Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-28450: An issue was discovered in Dnsmasq before 2.90. The default maximum EDNS.0 UDP packet size was set to 4096 but should be 1232 because of DNS Flag Day 2020.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | dnsmasq | 0:2.76-16.amzn2.1.4 |
| Amazon Linux · 2 | dnsmasq-debuginfo | 0:2.76-16.amzn2.1.4 |
| Amazon Linux · 2 | dnsmasq-utils | 0:2.76-16.amzn2.1.4 |
Vulnerabilities 1
-
High 7.5
An issue was discovered in Dnsmasq before 2.90. The default maximum EDNS.0 UDP packet size was set to 4096 but should b…
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2023-28450.html