#47674 dnsmasq is vulnerable to CVE-2021-3448

Received: (at 47674-done) by debbugs.gnu.org; 9 Apr 2021 19:34:43 +0000
From debbugs-submit-bounces@debbugs.gnu.org Fri Apr 09 15:34:43 2021
Received: from localhost ([127.0.0.1]:50963 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces@debbugs.gnu.org>)
	id 1lUwtu-0007XE-PT
	for submit@debbugs.gnu.org; Fri, 09 Apr 2021 15:34:42 -0400
Received: from out5-smtp.messagingengine.com ([66.111.4.29]:51537)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <leo@famulari.name>) id 1lUwtt-0007X0-4L
 for 47674-done@debbugs.gnu.org; Fri, 09 Apr 2021 15:34:41 -0400
Received: from compute3.internal (compute3.nyi.internal [10.202.2.43])
 by mailout.nyi.internal (Postfix) with ESMTP id 09F1E5C010B;
 Fri,  9 Apr 2021 15:34:36 -0400 (EDT)
Received: from mailfrontend1 ([10.202.2.162])
 by compute3.internal (MEProxy); Fri, 09 Apr 2021 15:34:36 -0400
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=famulari.name;
 h=date:from:to:cc:subject:message-id:references:mime-version
 :content-type:content-transfer-encoding:in-reply-to; s=mesmtp;
 bh=1eeeoAe/nxUqMw/kF8Z7xWlWTT2P4dol6zHDK3kmJ9U=; b=o5OaLYGoqdhC
 GEadqoqvrgSi/s6/E9RIOgho6uqe/VGhTIMLqdj0TKAG5b8/uo682y8uSCAj4Muy
 7c/eqikJnvd+UhVA8Xn3uwMYWwkCutdSTXb83JgaV4k3SVavkM3MLTm/UpkCtC7E
 Sr2Yb9fCftocSNvCL8tidiOuxg1Kz4k=
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=
 messagingengine.com; h=cc:content-transfer-encoding:content-type
 :date:from:in-reply-to:message-id:mime-version:references
 :subject:to:x-me-proxy:x-me-proxy:x-me-sender:x-me-sender
 :x-sasl-enc; s=fm2; bh=1eeeoAe/nxUqMw/kF8Z7xWlWTT2P4dol6zHDK3kmJ
 9U=; b=QYSVFMWzOSrJoG5XuMarpTA2JRKzQuJ6VFiyoIIOmyZrJvB8uMXikrRXU
 OknrukWZshqq8bU/yz5dzIgv4n4gLHDYiQXPBwSu7shZRRqVMOrHCt/9zzirrXYm
 E2voB7ghMqoRen7yfiTStcBnIsdbuO5SpRdOi+rKyb5uZhf2CwhzlsfvROZ64r20
 Ad+duIqm4faVPfkrAUIDqQTii521Er4WxgHQLL1iu26cYlp8bvfmI9v7+l0uSyDE
 aq6xZSqb0j4H3oNlU3LZ+iOW2vssOaNq+FRUUHAI4o14+Sssdu+NQLysGCTz9Npt
 8uO22f6sU+o2LLw818xnqtWU9gN9w==
X-ME-Sender: <xms:S6xwYBcuU7qaUhK1CCGB90Xqu4vPw1vHu1zc1QgUMI7fCCpPJS0exQ>
 <xme:S6xwYFPBCVm3h5VruLN3Twt2iq9BoEmLeAYgO3ap7PRU-9PBQg2gLUsVpiP3gS0SY
 ZMLy_jrBNl9qQ0hAw>
X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeduledrudekuddgudegvdcutefuodetggdotefrod
 ftvfcurfhrohhfihhlvgemucfhrghsthforghilhdpqfgfvfdpuffrtefokffrpgfnqfgh
 necuuegrihhlohhuthemuceftddtnecufghrlhcuvffnffculddvfedmnecujfgurhepff
 fhvffukfhfgggtugfgjgesthekredttddtudenucfhrhhomhepnfgvohcuhfgrmhhulhgr
 rhhiuceolhgvohesfhgrmhhulhgrrhhirdhnrghmvgeqnecuggftrfgrthhtvghrnhepue
 eugedugfdvgfevuedvleduleefjefhgefgjeetgfegkedukefhvdefleejhefgnecukfhp
 pedutddtrdduuddrudeiledruddukeenucevlhhushhtvghrufhiiigvpedtnecurfgrrh
 grmhepmhgrihhlfhhrohhmpehlvghosehfrghmuhhlrghrihdrnhgrmhgv
X-ME-Proxy: <xmx:S6xwYFVLHHM0i6drD8nsSY10j7duSqv9VasCW5MDUFt9yAg3flt-2w>
 <xmx:S6xwYNyBiFndi1OyKytPZ-sw2oF4NMdFeQqi-RmnjDRE8R-gB4ooTQ>
 <xmx:S6xwYM-0FcxwT1Iszqa-yRkFETqom4c6Ed1wEi1RDAjnykCsdIUkWQ>
 <xmx:TKxwYLOITVt_ru1-xNKvEiKtYYGOYWQSHgIN6bnfBZV14CpooU3YrA>
Received: from localhost (pool-100-11-169-118.phlapa.fios.verizon.net
 [100.11.169.118])
 by mail.messagingengine.com (Postfix) with ESMTPA id D1FAD240057;
 Fri,  9 Apr 2021 15:34:35 -0400 (EDT)
Date: Fri, 9 Apr 2021 15:34:34 -0400
From: Leo Famulari <leo@famulari.name>
To: Nicolò Balzarotti <anothersms@gmail.com>
Subject: Re: bug#47674: dnsmasq is vulnerable to CVE-2021-3448
Message-ID: <YHCsSh9+7Uqdq0VU@jasmine.lan>
References: <87pmz3mr2k.fsf@guixSD.i-did-not-set--mail-host-address--so-tickle-me>
MIME-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
In-Reply-To: <87pmz3mr2k.fsf@guixSD.i-did-not-set--mail-host-address--so-tickle-me>
X-Spam-Score: 1.3 (+)
X-Spam-Report: Spam detection software, running on the system "debbugs.gnu.org",
 has NOT identified this incoming email as spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 the administrator of that system for details.
 
 Content preview:  On Fri, Apr 09, 2021 at 05:10:43PM +0200, Nicolò Balzarotti
    wrote: > From a0932442c6c72d1e1a2a0f400f8afa487251189d Mon Sep 17 00:00:00
    2001 > From: nixo <nicolo@nixo.xyz> > Date: Fri, 9 Apr 2021 16:19 [...] 
 
 Content analysis details:   (1.3 points, 10.0 required)
 
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
 -0.7 RCVD_IN_DNSWL_LOW      RBL: Sender listed at https://www.dnswl.org/,
                             low trust
                             [66.111.4.29 listed in list.dnswl.org]
 -0.0 SPF_PASS               SPF: sender matches SPF record
  2.0 PDS_OTHER_BAD_TLD      Untrustworthy TLDs
                             [URI: nixo.xyz (xyz)]
 -0.0 SPF_HELO_PASS          SPF: HELO matches SPF record
X-Debbugs-Envelope-To: 47674-done
Cc: 47674-done@debbugs.gnu.org
X-BeenThere: debbugs-submit@debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request@debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit@debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request@debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request@debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces@debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces@debbugs.gnu.org>
X-Spam-Score: 0.3 (/)