[SECURITY] Fedora 9 Update: dnsmasq-2.45-1.fc9

updates at fedoraproject.org updates at fedoraproject.org
Sat Feb 14 22:11:22 UTC 2009


--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2009-1069
2009-01-29 22:29:32
--------------------------------------------------------------------------------

Name        : dnsmasq
Product     : Fedora 9
Version     : 2.45
Release     : 1.fc9
URL         : http://www.thekelleys.org.uk/dnsmasq/
Summary     : A lightweight DHCP/caching DNS server
Description :
Dnsmasq is lightweight, easy to configure DNS forwarder and DHCP server.
It is designed to provide DNS and, optionally, DHCP, to a small network.
It can serve the names of local machines which are not in the global
DNS. The DHCP server integrates with the DNS server and allows machines
with DHCP-allocated addresses to appear in the DNS with names configured
either in each host or in a central configuration file. Dnsmasq supports
static and dynamic DHCP leases and BOOTP for network booting of diskless
machines.

--------------------------------------------------------------------------------
Update Information:

Update to newer upstream version - 2.45.    Version of dnsmasq previously
shipped in Fedora 9 did not properly drop privileges, causing it to run as root
instead of intended user nobody.  Issue was caused by a bug in kernel-headers
used in build environment of the original packages. (#454415)    New upstream
version also adds DNS query source port randomization, mitigating DNS spoofing
attacks. (CVE-2008-1447)
--------------------------------------------------------------------------------
ChangeLog:

* Mon Jul 21 2008 Patrick "Jima" Laughton <jima at beer.tclug.org> 2.45-1
- Upstream release (bugfixes)
* Wed Jul 16 2008 Patrick "Jima" Laughton <jima at beer.tclug.org> 2.43-2
- New upstream release, contains fixes for CVE-2008-1447/CERT VU#800113
- Dropped patch for newer glibc (merged upstream)
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #449345 - CVE-2008-1447 implement source UDP port randomization (CERT VU#800113)
        https://bugzilla.redhat.com/show_bug.cgi?id=449345
--------------------------------------------------------------------------------

This update can be installed with the "yum" update program.  Use 
su -c 'yum update dnsmasq' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------




More information about the Fedora-package-announce mailing list