meta-openembedded/meta-networking
Armin Kuster 2e7e98cd0c dnsmasq: Security fix CVE-2021-3448
Source: https://thekelleys.org.uk/dnsmasq.git
MR: 110238
Type: Security Fix
Disposition: Backport from https://thekelleys.org.uk/gitweb/?p=dnsmasq.git;a=commit;h=74d4fcd756a85bc1823232ea74334f7ccfb9d5d2
ChangeID: 3365bcc47b0467b487f14fc6bfad89bc560cd818
Description:

A flaw was found in dnsmasq in versions before 2.85. When configured to use a specific server for a given network interface, dnsmasq uses a fixed port while forwarding queries. An attacker on the network, able to find the outgoing port used by dnsmasq, only needs to guess the random transmission ID to forge a reply and get it accepted by dnsmasq. This flaw makes a DNS Cache Poisoning attack much easier. The highest threat from this vulnerability is to data integrity.

Signed-off-by: Armin Kuster <akuster@mvista.com>
2021-09-10 15:16:48 -07:00
..
classes waf-samba: switch to python3 2019-07-10 09:24:32 -07:00
conf layers: update LAYERSERIES_COMPAT to dunfell 2020-03-20 07:44:29 -07:00
files/waf-cross-answers waf: Add cross answers for riscv32 2020-04-29 22:32:17 -07:00
licenses crda: upgrade to 3.13 2015-02-23 13:21:07 -05:00
recipes-connectivity ufw: Fix interpreter for installed ufw and test ufw 2021-08-15 07:14:11 -07:00
recipes-core grpc: move from meta-networking to meta-oe 2020-03-03 09:23:08 -08:00
recipes-daemons cyrus-sasl: add CVE-2020-8032 to allowlist 2021-07-05 15:27:25 -07:00
recipes-devtools/python grpc: move from meta-networking to meta-oe 2020-03-03 09:23:08 -08:00
recipes-extended corosync: update corosync.conf to 3.x 2020-03-18 15:33:49 -07:00
recipes-filter ebtables: use bitbake optimization levels 2021-05-29 11:02:09 -07:00
recipes-irc/znc znc: upgrade 1.7.4 -> 1.7.5 2019-11-01 17:22:52 -07:00
recipes-kernel/wireguard wireguard: fix build issue with updated 5.4 kernel 2021-04-07 08:55:15 -07:00
recipes-netkit netkit-rsh: inherit update-alternatives 2020-10-04 15:58:09 -07:00
recipes-protocols mdns: Whitelisted CVE-2007-0613 for mdns 2021-03-16 08:40:06 -07:00
recipes-support dnsmasq: Security fix CVE-2021-3448 2021-09-10 15:16:48 -07:00
site site: move from meta-oe to meta-networking 2018-01-08 12:03:40 -05:00
COPYING.MIT meta-networking: add layer 2012-08-27 14:16:45 +02:00
MAINTAINERS README: updated Maintainers list for Dunfell 2020-05-05 16:47:34 -07:00
README README: updated Maintainers list for Dunfell 2020-05-05 16:47:34 -07:00

meta-networking
===============

This layer is intended to be a central point for networking-related
packages and configuration.  It should be useful directly on top of
oe-core and compliments meta-openembedded.  It should be primarily useful
to the following groups:

      - Anyone building a small networking device (eg. a home router /
        bridge / switch).

      - Anyone wanting to add network services to their device (eg.
        anything that might benefit from a small ftp/tftp server)

Dependencies
------------

This layer depends on:

URI: git://github.com/openembedded/openembedded-core.git
branch: dunfell
revision: HEAD

For some recipes, the meta-oe layer is required:

URI: git://github.com/openembedded/meta-openembedded.git
subdirectory: meta-oe
branch: dunfell
revision: HEAD

URI: git://github.com/openembedded/meta-openembedded.git
subdirectory: meta-python
branch: dunfell
revision: HEAD

Maintenance
-----------

Please see the MAINTAINERS file for information on contacting the
maintainers of this layer, as well as instructions for submitting patches.