-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 02 May 2026 18:50:46 +0200 Source: dnsmasq Binary: dnsmasq-base dnsmasq-base-dbgsym dnsmasq-base-lua dnsmasq-base-lua-dbgsym dnsmasq-utils dnsmasq-utils-dbgsym Architecture: armel Version: 2.91-1+deb13u1 Distribution: trixie-security Urgency: high Maintainer: armel Build Daemon (arm-conova-03) Changed-By: Sven Geuer Description: dnsmasq-base - Small caching DNS proxy and DHCP/TFTP server - executable dnsmasq-base-lua - Small caching DNS proxy and DHCP/TFTP server - executable, Lua-en dnsmasq-utils - Utilities for manipulating DHCP leases Changes: dnsmasq (2.91-1+deb13u1) trixie-security; urgency=high . * d/p/*: - CVE-2026-2291.patch: Fix buffer overflow in struct bigname. - CVE-2026-4890.patch: Fix NSEC bitmap parsing infinite loop. - CVE-2026-4891.patch: Verify rdlen field in RRSIG packets. - CVE-2026-4892.patch: Fix buffer overflow in helper.c with large CLIDs. - CVE-2026-4893.patch: Fix broken client subnet validation. - CVE-2026-5172.patch: Fix buffer overflow vulnerability in extract_addresses(). Checksums-Sha1: 94c3b99afc27c42c03d1d1b999a54d09b1784247 580720 dnsmasq-base-dbgsym_2.91-1+deb13u1_armel.deb b39cc249cf9aeb092bf6d06be6425ecf9c3dee49 583892 dnsmasq-base-lua-dbgsym_2.91-1+deb13u1_armel.deb 43ab513d79774a7797b48eb899fbb5708e187083 473580 dnsmasq-base-lua_2.91-1+deb13u1_armel.deb 18763123b1b49e49237514fcbf146ce3f2fab272 471232 dnsmasq-base_2.91-1+deb13u1_armel.deb 2363de78d56e3dac2bc6402afe55e63d91778dd7 29916 dnsmasq-utils-dbgsym_2.91-1+deb13u1_armel.deb 35fabd61038f653b6dcb3c04ec74a0986e867340 62524 dnsmasq-utils_2.91-1+deb13u1_armel.deb c4b015b33867d21e8501047c8f2561344e3f4529 8160 dnsmasq_2.91-1+deb13u1_armel-buildd.buildinfo Checksums-Sha256: 9f32d10d0a014230880c440f9b1e502d9422b25439f0a31db22d702c6070d0a1 580720 dnsmasq-base-dbgsym_2.91-1+deb13u1_armel.deb 616d03335e2ce0fc047fdad7cf00dd9d1b20143c76d55a695cce35f0150e4004 583892 dnsmasq-base-lua-dbgsym_2.91-1+deb13u1_armel.deb e81e4318551000699f07b72fe59b22e758525b163b521045b8a6fa69fd876c65 473580 dnsmasq-base-lua_2.91-1+deb13u1_armel.deb 07f177bf66b2ecd33187864afc4662c6f6d577693b7cc004d37c7d44db95411e 471232 dnsmasq-base_2.91-1+deb13u1_armel.deb 5831197a24846b71517b6c55644ee160dfdbe2d0926d6ff68af3a220c472b042 29916 dnsmasq-utils-dbgsym_2.91-1+deb13u1_armel.deb 0ec339e6457b943e70e985aa60a4bafab2d22b50e10c21e699e30db458c597c6 62524 dnsmasq-utils_2.91-1+deb13u1_armel.deb 121af4280c7228358b1c5debfeae070a9c4a985a3f13f7178aae85de35b08b89 8160 dnsmasq_2.91-1+deb13u1_armel-buildd.buildinfo Files: 98a431104fc9af571e0844da0ce83c75 580720 debug optional dnsmasq-base-dbgsym_2.91-1+deb13u1_armel.deb ce612268e4b95cb5f494b30ad40639f9 583892 debug optional dnsmasq-base-lua-dbgsym_2.91-1+deb13u1_armel.deb 8cecac6f753ec2f9a573b9173b827b7d 473580 net optional dnsmasq-base-lua_2.91-1+deb13u1_armel.deb 43586fd67c80c6776a1424180cce2f44 471232 net optional dnsmasq-base_2.91-1+deb13u1_armel.deb fa478fd42079e8882a3a9a5072cc3252 29916 debug optional dnsmasq-utils-dbgsym_2.91-1+deb13u1_armel.deb 374050057f444bc5c4cf8ed902691114 62524 net optional dnsmasq-utils_2.91-1+deb13u1_armel.deb 1c7579a711cae53d689a996bc550ec83 8160 net optional dnsmasq_2.91-1+deb13u1_armel-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEElFiH1oZRZh1t4FSiXVp1sEH/1mIFAmn4hgoACgkQXVp1sEH/ 1mL7uxAAlGGu1ocDbJbp2zho8LxlkLes00RXGlh0FhGSWpgMTsb52uDzp2XVMNN5 Dz/JMt5uX5voopzqVsnYpCXzMd2j01RM4DVzuGKZLDKZikJsR+8L8O5bHMwp0Rje qhvyG+w+Q+JQLZHvx+RlNNqXSv19oOe766MP/T2ncYao7H+b7rJ0bfoxhzl3n5Mf 3x8PS3I8sBGE/Y830TKykEbDA37aiIlaSDI1k2zNg9TPfkx5vu6ec303YqG/JGtK 40Dyk9cYfF5qZq0ArlYgMUrjrur2tpGEG0zfeBKlCt2cPiP3AdMDZ1RsxrL+U33f 8uroJpo8VnoDp5M6HN/DvRfJS0Zrsm+Ps4ZeXQscRf4kN9d3CDdwbc/gI8OQ7SlR sxVURfs6lFw7qyHKraqo5cCQ4/hXbLK6I6q70c7bWHJl67KBlqAApmrWQHNTevH+ g36+sCLduww9gYe2KIDWwh5e342ljZCkwi780MoOpHpquR4qHnXxiBIHBvP3u6VQ gqi+g5z1j4T2mUUAyzfgD1w9XmHba/k+u9W8AQYsB+KGam1swZTNleFldslarYo6 87pIbs7TzMPa31hX+iSSmJ1TKCNXv3F3K2Nus/01ZTCuPdPR1/yWrmsJRrEKTX0n on0FH9+tSCD+3Z/uaZKX46OPTGe3HsNjZtrQYEqYKkS0WzJuEro= =4TXe -----END PGP SIGNATURE-----