SUSE-SU-2026:21640-1

This update for dnsmasq fixes the following issues

Security issues:

• CVE-2026-2291: dnsmasq can be abused to record false cached data enabling DoS or attacker redirect (bsc#1258251).
• CVE-2026-4890: DoS vulnerability in the DNSSEC validation (bsc#1265001).
• CVE-2026-4891: heap-based out-of-bounds read vulnerability in the DNSSEC validation (bsc#1265002).
• CVE-2026-4892: heap-based out-of-bounds write vulnerability in the DHCPv6 implementation (bsc#1265003).
• CVE-2026-4893: information disclosure vulnerability in dnsmasq allows remote attackers to bypass source checks (bsc#1265004).
• CVE-2026-5172: buffer overflow in dnsmasq's extract_addresses() function (bsc#1265006).
• CVE-2026-6507: out-of-bounds write in DHCP BOOTREPLY processing can lead to denial of service (bsc#1262487).

Non security issues:

• aardvark-dns upstream tests make dnsmasq dump core (bsc#1247812).
• Drop rcFOO symlinks for CODE16 (jsc#PED-266.
• libnettle: update to 4.0 breaks dnsmasq and gnutls (bsc#1257934).
• unknown user or group: dnsmasq with latest proposed dnsmasq update when doing virsh net-start (bsc#1235517).
• Update to security release 2.92rel2.