[ubuntu/groovy-security] dnsmasq 2.82-1ubuntu1.1 (Accepted)
Marc Deslauriers
marc.deslauriers at canonical.com
Tue Jan 19 12:25:23 UTC 2021
dnsmasq (2.82-1ubuntu1.1) groovy-security; urgency=medium
* SECURITY UPDATE: Multiple security issues
- CVE-2020-25681: heap overflow in RRSets sorting
- CVE-2020-25682: buffer overflow in extracting names from DNS packets
- CVE-2020-25683: heap overflow in DNSSEC validation
- CVE-2020-25684: cache poisoning issue via address/port
- CVE-2020-25685: cache poisoning issue via weak hash
- CVE-2020-25686: birthday attack via incorrect existing requests check
- CVE-2020-25687: heap overflow in DNSSEC validation
Date: 2021-01-08 19:57:09.874814+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
https://launchpad.net/ubuntu/+source/dnsmasq/2.82-1ubuntu1.1
-------------- next part --------------
Sorry, changesfile not available.
More information about the Groovy-changes
mailing list