Alerts This Week
Warning Icon 1 631
Alerts This Week
Warning Icon 1 631

SUSE Linux Micro 6.0 dnsmasq Important Integer Overflow DoS 2026-21626-1

suse
Calendar Grey May 15, 2026
Dist Suse Esm H88
Protect your systems from critical updates regarding dnsmasq issues. Install patches now to secure SUSE implementations.
An update that solves two vulnerabilities and has two fixes can now be installed.

Summary

## This update for dnsmasq fixes the following issues: Security issues: * CVE-2023-49441: integer overflow via forward_query (bsc#1226091). * CVE-2026-2291: VU#471747: dnsmasq can be abused to record false cached data enabling DoS or attacker redirect (bsc#1258251). Non security issue: * Reintroduce nogroup (bsc#1235517). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-703=1 ## Package List: * SUSE Linux Micro 6.0 (aarch64 s390x x86_64) * dnsmasq-debuginfo-2.90-2.1 * dnsmasq-debugsource-2.90-2.1 * dnsmasq-2.90-2.1

References

* bsc#1226091

* bsc#1235517

* bsc#1235834

* bsc#1258251

Cross-

* CVE-2023-49441

* CVE-2026-2291

CVSS scores:

* CVE-2023-49441 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

* CVE-2023-49441 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

* CVE-2023-49441 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

* CVE-2026-2291 ( SUSE ): 9.2

CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

* CVE-2026-2291 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

* CVE-2026-2291 ( NVD ): 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Affected Products:

* SUSE Linux Micro 6.0

An update that solves two vulnerabilities and has two fixes can now be

installed.

##

* https://www.suse.com/security/cve/CVE-2023-49441.html

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2026:21626-1
Release Date: 2026-05-12T09:38:52Z
Rating: important

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here