-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.8 Date: Sun, 23 Aug 2009 20:14:21 +0000 Source: dnsmasq Binary: dnsmasq dnsmasq-base Architecture: source i386 all Version: 2.45-1+lenny1 Distribution: stable-security Urgency: high Maintainer: Simon Kelley <simon@thekelleys.org.uk> Changed-By: Simon Kelley <simon@thekelleys.org.uk> Description: dnsmasq - A small caching DNS proxy and DHCP/TFTP server dnsmasq-base - A small caching DNS proxy and DHCP/TFTP server Changes: dnsmasq (2.45-1+lenny1) stable-security; urgency=high . * Fix remote buffer overflow vulnerability in TFTP server. This is Bugtraq id: 36121, CVE: 2009-2957 * Fix remote crash bug in TFTP server. This is Bugtraq id: 36120, CVE: 2009-2958 * Both of these require --enable-tftp to be set before the vulnerability is exposed. Checksums-Sha1: 477c7a44f041c9bc340631092e0325d8dc6f9fcf 1006 dnsmasq_2.45-1+lenny1.dsc aad15621aa88203a7134f6248a4bd6d75a328db9 377466 dnsmasq_2.45.orig.tar.gz aafc1519d3edb4160d6554762c31dfa175a9631a 14514 dnsmasq_2.45-1+lenny1.diff.gz e16c7bc5cd1ac57dc88a4e4f1ff88003ae9cdbff 251182 dnsmasq-base_2.45-1+lenny1_i386.deb 9f877c972ce59b7a1e197467fc9d707697a81c3b 12110 dnsmasq_2.45-1+lenny1_all.deb Checksums-Sha256: 901a448a6e64147e5c48235f861e8d35d1f1d09311839408e1ebc7eb44201ce3 1006 dnsmasq_2.45-1+lenny1.dsc e7a03d1fd2c961e7456ae0847cec26da4fd9a9de2c75bc8c79a75fb245992a05 377466 dnsmasq_2.45.orig.tar.gz e15975ad4951c2aa9d1f14b1076ec26e71eea590419d3cde92a5c7679493650f 14514 dnsmasq_2.45-1+lenny1.diff.gz 7c30ce90cdfa8cafce3dbdbe10058008ae26614fc59be645c19f5e4579a9d4ea 251182 dnsmasq-base_2.45-1+lenny1_i386.deb 43ba4cfd299972d3b94691ed2a151d3f042ed083bfd6a16e455aa41b8f48ff83 12110 dnsmasq_2.45-1+lenny1_all.deb Files: 377658fb3cb46cc670a86e475ff70533 1006 net optional dnsmasq_2.45-1+lenny1.dsc 59106495260bb2d0f184f0d4ae88d740 377466 net optional dnsmasq_2.45.orig.tar.gz c841708d86ea6a13f4f168d311638ff5 14514 net optional dnsmasq_2.45-1+lenny1.diff.gz cdad8cd873dc28fd69fdd7ca2e59cec1 251182 net optional dnsmasq-base_2.45-1+lenny1_i386.deb 716c6f4f6e478f5a0f248725e4544dda 12110 net optional dnsmasq_2.45-1+lenny1_all.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (GNU/Linux) iEYEARECAAYFAkqTwtEACgkQKPyGmiibgrft8wCglLB+JLhYsfpQ0dB3sgYjnJHL mCAAoKQqj6o1FW+rZZaH+7b2xQ38uITQ =N60A -----END PGP SIGNATURE----- Accepted: dnsmasq-base_2.45-1+lenny1_i386.deb to pool/main/d/dnsmasq/dnsmasq-base_2.45-1+lenny1_i386.deb dnsmasq_2.45-1+lenny1.diff.gz to pool/main/d/dnsmasq/dnsmasq_2.45-1+lenny1.diff.gz dnsmasq_2.45-1+lenny1.dsc to pool/main/d/dnsmasq/dnsmasq_2.45-1+lenny1.dsc dnsmasq_2.45-1+lenny1_all.deb to pool/main/d/dnsmasq/dnsmasq_2.45-1+lenny1_all.deb