• [SECURITY] [DSA 3989-1] dnsmasq security update

    From Salvatore Bonaccorso@1:229/2 to All on Mon Oct 2 23:20:05 2017
    From: [email protected]

    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA512

    - ------------------------------------------------------------------------- Debian Security Advisory DSA-3989-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 02, 2017 https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package : dnsmasq
    CVE ID : CVE-2017-14491 CVE-2017-14492 CVE-2017-14493 CVE-2017-14494
    CVE-2017-14495 CVE-2017-14496

    Felix Wilhelm, Fermin J. Serna, Gabriel Campana, Kevin Hamacher, Ron
    Bowes and Gynvael Coldwind of the Google Security Team discovered
    several vulnerabilities in dnsmasq, a small caching DNS proxy and
    DHCP/TFTP server, which may result in denial of service, information
    leak or the execution of arbitrary code.

    For the oldstable distribution (jessie), these problems have been fixed
    in version 2.72-3+deb8u2.

    For the stable distribution (stretch), these problems have been fixed in version 2.76-5+deb9u1.

    We recommend that you upgrade your dnsmasq packages.

    Further information about Debian Security Advisories, how to apply
    these updates to your system and frequently asked questions can be
    found at: https://www.debian.org/security/

    Mailing list: [email protected]
    -----BEGIN PGP SIGNATURE-----

    iQKTBAEBCgB9FiEERkRAmAjBceBVMd3uBUy48xNDz0QFAlnShBtfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQACgkQBUy48xND z0RIHw//b0TyKIPrb4S53sD41yS6OJZw3wQq9l3P7d8sBdOPHy3jEZEd8tyvoKDX mm8Fu2qyO2gWywSuOcSbhNZMkHGeGW8803OBPUiLSx/4N+xTw6mAnubbpbLZT7xy 3dLTCoAlq6k5Sq47zpforaV5is5iImExXXh1KX6WHQfRPhlIdBpNHyYKyttjhAm8 OqDjT3jETIYaPPMoJnj+YsG6tc08vF92SQE0AG2xUmc7w5kaGO9dbun/Ed2cLwhl bmsIP3WqbUFoAc7FCaLo31zQa7UjWnRCiU+HdFV/wFbJM9dZgHaOJI1s3HCykaq7 VjWM0ZLeIJV+ihW+6mO+A1AVTjfWdHtOGGQyE0V6LWqwSnmG/8Nj2HS2IZGKBOYM 7bgK32vL2afRdWP6b12gfCjOF55zeSLp6GozGQCr1KIRcdpJ6O2YWtQI8F7WduQ4 WTYW6kgwFEOyzt2o89tm4prM8OkicBEhIiAWKewr29auQCCFW+hERVVSb7NXMugy pZKx2Q1QWL7LebS8h8h+75OCtYDx1Rlf/Kn6a5ZfBNomgYllyU/mjjTpbgvMaZ7R vJb3GSubVgt4KOB39ttZIzchX29CUuELbtUm47USG2kzYlQyIph6h7AaVNcACDJK O0U/S/MbMViM1Zc0mLsR/wmc1GxEyI8i77y6Zp9L5N+MY3jMqs0=
    =W68y
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: you cannot sedate... all the things you hate (1:229/2)