Bugfixes
- Update dnsmasq to v2.84. Patches vulnerabilities in CVE-2020-25681, CVE-2020-25682, CVE-2020-25683, CVE-2020-25684, CVE-2020-25685, CVE-2020-25686 and CVE-2020-25687. Of these, only the ones related to DNS cache poisoning possibilities are relevant to controller-generated configurations (25684 through 25686).
- Patch for crash in miniupnpd.
- Missing packages added to GPL source archive.
Additional information
dnsmasq deprecated the crypto library currently used by USG for DNSSEC purposes. This does not impact any controller-generated configuration, and is all but unused on USG in general, but if you have DNSSEC enabled in config.gateway.json, you will need to remove that and force provision USG.Download links
USG | md5sum | sha256sum
USG-Pro | md5sum | sha256sum
USG-XG | md5sum | sha256sum
