Advisories » MGASA-2023-0153

Updated dnsmasq packages fix security vulnerability

Publication date: 24 Apr 2023
Modification date: 23 Apr 2023
Type: security
Affected Mageia releases : 8
CVE: CVE-2023-28450

Description

A flaw was found in Dnsmasq. The default maximum EDNS.0 UDP packet size
was set to 4096 but should be 1232 because of DNS Flag Day 2020.
(CVE-2023-28450)
                

References

• https://bugs.mageia.org/show_bug.cgi?id=31770
• http://www.dnsflagday.net/2020/
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28450

SRPMS

8/core

• dnsmasq-2.85-6.mga8