SCIENTIFIC-LINUX-ERRATA Archives

October 2017

SCIENTIFIC-LINUX-ERRATA@LISTSERV.FNAL.GOV

Options: Use Monospaced Font
Show Text Part by Default
Show All Mail Headers

Message: [<< First] [< Prev] [Next >] [Last >>]
Topic: [<< First] [< Prev] [Next >] [Last >>]
Author: [<< First] [< Prev] [Next >] [Last >>]

Print Reply
Subject:
From:
Pat Riehecky <[log in to unmask]>
Reply To:
Date:
Mon, 2 Oct 2017 17:23:07 -0000
Content-Type:
text/plain
Parts/Attachments:
text/plain (26 lines)
Synopsis:          Critical: dnsmasq security update
Advisory ID: SLSA-2017:2838-1
Issue Date: 2017-10-02
CVE Numbers: CVE-2017-14491
--

Security Fix(es):

* A heap buffer overflow was found in dnsmasq in the code responsible for
building DNS replies. An attacker could send crafted DNS packets to
dnsmasq which would cause it to crash or, potentially, execute arbitrary
code. (CVE-2017-14491)
--

SL6
  x86_64
    dnsmasq-debuginfo-2.48-18.el6_9.x86_64.rpm
    dnsmasq-2.48-18.el6_9.x86_64.rpm
    dnsmasq-utils-2.48-18.el6_9.x86_64.rpm
  i386
    dnsmasq-debuginfo-2.48-18.el6_9.i686.rpm
    dnsmasq-2.48-18.el6_9.i686.rpm
    dnsmasq-utils-2.48-18.el6_9.i686.rpm

- Scientific Linux Development Team

ATOM RSS1 RSS2