Comment 26 for bug 1939733

Revision history for this message
Jeremy Stanley (fungi) wrote : Re: Arbitrary dnsmasq reconfiguration via extra_dhcp_opts (CVE-2021-40085)

Now that MITRE has responded with a CVE assignment, the proposed patches (from comments #5, #19, #20, and #21) have been privately supplied to downstream stakeholders along with a copy of the impact description (from comment #17). We are still within our downstream notification window to be able to proceed with coordinated disclosure at 15:00 UTC on 2021-08-31.