-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 02 May 2026 18:50:46 +0200 Source: dnsmasq Binary: dnsmasq dnsmasq-base dnsmasq-base-dbgsym dnsmasq-base-lua dnsmasq-base-lua-dbgsym dnsmasq-utils dnsmasq-utils-dbgsym Architecture: source amd64 all Version: 2.91-1+deb13u1 Distribution: trixie-security Urgency: high Maintainer: Simon Kelley <[email protected]> Changed-By: Sven Geuer <[email protected]> Description: dnsmasq - Small caching DNS proxy and DHCP/TFTP server - system daemon dnsmasq-base - Small caching DNS proxy and DHCP/TFTP server - executable dnsmasq-base-lua - Small caching DNS proxy and DHCP/TFTP server - executable, Lua-en dnsmasq-utils - Utilities for manipulating DHCP leases Changes: dnsmasq (2.91-1+deb13u1) trixie-security; urgency=high . * d/p/*: - CVE-2026-2291.patch: Fix buffer overflow in struct bigname. - CVE-2026-4890.patch: Fix NSEC bitmap parsing infinite loop. - CVE-2026-4891.patch: Verify rdlen field in RRSIG packets. - CVE-2026-4892.patch: Fix buffer overflow in helper.c with large CLIDs. - CVE-2026-4893.patch: Fix broken client subnet validation. - CVE-2026-5172.patch: Fix buffer overflow vulnerability in extract_addresses(). Checksums-Sha1: 42b36e603e6b547f16ac9b9b9ef2a69e25aae62c 2421 dnsmasq_2.91-1+deb13u1.dsc f4860fd0218487a552427db55858efae5048bd61 850169 dnsmasq_2.91.orig.tar.gz 6b2f5532c39c60150bbf918bad09f0817691a637 36880 dnsmasq_2.91-1+deb13u1.debian.tar.xz b3fad9b273e10915ef87101c5f58830ffa58404b 596748 dnsmasq-base-dbgsym_2.91-1+deb13u1_amd64.deb 7db1d5c3a4267880887c19248db2100d3a41189c 599544 dnsmasq-base-lua-dbgsym_2.91-1+deb13u1_amd64.deb 4ec0a0eec4f5be0b276b06e3ceed3eefea6ba053 509268 dnsmasq-base-lua_2.91-1+deb13u1_amd64.deb 22ea2a0db717aa5d737f6fd35da12e9a850c6aa2 507284 dnsmasq-base_2.91-1+deb13u1_amd64.deb fdd6c0bf054ba116b9fe19a1b5faab18c3938b1a 29104 dnsmasq-utils-dbgsym_2.91-1+deb13u1_amd64.deb 4ca383e95f0741ca174a3387b70a23cc7854e46d 62896 dnsmasq-utils_2.91-1+deb13u1_amd64.deb 8a386497079a0a2abee49790f4256e83cc25d770 69688 dnsmasq_2.91-1+deb13u1_all.deb d275611ed8d1b9df2a886823202360d58cc13419 8785 dnsmasq_2.91-1+deb13u1_amd64.buildinfo Checksums-Sha256: aee32c7ee792d7aff9fd35557dcdcd546d560749f1efd43b1227de286944c52e 2421 dnsmasq_2.91-1+deb13u1.dsc 2d26a048df452b3cfa7ba05efbbcdb19b12fe7a0388761eb5d00938624bd76c8 850169 dnsmasq_2.91.orig.tar.gz df1bda70a33f15cc1cc028c640311a61b9c2b1dc6ab9f412c923359f90d1f6dc 36880 dnsmasq_2.91-1+deb13u1.debian.tar.xz dcce786ca8fb1bb7ee81a04aa42c861f6bd4880dd9e2345eac108375b7db8aeb 596748 dnsmasq-base-dbgsym_2.91-1+deb13u1_amd64.deb f35ede0b15daa2026420e534d31e988f5639931bcbe60bfab6d4d95bd19dc30d 