SUSE-SU-2025:20118-1
- Source
- https://www.suse.com/support/update/announcement/2025/suse-su-202520118-1/
- Import Source
- https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2025:20118-1.json
- JSON Data
- https://api.osv.dev/v1/vulns/SUSE-SU-2025:20118-1
- Upstream
- Related
- Published
- 2025-02-03T09:22:40Z
- Modified
- 2026-03-23T04:48:10Z
- Summary
- Security update for dnsmasq
- Details
-
This update for dnsmasq fixes the following issues:
-
Update to 2.90:
- CVE-2023-50387, CVE-2023-50868: Fixed a Denial Of Service while trying to validate specially crafted DNSSEC responses (bsc#1219823, bsc#1219826).
- Fix reversion in --rev-server introduced in 2.88 which caused breakage if the prefix length is not exactly divisible by 8 (IPv4) or 4 (IPv6).
- Fix possible SEGV when there server(s) for a particular domain are configured, but no server which is not qualified for a particular domain.
- Set the default maximum DNS UDP packet sice to 1232.
- Add --no-dhcpv4-interface and --no-dhcpv6-interface for better control over which interfaces are providing DHCP service.
- Fix issue with stale caching
- Add configurable caching for arbitrary RR-types.
- Add --filter-rr option, to filter arbitrary RR-types.
-
SLP got dropped, remove config (bsc#1214884)
-
- References
-
- https://www.suse.com/support/update/announcement/2025/suse-su-202520118-1/
- https://bugzilla.suse.com/1214884
- https://bugzilla.suse.com/1219823
- https://bugzilla.suse.com/1219826
- https://www.suse.com/security/cve/CVE-2023-28450
- https://www.suse.com/security/cve/CVE-2023-50387
- https://www.suse.com/security/cve/CVE-2023-50868