Secunia Logo
 
Debian update for dnsmasq
Secunia Advisory: SA31237
Release Date: 2008-08-01
Popularity: 2,246 views

Critical:
Moderately critical
Impact: Spoofing
Where: From remote
Solution Status: Vendor Patch

OS:Debian GNU/Linux 4.0
Debian GNU/Linux unstable alias sid

Subscribe: Instant alerts on relevant vulnerabilities

CVE reference:CVE-2008-1447


Description:
Debian has issued an update for dnsmasq. This fixes a vulnerability, which can be exploited by malicious people to poison the DNS cache.

For more information:
SA31197

Solution:
Apply updated packages.

-- Debian GNU/Linux 4.0 alias etch --

Source archives:

http://security.debian.org/pool/updates/main/d/dnsmasq/dnsmasq_2.35-1+etch4.dsc
Size/MD5 checksum: 596 3834461c89e55467b4b65ed4ac209e81
http://security.debian.org/pool/updates/main/d/dnsmasq/dnsmasq_2.35.orig.tar.gz
Size/MD5 checksum: 252901 ad1fafeaf3442685cfe16613e0f8b777
http://security.debian.org/pool/updat.../dnsmasq/dnsmasq_2.35-1+etch4.diff.gz
Size/MD5 checksum: 19202 4ced7768f49198bd43bbbd24f2a3d3e4

amd64 architecture (AMD x86_64 (AMD64))

http://security.debian.org/pool/updat...nsmasq/dnsmasq_2.35-1+etch4_amd64.deb
Size/MD5 checksum: 188278 8fb55f694db9fdfccaa86d134e937777

arm architecture (ARM)

http://security.debian.org/pool/updat.../dnsmasq/dnsmasq_2.35-1+etch4_arm.deb
Size/MD5 checksum: 181746 4caf23f31de937b817e12ade7d132eac

hppa architecture (HP PA RISC)

http://security.debian.org/pool/updat...dnsmasq/dnsmasq_2.35-1+etch4_hppa.deb
Size/MD5 checksum: 190490 66730e785683655b058d11aa70346be4

i386 architecture (Intel ia32)

http://security.debian.org/pool/updat...dnsmasq/dnsmasq_2.35-1+etch4_i386.deb
Size/MD5 checksum: 184546 1fbdd71e81a1e05d68b0f88eaeb00b10

ia64 architecture (Intel ia64)

http://security.debian.org/pool/updat...dnsmasq/dnsmasq_2.35-1+etch4_ia64.deb
Size/MD5 checksum: 223758 011f283b71ef0f9e07d5a9dce25db505

mips architecture (MIPS (Big Endian))

http://security.debian.org/pool/updat...dnsmasq/dnsmasq_2.35-1+etch4_mips.deb
Size/MD5 checksum: 189846 5c67cca2eaedc1dff80c5fd05aa1d33f

mipsel architecture (MIPS (Little Endian))

http://security.debian.org/pool/updat...smasq/dnsmasq_2.35-1+etch4_mipsel.deb
Size/MD5 checksum: 191824 dfd87d69a7751f1e6ef2d0f1ede052ff

powerpc architecture (PowerPC)

http://security.debian.org/pool/updat...masq/dnsmasq_2.35-1+etch4_powerpc.deb
Size/MD5 checksum: 186890 93701abcca5421beddab015a7f35af99

s390 architecture (IBM S/390)

http://security.debian.org/pool/updat...dnsmasq/dnsmasq_2.35-1+etch4_s390.deb
Size/MD5 checksum: 186396 6f19f6c8d803c3d57e01e73fe1e11886

sparc architecture (Sun SPARC/UltraSPARC)

http://security.debian.org/pool/updat...nsmasq/dnsmasq_2.35-1+etch4_sparc.deb
Size/MD5 checksum: 182910 f360078c14f715e90e60124b4ede2be9

-- Debian GNU/Linux unstable alias sid --

Fixed in version 2.43-1.

Original Advisory:
http://www.debian.org/security/2008/dsa-1623

Other References:
SA31197:
http://secunia.com/advisories/31197/


Track this Secunia Advisory
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.

Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.

About this Secunia Advisory
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.

Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
  
Latest Advisories

Send Feedback to Secunia
If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com.

Ideas, suggestions, and other feedback are most welcome.

Most Popular - 3 Hours

1. VLC Media Player Real Demuxer Integer Overflow Vulnerability // 75 views
2. Sun Java JDK / JRE Multiple Vulnerabilities // 70 views
3. phpBB Cross Site Scripting and Unspecified Vulnerabilities // 36 views
4. Microsoft Office Communications Server SIP INVITE Denial of Service // 32 views
5. Adobe Flash Player Multiple Security Issues and Vulnerabilities // 31 views
6. CAPICOM CAPICOM.Certificates ActiveX Control Vulnerability // 28 views
7. Basic PHP CMS "id" SQL Injection Vulnerability // 25 views
8. Active Photo Gallery "username" and "password" SQL Injection // 25 views
9. Active Newsletter "email" and "password" SQL Injection Vulnerabilities // 22 views
10. ASPReferral "AccountID" SQL Injection Vulnerability // 21 views