[SECURITY] Fedora 9 Update: dnsmasq-2.45-1.fc9
updates at fedoraproject.org
updates at fedoraproject.org
Sat Feb 14 22:11:22 UTC 2009
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2009-1069
2009-01-29 22:29:32
--------------------------------------------------------------------------------
Name : dnsmasq
Product : Fedora 9
Version : 2.45
Release : 1.fc9
URL : http://www.thekelleys.org.uk/dnsmasq/
Summary : A lightweight DHCP/caching DNS server
Description :
Dnsmasq is lightweight, easy to configure DNS forwarder and DHCP server.
It is designed to provide DNS and, optionally, DHCP, to a small network.
It can serve the names of local machines which are not in the global
DNS. The DHCP server integrates with the DNS server and allows machines
with DHCP-allocated addresses to appear in the DNS with names configured
either in each host or in a central configuration file. Dnsmasq supports
static and dynamic DHCP leases and BOOTP for network booting of diskless
machines.
--------------------------------------------------------------------------------
Update Information:
Update to newer upstream version - 2.45. Version of dnsmasq previously
shipped in Fedora 9 did not properly drop privileges, causing it to run as root
instead of intended user nobody. Issue was caused by a bug in kernel-headers
used in build environment of the original packages. (#454415) New upstream
version also adds DNS query source port randomization, mitigating DNS spoofing
attacks. (CVE-2008-1447)
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jul 21 2008 Patrick "Jima" Laughton <jima at beer.tclug.org> 2.45-1
- Upstream release (bugfixes)
* Wed Jul 16 2008 Patrick "Jima" Laughton <jima at beer.tclug.org> 2.43-2
- New upstream release, contains fixes for CVE-2008-1447/CERT VU#800113
- Dropped patch for newer glibc (merged upstream)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #449345 - CVE-2008-1447 implement source UDP port randomization (CERT VU#800113)
https://bugzilla.redhat.com/show_bug.cgi?id=449345
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update dnsmasq' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
More information about the package-announce
mailing list