SUSE-SU-2026:0888-1
SUSE-SU-2026:0888-1 · Security update for dnsdist
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This update for dnsdist fixes the following issues: Update to dnsdist 1.9.11: - CVE-2025-8671: Add mitigations for the HTTP/2 MadeYouReset attack (bsc#1253852). - CVE-2025-30187: denial of service via crafted DoH exchange (bsc#1250054).
Fix available
- Published
- Updated
Stack: system
Affected products and versions
dnsdist SUSE:Linux Enterprise Module for Basesystem 15 SP7
- Affected ranges
- ECOSYSTEM: < 1.9.11-150700.3.6.1
Update to 1.9.11-150700.3.6.1
Original sources
- https://www.suse.com/support/update/announcement/2026/suse-su-20260888-1/
- https://bugzilla.suse.com/1243566
- https://bugzilla.suse.com/1250054
- https://bugzilla.suse.com/1253852
- https://www.suse.com/security/cve/CVE-2025-30187
- https://www.suse.com/security/cve/CVE-2025-8671
- https://osv.dev/vulnerability/SUSE-SU-2026:0888-1