-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 02 May 2026 18:37:29 +0200
Source: dnsmasq
Binary: dnsmasq-base dnsmasq-base-dbgsym dnsmasq-base-lua dnsmasq-base-lua-dbgsym dnsmasq-utils dnsmasq-utils-dbgsym
Architecture: armel
Version: 2.90-4~deb12u2
Distribution: bookworm-security
Urgency: high
Maintainer: armel Build Daemon (arm-conova-03) <buildd_arm64-arm-conova-03@buildd.debian.org>
Changed-By: Sven Geuer <sge@debian.org>
Description:
 dnsmasq-base - Small caching DNS proxy and DHCP/TFTP server - executable
 dnsmasq-base-lua - Small caching DNS proxy and DHCP/TFTP server - executable, Lua-en
 dnsmasq-utils - Utilities for manipulating DHCP leases
Changes:
 dnsmasq (2.90-4~deb12u2) bookworm-security; urgency=high
 .
   * d/p/*:
     - CVE-2026-2291.patch: Fix buffer overflow in struct bigname.
     - CVE-2026-4890.patch: Fix NSEC bitmap parsing infinite loop.
     - CVE-2026-4891.patch: Verify rdlen field in RRSIG packets.
     - CVE-2026-4892.patch: Fix buffer overflow in helper.c with large CLIDs.
     - CVE-2026-4893.patch: Fix broken client subnet validation.
     - CVE-2026-5172.patch: Fix buffer overflow vulnerability in
       extract_addresses().
Checksums-Sha1:
 e6ed7be8b68db78bb7778367e24f02a5ffc86982 561452 dnsmasq-base-dbgsym_2.90-4~deb12u2_armel.deb
 cf56c7ed1d863f925d86926457b9c00c3c8804ed 564768 dnsmasq-base-lua-dbgsym_2.90-4~deb12u2_armel.deb
 7d6b5d4f3ec8a40b793f37d6a2db291f75dc98fa 462096 dnsmasq-base-lua_2.90-4~deb12u2_armel.deb
 44e1e11add223c39f293cfcbdb189f930481fe2d 460492 dnsmasq-base_2.90-4~deb12u2_armel.deb
 f6cfa2a250e68fed2a127bd2f7facf1400406933 29368 dnsmasq-utils-dbgsym_2.90-4~deb12u2_armel.deb
 2159edfa3c98bacc40be98e9954d8bbe6670092d 59144 dnsmasq-utils_2.90-4~deb12u2_armel.deb
 70170995556fe4860efc89eda201a2018a600c51 8561 dnsmasq_2.90-4~deb12u2_armel-buildd.buildinfo
Checksums-Sha256:
 8d5efeb8cb9c9ec53ebf92226ab89625b3a92fb37deb9bccee895b562cb4295a 561452 dnsmasq-base-dbgsym_2.90-4~deb12u2_armel.deb
 01941934d66cd865ba57a4e54e1576fb4000d291d219ef53e93a774133917d13 564768 dnsmasq-base-lua-dbgsym_2.90-4~deb12u2_armel.deb
 6797b997f317f355eb8b27ad565f015fb0b45935d63a655e907008715ca8e61e 462096 dnsmasq-base-lua_2.90-4~deb12u2_armel.deb
 04ad4fec16052865229873f06c81c62b454dbf6acbf325d2920a6902d607e219 460492 dnsmasq-base_2.90-4~deb12u2_armel.deb
 d6e13ffa42439a56580eee9569b6556e9015d9470979c2d5b4b6c5a9070d36f3 29368 dnsmasq-utils-dbgsym_2.90-4~deb12u2_armel.deb
 3a908966a185c4488a61775ec82016e1d74cef643c46ac7250fbde83fe815e8e 59144 dnsmasq-utils_2.90-4~deb12u2_armel.deb
 d0025fc414cf0027b725edd5b2b5930c263b8559c605bf36fb7627a106bb6a10 8561 dnsmasq_2.90-4~deb12u2_armel-buildd.buildinfo
Files:
 d5e8020d8bbf7905c1cf1291a7380a73 561452 debug optional dnsmasq-base-dbgsym_2.90-4~deb12u2_armel.deb
 2847bf4a7e882543bea5b5c1f383bceb 564768 debug optional dnsmasq-base-lua-dbgsym_2.90-4~deb12u2_armel.deb
 582a856099889e4101f444b51fdfad12 462096 net optional dnsmasq-base-lua_2.90-4~deb12u2_armel.deb
 0311b893c8bd8f236feeda0f6a1187b4 460492 net optional dnsmasq-base_2.90-4~deb12u2_armel.deb
 95188bf081c4113179f751602dd38ae9 29368 debug optional dnsmasq-utils-dbgsym_2.90-4~deb12u2_armel.deb
 8beaaa4dd9924638e937f9c091b170ed 59144 net optional dnsmasq-utils_2.90-4~deb12u2_armel.deb
 0084ffe53cf36c2fe29fad7c39985c24 8561 net optional dnsmasq_2.90-4~deb12u2_armel-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----
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=W5KJ
-----END PGP SIGNATURE-----