openSUSE-SU-2026:21502-1

Description of the patch:

This update for nsd fixes the following issues:

Changes in nsd:

• Update nsd.keyring

• update to 4.14.3: https://github.com/NLnetLabs/nsd/blob/NSD_4_14_3_REL/doc/ChangeLog

  • CVE-2026-12490: Bypass of client certificate verification with transfer over TLS (bsc#1269563)
  • CVE-2026-12246: Out of bounds stack write with crafted APL RR (bsc#1269564)
  • CVE-2026-12245: Denial of DNS over TLS service by any DoT client (bsc#1269565)
  • CVE-2026-12244: Heap overflow and crash with crafted SVCB RR (bsc#1269566)

• update to 4.14.2: https://github.com/NLnetLabs/nsd/blob/NSD_4_14_2_REL/doc/ChangeLog

• update to 4.14.1: https://github.com/NLnetLabs/nsd/blob/NSD_4_14_1_REL/doc/ChangeLog

• update to 4.14.0: https://github.com/NLnetLabs/nsd/blob/NSD_4_14_0_REL/doc/ChangeLog

• update to 4.13.0: https://github.com/NLnetLabs/nsd/blob/NSD_4_13_0_REL/doc/ChangeLog https://github.com/NLnetLabs/nsd/blob/NSD_4_12_1_REL/doc/ChangeLog https://github.com/NLnetLabs/nsd/blob/NSD_4_12_0_REL/doc/ChangeLog https://github.com/NLnetLabs/nsd/blob/NSD_4_11_1_REL/doc/ChangeLog https://github.com/NLnetLabs/nsd/blob/NSD_4_11_0_REL/doc/ChangeLog https://github.com/NLnetLabs/nsd/blob/NSD_4_10_1_REL/doc/ChangeLog https://github.com/NLnetLabs/nsd/blob/NSD_4_10_0_REL/doc/ChangeLog https://github.com/NLnetLabs/nsd/blob/NSD_4_9_1_REL/doc/ChangeLog https://github.com/NLnetLabs/nsd/blob/NSD_4_9_0_REL/doc/ChangeLog

• enable systemd notify support.

• enable dnstap support.

• enable tcp fast open support

• enable support for >= 2038