openSUSE dnsmasq Important Heap Overflow Issues ID 2026-21192-1

This update for dnsmasq fixes the following issues

Update to 2.93:

- CVE-2026-12725: heap buffer overflow in `log_query()` when logging unsupported DS/DNSKEY replies (bsc#1268764).

Changes for dnsmasq:

* CVE-2026-12725, bsc#1268764: Heap buffer overflow in

`log_query()` when logging unsupported DS/DNSKEY replies.

* Fix a corner-case in DNSSEC validation with wildcards.

* Fix DNSSEC failure with spurious RRSIGs.

* Fix DNSSEC fail with CNAME replies to DS queries.

* Fix regression in 2.92 release which broke DHCPv6 when a DHCP

relay is in use.

* Modify the inotify implementation so that inotify watches are

only created after dnsmasq has changed permissions and userid.

* CVE-2026-2291: Rework storage allocation for domain names.

Patch instructions:

To install this openSUSE security update use the suse recommended installation methods

like YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

- openSUSE Leap 16.0

...