[ubuntu/focal-security] dnsmasq 2.80-1.1ubuntu1.2 (Accepted)

Marc Deslauriers marc.deslauriers at canonical.com
Tue Jan 19 12:25:24 UTC 2021


dnsmasq (2.80-1.1ubuntu1.2) focal-security; urgency=medium

  * SECURITY UPDATE: Multiple security issues
    - CVE-2020-25681: heap overflow in RRSets sorting
    - CVE-2020-25682: buffer overflow in extracting names from DNS packets
    - CVE-2020-25683: heap overflow in DNSSEC validation
    - CVE-2020-25684: cache poisoning issue via address/port
    - CVE-2020-25685: cache poisoning issue via weak hash
    - CVE-2020-25686: birthday attack via incorrect existing requests check
    - CVE-2020-25687: heap overflow in DNSSEC validation
    - CVE-2019-14834: memory leak via DHCP response creation

Date: 2021-01-11 12:59:09.178597+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
https://launchpad.net/ubuntu/+source/dnsmasq/2.80-1.1ubuntu1.2
-------------- next part --------------
Sorry, changesfile not available.


More information about the Focal-changes mailing list