ELSA-2021-0153

ELSA-2021-0153 - dnsmasq security update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2021-01-19

Description

[2.76-16.1]
- Accept responses only on correct sockets (CVE-2020-25684)
- Use strong verification on queries (CVE-2020-25685)
- Handle multiple identical DNS queries better (CVE-2020-25686)
- Link against nettle for sha256 hash implementation

Related CVEs

CVE-2020-25685

CVE-2020-25686

CVE-2020-25684

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 7 (aarch64)	dnsmasq-2.76-16.el7_9.1.src.rpm	6c0ebf06c6e93d9a39ee5b16aac43b4806bc74be130f7216d42412abfcaa6c1b	ELSA-2023-12972	ol7_aarch64_latest
	dnsmasq-2.76-16.el7_9.1.src.rpm	6c0ebf06c6e93d9a39ee5b16aac43b4806bc74be130f7216d42412abfcaa6c1b	ELSA-2023-12972	ol7_aarch64_optional_latest
	dnsmasq-2.76-16.el7_9.1.src.rpm	6c0ebf06c6e93d9a39ee5b16aac43b4806bc74be130f7216d42412abfcaa6c1b	ELSA-2023-12972	ol7_aarch64_u9_patch
	dnsmasq-2.76-16.el7_9.1.aarch64.rpm	b32ac50118d9ab0ca22df21fd47d53f889ff36d1c48e911f8ab09319990dde66	ELSA-2023-12972	ol7_aarch64_latest
	dnsmasq-2.76-16.el7_9.1.aarch64.rpm	b32ac50118d9ab0ca22df21fd47d53f889ff36d1c48e911f8ab09319990dde66	ELSA-2023-12972	ol7_aarch64_u9_patch
	dnsmasq-utils-2.76-16.el7_9.1.aarch64.rpm	a1ab559787d05246bb1ec23086aeba64b4a55297b68c3d0849116f7793b917e7	ELSA-2023-12972	ol7_aarch64_optional_latest
Oracle Linux 7 (x86_64)	dnsmasq-2.76-16.el7_9.1.src.rpm	6c0ebf06c6e93d9a39ee5b16aac43b4806bc74be130f7216d42412abfcaa6c1b	ELSA-2023-12972	ol7_x86_64_latest
	dnsmasq-2.76-16.el7_9.1.src.rpm	6c0ebf06c6e93d9a39ee5b16aac43b4806bc74be130f7216d42412abfcaa6c1b	ELSA-2023-12972	ol7_x86_64_optional_latest
	dnsmasq-2.76-16.el7_9.1.src.rpm	6c0ebf06c6e93d9a39ee5b16aac43b4806bc74be130f7216d42412abfcaa6c1b	ELSA-2023-12972	ol7_x86_64_u9_patch
	dnsmasq-2.76-16.el7_9.1.x86_64.rpm	bea5f7c3e076e707b1db9919ea5e067fe8bbcf2cdcc636f3d118af06bbaa829a	ELSA-2023-12972	exadata_dbserver_19.3.17.0.0_x86_64_base
	dnsmasq-2.76-16.el7_9.1.x86_64.rpm	bea5f7c3e076e707b1db9919ea5e067fe8bbcf2cdcc636f3d118af06bbaa829a	ELSA-2023-12972	exadata_dbserver_19.3.18.0.0_x86_64_base
	dnsmasq-2.76-16.el7_9.1.x86_64.rpm	bea5f7c3e076e707b1db9919ea5e067fe8bbcf2cdcc636f3d118af06bbaa829a	ELSA-2023-12972	exadata_dbserver_19.3.19.0.0_x86_64_base
	dnsmasq-2.76-16.el7_9.1.x86_64.rpm	bea5f7c3e076e707b1db9919ea5e067fe8bbcf2cdcc636f3d118af06bbaa829a	ELSA-2023-12972	exadata_dbserver_20.1.10.0.0_x86_64_base
	dnsmasq-2.76-16.el7_9.1.x86_64.rpm	bea5f7c3e076e707b1db9919ea5e067fe8bbcf2cdcc636f3d118af06bbaa829a	ELSA-2023-12972	exadata_dbserver_20.1.7.0.0_x86_64_base
	dnsmasq-2.76-16.el7_9.1.x86_64.rpm	bea5f7c3e076e707b1db9919ea5e067fe8bbcf2cdcc636f3d118af06bbaa829a	ELSA-2023-12972	exadata_dbserver_20.1.8.0.0_x86_64_base
	dnsmasq-2.76-16.el7_9.1.x86_64.rpm	bea5f7c3e076e707b1db9919ea5e067fe8bbcf2cdcc636f3d118af06bbaa829a	ELSA-2023-12972	exadata_dbserver_20.1.9.0.0_x86_64_base
	dnsmasq-2.76-16.el7_9.1.x86_64.rpm	bea5f7c3e076e707b1db9919ea5e067fe8bbcf2cdcc636f3d118af06bbaa829a	ELSA-2023-12972	exadata_dbserver_21.2.0.0.0_x86_64_base
	dnsmasq-2.76-16.el7_9.1.x86_64.rpm	bea5f7c3e076e707b1db9919ea5e067fe8bbcf2cdcc636f3d118af06bbaa829a	ELSA-2023-12972	ol7_x86_64_latest
	dnsmasq-2.76-16.el7_9.1.x86_64.rpm	bea5f7c3e076e707b1db9919ea5e067fe8bbcf2cdcc636f3d118af06bbaa829a	ELSA-2023-12972	ol7_x86_64_u9_patch
	dnsmasq-utils-2.76-16.el7_9.1.x86_64.rpm	9278d32ff3d622557665a6dc6d104f5628a4db168a455f9b27645a56e1aff8b5	ELSA-2023-12972	ol7_x86_64_optional_latest

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team