For what it's worth, Debian had a security update for dnsmasq yesterday, presumably to address this.