rpms/dnsmasq
7
0
Fork 0
Code Issues Pull Requests Releases Activity
Unnamed repository
44 Commits 8 Branches 58 Tags 907 KiB
Diff 100%
e3bb234629
Go to file
Petr Menšík e3bb234629 Fix buffer overflow in helper.c with large CLIDs (CVE-2026-4892) 
Bug reported bt Royce M <royce@xchglabs.com>

Location: helper.c:265-270
DHCPv6 CLIDs can be up to 65535 bytes. When --dhcp-script is configured,
the helper hex-encodes raw CLID bytes via sprintf("%.2x") into daemon->packet (5131 bytes).
A 1000-byte CLID writes ~3000 bytes. The helper process retains root privileges.

Note: log6_packet() correctly caps CLID to 100 bytes for logging, but the helper code path was missed.

Resolves-Vulnerability: CVE-2026-4892
Resolves: RHEL-168327
2026-06-05 16:31:32 +02:00
.fmf Run tmt based tests from dnsmasq 2023-06-12 16:47:04 +02:00
.gitignore Update to 2.85 (#1947198) 2021-07-02 18:07:30 +02:00
ci.fmf Run tmt based tests from dnsmasq 2023-06-12 16:47:04 +02:00
dnsmasq-2.77-underflow.patch RHEL 9.0.0 Alpha bootstrap 2020-10-14 23:43:55 +02:00
dnsmasq-2.78-fips.patch RHEL 9.0.0 Alpha bootstrap 2020-10-14 23:43:55 +02:00
dnsmasq-2.79-server-domain-fixup.patch Ensure also server_domains_cleanup is called always 2022-08-30 13:46:48 +02:00
dnsmasq-2.79-server-domain-rh1919894.patch dnsmasq option to query the last known working domain specific upstream server first 2022-02-10 23:22:39 +01:00
dnsmasq-2.80-rh1728701.patch RHEL 9.0.0 Alpha bootstrap 2020-10-14 23:43:55 +02:00
dnsmasq-2.81-configuration.patch RHEL 9.0.0 Alpha bootstrap 2020-10-14 23:43:55 +02:00
dnsmasq-2.85-domain-blocklist-speedup.patch Do not create server_domain for non-server records 2023-06-14 08:08:05 +02:00
dnsmasq-2.85-search_servers-rhbz2182342.patch fixup! Ensure search_servers domain is set on dnssec 2023-05-11 10:37:31 +02:00
dnsmasq-2.85-serv_domain-rh2186481-2.patch fixup! Correct releasing of serv_domain 2023-05-10 13:18:42 +02:00
dnsmasq-2.85-serv_domain-rh2186481.patch Correct releasing of serv_domain 2023-05-04 16:17:10 +02:00
dnsmasq-2.86-alternative-lease.patch Offer alternative address if requested is leased 2022-02-24 15:34:12 +01:00
dnsmasq-2.86-dhcpv6-client-arch.patch Support client arch and interface identifier options 2022-02-24 15:35:13 +01:00
dnsmasq-2.86-tcp-free-fd-rh2188443.patch Fix bug in TCP process handling 2024-02-22 12:25:10 +01:00
dnsmasq-2.87-coverity-forward-cache.patch Backport Coverity fix to hide detected issue 2023-07-28 16:16:31 +02:00
dnsmasq-2.87-CVE-2022-0934.patch Use upstream version of CVE-2022-0934 fix 2023-01-26 18:42:54 +01:00
dnsmasq-2.87-filter-AAAA.patch Backport filter-A and filter-AAAA options 2025-08-06 18:08:50 +02:00
dnsmasq-2.87-log-root-writeable.patch Add group writeable permission for log file 2023-07-17 19:53:13 +02:00
dnsmasq-2.89-edns0-size.patch Set the default maximum DNS UDP packet size to 1232 2023-04-03 16:36:40 +02:00
dnsmasq-2.89-filter-AAAA-improve.patch Improve filter-AAAA and filter-A 2025-08-07 11:12:16 +02:00
dnsmasq-2.90-CVE-2023-50387-CVE-2023-50868.patch Fix CVE 2023-50387 and CVE 2023-50868 2024-03-15 13:24:59 +01:00
dnsmasq-2.93-CVE-2026-2291.patch Prevent overflow in extract_name function (CVE-2026-2291) 2026-06-05 16:31:28 +02:00
dnsmasq-2.93-CVE-2026-4890.patch Fix NSEC bitmap parsing infinite loop (CVE-2026-4890) 2026-06-05 16:31:32 +02:00
dnsmasq-2.93-CVE-2026-4891.patch Verify rdlen field in RRSIG packets (CVE-2026-4891) 2026-06-05 16:31:32 +02:00
dnsmasq-2.93-CVE-2026-4892.patch Fix buffer overflow in helper.c with large CLIDs (CVE-2026-4892) 2026-06-05 16:31:32 +02:00
dnsmasq-systemd-sysusers.conf RHEL 9.0.0 Alpha bootstrap 2020-10-14 23:43:55 +02:00
dnsmasq.service Change default pid file into run directory 2021-07-02 18:10:26 +02:00
dnsmasq.spec Fix buffer overflow in helper.c with large CLIDs (CVE-2026-4892) 2026-06-05 16:31:32 +02:00
gating.yaml Edit gating.yaml 2026-05-07 16:21:12 +00:00
nm.fmf Update 6 files 2026-05-07 09:13:29 +00:00
plans.fmf Update 6 files 2026-05-07 09:13:29 +00:00
rpminspect.yaml Auto-waive bad_fucts in current release 2023-02-15 21:00:51 +01:00
sources Update to 2.85 (#1947198) 2021-07-02 18:07:30 +02:00
srkgpg.txt RHEL 9.0.0 Alpha bootstrap 2020-10-14 23:43:55 +02:00
test-release-public-key RHEL 9.0.0 Alpha bootstrap 2020-10-14 23:43:55 +02:00
tmpfiles-dnsmasq.conf Added installation of tmpfiles.d config 2025-12-11 14:49:25 +01:00