-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 02 May 2026 18:37:29 +0200
Source: dnsmasq
Binary: dnsmasq-base dnsmasq-base-dbgsym dnsmasq-base-lua dnsmasq-base-lua-dbgsym dnsmasq-utils dnsmasq-utils-dbgsym
Architecture: arm64
Version: 2.90-4~deb12u2
Distribution: bookworm-security
Urgency: high
Maintainer: arm64 Build Daemon (arm-conova-03) <buildd_arm64-arm-conova-03@buildd.debian.org>
Changed-By: Sven Geuer <sge@debian.org>
Description:
 dnsmasq-base - Small caching DNS proxy and DHCP/TFTP server - executable
 dnsmasq-base-lua - Small caching DNS proxy and DHCP/TFTP server - executable, Lua-en
 dnsmasq-utils - Utilities for manipulating DHCP leases
Changes:
 dnsmasq (2.90-4~deb12u2) bookworm-security; urgency=high
 .
   * d/p/*:
     - CVE-2026-2291.patch: Fix buffer overflow in struct bigname.
     - CVE-2026-4890.patch: Fix NSEC bitmap parsing infinite loop.
     - CVE-2026-4891.patch: Verify rdlen field in RRSIG packets.
     - CVE-2026-4892.patch: Fix buffer overflow in helper.c with large CLIDs.
     - CVE-2026-4893.patch: Fix broken client subnet validation.
     - CVE-2026-5172.patch: Fix buffer overflow vulnerability in
       extract_addresses().
Checksums-Sha1:
 2e91fa34aa108551b19aefe76ac33d15e9c0ead6 571164 dnsmasq-base-dbgsym_2.90-4~deb12u2_arm64.deb
 2ce234e956b49f29348665a61d3f70854cd978e2 574256 dnsmasq-base-lua-dbgsym_2.90-4~deb12u2_arm64.deb
 c7dbd0ae0648f254f17a004e5d86cbc4586271f5 474968 dnsmasq-base-lua_2.90-4~deb12u2_arm64.deb
 d50ec1ab06417fdb6c12d378197096d0cdca6043 472408 dnsmasq-base_2.90-4~deb12u2_arm64.deb
 cfeb7c1e0bb5f1944b4c1555821c76ddefe3904f 28752 dnsmasq-utils-dbgsym_2.90-4~deb12u2_arm64.deb
 02bba6a50949750e2619490ff12bb69359223222 59352 dnsmasq-utils_2.90-4~deb12u2_arm64.deb
 d437839466cb8a6e1f73b3213b2681e100f0066f 8719 dnsmasq_2.90-4~deb12u2_arm64-buildd.buildinfo
Checksums-Sha256:
 a8c5634870b68ede14ce0f29c42b0bbb93683788f7a8b23d89b134d1cf580847 571164 dnsmasq-base-dbgsym_2.90-4~deb12u2_arm64.deb
 7abfd8f545b8d7fc714f580cacb4bbe8b77a364add8d90547e60e789ce0c6267 574256 dnsmasq-base-lua-dbgsym_2.90-4~deb12u2_arm64.deb
 6284efdeae095df2470106564bd9e2fe03aebef678e68533129c6cfac4fc0122 474968 dnsmasq-base-lua_2.90-4~deb12u2_arm64.deb
 a9d000830572919976592e7a01ec4a304fb1bd7f52f8036fe87fc8786753c747 472408 dnsmasq-base_2.90-4~deb12u2_arm64.deb
 623d07c685527fe52543419d44906bcb6822d4440e6801ede099d95b0f1a79ff 28752 dnsmasq-utils-dbgsym_2.90-4~deb12u2_arm64.deb
 f161d1859cb72fad0172326ff17181fcbc73a6f6456d8729d2ccc6ed37cf21d7 59352 dnsmasq-utils_2.90-4~deb12u2_arm64.deb
 b2b3b279c214d4b9a1b74047deb2166dd3b93e650b0de948a8c1ace74dcfd935 8719 dnsmasq_2.90-4~deb12u2_arm64-buildd.buildinfo
Files:
 94c4912373abf9079e25c60e61fcef31 571164 debug optional dnsmasq-base-dbgsym_2.90-4~deb12u2_arm64.deb
 1c650b7f873b280b50fb07d6e4b9a167 574256 debug optional dnsmasq-base-lua-dbgsym_2.90-4~deb12u2_arm64.deb
 abaaa1fdfb7d27f92052aa06edbc263c 474968 net optional dnsmasq-base-lua_2.90-4~deb12u2_arm64.deb
 9c14eb25db2a0b65546142ae9f62b936 472408 net optional dnsmasq-base_2.90-4~deb12u2_arm64.deb
 f02ae73eff3c94b7d31d1f4184618e92 28752 debug optional dnsmasq-utils-dbgsym_2.90-4~deb12u2_arm64.deb
 6928ab5f021dcd38047e2559e36d055c 59352 net optional dnsmasq-utils_2.90-4~deb12u2_arm64.deb
 b60f33ea97a687d59911e2c34aa058eb 8719 net optional dnsmasq_2.90-4~deb12u2_arm64-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEElFiH1oZRZh1t4FSiXVp1sEH/1mIFAmn4hRwACgkQXVp1sEH/
1mJV8g/+LLyT36igOfEQR50TPfyPtPptnT/di/JQCFbyDduzuwrdH3Uqo0acD1eg
3u2RUcN6d11hgXoyH0v1y1sWmgObzcMq2MM2YdB0KNWjRvgrCB5fyhIkuZD657EF
2v9R5Ti9BEweAaZ487mlafq8PK/6kSmB5pmT0eaibD7ZUQp75PADkMQ7P2ASV9us
amI7x3a7YEfVOD/reHHyYFw2nRCdRu4vTIyhb4iUrrpfRbdxizNexEOf3zd47EJB
fH5tMbtbacCkwxDRPLDoLKxbsq+TFzLpxDwERBzzFT3MW31dVGM1CpkPN5yepd5u
ewm+G9hHw2J+m4RD7vlzQAnChF7KfUymUDil+1rb3i5c3bIXbcro+rGl1A8DM1K9
sKLmy8i8d5vS1Ey8z4OzeyTJ+7BuTSOI+/pMJjEbrMleNArEN8LAxlazToXfL/5T
qyLAnnu6lEdZY31pQBCF5UtuKpHtB8aYx3LtKwRWvjFjY4wa1BrUytDvH0m47QqF
GiUNFWQ9DlkzWTlE+HdVhMUrizUVnEhx7SQqgJEcXYUfqHWonrJskTqQ4mxtwSUm
QsuIJvqk3yNhchJ5BeyR/b26t8jByYNmHxgYV5+v0bhuhQwtmVR9K3o+SIVH+p6C
8rJf3ZrRavMuIovOvL41SkJJGWBXb9aGcg3L/ftabpp0UGsfE6U=
=5bNF
-----END PGP SIGNATURE-----