diff --git a/docker-compose.yml b/docker-compose.yml
index d28e791..0e100b1 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -96,7 +96,7 @@ services:
   # Both are optional: an installation without VPN_INTERNAL_HOST configured
   # simply does not start them (profile `vpn`).
   vpn-dns:
-    image: 4km3/dnsmasq:2.90-r0
+    image: 4km3/dnsmasq:2.90-r3
     restart: unless-stopped
     profiles: ["vpn"]
     network_mode: "service:queue-provisioning"