Security update for dnsmasq (moderate)

An update that solves two vulnerabilities and has three
fixes is now available.

Description:

This update for dnsmasq fixes the following issues:

Security issues fixed:

• CVE-2019-14834: Fixed a memory leak which could have allowed to remote
  attackers to cause denial of service via DHCP response creation
  (bsc#1154849)
• CVE-2017-15107: Fixed a vulnerability in DNSSEC implementation.
  Processing of wildcard synthesized NSEC records may result improper
  validation for non-existance (bsc#1076958).

Other issues addressed:

• Included linux/sockios.h to get SIOCGSTAMP (bsc#1156543).
• Removed cache size limit (bsc#1138743).
• bsc#1152539: include config files from /etc/dnsmasq.d/*.conf .

This update was imported from the SUSE:SLE-15-SP1:Update update project.

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or “zypper patch”.

Alternatively you can run the command listed for your product:

• openSUSE Leap 15.1:

  zypper in -t patch openSUSE-2019-2669=1