gpp_maybe Security update for dnsmasq

SUSE-SLE-Micro-6.0-709

This update for dnsmasq fixes the following issues Security issues: - CVE-2026-2291: dnsmasq can be abused to record false cached data enabling DoS or attacker redirect (bsc#1258251). - CVE-2026-4890: DoS vulnerability in the DNSSEC validation (bsc#1265001). - CVE-2026-4891: heap-based out-of-bounds read vulnerability in the DNSSEC validation (bsc#1265002). - CVE-2026-4892: heap-based out-of-bounds write vulnerability in the DHCPv6 implementation (bsc#1265003). - CVE-2026-4893: information disclosure vulnerability in dnsmasq allows remote attackers to bypass source checks (bsc#1265004). - CVE-2026-5172: buffer overflow in dnsmasq's extract_addresses() function (bsc#1265006). - CVE-2026-6507: out-of-bounds write in DHCP BOOTREPLY processing can lead to denial of service (bsc#1262487). Non security issues: - aardvark-dns upstream tests make dnsmasq dump core (bsc#1247812). - Drop rcFOO symlinks for CODE16 (jsc#PED-266). - libnettle: update to 4.0 breaks dnsmasq and gnutls (bsc#1257934). Changes for dnsmasq: - Update to security release 2.92rel2

• Release Date
  May 15 2026
• References
  Bugzilla: 1247812, 1257934, 1258251, 1262487, 1265001, 1265002, 1265003, 1265004, 1265006
  CVEs: CVE-2026-2291, CVE-2026-4890, CVE-2026-4891, CVE-2026-4892, CVE-2026-4893, CVE-2026-5172, CVE-2026-6507
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Micro 6.0 aarch64

• Packages
  dnsmasq
  DNS Forwarder and DHCP Server

  2.92rel2-1.1 lock rpm

SUSE Linux Micro 6.0 s390x

• Packages
  dnsmasq
  DNS Forwarder and DHCP Server

  2.92rel2-1.1 lock rpm

SUSE Linux Micro 6.0 x86_64

• Packages
  dnsmasq
  DNS Forwarder and DHCP Server

  2.92rel2-1.1 lock rpm