Bug 905321 (CVE-2023-28450)

Summary:	<net-dns/dnsmasq-2.90: excessive EDNS.0 UDP packet size limit
Product:	Gentoo Security	Reporter:	John Helmert III <ajak>
Component:	Vulnerabilities	Assignee:	Gentoo Security <security>
Status:	CONFIRMED ---
Severity:	minor	CC:	chutzpah
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
URL:	https://thekelleys.org.uk/gitweb/?p=dnsmasq.git;a=commit;h=eb92fb32b746f2104b0f370b5b295bb8dd4bd5e5
Whiteboard:	B4 [glsa? cleanup]
Package list:		Runtime testing required:	---

Description John Helmert III archtester

2023-04-29 19:31:18 UTC

CVE-2023-28450:

An issue was discovered in Dnsmasq before 2.90. The default maximum EDNS.0 UDP packet size was set to 4096 but should be 1232 because of DNS Flag Day 2020.

"Set the default maximum DNS UDP packet size to 1232.

http://www.dnsflagday.net/2020/ refers.

Thanks to Xiang Li for the prompt."

Please bump to 2.90.