Ubuntu alert USN-8542-1 (dnsmasq)
| From: | noreply+usn-bot--- via ubuntu-security-announce <ubuntu-security-announce@lists.ubuntu.com> | |
| To: | ubuntu-security-announce@lists.ubuntu.com | |
| Subject: | [USN-8542-1] Dnsmasq vulnerabilities | |
| Date: | Tue, 14 Jul 2026 20:13:17 +0000 | |
| Message-ID: | <E1wjjVF-0000xI-F4@lists.ubuntu.com> | |
| Cc: | noreply+usn-bot@canonical.com |
========================================================================== Ubuntu Security Notice USN-8542-1 July 14, 2026 dnsmasq vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 26.04 LTS - Ubuntu 24.04 LTS - Ubuntu 22.04 LTS - Ubuntu 20.04 LTS - Ubuntu 18.04 LTS - Ubuntu 16.04 LTS Summary: Several security issues were fixed in Dnsmasq. Software Description: - dnsmasq: Small caching DNS proxy and DHCP/TFTP server Details: Yiwei Hou discovered that Dnsmasq incorrectly handled logging of DS or DNSKEY. A remote attacker could possibly use this issue to cause a denial of service. (CVE-2026-12725) It was discovered that Dnsmasq incorrectly validated the length of fixed-length DNS record fields when parsing NS section records. A remote attacker could possibly use this issue to cause Dnsmasq to read out of bounds, possibly exposing sensitive information. (CVE-2026-12969) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 26.04 LTS dnsmasq 2.92-1ubuntu0.4 dnsmasq-base 2.92-1ubuntu0.4 dnsmasq-base-lua 2.92-1ubuntu0.4 dnsmasq-utils 2.92-1ubuntu0.4 Ubuntu 24.04 LTS dnsmasq 2.90-2ubuntu0.4 dnsmasq-base 2.90-2ubuntu0.4 dnsmasq-base-lua 2.90-2ubuntu0.4 dnsmasq-utils 2.90-2ubuntu0.4 Ubuntu 22.04 LTS dnsmasq 2.90-0ubuntu0.22.04.4 dnsmasq-base 2.90-0ubuntu0.22.04.4 dnsmasq-base-lua 2.90-0ubuntu0.22.04.4 dnsmasq-utils 2.90-0ubuntu0.22.04.4 Ubuntu 20.04 LTS dnsmasq 2.90-0ubuntu0.20.04.1+esm3 Available with Ubuntu Pro dnsmasq-base 2.90-0ubuntu0.20.04.1+esm3 Available with Ubuntu Pro dnsmasq-base-lua 2.90-0ubuntu0.20.04.1+esm3 Available with Ubuntu Pro dnsmasq-utils 2.90-0ubuntu0.20.04.1+esm3 Available with Ubuntu Pro Ubuntu 18.04 LTS dnsmasq 2.90-0ubuntu0.18.04.1+esm4 Available with Ubuntu Pro dnsmasq-base 2.90-0ubuntu0.18.04.1+esm4 Available with Ubuntu Pro dnsmasq-base-lua 2.90-0ubuntu0.18.04.1+esm4 Available with Ubuntu Pro dnsmasq-utils 2.90-0ubuntu0.18.04.1+esm4 Available with Ubuntu Pro Ubuntu 16.04 LTS dnsmasq 2.90-0ubuntu0.16.04.1+esm4 Available with Ubuntu Pro dnsmasq-base 2.90-0ubuntu0.16.04.1+esm4 Available with Ubuntu Pro dnsmasq-base-lua 2.90-0ubuntu0.16.04.1+esm4 Available with Ubuntu Pro dnsmasq-utils 2.90-0ubuntu0.16.04.1+esm4 Available with Ubuntu Pro After a standard system update you need to restart dnsmasq to make all the necessary changes. References: https://ubuntu.com/security/notices/USN-8542-1 CVE-2026-12725, CVE-2026-12969 Package Information: https://launchpad.net/ubuntu/+source/dnsmasq/2.92-1ubuntu0.4 https://launchpad.net/ubuntu/+source/dnsmasq/2.90-2ubuntu0.4 https://launchpad.net/ubuntu/+source/dnsmasq/2.90-0ubuntu...
Attachment: signature.asc (type=application/pgp-signature)
-----BEGIN PGP SIGNATURE----- iQIzBAABCgAdFiEE+8neBLO2Hp/ppPlOcpJm3tlzhgEFAmpWlwYACgkQcpJm3tlz hgEPwhAAjsrEyT/BkmyKcyKxrRiPMRfMQaVE8936CRx7ofoRMANxjCNKJlIM0GEy PM3gx9uPbzPT7QRQZ3gadZiqF3G1+uUI9SfWw8q3wCQMGPTSHMnJjxeuyzgOUIYm VJxLP1w/f96Yp6W9OdOuZbl0p2Yke5Sdk3vVtewWq9C1wHUgJNwPP4snALh4Rar6 UH+nlX8RYZuzIb5m3AltBsN3S2FBNKrsAneJ9/0CX7WI1UIGotE8zS0JYZzkF804 wD7huFhndYjasGTWI6x/tBZtczlR+/+I5lEPwMHMXe/SX9yg61TfZRwWw62RSZqK GoelwgdAeQP1rwEZqkmf0JWfojGHxmK6VcAa7N6a9ufd2OFNQrgPXwD8zs98vQs9 TUMQht0pgk09fPAOKyi4hZAhwUXDhM81ON0DdDGSmIgSyltcsO/DwIruxsfD6C7F jFe8atiCdMKuBhhRZeBCjrCwonRHIb/8E5iDQyIgP1wSUFmF3LIug8PsK5za2oRb C6KN/+jeniI3j+N2XJmsn13ABWeyhvV8CkIoJZMWFtyohNNTX0jk5VPQDdzXgeqM bFDxKDxtWFM0MV/b/hH3ROb+vQ9vvMY3b59Cz/XJ92K+Vy8hLEkB6aNeG40gP1so OUsZtp4Rhxa4DYRMFTHHtcIu8ZslUsapcRsam6W0bM/A4xtE5lg= =AIjW -----END PGP SIGNATURE-----