-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 02 May 2026 18:37:29 +0200
Source: dnsmasq
Binary: dnsmasq-base dnsmasq-base-dbgsym dnsmasq-base-lua dnsmasq-base-lua-dbgsym dnsmasq-utils dnsmasq-utils-dbgsym
Architecture: mipsel
Version: 2.90-4~deb12u2
Distribution: bookworm-security
Urgency: high
Maintainer: mipsel Build Daemon (mipsel-osuosl-04) <buildd_mips64el-mipsel-osuosl-04@buildd.debian.org>
Changed-By: Sven Geuer <sge@debian.org>
Description:
 dnsmasq-base - Small caching DNS proxy and DHCP/TFTP server - executable
 dnsmasq-base-lua - Small caching DNS proxy and DHCP/TFTP server - executable, Lua-en
 dnsmasq-utils - Utilities for manipulating DHCP leases
Changes:
 dnsmasq (2.90-4~deb12u2) bookworm-security; urgency=high
 .
   * d/p/*:
     - CVE-2026-2291.patch: Fix buffer overflow in struct bigname.
     - CVE-2026-4890.patch: Fix NSEC bitmap parsing infinite loop.
     - CVE-2026-4891.patch: Verify rdlen field in RRSIG packets.
     - CVE-2026-4892.patch: Fix buffer overflow in helper.c with large CLIDs.
     - CVE-2026-4893.patch: Fix broken client subnet validation.
     - CVE-2026-5172.patch: Fix buffer overflow vulnerability in
       extract_addresses().
Checksums-Sha1:
 e7339a6b88b8119419bef4b8a33a979d16fafa68 589712 dnsmasq-base-dbgsym_2.90-4~deb12u2_mipsel.deb
 02c9975b6eca472365a253e7fbb272ac3a8e76e7 593020 dnsmasq-base-lua-dbgsym_2.90-4~deb12u2_mipsel.deb
 62ee2f96278e06b69c3e820c4131e33f0731e82b 483128 dnsmasq-base-lua_2.90-4~deb12u2_mipsel.deb
 e22f5ea0c895dc3ce2d9f7da7d2d50bf01c5f148 481584 dnsmasq-base_2.90-4~deb12u2_mipsel.deb
 bd23700033b4533ca06b93666a079da0873aeffb 28916 dnsmasq-utils-dbgsym_2.90-4~deb12u2_mipsel.deb
 e01afa6f3aade35f0858f687d29de512928e6a50 59928 dnsmasq-utils_2.90-4~deb12u2_mipsel.deb
 c584330886f8e59af202d47c69c2d41989339cf6 8497 dnsmasq_2.90-4~deb12u2_mipsel-buildd.buildinfo
Checksums-Sha256:
 007f1896936a583514334b3aa785856e9dec6c50db137a7e2d8201fa927729ba 589712 dnsmasq-base-dbgsym_2.90-4~deb12u2_mipsel.deb
 1376b9221995da6bfb84f02279afb4bcaec1ff47c6d08a4a49495d366e5d4d24 593020 dnsmasq-base-lua-dbgsym_2.90-4~deb12u2_mipsel.deb
 3f4597b4f8950a662838efa527b5e016af434b9e0990eeebe8f689bb64e9a2a5 483128 dnsmasq-base-lua_2.90-4~deb12u2_mipsel.deb
 2b738b62d49b3513121e0cc19b550c4b7461b42e650aab07b0fd953e5bdf856f 481584 dnsmasq-base_2.90-4~deb12u2_mipsel.deb
 509d87fbb36b412d4798ba432cc89579b38e6b06ce988c7e376bbecfa856c2d4 28916 dnsmasq-utils-dbgsym_2.90-4~deb12u2_mipsel.deb
 2d96abb2a20ed8a5d703f4be2ede0c5e01f5dd9776b81994fa390e1c5b50565a 59928 dnsmasq-utils_2.90-4~deb12u2_mipsel.deb
 05e5f555b81377aadebcaea8442aa7a28856a7de26a07b791bf2db04c26190d0 8497 dnsmasq_2.90-4~deb12u2_mipsel-buildd.buildinfo
Files:
 70eacc12bedbeb8532ea6600381122e9 589712 debug optional dnsmasq-base-dbgsym_2.90-4~deb12u2_mipsel.deb
 57cba2baa30c40ad005ef60c6dfb6bb4 593020 debug optional dnsmasq-base-lua-dbgsym_2.90-4~deb12u2_mipsel.deb
 a9f84b5108791b051f61180054449020 483128 net optional dnsmasq-base-lua_2.90-4~deb12u2_mipsel.deb
 cd48aaf197a92d46b10187152ca72637 481584 net optional dnsmasq-base_2.90-4~deb12u2_mipsel.deb
 25939dfa8a8ec657b9dbb65492bcb2eb 28916 debug optional dnsmasq-utils-dbgsym_2.90-4~deb12u2_mipsel.deb
 36db765510d8448f45a7017a7cfca590 59928 net optional dnsmasq-utils_2.90-4~deb12u2_mipsel.deb
 cf056a7952fe38383a59753c298707ae 8497 net optional dnsmasq_2.90-4~deb12u2_mipsel-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEyYUQCyzsgu940OiVpwP2OD8jZaoFAmn4hhgACgkQpwP2OD8j
ZapWmxAAst+PU7WgNRHvRItAz77nzXmel6HcoE4lpDK8iD1QnRUNiqXG1d81EuEM
GIXb2OY8EfGQJeA0SKeWfo4v3a1nyA41OI9q4xJuuYbEu2ZEzy4wDJA+LS0kRRRE
VMahDOJwmBMYzVcQKzcaamhybV1gI1XfgqYDsN99gvJsC70obkRQYJcToXymrbMi
n+nMfutWeqGmz0wfCtA7vomvwdXQbHJknbvKTTojTdqQYSyQT2nhh5xGe7wWe7bd
/cKAY2ophBf55qCid5p8l+IR9zLLCZcdkuNlyzuwVDO0f8FU4azoCEPmv4TNdnJt
EF1NAc9T6ZYwt3IRsGQdmb6QNZNrCwpOzzT4zbi2isz3+a9BXIdD8SEHOlwYkULd
o6aH1p2mVNkMKhSfOiplJ6fZXOUOiwUYKGux3qUmPeC7JKLIXHVgAz0avy9bmBwX
w9yxTxwUykBoNGtMt5pcgGt3y+DOVP223tKHPHOk079OA2MuD4sUgFzsYXC87MZ/
JyB1zROcBgRfAP4Ef1cUN2TVSECn2ghqtSt07bXrH3chq8gTMluC5ftMZ/VTvDjD
uPo8PTZEGb7pD7Rtv0HI89MMuzS5nmXQJ3eFjenapJpSTRg9so2xnQQxHm0VZIvf
DpaHSQiBCkxEvAupVuIeWiJb5eiUkOvmTiPmRjJjO1Mt2KG+RuU=
=9qZH
-----END PGP SIGNATURE-----