SUSE-SU-2026:2974-1

Description of the patch:

This update for dnsmasq fixes the following issues

• CVE-2026-12725: heap buffer overflow in log_query() when logging unsupported DS/DNSKEY replies (bsc#1268764).
• CVE-2026-12969: out-of-bounds read in find_soa() due to missing extrabytes validation (bsc#1268882).

Changes for dnsmasq:

• Update to 2.93:

• Fix a corner-case in DNSSEC validation with wildcards.
• Fix DNSSEC failure with spurious RRSIGs.
• Fix DNSSEC fail with CNAME replies to DS queries.
• Fix regression in 2.92 release which broke DHCPv6 when a DHCP relay is in use.
• Modify the inotify implementation so that inotify watches are only created after dnsmasq has changed permissions and userid.