Описание
Security update for dnsmasq
This update for dnsmasq fixes the following issues
- CVE-2026-12725: heap buffer overflow in
log_query()when logging unsupported DS/DNSKEY replies (bsc#1268764). - CVE-2026-12969: out-of-bounds read in
find_soa()due to missing extrabytes validation (bsc#1268882).
Changes for dnsmasq:
- Update to 2.93:
- Fix a corner-case in DNSSEC validation with wildcards.
- Fix DNSSEC failure with spurious RRSIGs.
- Fix DNSSEC fail with CNAME replies to DS queries.
- Fix regression in 2.92 release which broke DHCPv6 when a DHCP relay is in use.
- Modify the inotify implementation so that inotify watches are only created after dnsmasq has changed permissions and userid.
Список пакетов
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS
SUSE Linux Enterprise Micro 5.3
SUSE Linux Enterprise Micro 5.4
SUSE Linux Enterprise Micro 5.5
SUSE Linux Enterprise Module for Basesystem 15 SP7
SUSE Linux Enterprise Server 15 SP4-LTSS
SUSE Linux Enterprise Server 15 SP5-LTSS
SUSE Linux Enterprise Server 15 SP6-LTSS
SUSE Linux Enterprise Server for SAP Applications 15 SP4
SUSE Linux Enterprise Server for SAP Applications 15 SP5
SUSE Linux Enterprise Server for SAP Applications 15 SP6
Ссылки
- Link for SUSE-SU-2026:3028-1
- E-Mail link for SUSE-SU-2026:3028-1
- SUSE Security Ratings
- SUSE Bug 1268764
- SUSE Bug 1268882
- SUSE CVE CVE-2026-12725 page
- SUSE CVE CVE-2026-12969 page
Описание
A heap-based buffer overflow was found in dnsmasq. When DNSSEC validation and query logging are both enabled, logging of DS or DNSKEY replies containing unsupported algorithm or digest types can cause dnsmasq to write past the end of an internal logging buffer. A remote attacker able to supply such a DNS response may crash the dnsmasq process, resulting in denial of service.
Затронутые продукты
Ссылки
- CVE-2026-12725
- SUSE Bug 1268764
Описание
An out-of-bounds read vulnerability exists in dnsmasq's find_soa() function in src/rfc1035.c. When parsing NS section records, extract_name() is called with extrabytes=0, failing to validate that 10 additional bytes exist for fixed-length DNS record fields. A remote attacker controlling a DNS zone can exploit this via a crafted NXDOMAIN response to cause a 10-byte heap out-of-bounds read, potentially accessing stale data from prior transactions.
Затронутые продукты
Ссылки
- CVE-2026-12969
- SUSE Bug 1268882