RLSA-2024:1335
- Source
- https://errata.rockylinux.org/RLSA-2024:1335
- Import Source
- https://storage.googleapis.com/resf-osv-data/RLSA-2024:1335.json
- JSON Data
- https://api.osv.dev/v1/vulns/RLSA-2024:1335
- Related
- Published
- 2024-03-27T04:34:32.999941Z
- Modified
- 2024-03-27T04:36:48.182918Z
- Summary
- Important: dnsmasq security update
- Details
-
The dnsmasq packages contain Dnsmasq, a lightweight DNS (Domain Name Server) forwarder and DHCP (Dynamic Host Configuration Protocol) server.
Security Fix(es):
dnsmasq: bind9: KeyTrap - Extreme CPU consumption in DNSSEC validator (CVE-2023-50387)
dnsmasq: bind9: Preparing an NSEC3 closest encloser proof can exhaust CPU resources (CVE-2023-50868)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- References
- Credits
-
-
- Rocky Enterprise Software Foundation
-
- Red Hat
-
Affected packages
Rocky Linux:8 / dnsmasq
Package
- Name
- dnsmasq
- Purl
- pkg:rpm/rocky-linux/dnsmasq?distro=rocky-linux-8&epoch=0