-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 02 May 2026 18:50:46 +0200 Source: dnsmasq Binary: dnsmasq-base dnsmasq-base-dbgsym dnsmasq-base-lua dnsmasq-base-lua-dbgsym dnsmasq-utils dnsmasq-utils-dbgsym Architecture: arm64 Version: 2.91-1+deb13u1 Distribution: trixie-security Urgency: high Maintainer: arm64 Build Daemon (arm-ubc-02) Changed-By: Sven Geuer Description: dnsmasq-base - Small caching DNS proxy and DHCP/TFTP server - executable dnsmasq-base-lua - Small caching DNS proxy and DHCP/TFTP server - executable, Lua-en dnsmasq-utils - Utilities for manipulating DHCP leases Changes: dnsmasq (2.91-1+deb13u1) trixie-security; urgency=high . * d/p/*: - CVE-2026-2291.patch: Fix buffer overflow in struct bigname. - CVE-2026-4890.patch: Fix NSEC bitmap parsing infinite loop. - CVE-2026-4891.patch: Verify rdlen field in RRSIG packets. - CVE-2026-4892.patch: Fix buffer overflow in helper.c with large CLIDs. - CVE-2026-4893.patch: Fix broken client subnet validation. - CVE-2026-5172.patch: Fix buffer overflow vulnerability in extract_addresses(). Checksums-Sha1: 6f4895fd59fde087cc6a924e374bf3b6952486e6 585480 dnsmasq-base-dbgsym_2.91-1+deb13u1_arm64.deb 340ad27ee9e16567631b2033549cdb0a50d062fa 588528 dnsmasq-base-lua-dbgsym_2.91-1+deb13u1_arm64.deb 888026a706d37eb27c5abe0537034a9f4c3ebfd6 484232 dnsmasq-base-lua_2.91-1+deb13u1_arm64.deb b5e3b77af1f6a46b422dc817066f667fb3789949 483948 dnsmasq-base_2.91-1+deb13u1_arm64.deb 6fb4d23562e0e68925fa1782f7322c1a1d0e7e62 29320 dnsmasq-utils-dbgsym_2.91-1+deb13u1_arm64.deb c2b45ead58e0db3f4ceffe9038002e659a96a890 62568 dnsmasq-utils_2.91-1+deb13u1_arm64.deb 31a91b81296719bd1a8b171cd0987989cacd2bdf 8298 dnsmasq_2.91-1+deb13u1_arm64-buildd.buildinfo Checksums-Sha256: 6e4f28b046e7e6f6f5c15b46698f6896f7254a7bbe3a3980af1a5c52473e36cb 585480 dnsmasq-base-dbgsym_2.91-1+deb13u1_arm64.deb 66ad2c2781c838961e2bf891204473b41fbe63b2000fd25fa2f53ca24282f5f3 588528 dnsmasq-base-lua-dbgsym_2.91-1+deb13u1_arm64.deb fe9d47ddd3e1349f4ca9180c02d728f18151ba5cd3a238e4b0ceca39fa4b4881 484232 dnsmasq-base-lua_2.91-1+deb13u1_arm64.deb 08c001309d073bd34692d9cb2f20f1627cbd87e47146a5bc5de9e0dd3fbf8722 483948 dnsmasq-base_2.91-1+deb13u1_arm64.deb 94b54e9ecbe31c6f81268cac7e0b9152f4eabdc920004cfcecf8ae53efa7a5b5 29320 dnsmasq-utils-dbgsym_2.91-1+deb13u1_arm64.deb 9a61a1d2bd9856f393932b3f383472ca67f09a5dd43f1e419db933aacd03685a 62568 dnsmasq-utils_2.91-1+deb13u1_arm64.deb 1df7be1b4014a5eb4bb2b4f441f06370be4a061b5b79fa7db2f4a5211f50e366 8298 dnsmasq_2.91-1+deb13u1_arm64-buildd.buildinfo Files: fb5d79417727344d393a2395df8c3c67 585480 debug optional dnsmasq-base-dbgsym_2.91-1+deb13u1_arm64.deb b225214cc2c87c7cb1bcd1e03563e2c9 588528 debug optional dnsmasq-base-lua-dbgsym_2.91-1+deb13u1_arm64.deb 88e9e952462e5d0f805a67c8ed050707 484232 net optional dnsmasq-base-lua_2.91-1+deb13u1_arm64.deb 73721ca1069064743b3597d4001ffbb9 483948 net optional dnsmasq-base_2.91-1+deb13u1_arm64.deb 11b1fbaa77856507f8b7b3ffc4ef7c34 29320 debug optional dnsmasq-utils-dbgsym_2.91-1+deb13u1_arm64.deb a1eb9bdca645dbbb5ea94447658410dc 62568 net optional dnsmasq-utils_2.91-1+deb13u1_arm64.deb d1bdfdfbe50b91cdce13358f5c667825 8298 net optional dnsmasq_2.91-1+deb13u1_arm64-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEJkN0BnKzGWWW6tS+G5VHrWJmwgcFAmn4hQwACgkQG5VHrWJm wgfOfg/+PSFq+Sv2XScR94JeIsQfhMHlRms51YoiJ6n5KaJlFcMKGSjL4IFR+Z1P H/Xft3/mDapEmn48YEowXdTLRZaUfWoN58aOsLUN2xE6Xe5AN0JNHOCsbkgTY9j7 WG/i2tF+JIDv6t4Beq0Fr4fk5VWmTj7uC83Nze4iXf9P1FIcDXkO1UCRpWMB7BUf IbC1ZYqFpq4IDv8ngcyniY4irr1MDvjMtNst0W67Z8ISVX9Wkf+mIaaqzR7HCBf4 hg8yUGsF8vQDCTgYrcFoSW6k2ZYut3nj7KOZQZF827YZlc7GycR+hdzKNpJ1JtSU SXdJuLKf+vOvaEf0KNiypT5fhlicA5i5agDhJu2fRwHRWDI7BJJLpBBF+9g9YbJm pnuw0rLikASLS3TuB5ukNrddevIQh3SjX7hwa04zbEy6oDYEjtG1VGazvqA+Ukqp npXlJj+Dl2lue4ckYLHzVrP5PfqzLrKfA/IWOuFPpAIcE/xzYNyzuGhwwcJkMfOf 1mO2NqIz4zH+w5ivgqFbTwkeE4By5um2j8aQ2nk+B1mFhrdodoTl7Y+7kJYS5Yon PFVF9B7pbStTEoS3sD6TDwBd9VAPk6XvdCT8gaF2aXdZ4g6717wpUa8OJEWNnazN pUkhQNOfhfOau8X0kODz1WB8wUG+rP8WiUJCL9x+33OFVj5Oh5I= =rzZC -----END PGP SIGNATURE-----