aarch64

The release 1.32 is dated 2016-04-18. I am not acknoledged what +git194 means possibly 194 commits after the initial fork on 1.19.1. The 1.19 has been released on 2013-10-14 which is the same year that Jolla took over the Nokia business.

UPDATE #2

Thus, I managed to release the second version: 0.0.2 - dnsmask is not required anymore but wanted by connman. Which I have classified as BETA and still ask to not install (before I will have completed the tests).