RHSA-2026:99723: Important: dnsmasq security update
The dnsmasq packages contain Dnsmasq, a lightweight DNS (Domain Name Server) forwarder and DHCP (Dynamic Host Configuration Protocol) server.Security Fix(es): dnsmasq: dnsmasq: heap buffer overflow in cache via NAMEESCAPE expansion (CVE-2026-2291) dnsmasq: DHCPv6 CLID buffer overflow in helper process (CVE-2026-4892) dnsmasq: Broken ECS source validation bypass (CVE-2026-4893) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/dnsmasqto a version that resolves this vulnerability.Fixed in 2.76-17.el7_9.4 - Upgrade
Upgrade
redhat/dnsmasq-debuginfoto a version that resolves this vulnerability.Fixed in 2.76-17.el7_9.4 - Upgrade
Upgrade
redhat/dnsmasq-utilsto a version that resolves this vulnerability.Fixed in 2.76-17.el7_9.4
Event History
Frequently Asked Questions
Which installed package names should be checked when assessing exposure?
Check for redhat/dnsmasq, redhat/dnsmasq-utils, and redhat/dnsmasq-debuginfo packages.