Re: [SECURITY] [DSA 1605-1] DNS vulnerability impact on the libc stub resolver

[Vladislav Kurz <vladislav.kurz@webstep.net>]

On Tuesday 08 of July 2008, Florian Weimer wrote:
> * Mert Dirik:
> >> PowerDNS is not available on all architectures, and Unbound and tinydns
> >> are not part of etch.
> >>
> >> So it's lack of alternatives, more or less.
> >
> > I don't really know much about these things but can't maradns
>
> MaraDNS could be used, I think.  However, I'm not familiar with that
> implementation.
>
> > or dnsmasq be used with same purpose?
>
> dnsmasq needs to be patched first.

AFAIK dnsmasq if forwarding-only resolver, it needs some real DNS server to 
send queries to be resolved. So it should be OK. Or am I completely wrong?
Can someone confirm or oppose this?

-- 
Regards
        Vladislav Kurz