gpp_maybe Security update for dnsmasq

SUSE-SLE-Module-Basesystem-15-SP7-2026-1934

This update for dnsmasq fixes the following issues Security issues: - CVE-2026-4890: DoS vulnerability in the DNSSEC validation (bsc#1265001). - CVE-2026-4891: heap-based out-of-bounds read vulnerability in the DNSSEC validation (bsc#1265002). - CVE-2026-4892: heap-based out-of-bounds write vulnerability in the DHCPv6 implementation (bsc#1265003). - CVE-2026-4893: information disclosure vulnerability in dnsmasq allows remote attackers to bypass source checks (bsc#1265004). - CVE-2026-5172: buffer overflow in dnsmasq's extract_addresses() function (bsc#1265006). - CVE-2026-6507: out-of-bounds write in DHCP BOOTREPLY processing can lead to denial of service (bsc#1262487). Non security issues: - Updated to security release 2.92rel2. - aardvark-dns upstream tests make dnsmasq dump core (bsc#1247812). - Drop rcFOO symlinks for CODE16 (jsc#PED-266). - libnettle: update to 4.0 breaks dnsmasq and gnutls (bsc#1257934).

Release Date

May 18 2026
References

Bugzilla: 1247812, 1257934, 1258251, 1262487, 1265001, 1265002, 1265003, 1265004, 1265006
CVEs: CVE-2026-2291, CVE-2026-4890, CVE-2026-4891, CVE-2026-4892, CVE-2026-4893, CVE-2026-5172, CVE-2026-6507
Type

security
Severity

important

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

Basesystem Module 15.7 ppc64le

Packages

dnsmasq
DNS Forwarder and DHCP Server

2.92rel2-150400.16.12.1 lock rpm lock src

Basesystem Module 15.7 s390x

Packages

dnsmasq
DNS Forwarder and DHCP Server

2.92rel2-150400.16.12.1 lock rpm lock src

Basesystem Module 15.7 aarch64

Packages

dnsmasq
DNS Forwarder and DHCP Server

2.92rel2-150400.16.12.1 lock rpm lock src

Basesystem Module 15.7 x86_64

Packages

dnsmasq
DNS Forwarder and DHCP Server

2.92rel2-150400.16.12.1 lock rpm lock src