Fedora alert FEDORA-2026-ac5cceec13 (dnsmasq)
| From: | updates--- via package-announce <package-announce@lists.fedoraproject.org> | |
| To: | package-announce@lists.fedoraproject.org | |
| Subject: | [SECURITY] Fedora 44 Update: dnsmasq-2.92rel2-9.fc44 | |
| Date: | Fri, 15 May 2026 20:57:53 +0000 | |
| Message-ID: | <20260515205753.207F17962D@bastion01.rdu3.fedoraproject.org> | |
| Archive-link: | Article |
-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-ac5cceec13 2026-05-15 20:57:10.102588+00:00 -------------------------------------------------------------------------------- Name : dnsmasq Product : Fedora 44 Version : 2.92rel2 Release : 9.fc44 URL : http://www.thekelleys.org.uk/dnsmasq/ Summary : A lightweight DHCP/caching DNS server Description : Dnsmasq is lightweight, easy to configure DNS forwarder and DHCP server. It is designed to provide DNS and, optionally, DHCP, to a small network. It can serve the names of local machines which are not in the global DNS. The DHCP server integrates with the DNS server and allows machines with DHCP-allocated addresses to appear in the DNS with names configured either in each host or in a central configuration file. Dnsmasq supports static and dynamic DHCP leases and BOOTP for network booting of disk-less machines. -------------------------------------------------------------------------------- Update Information: Update to 2.92rel2 2.92 point release incorporating fixes for: CVE-2026-2291 CVE-2026-4890 CVE-2026-4891 CVE-2026-4892 CVE-2026-4893 CVE-2026-5172 https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss... -------------------------------------------------------------------------------- ChangeLog: * Tue May 12 2026 Petr Menšík <pemensik@redhat.com> - 2.92rel2-9 - Update to 2.92rel2 (rhbz#2469245) * Mon Apr 20 2026 Petr Menšík <pemensik@redhat.com> - 2.92-8 - Fix 1 byte extra write byte in DHCP reply (rhbz#2459196) * Mon Feb 16 2026 Petr Menšík <pemensik@redhat.com> - 2.92-7 - Add optional build support for libasan * Wed Feb 11 2026 Petr Menšík <<pemensik@redhat.com>> - 2.92-6 - Do not fail hard on inotify socket or watch failure * Thu Jan 22 2026 Petr Menšík <<pemensik@redhat.com>> - 2.92-5 - Do not fail validation if signature owner name does not match (rbhz#2421820) -------------------------------------------------------------------------------- References: [ 1 ] Bug #2459196 - CVE-2026-6507 dnsmasq: dnsmasq: Denial of Service due to out-of-bounds write in DHCP BOOTREPLY processing [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2459196 [ 2 ] Bug #2469245 - dnsmasq-2.92rel2 is available https://bugzilla.redhat.com/show_bug.cgi?id=2469245 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-ac5cceec13' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgr... All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------
Attachment: None (type=text/plain)
-- _______________________________________________ package-announce mailing list -- package-announce@lists.fedoraproject.org To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-cond... List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/package-ann... Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new