-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 02 May 2026 18:37:29 +0200 Source: dnsmasq Binary: dnsmasq-base dnsmasq-base-dbgsym dnsmasq-base-lua dnsmasq-base-lua-dbgsym dnsmasq-utils dnsmasq-utils-dbgsym Architecture: mips64el Version: 2.90-4~deb12u2 Distribution: bookworm-security Urgency: high Maintainer: mipsel Build Daemon (mipsel-osuosl-03) Changed-By: Sven Geuer Description: dnsmasq-base - Small caching DNS proxy and DHCP/TFTP server - executable dnsmasq-base-lua - Small caching DNS proxy and DHCP/TFTP server - executable, Lua-en dnsmasq-utils - Utilities for manipulating DHCP leases Changes: dnsmasq (2.90-4~deb12u2) bookworm-security; urgency=high . * d/p/*: - CVE-2026-2291.patch: Fix buffer overflow in struct bigname. - CVE-2026-4890.patch: Fix NSEC bitmap parsing infinite loop. - CVE-2026-4891.patch: Verify rdlen field in RRSIG packets. - CVE-2026-4892.patch: Fix buffer overflow in helper.c with large CLIDs. - CVE-2026-4893.patch: Fix broken client subnet validation. - CVE-2026-5172.patch: Fix buffer overflow vulnerability in extract_addresses(). Checksums-Sha1: 8e07ddce94110ba0bc66703bfcd6c453a61b83be 597760 dnsmasq-base-dbgsym_2.90-4~deb12u2_mips64el.deb df5a8900aebbdffd0957694f522235599a60df64 601848 dnsmasq-base-lua-dbgsym_2.90-4~deb12u2_mips64el.deb a061acbeed96173a84eca06ba8c7060d3da17453 483132 dnsmasq-base-lua_2.90-4~deb12u2_mips64el.deb 1426975023dfaba614970b33c5161d2ee944d23d 482108 dnsmasq-base_2.90-4~deb12u2_mips64el.deb 0c7864b241ade621dce2bdc06faf39f673b156fc 29376 dnsmasq-utils-dbgsym_2.90-4~deb12u2_mips64el.deb 31a9735346baab8643675e49cfeab18b351f5421 60152 dnsmasq-utils_2.90-4~deb12u2_mips64el.deb 45ae0078a1a14c80abb0c6fd2fa7ee6dcac28089 8544 dnsmasq_2.90-4~deb12u2_mips64el-buildd.buildinfo Checksums-Sha256: 1750da722f169d4163853eb4be9d405b9a9d82d3b4fee098cb6d9d6171b29897 597760 dnsmasq-base-dbgsym_2.90-4~deb12u2_mips64el.deb 28ed59061f062c18f534dda42a1e0116ca86b04ff8b387c6efa7bc8ff08120ef 601848 dnsmasq-base-lua-dbgsym_2.90-4~deb12u2_mips64el.deb a62aeaaaf5c27ec9269c336eceffacbb0d5ae16273ecd5ba7daf52f7953fe5b9 483132 dnsmasq-base-lua_2.90-4~deb12u2_mips64el.deb 5376febf0d0f767851c32bfbebe32435b14dff157e12919d0fb8522cc663b971 482108 dnsmasq-base_2.90-4~deb12u2_mips64el.deb d412cf65425b9b94bdd570fa0277ce1a9461d06c066baa77f99719fe3f4fe621 29376 dnsmasq-utils-dbgsym_2.90-4~deb12u2_mips64el.deb b8cef5935fff84d82bdec0a48947ec444fe44158281c353a564a71ade3b94519 60152 dnsmasq-utils_2.90-4~deb12u2_mips64el.deb ad42ee911c5cfd0efce7f22a9cc87fbe4f6caea28e9526b515cba7f1ade8b213 8544 dnsmasq_2.90-4~deb12u2_mips64el-buildd.buildinfo Files: 365778919cdc9b9a4589a0339da06f07 597760 debug optional dnsmasq-base-dbgsym_2.90-4~deb12u2_mips64el.deb e3a550585f3e73e785f9fcf55cda5ee4 601848 debug optional dnsmasq-base-lua-dbgsym_2.90-4~deb12u2_mips64el.deb 74f35d0941465e82aadae41ee66f96f2 483132 net optional dnsmasq-base-lua_2.90-4~deb12u2_mips64el.deb dcbe342490af270ecb7da9d6fbfe659b 482108 net optional dnsmasq-base_2.90-4~deb12u2_mips64el.deb f9a317f3ffb18c80ff7d677209fb280c 29376 debug optional dnsmasq-utils-dbgsym_2.90-4~deb12u2_mips64el.deb 4fc4d8bac09c370a5938fe6465f5a34a 60152 net optional dnsmasq-utils_2.90-4~deb12u2_mips64el.deb a1b980fe0f3713fb84e3629eee725b67 8544 net optional dnsmasq_2.90-4~deb12u2_mips64el-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE7sd7jtCtE5bBJ1Hx/qmHKZssfSAFAmn4hYwACgkQ/qmHKZss fSDJ1Q/7B8hqOPydW8y5+Cdqaewg12kqtPe8n19gLALlfaINB71bj9k/yWCcqqWW MlUQYzB4w33HvUNHT04BofXrEUZrKmt8Ql5wOOX2UeJRpnqol8/gz8Wd/Vn/w6jF NN2BPWlt73CvW2Lg8cym1g30Gv1iX7RNKobvuonhNNuWO4k0Jjvu2DXuNoEWO/wk U4kGK3ku2hKDRZAEmrw3bRfoHp8MkpGiEdNvKYTSBRFCRqZqo46R3PP9ET4CF7g5 xxICQBzAigNcyjIoD5ZebYY80x3DDm/3x/o13QillPxXDRyS+FjmLv/fIJGsFTSf 4Kdy+fVyLgpWM9mVOdeoipDwY9Wv8igfiywSJBETqDIOqjCD+c7GnhJDMNAW8bgu jKw6mtHXbdnCrnZeZOMN7AulAVCbIZzhHlipXkghHyDYjZFA/Y424wA70/0Mw1aN W5ToOHNhAOftNNy6GObMMevH2bqZx3suwYneuqMJrRzANvJl30mlPwaCPKLTPdZL GfDcBUJI0Sd9YgP5e/+mtaOiOE+S4MbPi9PpcBlmlr1aRviVKIVQulhBDHuB5sRc kILUOX2Nfj3kN0ExfBG1NMJhHu4Gmi8hx9UqsGBvSiyLSdc2DE1poC0lySDV0D7y lUI6jA46UBrzDfwcSDxMN1+x8lkH7rTTZkBsDtGgSqU7y7nyYW4= =8Z5C -----END PGP SIGNATURE-----