Security fix, CVE-2017-14492, DHCPv6 RA heap overflow.
Fix heap overflow in IPv6 router advertisement code.
This is a potentially serious security hole, as a
crafted RA request can overflow a buffer and crash or
control dnsmasq. Attacker must be on the local network.
diff --git a/CHANGELOG b/CHANGELOG
index a7c2f35..df6c157 100644
--- a/CHANGELOG
+++ b/CHANGELOG
@@ -35,7 +35,15 @@
and Kevin Hamacher of the Google Security Team for
finding this.
-
+ Fix heap overflow in IPv6 router advertisement code.
+ This is a potentially serious security hole, as a
+ crafted RA request can overflow a buffer and crash or
+ control dnsmasq. Attacker must be on the local network.
+ CVE-2017-14492 applies.
+ Credit to Felix Wilhelm, Fermin J. Serna, Gabriel Campana
+ and Kevin Hamacher of the Google Security Team for
+ finding this.
+
version 2.77
Generate an error when configured with a CNAME loop,