RHBA-2011:1746 - Bug Fix Advisory

Topic

An updated dnsmasq package that addresses two bugs is now available for Red
Hat Enterprise Linux 6.

Description

Dnsmasq is a lightweight and easy-to-configure DNS forwarder and DHCP
server.

This update makes the following changes:

• Three changes were made to /etc/init.d/dnsmasq, the dnsmasq startup

script. (BZ#584009)

If dnsmasq was started or restarted by a non-privileged user, the startup
script previously failed silently. With this update, the dnsmasq startup
script now exits with a status code of 4 (user had insufficient privilege)
and returns a "User has insufficient privilege" error to STD OUT when
started or restarted by a non-privileged user.

A "force-reload" option was added: The "service force-reload dnsmasq"
command now forces dnsmasq to reload. Previously, it did nothing.

If /etc/init.d/dnsmasq passed an invalid argument, previously the startup
script exited with a status code of 1 (generic or unspecified error). With
this update, the startup script now exits correctly, returning a status
code of 2 (invalid or excess argument) in such a circumstance.

• If the virtual bridge interface (virbr0) was up and dnsmasq was started

by default, dnsmasq could, in some circumstances, write a "DHCP packet
received on eth(x) which has no address" message to /var/log/messages.
Note: this message was not in error. The message was written if an actual
interface (eg eth1) was up; did not have a configured IP address (eg was
slaved to a logical bonded interface); and was in the same LAN as another
host which generated a DHCP request. The message had little-to-no utility,
however: it presented a warning where none was needed. With this update,
this message is no longer written to /var/log/messages in these, and
equivalent, circumstances. (BZ#704073)

All dnsmasq users should install this update which makes these changes.

Solution

Before applying this update, make sure all previously-released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
https://access.redhat.com/kb/docs/DOC-11259

Affected Products

• Red Hat Enterprise Linux Server 6 x86_64
• Red Hat Enterprise Linux Server 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 i386
• Red Hat Enterprise Linux Workstation 6 x86_64
• Red Hat Enterprise Linux Workstation 6 i386
• Red Hat Enterprise Linux Desktop 6 x86_64
• Red Hat Enterprise Linux Desktop 6 i386
• Red Hat Enterprise Linux for IBM z Systems 6 s390x
• Red Hat Enterprise Linux for Power, big endian 6 ppc64
• Red Hat Enterprise Linux for Scientific Computing 6 x86_64
• Red Hat Enterprise Linux Server from RHUI 6 x86_64
• Red Hat Enterprise Linux Server from RHUI 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 6 s390x

Fixes

• BZ - 704073 - suppress the message "DHCP packet received on eth<N> which has no address"

CVEs

(none)

References

(none)