ELSA-2023-12972

ELSA-2023-12972 - dnsmasq security update

Type:	SECURITY
Severity:	IMPORTANT
Release Date:	2023-11-06

Description

[2.76-17.0.3.3]
- Fixed heap-based buffer overflow in sort_rrset (CVE-2020-25681) [Orabug: 35904921]
- Fixed buffer overflow in extract_name() (CVE-2020-25682) [Orabug: 35904921]

Related CVEs

CVE-2020-25681

CVE-2020-25682

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory	Channel Label
Oracle Linux 7 (aarch64)	dnsmasq-2.76-17.0.3.el7_9.3.src.rpm	ece9cb35cd8e19ca4b9f40d52d0beb1d	-	ol7_aarch64_latest
	dnsmasq-2.76-17.0.3.el7_9.3.src.rpm	ece9cb35cd8e19ca4b9f40d52d0beb1d	-	ol7_aarch64_optional_latest
	dnsmasq-2.76-17.0.3.el7_9.3.src.rpm	ece9cb35cd8e19ca4b9f40d52d0beb1d	-	ol7_aarch64_u9_patch
	dnsmasq-2.76-17.0.3.el7_9.3.aarch64.rpm	22d2c61c9a3d9a0ff92ae99c939f77c0	-	ol7_aarch64_latest
	dnsmasq-2.76-17.0.3.el7_9.3.aarch64.rpm	22d2c61c9a3d9a0ff92ae99c939f77c0	-	ol7_aarch64_u9_patch
	dnsmasq-utils-2.76-17.0.3.el7_9.3.aarch64.rpm	a2af674aa45e9de3fb03b37950be7617	-	ol7_aarch64_optional_latest
Oracle Linux 7 (x86_64)	dnsmasq-2.76-17.0.3.el7_9.3.src.rpm	ece9cb35cd8e19ca4b9f40d52d0beb1d	-	ol7_x86_64_latest
	dnsmasq-2.76-17.0.3.el7_9.3.src.rpm	ece9cb35cd8e19ca4b9f40d52d0beb1d	-	ol7_x86_64_optional_latest
	dnsmasq-2.76-17.0.3.el7_9.3.src.rpm	ece9cb35cd8e19ca4b9f40d52d0beb1d	-	ol7_x86_64_u9_patch
	dnsmasq-2.76-17.0.3.el7_9.3.x86_64.rpm	527828e7135036fc50d70d68edfb284e	-	ol7_x86_64_latest
	dnsmasq-2.76-17.0.3.el7_9.3.x86_64.rpm	527828e7135036fc50d70d68edfb284e	-	ol7_x86_64_u9_patch
	dnsmasq-utils-2.76-17.0.3.el7_9.3.x86_64.rpm	5e545886caeecfa78f534ffb10b53177	-	ol7_x86_64_optional_latest

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team