Freebox Server (Ultra V9/ Pop V8/ Delta V7 / Revolution V6 / Mini 4K)

  • État Nouveau   Rouverte
  • Pourcentage achevé
    0%
  • Type Évolution
  • Catégorie Freebox OS
  • Assignée à Personne
  • Système d'exploitation Tous
  • Sévérité Critique
  • Priorité Très Basse
  • Basée sur la version 4.0.4
  • Due pour la version Non décidée
  • Échéance Non décidée
  • Votes 1
  • Privée
Concerne le projet: Freebox Server (Ultra V9/ Pop V8/ Delta V7 / Revolution V6 / Mini 4K)
Ouverte par Neustradamus - 14/02/2019
Dernière modification par Thibaut Freebox - 27/01/2020

FS#25751 - [Tous les Freebox Server] Demande de mise à jour (faille critique): dnsmasq 2.78-> 2.80 (2018-10-18)

Pourriez-vous mettre à jour dnsmasq 2.78 → 2.80 (2018-10-18)
http://www.thekelleys.org.uk/dnsmasq/?C=M;O=D

http://thekelleys.org.uk/gitweb/?p=dnsmasq.git;a=summary

Il y a des bugs résolus depuis la 2.78 (qui entre autre corrigeait une CVE) :
http://www.thekelleys.org.uk/dnsmasq/CHANGELOG

https://www.cvedetails.com/vulnerability-list/vendor_id-8351/product_id-14557/version_id-235852/Thekelleys-Dnsmasq-2.78.html

Déjà signalé :
https://dev.freebox.fr/bugs/task/22518 (avec d’autres demandes de maj + corrections de noms de softs/libs)
https://dev.freebox.fr/bugs/task/22145

L1N3B3CK a commenté le 14.02.2019 14:08

ferme la, c'est pas comme ça que qui que ce soit t'écoutera.

Ticket clôturé mais pas mis à jour, est-ce possible de réouvrir avant création d’un nouveau ?

Freebox OS 4.2.0 a la dernière version stable à jour : 2.81!

Dnsmasq 2.82 (2020-07-19) :
- http://www.thekelleys.org.uk/dnsmasq/doc.html

- http://www.thekelleys.org.uk/dnsmasq/CHANGELOG

version 2.82:
Improve behaviour in the face of network interfaces which come
and go and change index. Thanks to Petr Mensik for the patch.

Convert hard startup failure on NETLINK_NO_ENOBUFS under qemu-user
to a warning.

Allow IPv6 addresses ofthe form [::ffff:1.2.3.4] in –dhcp-option.

Fix crash under heavy TCP connection load introduced in 2.81.
Thanks to Frank for good work chasing this down.

Change default lease time for DHCPv6 to one day.

Alter calculation of preferred and valid times in router
advertisements, so that these do not have a floor applied
of the lease time in the dhcp-range if this is not explicitly
specified and is merely the default.
Thanks to Martin-Éric Racine for suggestions on this.

Du neuf à propos de la version 2.82 sortie le 19 juillet 2020 ?

Correction de failles dans Dnsmasq 2.83 (2020-01-19) :
- http://www.thekelleys.org.uk/dnsmasq/doc.html
- http://www.thekelleys.org.uk/dnsmasq/CHANGELOG

version 2.83

Use the values of --min-port and --max-port in outgoing
TCP connections to upstream DNS servers.
Fix a remote buffer overflow problem in the DNSSEC code. Any
dnsmasq with DNSSEC compiled in and enabled is vulnerable to this,
referenced by CVE-2020-25681, CVE-2020-25682, CVE-2020-25683
CVE-2020-25687.
Be sure to only accept UDP DNS query replies at the address
from which the query was originated. This keeps as much entropy
in the {query-ID, random-port} tuple as possible, to help defeat
cache poisoning attacks. Refer: CVE-2020-25684.
Use the SHA-256 hash function to verify that DNS answers
received are for the questions originally asked. This replaces
the slightly insecure SHA-1 (when compiled with DNSSEC) or
the very insecure CRC32 (otherwise). Refer: CVE-2020-25685.
Handle multiple identical near simultaneous DNS queries better.
Previously, such queries would all be forwarded
independently. This is, in theory, inefficent but in practise
not a problem, _except_ that is means that an answer for any
of the forwarded queries will be accepted and cached.
An attacker can send a query multiple times, and for each repeat,
another {port, ID} becomes capable of accepting the answer he is
sending in the blind, to random IDs and ports. The chance of a
succesful attack is therefore multiplied by the number of repeats
of the query. The new behaviour detects repeated queries and
merely stores the clients sending repeats so that when the
first query completes, the answer can be sent to all the
clients who asked. Refer: CVE-2020-25686.

Sortie de : Dnsmasq 2.84 qui corrige un bug dans 2.83.

Dnsmasq 2.85 (2021-04-07) qui corrige des bugs de 2.83/2.84 + faille CVE-2021-3448.

Excellent article I'd like to thank you for your efforts in writing this informative and interesting article. This game was created as part of a 36-hour coding challenge to replicate geometry dash, and it exists solely to showcase my abilities and the Roblox engine's capabilities.

Auteur anonyme a commenté le 23.09.2022 07:19

This topic is incredibly interesting, and I'm interested in learning more about it, but I'm not sure where to look. Thankfully, you created this discussion, and I'm hoping that everyone will be able to assist me. quordle

Auteur anonyme a commenté le 28.10.2022 07:48

Join me in the lively environment of the game [url=https://poppy-playtime.io]poppy playtime[/url]; it's a globally loved game and joining this community is super simple.

Chargement...

Activer les raccourcis clavier

Liste des tâches

Détails de la tâche

Édition de la tâche