Synopsis: Moderate: dnsmasq security update Advisory ID: SLSA-2021:0153-1 Issue Date: 2021-01-19 CVE Numbers: CVE-2020-25684 CVE-2020-25685 CVE-2020-25686 -- Security Fix(es): * dnsmasq: loose address/port check in reply_query() makes forging replies easier for an off-path attacker (CVE-2020-25684) * dnsmasq: loose query name check in reply_query() makes forging replies easier for an off-path attacker (CVE-2020-25685) * dnsmasq: multiple queries forwarded for the same name makes forging replies easier for an off-path attacker (CVE-2020-25686) -- SL7 x86_64 dnsmasq-2.76-16.el7_9.1.x86_64.rpm dnsmasq-debuginfo-2.76-16.el7_9.1.x86_64.rpm dnsmasq-utils-2.76-16.el7_9.1.x86_64.rpm - Scientific Linux Development Team