SUSE-SU-2026:22668-1 Security update for dnsmasq

This update for dnsmasq fixes the following issues - CVE-2026-12969: out-of-bounds read in findsoa due to missing extrabytes validation bsc1268882...

Dnsmasq: dnsmasq: out-of-bounds read in find_soa() due to missing extrabytes validation

...

CVE-2026-12969

Dnsmasq has an out-of-bounds read in find_soa() (src/rfc1035.c) when parsing NS records; extract_name() is called with extrabytes=0 and does not validate that 10 extra bytes exist for fixed-length DNS fields. A remote attacker controlling a DNS zone could exploit a crafted NXDOMAIN response to pe...