UbuntuUpdates.org

Package "dnsmasq-base"

Name: dnsmasq-base

Description:

Small caching DNS proxy and DHCP/TFTP server
Latest version: 2.90-0ubuntu0.20.04.1
Release: focal (20.04)
Level: security
Repository: main
Head package: dnsmasq
Homepage: http://www.thekelleys.org.uk/dnsmasq/doc.html

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "dnsmasq-base"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "dnsmasq-base" in Focal

Repository Area Version
base main 2.80-1.1ubuntu1
updates main 2.90-0ubuntu0.20.04.1

Changelog

Version: 2.80-1.1ubuntu1.2 2021-01-19 13:07:20 UTC

  dnsmasq (2.80-1.1ubuntu1.2) focal-security; urgency=medium

  * SECURITY UPDATE: Multiple security issues
    - CVE-2020-25681: heap overflow in RRSets sorting
    - CVE-2020-25682: buffer overflow in extracting names from DNS packets
    - CVE-2020-25683: heap overflow in DNSSEC validation
    - CVE-2020-25684: cache poisoning issue via address/port
    - CVE-2020-25685: cache poisoning issue via weak hash
    - CVE-2020-25686: birthday attack via incorrect existing requests check
    - CVE-2020-25687: heap overflow in DNSSEC validation
    - CVE-2019-14834: memory leak via DHCP response creation

 -- Marc Deslauriers <email address hidden> Fri, 08 Jan 2021 09:59:59 -0500
CVE-2020-25681 RESERVED
CVE-2020-25682 RESERVED
CVE-2020-25683 RESERVED
CVE-2020-25684 RESERVED
CVE-2020-25685 RESERVED
CVE-2020-25686 RESERVED
CVE-2020-25687 RESERVED
CVE-2019-14834 A vulnerability was found in dnsmasq before version 2.81, where the memory leak allows remote attackers to cause a denial of service (memory consumpt


About   -   Send Feedback to @ubuntu_updates