Summary
[2.85-14]
- Backport Coverity fix to hide detected issue (#2156789)
[2.85-13]
- Rebuild with modified gating settings
[2.85-12]
- Make create logfile writeable by root (#2156789)
[2.85-11]
- Do not create and search --local and --address=/x/# domains (#2209031)
[2.85-10]
- Fix also dynamically set resolvers over dbus (#2186481)
[2.85-9]
- Properly initialize domain parameter in dnssec mode (#2182342)
[2.85-8]
- Correct possible crashes when server=/example.net/# is used (#2188712)
[2.85-7]
- Limit offered EDNS0 size 1232 (CVE-2023-28450)
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | dnsmasq | 0:2.85-14.el9 |
| Oracle Linux · 9 | dnsmasq-utils | 0:2.85-14.el9 |
Vulnerabilities 1
-
High 7.5
An issue was discovered in Dnsmasq before 2.90. The default maximum EDNS.0 UDP packet size was set to 4096 but should b…