-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3989-1 secur...@debian.org https://www.debian.org/security/ Salvatore Bonaccorso October 02, 2017 https://www.debian.org/security/faq - -------------------------------------------------------------------------
Package : dnsmasq CVE ID : CVE-2017-14491 CVE-2017-14492 CVE-2017-14493 CVE-2017-14494 CVE-2017-14495 CVE-2017-14496 Felix Wilhelm, Fermin J. Serna, Gabriel Campana, Kevin Hamacher, Ron Bowes and Gynvael Coldwind of the Google Security Team discovered several vulnerabilities in dnsmasq, a small caching DNS proxy and DHCP/TFTP server, which may result in denial of service, information leak or the execution of arbitrary code. For the oldstable distribution (jessie), these problems have been fixed in version 2.72-3+deb8u2. For the stable distribution (stretch), these problems have been fixed in version 2.76-5+deb9u1. We recommend that you upgrade your dnsmasq packages. Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: debian-security-announce@lists.debian.org -----BEGIN PGP SIGNATURE----- iQKTBAEBCgB9FiEERkRAmAjBceBVMd3uBUy48xNDz0QFAlnShBtfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQACgkQBUy48xND z0RIHw//b0TyKIPrb4S53sD41yS6OJZw3wQq9l3P7d8sBdOPHy3jEZEd8tyvoKDX mm8Fu2qyO2gWywSuOcSbhNZMkHGeGW8803OBPUiLSx/4N+xTw6mAnubbpbLZT7xy 3dLTCoAlq6k5Sq47zpforaV5is5iImExXXh1KX6WHQfRPhlIdBpNHyYKyttjhAm8 OqDjT3jETIYaPPMoJnj+YsG6tc08vF92SQE0AG2xUmc7w5kaGO9dbun/Ed2cLwhl bmsIP3WqbUFoAc7FCaLo31zQa7UjWnRCiU+HdFV/wFbJM9dZgHaOJI1s3HCykaq7 VjWM0ZLeIJV+ihW+6mO+A1AVTjfWdHtOGGQyE0V6LWqwSnmG/8Nj2HS2IZGKBOYM 7bgK32vL2afRdWP6b12gfCjOF55zeSLp6GozGQCr1KIRcdpJ6O2YWtQI8F7WduQ4 WTYW6kgwFEOyzt2o89tm4prM8OkicBEhIiAWKewr29auQCCFW+hERVVSb7NXMugy pZKx2Q1QWL7LebS8h8h+75OCtYDx1Rlf/Kn6a5ZfBNomgYllyU/mjjTpbgvMaZ7R vJb3GSubVgt4KOB39ttZIzchX29CUuELbtUm47USG2kzYlQyIph6h7AaVNcACDJK O0U/S/MbMViM1Zc0mLsR/wmc1GxEyI8i77y6Zp9L5N+MY3jMqs0= =W68y -----END PGP SIGNATURE-----