SUSE-SU-2026:22706-1
- Source
- https://www.suse.com/support/update/announcement/2026/suse-su-202622706-1/
- Import Source
- https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:22706-1.json
- JSON Data
- https://api.osv.dev/v1/vulns/SUSE-SU-2026:22706-1
- Upstream
CVE (2)
- CVE-2026-12725
- CVE-2026-12969
- Related
- Published
- 2026-07-10T08:05:09Z
- Modified
- 2026-07-23T18:24:14Z
- Summary
- Security update for dnsmasq
- Details
-
This update for dnsmasq fixes the following issues
- CVE-2026-12725: heap buffer overflow in
log_query()when logging unsupported DS/DNSKEY replies (bsc#1268764). - CVE-2026-12969: out-of-bounds read in
find_soa()due to missing extrabytes validation (bsc#1268882).
Changes for dnsmasq:
- Update to 2.93:
- Fix a corner-case in DNSSEC validation with wildcards.
- Fix DNSSEC failure with spurious RRSIGs.
- Fix DNSSEC fail with CNAME replies to DS queries.
- Fix regression in 2.92 release which broke DHCPv6 when a DHCP relay is in use.
- Modify the inotify implementation so that inotify watches are only created after dnsmasq has changed permissions and userid.
- CVE-2026-12725: heap buffer overflow in
- References