ELSA-2023-6524

ELSA-2023-6524 - dnsmasq security and bug fix update

Type:	SECURITY
Severity:	MODERATE
Release Date:	2023-11-11

Description

[2.85-14]
- Backport Coverity fix to hide detected issue (#2156789)

[2.85-13]
- Rebuild with modified gating settings

[2.85-12]
- Make create logfile writeable by root (#2156789)

[2.85-11]
- Do not create and search --local and --address=/x/# domains (#2209031)

[2.85-10]
- Fix also dynamically set resolvers over dbus (#2186481)

[2.85-9]
- Properly initialize domain parameter in dnssec mode (#2182342)

[2.85-8]
- Correct possible crashes when server=/example.net/# is used (#2188712)

[2.85-7]
- Limit offered EDNS0 size 1232 (CVE-2023-28450)

Related CVEs

CVE-2023-28450

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	dnsmasq-2.85-14.el9.src.rpm	76f24598bc6b42c9c3cc0fbbc1ee7e67	-	ol9_aarch64_appstream
	dnsmasq-2.85-14.el9.aarch64.rpm	dec53c23da7de49843b8dd0e19022f1e	-	ol9_aarch64_appstream
	dnsmasq-utils-2.85-14.el9.aarch64.rpm	ef95b7a3e7fd21138a5689bec8a1e124	-	ol9_aarch64_appstream
Oracle Linux 9 (x86_64)	dnsmasq-2.85-14.el9.src.rpm	76f24598bc6b42c9c3cc0fbbc1ee7e67	-	ol9_x86_64_appstream
	dnsmasq-2.85-14.el9.x86_64.rpm	21fdeda5049e3751fe64f8975649080f	-	ol9_x86_64_appstream
	dnsmasq-utils-2.85-14.el9.x86_64.rpm	c5bf202a530a4d6959aa15dab86c3dfe	-	ol9_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team