SUSE-SU-2021:0163-1

Details

Description of the patch:

This update for dnsmasq fixes the following issues:

bsc#1177077: Fixed DNSpooq vulnerabilities
CVE-2020-25684, CVE-2020-25685, CVE-2020-25686: Fixed multiple Cache Poisoning attacks.
CVE-2020-25681, CVE-2020-25682, CVE-2020-25683, CVE-2020-25687: Fixed multiple potential Heap-based overflows when DNSSEC is enabled.
Retry query to other servers on receipt of SERVFAIL rcode (bsc#1176076)

Affected Packages

dnsmasq

SUSE Enterprise Storage 6SUSE Enterprise Storage 7SUSE Linux Enterprise Desktop 15 SP1SUSE Linux Enterprise Desktop 15 SP2SUSE Linux Enterprise High Performance Computing 15 SP1

Fixed in:

2.78-7.6.1

References

ADVISORY

https://bugzilla.suse.com/1176076

ADVISORY

https://bugzilla.suse.com/1177077

ADVISORY

https://lists.suse.com/pipermail/sle-security-updates/2021-January/008222.html

ADVISORY

https://www.suse.com/security/cve/CVE-2020-25681/

ADVISORY