• [SECURITY] [DSA 4844-1] dnsmasq security update

    From Sebastien Delafond@21:1/5 to All on Thu Feb 4 08:40:01 2021
    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA512

    - ------------------------------------------------------------------------- Debian Security Advisory DSA-4844-1 security@debian.org https://www.debian.org/security/ Sebastien Delafond February 02, 2021 https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package : dnsmasq
    CVE ID : CVE-2020-25681 CVE-2020-25682 CVE-2020-25683 CVE-2020-25684
    CVE-2020-25685 CVE-2020-25686 CVE-2020-25687

    Moshe Kol and Shlomi Oberman of JSOF discovered several
    vulnerabilities in dnsmasq, a small caching DNS proxy and DHCP/TFTP
    server. They could result in denial of service, cache poisoning or the execution of arbitrary code.

    For the stable distribution (buster), these problems have been fixed in
    version 2.80-1+deb10u1.

    We recommend that you upgrade your dnsmasq packages.

    For the detailed security status of dnsmasq please refer to
    its security tracker page at: https://security-tracker.debian.org/tracker/dnsmasq

    Further information about Debian Security Advisories, how to apply
    these updates to your system and frequently asked questions can be
    found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org
    -----BEGIN PGP SIGNATURE-----

    iQEzBAEBCgAdFiEEAqSkbVtrXP4xJMh3EL6Jg/PVnWQFAmAZVA4ACgkQEL6Jg/PV nWQYKAgAgVwonRAgXSliaFh0n44OPOz9wf4KibG7otcnAx4V4XqFAeXsHd/hIX/K IC313F3I+8WzvjKBhvt2KnGG9SnoTnq4roBIa1nz//vNX0hyfDm5xPlxQOExzC+c YS8kGt++SvC2wgOsrZEjyk0ecKqDJmZSwW31zXG9/2kTzCbKjuDp+i4TTADqabPC AgbmEGVKBR2Fk7K9Prct27oWoj7LHMaH+Ttb8uQGnG7OgJs9KyRI+2qIu+VaRCGf yfRj+XayPYHV1Amf5dLIKcLMMp/FnkNFoO2YIAZkWVPjXD2uPKUykJJ1GRl8R+0q qtNhPTNNuD6WnYzC8yP0KIQ2tsbg9Q==
    =j5Ka
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)