I've been happily using lxc on debian for some time, without dnsmasq-base or lxc-net. The recent addition of
dnsmasq-base and lxc-net as a required dependency is somewhat surprising, given lxc-net edits IP address information for
lxc-attched bridges which were created outside of lxc-net, and dnsmasq doubly so given DSA 4844-1 was only a few days
ago. Several commentors on IRC seemed equally surprised by this change.

Is there more information available for why lxc-net is now an explicit dependency and not optional or can this change be
reverted?

Thanks for all the work keeping lxc working!
Matt

Control: tags -1 + wontfix
users setting up container networking by hand is a pain in the ass.

Now, dnsmasq-base has beem moved from Recomends: to Depends: because if
you install lxc without dnsmasq-base, lxc-net, which is now enabled by
default, will fail to start and therefore the installation will fail,
which is a violation of Debian policy.

If you want to set up your own bridge by hand, and configure lxc by
hand, that's still possible: just disable the lxc-net service.