Ubuntu alert USN-8308-1 (dnsmasq)

From:
             
 
noreply+usn-bot@canonical.com
To:
             
 
ubuntu-security-announce@lists.ubuntu.com
Subject:
             
 
[USN-8308-1] Dnsmasq vulnerability
Date:
             
 
Tue, 26 May 2026 18:58:04 +0000
Message-ID:
             
 
<E1wRwya-0005rQ-C0@lists.ubuntu.com>
==========================================================================
Ubuntu Security Notice USN-8308-1
May 26, 2026

dnsmasq vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 26.04 LTS

Summary:

Dnsmasq could be made to crash or run programs if it received specially
crafted network traffic.

Software Description:
- dnsmasq: Small caching DNS proxy and DHCP/TFTP server

Details:

It was discovered that Dnsmasq incorrectly handled BOOTREPLY packets when
configured with the --dhcp-split-relay option. A remote attacker could
use this issue to cause Dnsmasq to crash, resulting in a denial of
service, or possibly execute arbitrary code.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 26.04 LTS
  dnsmasq                         2.92-1ubuntu0.3

In general, a standard system update will make all the necessary changes.

References:
  https://ubuntu.com/security/notices/USN-8308-1
  CVE-2026-6507

Package Information:
  https://launchpad.net/ubuntu/+source/dnsmasq/2.92-1ubuntu0.3


Attachment: signature.asc (type=application/pgp-signature)
-----BEGIN PGP SIGNATURE-----
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=tZwR
-----END PGP SIGNATURE-----