[ubuntu/hirsute-proposed] dnsmasq 2.82-1ubuntu2 (Accepted)
Marc Deslauriers
marc.deslauriers at ubuntu.com
Tue Jan 19 13:29:13 UTC 2021
dnsmasq (2.82-1ubuntu2) hirsute; urgency=medium
* SECURITY UPDATE: Multiple security issues
- CVE-2020-25681: heap overflow in RRSets sorting
- CVE-2020-25682: buffer overflow in extracting names from DNS packets
- CVE-2020-25683: heap overflow in DNSSEC validation
- CVE-2020-25684: cache poisoning issue via address/port
- CVE-2020-25685: cache poisoning issue via weak hash
- CVE-2020-25686: birthday attack via incorrect existing requests check
- CVE-2020-25687: heap overflow in DNSSEC validation
Date: Fri, 08 Jan 2021 09:50:21 -0500
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/dnsmasq/2.82-1ubuntu2
-------------- next part --------------
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Fri, 08 Jan 2021 09:50:21 -0500
Source: dnsmasq
Architecture: source
Version: 2.82-1ubuntu2
Distribution: hirsute
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Changes:
dnsmasq (2.82-1ubuntu2) hirsute; urgency=medium
.
* SECURITY UPDATE: Multiple security issues
- CVE-2020-25681: heap overflow in RRSets sorting
- CVE-2020-25682: buffer overflow in extracting names from DNS packets
- CVE-2020-25683: heap overflow in DNSSEC validation
- CVE-2020-25684: cache poisoning issue via address/port
- CVE-2020-25685: cache poisoning issue via weak hash
- CVE-2020-25686: birthday attack via incorrect existing requests check
- CVE-2020-25687: heap overflow in DNSSEC validation
Checksums-Sha1:
47969f8b02e0ba9bc66036cc589abcd5ed142c89 2274 dnsmasq_2.82-1ubuntu2.dsc
f07b3bffda37d14e151f9416a62fb51a9ca9eb9b 39281 dnsmasq_2.82-1ubuntu2.diff.gz
58d7a822887e1d8ba40be9467546d815556d05db 7160 dnsmasq_2.82-1ubuntu2_source.buildinfo
Checksums-Sha256:
d984c0d035cad1fdcabb1579ef8bfca1141b9fe8f5a908a001613bfa705fa52f 2274 dnsmasq_2.82-1ubuntu2.dsc
2315b26a302241c18e17f93b5c35b8807546a4917dcab6dd4317fd7fe3bf635b 39281 dnsmasq_2.82-1ubuntu2.diff.gz
bbdfb09d1b9909a37f048a3610b79f433a4aa366a3eb8f106bec49f42af3f648 7160 dnsmasq_2.82-1ubuntu2_source.buildinfo
Files:
273b5dc40b7b0080d9d2973764360656 2274 net optional dnsmasq_2.82-1ubuntu2.dsc
37d74ab8bb00e2d649e41cf2a1811532 39281 net optional dnsmasq_2.82-1ubuntu2.diff.gz
fb0ec785d2f2696aade755be7a4b8abb 7160 net optional dnsmasq_2.82-1ubuntu2_source.buildinfo
Original-Maintainer: Simon Kelley <simon at thekelleys.org.uk>
-----BEGIN PGP SIGNATURE-----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=AvW2
-----END PGP SIGNATURE-----
More information about the Hirsute-changes
mailing list