openSUSE: 2025:0071-1 important: dnsmasq Advisory Security Update
Description
This update for dnsmasq fixes the following issues: * Version update to 2.90: * CVE-2023-50387: Fixed a Denial Of Service while trying to validate specially crafted DNSSEC responses. (bsc#1219823) * CVE-2023-50868: Fixed a Denial Of Service while trying to validate specially crafted DNSSEC responses. (bsc#1219826) * CVE-2023-28450: Default maximum EDNS.0 UDP packet size should be 1232. (bsc#1209358)
Patch
## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2025-71=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2025-71=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2025-71=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2025-71=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2025-71=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2025-71=1 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2025-71=1 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2025-71=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2025-71=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2025-71=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2025-71=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2025-71=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2025-71=1 * openSUSE Leap 15.4 zypper in -t patch SUSE-2025-71=1 * openSUSE Leap Micro 5.5 zypper in -t patch openSUSE-Leap-Micro-5.5-2025-71=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2025-71=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2025-71=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2025-71=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2025-71=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2025-71=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2025-71=1
Package List
* Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * dnsmasq-debuginfo-2.90-150400.16.3.1 * dnsmasq-debugsource-2.90-150400.16.3.1 * dnsmasq-2.90-150400.16.3.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * dnsmasq-debuginfo-2.90-150400.16.3.1 * dnsmasq-debugsource-2.90-150400.16.3.1 * dnsmasq-2.90-150400.16.3.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * dnsmasq-debuginfo-2.90-150400.16.3.1 * dnsmasq-debugsource-2.90-150400.16.3.1 * dnsmasq-2.90-150400.16.3.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * dnsmasq-debuginfo-2.90-150400.16.3.1 * dnsmasq-debugsource-2.90-150400.16.3.1 * dnsmasq-2.90-150400.16.3.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * dnsmasq-debuginfo-2.90-150400.16.3.1 * dnsmasq-debugsource-2.90-150400.16.3.1 * dnsmasq-2.90-150400.16.3.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS (x86_64) * dnsmasq-debuginfo-2.90-150400.16.3.1 * dnsmasq-debugsource-2.90-150400.16.3.1 * dnsmasq-2.90-150400.16.3.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * dnsmasq-debuginfo-2.90-150400.16.3.1 * dnsmasq-debugsource-2.90-150400.16.3.1 * dnsmasq-2.90-150400.16.3.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * dnsmasq-debuginfo-2.90-150400.16.3.1 * dnsmasq-debugsource-2.90-150400.16.3.1 * dnsmasq-2.90-150400.16.3.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * dnsmasq-debuginfo-2.90-150400.16.3.1 * dnsmasq-debugsource-2.90-150400.16.3.1 * dnsmasq-2.90-150400.16.3.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * dnsmasq-debuginfo-2.90-150400.16.3.1 * dnsmasq-debugsource-2.90-150400.16.3.1 * dnsmasq-2.90-150400.16.3.1 * SUSE Manager Proxy 4.3 (x86_64) * dnsmasq-debuginfo-2.90-150400.16.3.1 * dnsmasq-debugsource-2.90-150400.16.3.1 * dnsmasq-2.90-150400.16.3.1 * SUSE Manager Retail Branch Server 4.3 (x86_64) * dnsmasq-debuginfo-2.90-150400.16.3.1 * dnsmasq-debugsource-2.90-150400.16.3.1 * dnsmasq-2.90-150400.16.3.1 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * dnsmasq-debuginfo-2.90-150400.16.3.1 * dnsmasq-debugsource-2.90-150400.16.3.1 * dnsmasq-2.90-150400.16.3.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * dnsmasq-utils-debuginfo-2.90-150400.16.3.1 * dnsmasq-2.90-150400.16.3.1 * dnsmasq-debuginfo-2.90-150400.16.3.1 * dnsmasq-utils-2.90-150400.16.3.1 * dnsmasq-debugsource-2.90-150400.16.3.1 * openSUSE Leap Micro 5.5 (aarch64 s390x x86_64) * dnsmasq-debuginfo-2.90-150400.16.3.1 * dnsmasq-debugsource-2.90-150400.16.3.1 * dnsmasq-2.90-150400.16.3.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * dnsmasq-utils-debuginfo-2.90-150400.16.3.1 * dnsmasq-2.90-150400.16.3.1 * dnsmasq-debuginfo-2.90-150400.16.3.1 * dnsmasq-utils-2.90-150400.16.3.1 * dnsmasq-debugsource-2.90-150400.16.3.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * dnsmasq-debuginfo-2.90-150400.16.3.1 * dnsmasq-debugsource-2.90-150400.16.3.1 * dnsmasq-2.90-150400.16.3.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * dnsmasq-debuginfo-2.90-150400.16.3.1 * dnsmasq-debugsource-2.90-150400.16.3.1 * dnsmasq-2.90-150400.16.3.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * dnsmasq-debuginfo-2.90-150400.16.3.1 * dnsmasq-debugsource-2.90-150400.16.3.1 * dnsmasq-2.90-150400.16.3.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * dnsmasq-debuginfo-2.90-150400.16.3.1 * dnsmasq-debugsource-2.90-150400.16.3.1 * dnsmasq-2.90-150400.16.3.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * dnsmasq-debuginfo-2.90-150400.16.3.1 * dnsmasq-debugsource-2.90-150400.16.3.1 * dnsmasq-2.90-150400.16.3.1
References
* bsc#1200344 * bsc#1207174 * bsc#1209358 * bsc#1214884 * bsc#1219823 * bsc#1219826 ## References: * https://www.suse.com/security/cve/CVE-2023-28450.html * https://www.suse.com/security/cve/CVE-2023-50387.html * https://www.suse.com/security/cve/CVE-2023-50868.html * https://bugzilla.suse.com/show_bug.cgi?id=1200344 * https://bugzilla.suse.com/show_bug.cgi?id=1207174 * https://bugzilla.suse.com/show_bug.cgi?id=1209358 * https://bugzilla.suse.com/show_bug.cgi?id=1214884 * https://bugzilla.suse.com/show_bug.cgi?id=1219823 * https://bugzilla.suse.com/show_bug.cgi?id=1219826