{
  "schema_version": "1.7.0",
  "id": "MGASA-2026-0288",
  "published": "2026-07-23T17:45:56Z",
  "modified": "2026-07-23T16:23:17Z",
  "summary": "Updated dnsmasq packages fix security vulnerabilities",
  "details": "The updated dnsmasq packages fix multiple security issues:\nA heap-based buffer overflow was found in dnsmasq. When DNSSEC\nvalidation and query logging are both enabled, logging of DS or DNSKEY\nreplies containing unsupported algorithm or digest types can cause\ndnsmasq to write past the end of an internal logging buffer.\nA remote attacker able to supply such a DNS response may crash the\ndnsmasq process, resulting in denial of service. (CVE-2026-12725)\nAn out-of-bounds read vulnerability exists in dnsmasq's find_soa()\nfunction in src/rfc1035.c. When parsing NS section records,\nextract_name() is called with extrabytes=0, failing to validate that 10\nadditional bytes exist for fixed-length DNS record fields. A remote\nattacker controlling a DNS zone can exploit this via a crafted NXDOMAIN\nresponse to cause a 10-byte heap out-of-bounds read, potentially\naccessing stale data from prior transactions. (CVE-2026-12969)\n",
  "upstream": [
    "CVE-2026-12725",
    "CVE-2026-12969"
  ],
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://advisories.mageia.org/MGASA-2026-0288.html"
    },
    {
      "type": "REPORT",
      "url": "https://bugs.mageia.org/show_bug.cgi?id=35935"
    },
    {
      "type": "ADVISORY",
      "url": "https://app.opencve.io/cve/CVE-2026-12725"
    },
    {
      "type": "ADVISORY",
      "url": "https://app.opencve.io/cve/CVE-2026-12969"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-8542-1"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2490763"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2491663"
    },
    {
      "type": "WEB",
      "url": "https://thekelleys.org.uk/dnsmasq/CHANGELOG"
    }
  ],
  "affected": [
    {
      "package": {
        "ecosystem": "Mageia:10",
        "name": "dnsmasq",
        "purl": "pkg:rpm/mageia/dnsmasq?arch=source&distro=mageia-10"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.93-1.mga10"
            }
          ]
        }
      ],
      "ecosystem_specific": {
        "section": "core"
      }
    },
    {
      "package": {
        "ecosystem": "Mageia:9",
        "name": "dnsmasq",
        "purl": "pkg:rpm/mageia/dnsmasq?arch=source&distro=mageia-9"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.93-1.mga9"
            }
          ]
        }
      ],
      "ecosystem_specific": {
        "section": "core"
      }
    }
  ],
  "credits": [
    {
      "name": "Mageia",
      "type": "COORDINATOR",
      "contact": [
        "https://wiki.mageia.org/en/Packages_Security_Team"
      ]
    }
  ]
}