SUSE-SU-2025:0071-1

Details

This update for dnsmasq fixes the following issues:

Version update to 2.90:
CVE-2023-50387: Fixed a Denial Of Service while trying to validate specially crafted DNSSEC responses. (bsc#1219823)
CVE-2023-50868: Fixed a Denial Of Service while trying to validate specially crafted DNSSEC responses. (bsc#1219826)
CVE-2023-28450: Default maximum EDNS.0 UDP packet size should be 1232. (bsc#1209358)

Affected Packages

SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOSdnsmasq

Fixed in:

2.90-150400.16.3.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSSdnsmasq

Fixed in:

2.90-150400.16.3.1

SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOSdnsmasq

Fixed in:

2.90-150400.16.3.1

SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSSdnsmasq

Fixed in:

2.90-150400.16.3.1

SUSE:Linux Enterprise Micro 5.3dnsmasq

Fixed in:

2.90-150400.16.3.1

SUSE:Linux Enterprise Micro 5.4dnsmasq

Fixed in:

2.90-150400.16.3.1

SUSE:Linux Enterprise Micro 5.5dnsmasq

Fixed in:

2.90-150400.16.3.1

SUSE:Linux Enterprise Module for Basesystem 15 SP6dnsmasq

Fixed in:

2.90-150400.16.3.1

SUSE:Linux Enterprise Server 15 SP4-LTSSdnsmasq

Fixed in:

2.90-150400.16.3.1

SUSE:Linux Enterprise Server 15 SP5-LTSSdnsmasq

Fixed in:

2.90-150400.16.3.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP4dnsmasq

Fixed in:

2.90-150400.16.3.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP5dnsmasq

Fixed in:

2.90-150400.16.3.1

SUSE:Manager Proxy 4.3dnsmasq

Fixed in:

2.90-150400.16.3.1

SUSE:Manager Server 4.3dnsmasq

Fixed in:

2.90-150400.16.3.1

openSUSE:Leap 15.6dnsmasq

Fixed in:

2.90-150400.16.3.1

openSUSE:Leap 15.6dnsmasq-utils

Fixed in:

2.90-150400.16.3.1

openSUSE:Leap Micro 5.5dnsmasq

Fixed in:

2.90-150400.16.3.1

References

REPORThttps://bugzilla.suse.com/1200344 REPORThttps://bugzilla.suse.com/1207174 REPORThttps://bugzilla.suse.com/1209358 REPORThttps://bugzilla.suse.com/1214884 REPORThttps://bugzilla.suse.com/1219823 REPORThttps://bugzilla.suse.com/1219826 WEBhttps://www.suse.com/security/cve/CVE-2023-28450 WEBhttps://www.suse.com/security/cve/CVE-2023-50387 WEBhttps://www.suse.com/security/cve/CVE-2023-50868 ADVISORYhttps://www.suse.com/support/update/announcement/2025/suse-su-20250071-1/

SUSE-SU-2025:0071-1

Details

Affected Packages

References

Upstream

Related

Ecosystems

Timeline