dnsmasq に重大な 6 つの CVE が公開、AI によるセキュリティ調査が加速

CERT is releasing six CVEs for serious security vulnerabilities in dnsmasq

I am releasing six serious CVEs for long-standing bugs in dnsmasq that affect most non-ancient versions. Due to a surge in AI-generated bug reports, I decided to prioritize immediate fixes over long embargoes. Patches are available now, and I am working on the next stable release to ensure dnsmasq remains secure against both good and bad actors.

"「良い人たちがこれらのバグを見つけられたのであれば、悪い人たちも同様に発見できたことは疑いの余地がありません。そのため、長い期間の秘密保持はあまり意味がないように思えます。」"