-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 02 May 2026 18:37:29 +0200 Source: dnsmasq Binary: dnsmasq-base dnsmasq-base-dbgsym dnsmasq-base-lua dnsmasq-base-lua-dbgsym dnsmasq-utils dnsmasq-utils-dbgsym Architecture: ppc64el Version: 2.90-4~deb12u2 Distribution: bookworm-security Urgency: high Maintainer: ppc64el Build Daemon (ppc64el-osuosl-02) Changed-By: Sven Geuer Description: dnsmasq-base - Small caching DNS proxy and DHCP/TFTP server - executable dnsmasq-base-lua - Small caching DNS proxy and DHCP/TFTP server - executable, Lua-en dnsmasq-utils - Utilities for manipulating DHCP leases Changes: dnsmasq (2.90-4~deb12u2) bookworm-security; urgency=high . * d/p/*: - CVE-2026-2291.patch: Fix buffer overflow in struct bigname. - CVE-2026-4890.patch: Fix NSEC bitmap parsing infinite loop. - CVE-2026-4891.patch: Verify rdlen field in RRSIG packets. - CVE-2026-4892.patch: Fix buffer overflow in helper.c with large CLIDs. - CVE-2026-4893.patch: Fix broken client subnet validation. - CVE-2026-5172.patch: Fix buffer overflow vulnerability in extract_addresses(). Checksums-Sha1: 6f9df9881ec6c2557d20af3b224552c1bc556d3b 589984 dnsmasq-base-dbgsym_2.90-4~deb12u2_ppc64el.deb d44b67fb75a5bf823891aa3ebc9dfeb5e8383751 593280 dnsmasq-base-lua-dbgsym_2.90-4~deb12u2_ppc64el.deb 9e2f6955f4c011c8d015e38a465824850492d343 511196 dnsmasq-base-lua_2.90-4~deb12u2_ppc64el.deb 722c6a280c53e436a6fa17369ac2b78bd8ca0080 509680 dnsmasq-base_2.90-4~deb12u2_ppc64el.deb 23c20b36df9846258d66b7781a52527d4fbec273 29196 dnsmasq-utils-dbgsym_2.90-4~deb12u2_ppc64el.deb b67e7fe089254e6d290add929fd7811cad3471ae 60120 dnsmasq-utils_2.90-4~deb12u2_ppc64el.deb 276771533bf713721260a00ecff3c3e79339c6ec 8740 dnsmasq_2.90-4~deb12u2_ppc64el-buildd.buildinfo Checksums-Sha256: 6a4dd32f676faa67ed77af612c79ab16eecd49a77a9f2fedd1b07c2a9c33932d 589984 dnsmasq-base-dbgsym_2.90-4~deb12u2_ppc64el.deb bd60f6aabdb0771a6c36d4cefe96de87eb84f1062aab70f15c38a7a3b4e98bb2 593280 dnsmasq-base-lua-dbgsym_2.90-4~deb12u2_ppc64el.deb 978e5af51f9204d82c36540cd01684aeddf349dae887c9bf6e268a4509756fbc 511196 dnsmasq-base-lua_2.90-4~deb12u2_ppc64el.deb 07485b89d360b142a9133f9af64dd38e0e08b56f638701fa266e08df415d5e72 509680 dnsmasq-base_2.90-4~deb12u2_ppc64el.deb b7ee67e560870d1a233582b04df24f23831babb1fd9f10296d4d99da6e69de03 29196 dnsmasq-utils-dbgsym_2.90-4~deb12u2_ppc64el.deb 86e54df1c01a36944ecb936485796fc44348cedb66e375d93937bcd438f81399 60120 dnsmasq-utils_2.90-4~deb12u2_ppc64el.deb 93b442bae9f39666e892942b684589505a94658134709c4ac759beefb8860ea2 8740 dnsmasq_2.90-4~deb12u2_ppc64el-buildd.buildinfo Files: 5cc39dda89c723d873f7916a8b305492 589984 debug optional dnsmasq-base-dbgsym_2.90-4~deb12u2_ppc64el.deb c3cbc436e3547e702a224fb61de0c1c5 593280 debug optional dnsmasq-base-lua-dbgsym_2.90-4~deb12u2_ppc64el.deb 6a4c0d219e7e517fce4f0de886badc58 511196 net optional dnsmasq-base-lua_2.90-4~deb12u2_ppc64el.deb ad20a35673165c2f412516c6bd77e2d2 509680 net optional dnsmasq-base_2.90-4~deb12u2_ppc64el.deb 489cf8c1d188c1c3a048af7fff553161 29196 debug optional dnsmasq-utils-dbgsym_2.90-4~deb12u2_ppc64el.deb 614a0a58e900bf5f43031e7e874f03ea 60120 net optional dnsmasq-utils_2.90-4~deb12u2_ppc64el.deb 3b5a623e8a9eca5b23e50578053102fa 8740 net optional dnsmasq_2.90-4~deb12u2_ppc64el-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE9ibmwdV9gdKNbK7oV8ucRsMTpuMFAmn4hScACgkQV8ucRsMT puNOIRAAgae7YiAbt8prZRwIRjh1Hb9wvJ+9xDSP7hd2AAA9vvggRzfbTua0rliB RhlbxVuNwI+clRKXshFblLqywClE9yqpS8FLk6TQ35+0y0KNqrMYd0w5h7MdEZKu j3orexpaqB2UAY9Tf79rukI3lt2lu4AdGXyLiEB+WUXqphKqShWxTSR8YrrCJjCq BhNHFRhJzANiyap2E89GIX79fEN8fK+4pTW5Qd5wHW8ryzEqjCKxAMHRqMuVSMxN ePW7qJ3g+35/imoGECehlYWKcWAqcjy5M4DNkwu5ma9wJ+7cr3+XwIr6mQM8Kx9y HCIrf4GMCVPE8tC2rCTH8xzn4C8Gjswl3ZZy8oEwNLjMprHNpmJkzFKZ6gjXhUlY vO9Q21U35Pf/vuKZrP6cp0d9GjIloGO6x8yasLRbb0kTMs8SDahCsY4QYrZxLcW5 iqf6M1H6nnMZIwKuVp55YdqrL9debOwpGQJRaSQV1llr+T3BDHc5e0W7QLd2hx3B ZErapi7M/9LEoxj932L26B4WYI7S/so0l1j3u5qxQB5miEimCRfl1S/wlw0KCqDK ++y7s/P1uhYi5G8iChieviyTBMB5KGqSUecc6yjrD+Btn+FTOBvDFYGjIrww9Hbf UDquA88lloLCB3WiWlUeuzAbk90emOOKnhXbjg6VDoBBlmCglhw= =rpKr -----END PGP SIGNATURE-----