-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 02 May 2026 18:50:46 +0200 Source: dnsmasq Binary: dnsmasq-base dnsmasq-base-dbgsym dnsmasq-base-lua dnsmasq-base-lua-dbgsym dnsmasq-utils dnsmasq-utils-dbgsym Architecture: i386 Version: 2.91-1+deb13u1 Distribution: trixie-security Urgency: high Maintainer: amd64 / i386 Build Daemon (x86-csail-01) Changed-By: Sven Geuer Description: dnsmasq-base - Small caching DNS proxy and DHCP/TFTP server - executable dnsmasq-base-lua - Small caching DNS proxy and DHCP/TFTP server - executable, Lua-en dnsmasq-utils - Utilities for manipulating DHCP leases Changes: dnsmasq (2.91-1+deb13u1) trixie-security; urgency=high . * d/p/*: - CVE-2026-2291.patch: Fix buffer overflow in struct bigname. - CVE-2026-4890.patch: Fix NSEC bitmap parsing infinite loop. - CVE-2026-4891.patch: Verify rdlen field in RRSIG packets. - CVE-2026-4892.patch: Fix buffer overflow in helper.c with large CLIDs. - CVE-2026-4893.patch: Fix broken client subnet validation. - CVE-2026-5172.patch: Fix buffer overflow vulnerability in extract_addresses(). Checksums-Sha1: c5a8caf718eba224da6617b877e803740048a089 545936 dnsmasq-base-dbgsym_2.91-1+deb13u1_i386.deb cb540b7917b412d853469d1a7387673ed4f93b32 549204 dnsmasq-base-lua-dbgsym_2.91-1+deb13u1_i386.deb 4e171b5088ed292e9ef4b1b6f25d1b9054f7f052 519072 dnsmasq-base-lua_2.91-1+deb13u1_i386.deb a0c60c4b26cb3d3648084ae625e80b4713a5391b 517004 dnsmasq-base_2.91-1+deb13u1_i386.deb abc8e83a89f8d5062efeb6fce47bc23630929ce5 27876 dnsmasq-utils-dbgsym_2.91-1+deb13u1_i386.deb e56552491053abc5f759b12bfb132d903df418ba 63152 dnsmasq-utils_2.91-1+deb13u1_i386.deb e766858f4e959e85cc34dcf2cb45de5a75f7f1a1 8197 dnsmasq_2.91-1+deb13u1_i386-buildd.buildinfo Checksums-Sha256: 63132860339a97e84d485a40f9d759dc1793cd7af14e9f602f05db3ec44a3fd9 545936 dnsmasq-base-dbgsym_2.91-1+deb13u1_i386.deb e2b301bed6c3b84ce7bdb777d30c39c419605535e4dbdb121ebe250ca2e1b7e1 549204 dnsmasq-base-lua-dbgsym_2.91-1+deb13u1_i386.deb 2beda313fad0c769fd3676ff2d252ec68b57589ae9ba5f8221a146fc9cb1bebb 519072 dnsmasq-base-lua_2.91-1+deb13u1_i386.deb 5c5b0e08ffad99ebfab4ed41e92045f0c31c50516f815f7eecd4088764c74267 517004 dnsmasq-base_2.91-1+deb13u1_i386.deb 53e172b3334963d74d6d9746963a5adbed1cb07fefcd3eca118ce56d2e45d758 27876 dnsmasq-utils-dbgsym_2.91-1+deb13u1_i386.deb 19d626d510a923cd46b33f9f8f66ef694774278673fdc49e1caa676bb3687152 63152 dnsmasq-utils_2.91-1+deb13u1_i386.deb 88269396630bdba206984feb875926b6c4f6550460aa388566cf81283f1e33ed 8197 dnsmasq_2.91-1+deb13u1_i386-buildd.buildinfo Files: 8d7d8c5286aab21254a0a4f311db4655 545936 debug optional dnsmasq-base-dbgsym_2.91-1+deb13u1_i386.deb 16b6404c3d5f1450c6bbca99ef8643e5 549204 debug optional dnsmasq-base-lua-dbgsym_2.91-1+deb13u1_i386.deb 83af4fb6b81d65437cba970474c8ed09 519072 net optional dnsmasq-base-lua_2.91-1+deb13u1_i386.deb 1ea739250d60935a27eb8fda59bc5f7a 517004 net optional dnsmasq-base_2.91-1+deb13u1_i386.deb 37aae8125e18d4241c8251711e3c4245 27876 debug optional dnsmasq-utils-dbgsym_2.91-1+deb13u1_i386.deb c0a0b0c59a240e6a759e58dd8edbf0b5 63152 net optional dnsmasq-utils_2.91-1+deb13u1_i386.deb 22a3968826bbf238d8e28a726c3f52ed 8197 net optional dnsmasq_2.91-1+deb13u1_i386-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEBDWXQb2umOtH4DRpYg9P9sm2dfEFAmn4hYUACgkQYg9P9sm2 dfHo0A//dUZF9st0iJkA7P8hY5slnDET+KKHMmy0upV6bHHgRc5cMYIpiDIG8kIA GpvS8g9nvyqyljY633wZebaR3nTY6lCCjYKdzVfo+a15S5RETtilOG1DGTayRpQi AeCrQ5bIm3uO4seDDsJJBRcXhhR0GWLO9SPi0b4rYzjLMxasjZKsDMIpcKkRYRp1 E7FeZk42/+kxlGSnPvkqu4xm+p35PO5vCHr5bUGV9evX0qDLWZWl7IpJbn8yiwrz BzPa8hlFd1oUS2fj4yd+hh5JvBauVHcomgg716Dqq2bfE/UPzCgcpUutwbsOsWWx uYBOoII87wdR6zWu7zW1xuBOz3VtZSIDM+XoDRr6FWNvd43tzKBsfJ00kx46OBGQ h+KSI81E6XNPlHH6HJykgOJ7sD4k7/bad/ub9A8baKWvw9R96ni8+oXtczj1rfCx rdyDJQcWG97lKTZK0otXDpT4PrTipGfaa9Sl3t9CHGmsWXjGd2nvwDIhknYvknZZ RZQg2SAFnaPTWWQ5yS46jS7sF5ngBYzC9FUnnPt8ktF+x438mSbEQSSDGZvZWJRB MyBS3UHt063sGDgzSUudyVkyWoXcZmqZ+p3z/UNWt7bNY5rdf6E8hsU1cjzysPZJ tyjuXKdsN5PL9A4oRiGvNSim5SCp9GhFpWIt2dBndm75kFrmUPw= =nhG+ -----END PGP SIGNATURE-----