gpp_maybe Security update for dnsmasq

SUSE-SLE-SERVER-12-2017-1616

This update for dnsmasq fixes the following issues. Remedy the following security issues: - CVE-2017-14491: 2 byte heap based overflow. [bsc#1060354] - CVE-2017-14492: heap based overflow. [bsc#1060355] - CVE-2017-14493: stack based overflow. [bsc#1060360] - CVE-2017-14494: DHCP - info leak. [bsc#1060361] - CVE-2017-14495: DNS - OOM DoS. [bsc#1060362] - CVE-2017-14496: DNS - DoS Integer underflow. [bsc#1060364] - Prevent a man-in-the-middle attack (bsc#972164, fate#321175). Furthermore, the following issues have been fixed: - Fix DHCP relaying, broken in 2.76 and 2.77. - Update to version 2.78 (fate#321175, fate#322030, bsc#1035227). - Fix PXE booting for UEFI architectures (fate#322030). - Drop PrivateDevices=yes which breaks logging (bsc#902511, bsc#904537) - Build with support for DNSSEC (fate#318323, bsc#908137). Please note that this update brings a (small) potential incompatibility in the handling of "basename" in --pxe-service. Please read the CHANGELOG and the documentation if you are using this option.

• Release Date
  Oct 2 2017
• References
  Bugzilla: 1035227, 904537, 1060361, 1060360, 1060362, 1060364, 972164, 1060354, 908137, 1060355, 902511
  CVEs: CVE-2017-14495, CVE-2017-14494, CVE-2017-14496, CVE-2017-14491, CVE-2017-14493, CVE-2017-14492, CVE-2015-3294, CVE-2015-8899
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Enterprise Server LTSS 12 s390x

• Packages
  dnsmasq
  Lightweight, Easy-to-Configure DNS Forwarder and DHCP Server

  2.78-6.6.1 lock rpm lock src

SUSE Linux Enterprise Server LTSS 12 x86_64

• Packages
  dnsmasq
  Lightweight, Easy-to-Configure DNS Forwarder and DHCP Server

  2.78-6.6.1 lock rpm lock src