599544 dnsmasq-base-lua-dbgsym_2.91-1+deb13u1_amd64.deb 4d992e2a672df7399cc5b81a8c225abd9978f20908439ff5312b2780b23e277d 509268 dnsmasq-base-lua_2.91-1+deb13u1_amd64.deb 32fe2686b0adbe31dbedfadeea7eee8e47785e0ab39ffa9f655ca1bd7ba25d55 507284 dnsmasq-base_2.91-1+deb13u1_amd64.deb ec66a1974532e2125308aadc81bce520b7442bb0983b0ddbf7ab3aa98d4ca340 29104 dnsmasq-utils-dbgsym_2.91-1+deb13u1_amd64.deb 01deb8f1ef96ec5f44d338f081dd949629c589eac1fde828eb8279e866d8d55a 62896 dnsmasq-utils_2.91-1+deb13u1_amd64.deb 89620e344ada8405e904af3bb573ee40edb848761b79e01a9ea1f51fa9134fb8 69688 dnsmasq_2.91-1+deb13u1_all.deb 97eace96161378e9c5022232f58f2878fd51491f31f582765cd13f1cb48cd0f0 8785 dnsmasq_2.91-1+deb13u1_amd64.buildinfo Files: 49f737555dc33d16625fa0cb0fc105dd 2421 net optional dnsmasq_2.91-1+deb13u1.dsc 66e227a971ec29299f18274251440571 850169 net optional dnsmasq_2.91.orig.tar.gz 285a883eb799c259378dedd92d88dd8e 36880 net optional dnsmasq_2.91-1+deb13u1.debian.tar.xz c3fb1afd01773a9128d1e21979021de9 596748 debug optional dnsmasq-base-dbgsym_2.91-1+deb13u1_amd64.deb 11948ec276436e8b2bcff562794c0053 599544 debug optional dnsmasq-base-lua-dbgsym_2.91-1+deb13u1_amd64.deb 3af8f9fcb86e5853132b7e2802d7a502 509268 net optional dnsmasq-base-lua_2.91-1+deb13u1_amd64.deb cbadc345f9b86485188e7343f25b8b04 507284 net optional dnsmasq-base_2.91-1+deb13u1_amd64.deb ca5c84df3d3dd5b8ceef935d8549122a 29104 debug optional dnsmasq-utils-dbgsym_2.91-1+deb13u1_amd64.deb 8a3f04f6e898e0614b49e15cb05def06 62896 net optional dnsmasq-utils_2.91-1+deb13u1_amd64.deb fa931811629a03cf5ad7c45faa8b7ae2 69688 net optional dnsmasq_2.91-1+deb13u1_all.deb af3b14f23a62b5686bfbcaaddec4e804 8785 net optional dnsmasq_2.91-1+deb13u1_amd64.buildinfo
-----BEGIN PGP SIGNATURE----- iQJDBAEBCgAtFiEEPfXoqkP8n9/QhvGVrfUO2vit1YUFAmn4gKIPHHNnZUBkZWJp YW4ub3JnAAoJEK31Dtr4rdWFshYP/3NXyNgbxthY3lsSY5atinTLy7N9sdoNe7G+ 64Nfw3w1eSSKvtRMZlRc/CdH6oMNvg6W9ILV732JUZBo4AYDa9v392PvP0ODvuMk 4EEOrH4AtXYCB8heOh4liQYzEXCgrW2gC8rV+fmG4r9dfO+z+hEYCV4GKzwIpWNN q+XMtwyAIOY3dp6I9wakO3ePHgVIWNiANa1bu7ssA0d0zUn1h2wgl5suicghq/Fs cBwl1YJz6arIXZnxp63ANs+RtQjFoN8T96AceFAeApj8nts6Xyn/2o5u4nWf7KpR ApqPitLYLBjTmtyhpG/V2sMCsMJ+6dBoKiG9NMlmE/gpKNXAc8u2jFN/0Jm7Thh+ 4JChDOlg31ec/M1xmUkJ5d8tuhwdyMf1N7GjhRMni7aMgI24QwcnXkXasZYvwKbF LE94YmJgxddfUNQlZfD37hGVKrOGBHdhq+9F9mvmy7PANjvnySDzjwkBqZXfQAzJ Qyn+HCe2gtJnQNAV2KBVcIL+hZsAlNzmvmb26v6kmyRb5EJK3gaWxWYpqpT4ihda xIyAsaAONtBt0qMZLQID7jR2dJOQjXWjhnBIIGJLcAEFungXQkiGAKXkRkemo5e7 Pkcv6ir0E6Z7cGwos6MT8zBuksr7ZFYLftp8gMMi+OTipdVUyqwXpnlNXY+x/FF7 LJBxjFD+ =zh55 -----END PGP SIGNATURE-----
pgp1djGAIHboZ.pgp
Description: PGP signature
