-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 02 May 2026 18:50:46 +0200 Source: dnsmasq Binary: dnsmasq-base dnsmasq-base-dbgsym dnsmasq-base-lua dnsmasq-base-lua-dbgsym dnsmasq-utils dnsmasq-utils-dbgsym Architecture: armhf Version: 2.91-1+deb13u1 Distribution: trixie-security Urgency: high Maintainer: armhf Build Daemon (arm-conova-03) Changed-By: Sven Geuer Description: dnsmasq-base - Small caching DNS proxy and DHCP/TFTP server - executable dnsmasq-base-lua - Small caching DNS proxy and DHCP/TFTP server - executable, Lua-en dnsmasq-utils - Utilities for manipulating DHCP leases Changes: dnsmasq (2.91-1+deb13u1) trixie-security; urgency=high . * d/p/*: - CVE-2026-2291.patch: Fix buffer overflow in struct bigname. - CVE-2026-4890.patch: Fix NSEC bitmap parsing infinite loop. - CVE-2026-4891.patch: Verify rdlen field in RRSIG packets. - CVE-2026-4892.patch: Fix buffer overflow in helper.c with large CLIDs. - CVE-2026-4893.patch: Fix broken client subnet validation. - CVE-2026-5172.patch: Fix buffer overflow vulnerability in extract_addresses(). Checksums-Sha1: 061c7584b80fef2c8c9177d3589d7b78e6413dde 585948 dnsmasq-base-dbgsym_2.91-1+deb13u1_armhf.deb 1ad2f73a8d05beeb2f28aec82a07254ec3f06282 589260 dnsmasq-base-lua-dbgsym_2.91-1+deb13u1_armhf.deb 2fd313b2ae5b08c274cb036f938dcb734bd9a64f 475892 dnsmasq-base-lua_2.91-1+deb13u1_armhf.deb 21867fcb1109270075f56214e49b772ad6160fcb 473844 dnsmasq-base_2.91-1+deb13u1_armhf.deb 0e3ce56f4d9dedd922bae5c692aaf2224044f05a 29936 dnsmasq-utils-dbgsym_2.91-1+deb13u1_armhf.deb 7fc3a1605373e2fa86776fc7b869f2dc019785e9 62244 dnsmasq-utils_2.91-1+deb13u1_armhf.deb c4eedc2476459f925db3fa7b46c4d90ff62d9d7a 8174 dnsmasq_2.91-1+deb13u1_armhf-buildd.buildinfo Checksums-Sha256: 1addab606e9a61274b35cb8442dccc6b52028d8169a9c3a1f7cdb7896d5c402a 585948 dnsmasq-base-dbgsym_2.91-1+deb13u1_armhf.deb c27f7d093b8c3710f675fba1ccfa0c6ed439babedd5b4e37b2717b9c2290e856 589260 dnsmasq-base-lua-dbgsym_2.91-1+deb13u1_armhf.deb a48979c1276fc4545544b2778c447be074ca13a9425d9a9ffb94a979485cf7b4 475892 dnsmasq-base-lua_2.91-1+deb13u1_armhf.deb fad00c76ad64dcdd944f2bedb315820bbf01ff9f3d3e2f264fbfdcef4f0e6710 473844 dnsmasq-base_2.91-1+deb13u1_armhf.deb acd45a2609a3ea4c1b952e8238a2e994fa95dfc4bd201f1d9ad9cb6d7777f31e 29936 dnsmasq-utils-dbgsym_2.91-1+deb13u1_armhf.deb 9b9b1b5255c96bc971734cea3d4c5a8089f84671a53d453b252477ebd125d4bb 62244 dnsmasq-utils_2.91-1+deb13u1_armhf.deb 514cfa348a3a08a618c862a3c8918c7d187ec532f1be5f3345a994f472a44f88 8174 dnsmasq_2.91-1+deb13u1_armhf-buildd.buildinfo Files: 41cad95c87b0baaabb281ec260643d79 585948 debug optional dnsmasq-base-dbgsym_2.91-1+deb13u1_armhf.deb 6cc9c4f9e3075aa215fe5a1e2a121a5f 589260 debug optional dnsmasq-base-lua-dbgsym_2.91-1+deb13u1_armhf.deb 22f6fd97ae48906fab6ec4ced1744fe5 475892 net optional dnsmasq-base-lua_2.91-1+deb13u1_armhf.deb 27bfede3772e76e964b5d99f2da1dec3 473844 net optional dnsmasq-base_2.91-1+deb13u1_armhf.deb 2341cb3a2fbc9edddec4519d5f36b8dd 29936 debug optional dnsmasq-utils-dbgsym_2.91-1+deb13u1_armhf.deb 658d562da3c00e0fc7cc680b8258e879 62244 net optional dnsmasq-utils_2.91-1+deb13u1_armhf.deb 46b21932347cc83e6fe3621185dcc276 8174 net optional dnsmasq_2.91-1+deb13u1_armhf-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEElFiH1oZRZh1t4FSiXVp1sEH/1mIFAmn4hWEACgkQXVp1sEH/ 1mJtFhAAtZL/KOOXv4e10oHZ0Wfx9v1Sv92Il/9DAnJsGvxanqyb4KutFQVg+Xyr SHz9TH/BaBuejmApgSUUr4qwernWisyNX085fZRg/vHwwKOZfZMU4Brdju21MuTF d1EdiATtgZVEoFR80blWob7k3qNoruw5mXkb/AFLNM4+Z3H3DTO3WqDgIHM+jgbD AAKKaLXZ/0LJilMWTuXeuujnZNepLmjKLfciconLXgojJyOKvnSIyRjH40L3XDVD PkAHbYGf6+MnRGmVn/gIW7qU/i05IBZtUQEL19/y2+sTHnfIqSAe/UwyzU8N06cd 20Xj/z3VLrCQkFICHH+b/KWE5va1NwziP6OQr9EGhQb0E7glUpwHrmQ3WMKViHBr uoNJvI5ZxOqt0h7KnrtNKXVljitPyrLAOcw7mplMZV2FoOeKlXbyfsz+YbSPn+wH /6BSWDHmGtJPWiLSsfrpEz8wcrQXVtYfnJZndveY+XB8sXIPR41UHR881iigg+c/ NPu+KYfYQc+ZN6gbPxG7zLOGFreSqiPPhUUodo6F1FXv2W7jGPfIIlsBkSY3Hs8I UjY3PjtK+BDCedHIwzfG1APm47xZMi/bFe5ztx7arpudrVL7uA/unb1UmVRQM6/H EgkQAiBgrPA8csKIaJak4vzlGYpnIf9nCNQJQbseP3LT2mixDVE= =yTjh -----END PGP SIGNATURE-----