{
  "document": {
    "aggregate_severity": {
      "text": "Moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "TuxCare License Agreement",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Cloud Linux Inc. and provide a link to the original.",
        "title": "Terms of Use"
      },
      {
        "category": "details",
        "text": "CVE-2026-12725: Fix buffer overflow in log_query()",
        "title": "Details"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://tuxcare.com/contact/",
      "name": "TuxCare",
      "namespace": "https://tuxcare.com/"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://cve.tuxcare.com/els/releases/CLSA-2026:1784640629",
        "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1784640629"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.tuxcare.com/csaf/v2/els_os/tuxcare9.6esu/advisories/2026/clsa-2026_1784640629.json"
      }
    ],
    "tracking": {
      "current_release_date": "2026-07-21T13:31:40Z",
      "generator": {
        "date": "2026-07-21T13:31:40Z",
        "engine": {
          "name": "pyCSAF"
        }
      },
      "id": "CLSA-2026:1784640629",
      "initial_release_date": "2026-07-21T13:31:40Z",
      "revision_history": [
        {
          "date": "2026-07-21T13:31:40Z",
          "number": "1",
          "summary": "Initial version"
        }
      ],
      "status": "final",
      "version": "1"
    },
    "title": "dnsmasq: Fix of CVE-2026-12725"
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "AlmaLinux 9.6",
                "product": {
                  "name": "AlmaLinux 9.6",
                  "product_id": "AlmaLinux-9.6",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:almalinux:almalinux:9.6:*:*:*:*:*:*:*"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "AlmaLinux"
          }
        ],
        "category": "vendor",
        "name": "AlmaLinux OS Foundation"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Rocky Linux 9.6",
                "product": {
                  "name": "Rocky Linux 9.6",
                  "product_id": "Rocky Linux-9.6",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:resf:rocky_linux:9.6:*:*:*:*:*:*:*"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Rocky Linux"
          }
        ],
        "category": "vendor",
        "name": "Rocky Linux"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "dnsmasq-0:2.85-17.el9_6.tuxcare.els2.x86_64",
                "product": {
                  "name": "dnsmasq-0:2.85-17.el9_6.tuxcare.els2.x86_64",
                  "product_id": "dnsmasq-0:2.85-17.el9_6.tuxcare.els2.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/tuxcare/dnsmasq@2.85-17.el9_6.tuxcare.els2?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dnsmasq-utils-0:2.85-17.el9_6.tuxcare.els2.x86_64",
                "product": {
                  "name": "dnsmasq-utils-0:2.85-17.el9_6.tuxcare.els2.x86_64",
                  "product_id": "dnsmasq-utils-0:2.85-17.el9_6.tuxcare.els2.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/tuxcare/dnsmasq-utils@2.85-17.el9_6.tuxcare.els2?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dnsmasq-utils-0:2.85-17.el9_6.tuxcare.els1.x86_64",
                "product": {
                  "name": "dnsmasq-utils-0:2.85-17.el9_6.tuxcare.els1.x86_64",
                  "product_id": "dnsmasq-utils-0:2.85-17.el9_6.tuxcare.els1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/tuxcare/dnsmasq-utils@2.85-17.el9_6.tuxcare.els1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dnsmasq-0:2.85-17.el9_6.tuxcare.els1.x86_64",
                "product": {
                  "name": "dnsmasq-0:2.85-17.el9_6.tuxcare.els1.x86_64",
                  "product_id": "dnsmasq-0:2.85-17.el9_6.tuxcare.els1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/tuxcare/dnsmasq@2.85-17.el9_6.tuxcare.els1?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          }
        ],
        "category": "vendor",
        "name": "TuxCare"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.85-17.el9_6.tuxcare.els2.x86_64 as a component of AlmaLinux 9.6",
          "product_id": "AlmaLinux-9.6:dnsmasq-0:2.85-17.el9_6.tuxcare.els2.x86_64"
        },
        "product_reference": "dnsmasq-0:2.85-17.el9_6.tuxcare.els2.x86_64",
        "relates_to_product_reference": "AlmaLinux-9.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.85-17.el9_6.tuxcare.els2.x86_64 as a component of AlmaLinux 9.6",
          "product_id": "AlmaLinux-9.6:dnsmasq-utils-0:2.85-17.el9_6.tuxcare.els2.x86_64"
        },
        "product_reference": "dnsmasq-utils-0:2.85-17.el9_6.tuxcare.els2.x86_64",
        "relates_to_product_reference": "AlmaLinux-9.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.85-17.el9_6.tuxcare.els2.x86_64 as a component of Rocky Linux 9.6",
