-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 02 May 2026 18:37:29 +0200
Source: dnsmasq
Binary: dnsmasq-base dnsmasq-base-dbgsym dnsmasq-base-lua dnsmasq-base-lua-dbgsym dnsmasq-utils dnsmasq-utils-dbgsym
Architecture: armhf
Version: 2.90-4~deb12u2
Distribution: bookworm-security
Urgency: high
Maintainer: armhf Build Daemon (arm-conova-01) <buildd_arm64-arm-conova-01@buildd.debian.org>
Changed-By: Sven Geuer <sge@debian.org>
Description:
 dnsmasq-base - Small caching DNS proxy and DHCP/TFTP server - executable
 dnsmasq-base-lua - Small caching DNS proxy and DHCP/TFTP server - executable, Lua-en
 dnsmasq-utils - Utilities for manipulating DHCP leases
Changes:
 dnsmasq (2.90-4~deb12u2) bookworm-security; urgency=high
 .
   * d/p/*:
     - CVE-2026-2291.patch: Fix buffer overflow in struct bigname.
     - CVE-2026-4890.patch: Fix NSEC bitmap parsing infinite loop.
     - CVE-2026-4891.patch: Verify rdlen field in RRSIG packets.
     - CVE-2026-4892.patch: Fix buffer overflow in helper.c with large CLIDs.
     - CVE-2026-4893.patch: Fix broken client subnet validation.
     - CVE-2026-5172.patch: Fix buffer overflow vulnerability in
       extract_addresses().
Checksums-Sha1:
 18da73b76944c9ee2665e651dc96947c30f7ba34 569340 dnsmasq-base-dbgsym_2.90-4~deb12u2_armhf.deb
 196403c1114c85bc7989a44e6e7af736ec7b8654 572864 dnsmasq-base-lua-dbgsym_2.90-4~deb12u2_armhf.deb
 5a6946bfcc79553e092fe97ece63b86bfb986786 464340 dnsmasq-base-lua_2.90-4~deb12u2_armhf.deb
 c6d282edc36b48f1aa67660ff70252113adf140e 462580 dnsmasq-base_2.90-4~deb12u2_armhf.deb
 a094eeff3383f796056ee0b81103d8298eaeb311 29268 dnsmasq-utils-dbgsym_2.90-4~deb12u2_armhf.deb
 948c54fae67668a55e0539d1840bf1fe172302d6 58840 dnsmasq-utils_2.90-4~deb12u2_armhf.deb
 5f883cfaedf42d0aa18037843f0f0c5fbc20bd6d 8563 dnsmasq_2.90-4~deb12u2_armhf-buildd.buildinfo
Checksums-Sha256:
 2469d08a971f36e60076dcb40d0fdddbb5716a97a29ea43049e6d0ad0dc6462b 569340 dnsmasq-base-dbgsym_2.90-4~deb12u2_armhf.deb
 d55e4d1432bd4aba1a1e4b5620b05a0560747ee6449a5605421cd5f8543689bd 572864 dnsmasq-base-lua-dbgsym_2.90-4~deb12u2_armhf.deb
 5a7a3dbc15d49a79c51977e7aabeef7457779395ef19ee3e17f361656a024719 464340 dnsmasq-base-lua_2.90-4~deb12u2_armhf.deb
 a50718b4f81c9f0b5dd99ab23629f8afb6b7f4b6959b429d38fa318c088d7335 462580 dnsmasq-base_2.90-4~deb12u2_armhf.deb
 ea364b9f95d4840ae4c5b06c343bda2a81c948f8e9f6e6636f99037ac2ec9167 29268 dnsmasq-utils-dbgsym_2.90-4~deb12u2_armhf.deb
 16b961a582d60df7672d9f6fab49567015a5a648e80319c305b9633e979f8c68 58840 dnsmasq-utils_2.90-4~deb12u2_armhf.deb
 6d40c35324f30fc23a85cd1865cf6e32073e91b585c426b80e837107da38d82c 8563 dnsmasq_2.90-4~deb12u2_armhf-buildd.buildinfo
Files:
 4523670722f295964a0dc3c2298b1979 569340 debug optional dnsmasq-base-dbgsym_2.90-4~deb12u2_armhf.deb
 7a514833361bd5778d39e6aa3f28a623 572864 debug optional dnsmasq-base-lua-dbgsym_2.90-4~deb12u2_armhf.deb
 f8ad7b16019e839611c4296d851dc656 464340 net optional dnsmasq-base-lua_2.90-4~deb12u2_armhf.deb
 aa6163a1a756908a31cb3462c018e289 462580 net optional dnsmasq-base_2.90-4~deb12u2_armhf.deb
 88a2e04f665cc99e7cc2083defd7b1ab 29268 debug optional dnsmasq-utils-dbgsym_2.90-4~deb12u2_armhf.deb
 56174c2017b3d96e20edbc1613dbc487 58840 net optional dnsmasq-utils_2.90-4~deb12u2_armhf.deb
 ed9421b1d676a8e7ada038a54ff4d9de 8563 net optional dnsmasq_2.90-4~deb12u2_armhf-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEO4qAQUSIo2p/kVRf8U6eOZMpj68FAmn4hR8ACgkQ8U6eOZMp
j6+6qA/9Hwl+SacIx9MxzosGnYjeZ2fQogz569L/uzyXMEq0lDjDPXC8GXarAl21
ObQ/echult1VjJKMZ74NCeVjbMhsoVnzGdkC5j0OdQOsiBH4jy8HXS+3L5S/63jV
IIhL22gt0tAqUwBd80xDS5bv8OAuTWVPUwPK+bfwYIBLTJkNLVOmi6nj3zkbkjNI
sXZfXNVFBD44M79zBCTlAi5lOQbO944yHxrepDrGK2HHlEup+Z4vAXa7ZOmMeAdl
uD4pA28aAdhLY4eP+g2tQibVYlNatae1Q5TgsSHq7ZbWtdUDFxTq+XVZY/fnEkvl
VVQAzchvValTio4GvJCtVwvxD4KgSvi2Um3JcCySTkjYgaTwWhB4h/mG22ch51bx
bXrqlbkXIqT7BowLWcBWgtkuG4nY/t1hakZNOXp8/075uR9wV7YuMdBrjsg+eTw6
dXqTxgC69dZjN01tfmtYN4kbRxAaH1zL/3XGdoH0Zo8yILj8oVHCoxQIlPJqNCdF
YB0Mc6q5Z9XQRdYnSji8PkmHN0Ybpqlyxah7iWvtXkWnNXN77/BfYXc0r5yuJ7M2
bd5sWzdCr3dR5WxflqR5wgFT3SqTi21JcJ5SoDs157epaahABBVM1ZVLEURpTxxj
OL5HyeogCR+zAaTezZ+9M+T0cW0bIrW56EGufWHLJsQcIOfA0bc=
=SVt4
-----END PGP SIGNATURE-----