dnsmasq-2.85-14.el9

エラータID: AXSA:2023-6726:06

Release date: 
Thursday, December 7, 2023 - 12:05
Subject: 
dnsmasq-2.85-14.el9
Affected Channels: 
MIRACLE LINUX 9 for x86_64
Severity: 
Moderate
Description: 

The dnsmasq packages contain Dnsmasq, a lightweight DNS (Domain Name Server) forwarder and DHCP (Dynamic Host Configuration Protocol) server.

Security Fix(es):

* dnsmasq: default maximum EDNS.0 UDP packet size was set to 4096 but should be 1232 (CVE-2023-28450)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

CVE-2023-28450
An issue was discovered in Dnsmasq before 2.90. The default maximum EDNS.0 UDP packet size was set to 4096 but should be 1232 because of DNS Flag Day 2020.

Solution: 

Update packages.

Additional Info: 

N/A

Download: 

SRPMS
  1. dnsmasq-2.85-14.el9.src.rpm
    MD5: 05583e49c7054a06c8c5ad56d08776dd
    SHA-256: ff094f9e58e7f80433b9f1f4084da7836c62b2b860cfd9d3ab870af753188ee4
    Size: 550.89 kB

Asianux Server 9 for x86_64
  1. dnsmasq-2.85-14.el9.x86_64.rpm
    MD5: c125f8ab8931b4c3b6653a974cfefe0a
    SHA-256: cb9e58d92b10dfcda623c72ed0ea714120e5e7df73cf9f6ca1cb9bfa9335ac42
    Size: 323.17 kB
  2. dnsmasq-utils-2.85-14.el9.x86_64.rpm
    MD5: 13ce37659abba969ae0d910fab100c71
    SHA-256: 45548505f24110b16ce2c73c4d277f4508a31e33f4c518b4926b6647560a8aa6
    Size: 38.48 kB