Ubuntu alert USN-8311-1 (dnsmasq)

From:
             
 
noreply+usn-bot@canonical.com
To:
             
 
ubuntu-security-announce@lists.ubuntu.com
Subject:
             
 
[USN-8311-1] Dnsmasq vulnerability
Date:
             
 
Wed, 27 May 2026 15:25:15 +0000
Message-ID:
             
 
<E1wSG8B-0005Ah-QU@lists.ubuntu.com>
==========================================================================
Ubuntu Security Notice USN-8311-1
May 26, 2026

dnsmasq vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 14.04 LTS

Summary:

Dnsmasq could be made to crash if it received specially crafted
input.

Software Description:
- dnsmasq: Small caching DNS proxy and DHCP/TFTP server

Details:

Petr Menšík discovered that Dnsmasq incorrectly handled certain
input in the dhcp_release utility. A local attacker could possibly
use this issue to cause Dnsmasq to crash, resulting in a denial of
service.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 14.04 LTS
  dnsmasq-utils                   2.68-1ubuntu0.2+esm6
                                  Available with Ubuntu Pro

In general, a standard system update will make all the necessary
changes.

References:
  https://ubuntu.com/security/notices/USN-8311-1
  CVE-2020-37127


Attachment: signature.asc (type=application/pgp-signature)
-----BEGIN PGP SIGNATURE-----

iQIzBAABCgAdFiEE+8neBLO2Hp/ppPlOcpJm3tlzhgEFAmoXB7gACgkQcpJm3tlz
hgEfwxAA2AgNNzqyvgHtjGNhbMTJNwSl6fXLWU6hJH36ZjFuXfCCuOeFPW5XqDEQ
aTJLIxQGUjtJgEACcVm5Sr9ZOompuWHiUp95vEmyaVzipQEjv8kNdFl0+19UjDbV
y8/oyEpJonLMIHdAkWgtKzxDDUnsbdgc/5wYcoSIfnxSFgJpM1ngLMSHejA5u+oa
Zk9JjpYQIshRFyn6Cg31LgjiWH0ZPmXwNqNCVrCo6f+VsWx7Kr22BxDQXCJu0GDp
AYu8ZIt8+ouZ56lBf42hui8Qz9vJh4P437l6qNFURK8UszgeSoPmJXGh5JOc5Loz
RJj1JcQDFYEwGVewChRlsYmA8RDrGCSTgV67U5kkcv6RSYvbp/Awgopjt/45Bip5
3KR5pJVvU96MAK6i0qu5HVnQAWKecFUhMEHhR6ow8lykSZXHYV6BQlEXx4FIbWqV
ODxrgXdyXTbM4l8QpMsrBrbZSABCNILVuSU6nCVx3LJJLOpByIEGEnRsaNI5+TOE
J33nxyjNYdzvTGh4PsP0UmHKQ292idia3lzvwiexfAKTaSvzigtC5/H5fMiIrOOy
BqQriQU4/5L5UPqWb5qsBv32GBOI0gS0YpH938nXvteZCdTMaxuxfy9F8+//HFGJ
MLun59HGuC/a+wA+rxaTQOS1nZ7gRZY1gBlZ4XrRmHjtsc93N8Y=
=l8ea
-----END PGP SIGNATURE-----