dnsmasq-2.79-31.el8

エラータID: AXSA:2023-7092:07

Release date: 
Friday, December 22, 2023 - 08:49
Subject: 
dnsmasq-2.79-31.el8
Affected Channels: 
Asianux Server 8 for x86_64
Severity: 
Moderate
Description: 

The dnsmasq packages contain Dnsmasq, a lightweight DNS (Domain Name Server) forwarder and DHCP (Dynamic Host Configuration Protocol) server.

Security Fix(es):

* dnsmasq: default maximum EDNS.0 UDP packet size was set to 4096 but should be 1232 (CVE-2023-28450)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Asianux Server 8.9 Release Notes linked from the References section.

CVE-2023-28450
An issue was discovered in Dnsmasq before 2.90. The default maximum EDNS.0 UDP packet size was set to 4096 but should be 1232 because of DNS Flag Day 2020.

Solution: 

Update packages.

CVEs: 
CVE-2023-28450
An issue was discovered in Dnsmasq before 2.90. The default maximum EDNS.0 UDP packet size was set to 4096 but should be 1232 because of DNS Flag Day 2020.
Additional Info: 

N/A

Download: 

SRPMS
  1. dnsmasq-2.79-31.el8.src.rpm
    MD5: f87d1a1624d01d48e47d1d119325f58f
    SHA-256: 1998e91ff310e6be9b356c73d493a5560c281ed801c118805729175cd7611e31
    Size: 604.46 kB

Asianux Server 8 for x86_64
  1. dnsmasq-2.79-31.el8.x86_64.rpm
    MD5: 50da08f18f8e60811840305ac37d6874
    SHA-256: 43606448847e723c34ad3544ce15dae64256920824aa8efe025230c7da192762
    Size: 320.61 kB
  2. dnsmasq-utils-2.79-31.el8.x86_64.rpm
    MD5: cd2e1f956e117b050488b7d0a481dc46
    SHA-256: c3b65d42361793a04e4eaaf743c65a5d572a942316ab4903a2dbff1c4bb5b70b
    Size: 55.73 kB