openSUSE-SU-2026:21502-1

Import Source

https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:21502-1.json

JSON Data

https://api.osv.dev/v1/vulns/openSUSE-SU-2026:21502-1

Upstream

CVE (4)

Related

CVE (4)

Published

2026-07-29T09:24:11Z

Modified

2026-07-31T18:24:09Z

Summary

Security update for nsd

Details

This update for nsd fixes the following issues:

Changes in nsd:

Update nsd.keyring
update to 4.14.3: https://github.com/NLnetLabs/nsd/blob/NSD_4_14_3_REL/doc/ChangeLog
- CVE-2026-12490: Bypass of client certificate verification with transfer over TLS (bsc#1269563)
- CVE-2026-12246: Out of bounds stack write with crafted APL RR (bsc#1269564)
- CVE-2026-12245: Denial of DNS over TLS service by any DoT client (bsc#1269565)
- CVE-2026-12244: Heap overflow and crash with crafted SVCB RR (bsc#1269566)
update to 4.14.2: https://github.com/NLnetLabs/nsd/blob/NSD_4_14_2_REL/doc/ChangeLog
update to 4.14.1: https://github.com/NLnetLabs/nsd/blob/NSD_4_14_1_REL/doc/ChangeLog
update to 4.14.0: https://github.com/NLnetLabs/nsd/blob/NSD_4_14_0_REL/doc/ChangeLog
update to 4.13.0: https://github.com/NLnetLabs/nsd/blob/NSD_4_13_0_REL/doc/ChangeLog https://github.com/NLnetLabs/nsd/blob/NSD_4_12_1_REL/doc/ChangeLog https://github.com/NLnetLabs/nsd/blob/NSD_4_12_0_REL/doc/ChangeLog https://github.com/NLnetLabs/nsd/blob/NSD_4_11_1_REL/doc/ChangeLog https://github.com/NLnetLabs/nsd/blob/NSD_4_11_0_REL/doc/ChangeLog https://github.com/NLnetLabs/nsd/blob/NSD_4_10_1_REL/doc/ChangeLog https://github.com/NLnetLabs/nsd/blob/NSD_4_10_0_REL/doc/ChangeLog https://github.com/NLnetLabs/nsd/blob/NSD_4_9_1_REL/doc/ChangeLog https://github.com/NLnetLabs/nsd/blob/NSD_4_9_0_REL/doc/ChangeLog
enable systemd notify support.
enable dnstap support.
enable tcp fast open support
enable support for >= 2038

References

Affected packages

openSUSE:Leap 16.0 / nsd

Package

Name: nsd
Purl: pkg:rpm/opensuse/nsd&distro=openSUSE%20Leap%2016.0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

4.14.3-bp160.1.1

Ecosystem specific

{
    "binaries":  [
        {
            "nsd":  "4.14.3-bp160.1.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:21502-1.json"