Описание
Security update for dnsmasq
This update for dnsmasq fixes the following issues:
Security issue fixed:
- CVE-2017-15107: Fixed a vulnerability in DNSSEC implementation. Processing of wildcard synthesized NSEC records may result improper validation for non-existance. (bsc#1076958)
Non-security issue fixed:
- Removed cache size limit. (bsc#1138743)
Список пакетов
SUSE Linux Enterprise Server 11 SP4-LTSS
dnsmasq-2.78-0.17.10.1
Ссылки
- Link for SUSE-SU-2019:14190-1
- E-Mail link for SUSE-SU-2019:14190-1
- SUSE Security Ratings
- SUSE Bug 1076958
- SUSE Bug 1138743
- SUSE CVE CVE-2017-15107 page
Описание
A vulnerability was found in the implementation of DNSSEC in Dnsmasq up to and including 2.78. Wildcard synthesized NSEC records could be improperly interpreted to prove the non-existence of hostnames that actually exist.
Затронутые продукты
SUSE Linux Enterprise Server 11 SP4-LTSS:dnsmasq-2.78-0.17.10.1
Ссылки
- CVE-2017-15107
- SUSE Bug 1076958