          "product_id": "Rocky Linux-9.6:dnsmasq-0:2.85-17.el9_6.tuxcare.els2.x86_64"
        },
        "product_reference": "dnsmasq-0:2.85-17.el9_6.tuxcare.els2.x86_64",
        "relates_to_product_reference": "Rocky Linux-9.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.85-17.el9_6.tuxcare.els2.x86_64 as a component of Rocky Linux 9.6",
          "product_id": "Rocky Linux-9.6:dnsmasq-utils-0:2.85-17.el9_6.tuxcare.els2.x86_64"
        },
        "product_reference": "dnsmasq-utils-0:2.85-17.el9_6.tuxcare.els2.x86_64",
        "relates_to_product_reference": "Rocky Linux-9.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.85-17.el9_6.tuxcare.els1.x86_64 as a component of AlmaLinux 9.6",
          "product_id": "AlmaLinux-9.6:dnsmasq-utils-0:2.85-17.el9_6.tuxcare.els1.x86_64"
        },
        "product_reference": "dnsmasq-utils-0:2.85-17.el9_6.tuxcare.els1.x86_64",
        "relates_to_product_reference": "AlmaLinux-9.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.85-17.el9_6.tuxcare.els1.x86_64 as a component of AlmaLinux 9.6",
          "product_id": "AlmaLinux-9.6:dnsmasq-0:2.85-17.el9_6.tuxcare.els1.x86_64"
        },
        "product_reference": "dnsmasq-0:2.85-17.el9_6.tuxcare.els1.x86_64",
        "relates_to_product_reference": "AlmaLinux-9.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.85-17.el9_6.tuxcare.els1.x86_64 as a component of Rocky Linux 9.6",
          "product_id": "Rocky Linux-9.6:dnsmasq-utils-0:2.85-17.el9_6.tuxcare.els1.x86_64"
        },
        "product_reference": "dnsmasq-utils-0:2.85-17.el9_6.tuxcare.els1.x86_64",
        "relates_to_product_reference": "Rocky Linux-9.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.85-17.el9_6.tuxcare.els1.x86_64 as a component of Rocky Linux 9.6",
          "product_id": "Rocky Linux-9.6:dnsmasq-0:2.85-17.el9_6.tuxcare.els1.x86_64"
        },
        "product_reference": "dnsmasq-0:2.85-17.el9_6.tuxcare.els1.x86_64",
        "relates_to_product_reference": "Rocky Linux-9.6"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-12725",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "description",
          "text": "A heap-based buffer overflow was found in dnsmasq. When DNSSEC validation and\nquery logging are both enabled, logging of DS or DNSKEY replies containing\nunsupported algorithm or digest types can cause dnsmasq to write past the end\nof an internal logging buffer. A remote attacker able to supply such a DNS\nresponse may crash the dnsmasq process, resulting in denial of service.",
          "title": "Vulnerability description"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.6:dnsmasq-0:2.85-17.el9_6.tuxcare.els2.x86_64",
          "AlmaLinux-9.6:dnsmasq-utils-0:2.85-17.el9_6.tuxcare.els2.x86_64",
          "Rocky Linux-9.6:dnsmasq-0:2.85-17.el9_6.tuxcare.els2.x86_64",
          "Rocky Linux-9.6:dnsmasq-utils-0:2.85-17.el9_6.tuxcare.els2.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.6:dnsmasq-0:2.85-17.el9_6.tuxcare.els1.x86_64",
          "AlmaLinux-9.6:dnsmasq-utils-0:2.85-17.el9_6.tuxcare.els1.x86_64",
          "Rocky Linux-9.6:dnsmasq-0:2.85-17.el9_6.tuxcare.els1.x86_64",
          "Rocky Linux-9.6:dnsmasq-utils-0:2.85-17.el9_6.tuxcare.els1.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2026-12725"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/security/cve/CVE-2026-12725",
          "url": "https://access.redhat.com/security/cve/CVE-2026-12725"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2490763",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2490763"
        }
      ],
      "release_date": "2026-06-22T16:16:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-07-21T13:30:35.070277Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1784640629",
          "product_ids": [
            "AlmaLinux-9.6:dnsmasq-0:2.85-17.el9_6.tuxcare.els2.x86_64",
            "AlmaLinux-9.6:dnsmasq-utils-0:2.85-17.el9_6.tuxcare.els2.x86_64",
            "Rocky Linux-9.6:dnsmasq-0:2.85-17.el9_6.tuxcare.els2.x86_64",
            "Rocky Linux-9.6:dnsmasq-utils-0:2.85-17.el9_6.tuxcare.els2.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1784640629"
        },
        {
          "category": "none_available",
          "date": "2026-06-22T16:16:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.6:dnsmasq-0:2.85-17.el9_6.tuxcare.els1.x86_64",
            "AlmaLinux-9.6:dnsmasq-utils-0:2.85-17.el9_6.tuxcare.els1.x86_64",
            "Rocky Linux-9.6:dnsmasq-0:2.85-17.el9_6.tuxcare.els1.x86_64",
            "Rocky Linux-9.6:dnsmasq-utils-0:2.85-17.el9_6.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    }
  ]
}