-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 02 May 2026 18:50:46 +0200 Source: dnsmasq Binary: dnsmasq-base dnsmasq-base-dbgsym dnsmasq-base-lua dnsmasq-base-lua-dbgsym dnsmasq-utils dnsmasq-utils-dbgsym Architecture: riscv64 Version: 2.91-1+deb13u1 Distribution: trixie-security Urgency: high Maintainer: riscv64 Build Daemon (rv-manda-01) Changed-By: Sven Geuer Description: dnsmasq-base - Small caching DNS proxy and DHCP/TFTP server - executable dnsmasq-base-lua - Small caching DNS proxy and DHCP/TFTP server - executable, Lua-en dnsmasq-utils - Utilities for manipulating DHCP leases Changes: dnsmasq (2.91-1+deb13u1) trixie-security; urgency=high . * d/p/*: - CVE-2026-2291.patch: Fix buffer overflow in struct bigname. - CVE-2026-4890.patch: Fix NSEC bitmap parsing infinite loop. - CVE-2026-4891.patch: Verify rdlen field in RRSIG packets. - CVE-2026-4892.patch: Fix buffer overflow in helper.c with large CLIDs. - CVE-2026-4893.patch: Fix broken client subnet validation. - CVE-2026-5172.patch: Fix buffer overflow vulnerability in extract_addresses(). Checksums-Sha1: 8e80a749beb7a72e30a0418b1c2e2ba270beb67f 574748 dnsmasq-base-dbgsym_2.91-1+deb13u1_riscv64.deb a5451476afc3885864444c692d36cdce959b9cbb 577492 dnsmasq-base-lua-dbgsym_2.91-1+deb13u1_riscv64.deb 66d0e655d7e20e781c17e9d6f043ce8658a7ecba 510152 dnsmasq-base-lua_2.91-1+deb13u1_riscv64.deb 4dabd33fea45a5c33ccf17961dba7ad7fa6c0ba8 508756 dnsmasq-base_2.91-1+deb13u1_riscv64.deb 19021b3914c3d5e7cb604869bb39106dc98e579c 28896 dnsmasq-utils-dbgsym_2.91-1+deb13u1_riscv64.deb b19404af05035dc36e3857f94423aa8a9ccaf45e 63084 dnsmasq-utils_2.91-1+deb13u1_riscv64.deb e7b42c52ad3c56a53c198275c371d1297115a968 8276 dnsmasq_2.91-1+deb13u1_riscv64-buildd.buildinfo Checksums-Sha256: 989f4aa974f0fc41be1b4b34306a3941e87971fb5678970a3410af3e803ca2dc 574748 dnsmasq-base-dbgsym_2.91-1+deb13u1_riscv64.deb 5450beac5421c4133ba414eea4aec6c5d8aa14ef778cce721490b4448e6d5ba9 577492 dnsmasq-base-lua-dbgsym_2.91-1+deb13u1_riscv64.deb f67d2742e79c82dbf8915e93a2f703d75613b3290f36cbdc5aee405bed64219c 510152 dnsmasq-base-lua_2.91-1+deb13u1_riscv64.deb a82ad8d7b0dcea41acb380cd8bb7f82e0c29fe702c472a2a90628648eb0086b3 508756 dnsmasq-base_2.91-1+deb13u1_riscv64.deb 28f980247e238159d3202575331600544cd05ef5ccaa0e0b599e73d20e57f942 28896 dnsmasq-utils-dbgsym_2.91-1+deb13u1_riscv64.deb 3bb2ea06d1b11469fbaaf3882e091bf3c1adf544940d5a19ae927ea11ef3a389 63084 dnsmasq-utils_2.91-1+deb13u1_riscv64.deb a97e4cbcfb703868f4bd843936c1d28e5b83c63b211c68fd06e19d71b45fe71d 8276 dnsmasq_2.91-1+deb13u1_riscv64-buildd.buildinfo Files: c5fa303517ff5eaeee60b0f9dd5c0c96 574748 debug optional dnsmasq-base-dbgsym_2.91-1+deb13u1_riscv64.deb 7488e6361e93b63658c63401ce872899 577492 debug optional dnsmasq-base-lua-dbgsym_2.91-1+deb13u1_riscv64.deb 5071e75f31f0f1ec50f7c1f4ded50c49 510152 net optional dnsmasq-base-lua_2.91-1+deb13u1_riscv64.deb 732452c699ac0b0129d403fbd6ed8f3b 508756 net optional dnsmasq-base_2.91-1+deb13u1_riscv64.deb 63831ee54a7912add7ab0b8a278ae215 28896 debug optional dnsmasq-utils-dbgsym_2.91-1+deb13u1_riscv64.deb bb5acab1910ce5267e633f0734311065 63084 net optional dnsmasq-utils_2.91-1+deb13u1_riscv64.deb 0969730053c4d0c671fc931ee8ead4d8 8276 net optional dnsmasq_2.91-1+deb13u1_riscv64-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEwN+C+Bc8deN4UliX50ghctvtZFQFAmn4hx8ACgkQ50ghctvt ZFQYGQ//VTiwHcnItHS1pSbEgkj6OOeEsVYNftccm7zoB6FtjG/x95UTkYPoIdUH mI9vO+YcPq9OqypH5CIVud8IkQhtI5axPYKfeJhvC5Nzq+Eb0lay6/Bm3s0SqST8 cZ1aCP898U8Es9zARyZy/VicLObgGkNQSfTa4l4gnCda7EwgxUcoXsvBCzVqPzd+ uJaiFhKt9QWKlxaMJsUvh2Z7lKt/GtBeX3Xf1nsTq58cxB3704sXQW/3EduhMqkd CFawc1HVqOas7Sl+nnsq7Is+siHhBRSn9HAqhvFz3s1dGOUw+3mRdrX5Gt863eth h94ck2G1u65WtItzLyu4LaYWY9M4YMXd4da8C4DvwPFakSRlVUVNtVdN+r9UhppB PJGMPq5ClbRWqxq7YmvTb7YSRgdbCjf/qMoG1MldvidIgKmN8BcqVGRId4E3JpIQ Kf0G8hmveAHnmBDPtu01ZccWzLR/IF9/2Eh+nJIyiVQJv8B62wFjahSkP2azOEVX iJVPISP8d7AJTpg2B10gvc1IuvPINvNw2A5kB9oRdgZrH6lqQ4NpNy107ALz+Tl+ S2+6r4cjThCmnuHbYwQhD55UjFAOYuegDOfdKTloQQrC6Nw9b3yy+Xfquu2iQQ9q ttfhz0Hb5cMyv21R8SrCy/lz3JNEjPWIcuziINLiFFdi6x1Pr7o= =DKBK -----END PGP SIGNATURE-----