OPENSUSE-SU-2026:21192-1: dnsmasq&distro=openSUSE Leap 16.0 openSUSE
Vulnerability summary
OPENSUSE-SU-2026:21192-1 is a vulnerability in dnsmasq&distro=openSUSE Leap 16.0 openSUSE with no CVSS score yet.
Advisory lineage
Upstream 3 · Downstream 0 · Related 3Timeline
- 29-06-2026PublishedVulnerability first disclosed.
- 03-07-2026Last modifiedVulnerability information updated.
Description
Security update for dnsmasq This update for dnsmasq fixes the following issues Update to 2.93: - CVE-2026-12725: heap buffer overflow in `log_query()` when logging unsupported DS/DNSKEY replies (bsc#1268764). Changes for dnsmasq: * CVE-2026-12725, bsc#1268764: Heap buffer overflow in `log_query()` when logging unsupported DS/DNSKEY replies. * Fix a corner-case in DNSSEC validation with wildcards. * Fix DNSSEC failure with spurious RRSIGs. * Fix DNSSEC fail with CNAME replies to DS queries. * Fix regression in 2.92 release which broke DHCPv6 when a DHCP relay is in use. * Modify the inotify implementation so that inotify watches are only created after dnsmasq has changed permissions and userid. * CVE-2026-2291: Rework storage allocation for domain names.
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Opensuse1 product
- dnsmasq&distro=openSUSE Leap 16.0< 2.93-160000.1.1
1 vendor · 1 product