Re: [libvirt] [PATCHv3 3/3] network: use dnsmasq --bind-dynamic when available

> This bug resolves CVE-2012-3411, which is described in the following > bugzilla report: > > https://bugzilla.redhat.com/show_bug.cgi?id=833033 > > The following report is specifically for libvirt on Fedora: > > https://bugzilla.redhat.com/show_bug.cgi?id=874702 > > In short, a dnsmasq instance run with the intention of listening for > DHCP/DNS requests only on a libvirt virtual network (which is > constructed using a Linux host bridge) would also answer queries sent > from outside the virtualization host. > <snip> It's always nice to fully explain things in the commit message, as you have done here - not only does it make the reviewer's job easier today, but down the road, it will make it much easier to answer what the CVE was all about and who is impacted (or more specifically, that default installation is NOT impacted). Thanks for taking the time to write it up. ACK. And let's get this in, so distros can start backporting the CVE fix for the sake of those people who ARE impacted.