-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sat, 02 May 2026 18:50:46 +0200
Source: dnsmasq
Binary: dnsmasq dnsmasq-base dnsmasq-base-dbgsym dnsmasq-base-lua dnsmasq-base-lua-dbgsym dnsmasq-utils dnsmasq-utils-dbgsym
Architecture: source amd64 all
Version: 2.91-1+deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: Simon Kelley <simon@thekelleys.org.uk>
Changed-By: Sven Geuer <sge@debian.org>
Description:
dnsmasq - Small caching DNS proxy and DHCP/TFTP server - system daemon
dnsmasq-base - Small caching DNS proxy and DHCP/TFTP server - executable
dnsmasq-base-lua - Small caching DNS proxy and DHCP/TFTP server - executable, Lua-en
dnsmasq-utils - Utilities for manipulating DHCP leases
Changes:
dnsmasq (2.91-1+deb13u1) trixie-security; urgency=high
.
* d/p/*:
- CVE-2026-2291.patch: Fix buffer overflow in struct bigname.
- CVE-2026-4890.patch: Fix NSEC bitmap parsing infinite loop.
- CVE-2026-4891.patch: Verify rdlen field in RRSIG packets.
- CVE-2026-4892.patch: Fix buffer overflow in helper.c with large CLIDs.
- CVE-2026-4893.patch: Fix broken client subnet validation.
- CVE-2026-5172.patch: Fix buffer overflow vulnerability in
extract_addresses().
Checksums-Sha1:
42b36e603e6b547f16ac9b9b9ef2a69e25aae62c 2421 dnsmasq_2.91-1+deb13u1.dsc
f4860fd0218487a552427db55858efae5048bd61 850169 dnsmasq_2.91.orig.tar.gz
6b2f5532c39c60150bbf918bad09f0817691a637 36880 dnsmasq_2.91-1+deb13u1.debian.tar.xz
b3fad9b273e10915ef87101c5f58830ffa58404b 596748 dnsmasq-base-dbgsym_2.91-1+deb13u1_amd64.deb
7db1d5c3a4267880887c19248db2100d3a41189c 599544 dnsmasq-base-lua-dbgsym_2.91-1+deb13u1_amd64.deb
4ec0a0eec4f5be0b276b06e3ceed3eefea6ba053 509268 dnsmasq-base-lua_2.91-1+deb13u1_amd64.deb
22ea2a0db717aa5d737f6fd35da12e9a850c6aa2 507284 dnsmasq-base_2.91-1+deb13u1_amd64.deb
fdd6c0bf054ba116b9fe19a1b5faab18c3938b1a 29104 dnsmasq-utils-dbgsym_2.91-1+deb13u1_amd64.deb
4ca383e95f0741ca174a3387b70a23cc7854e46d 62896 dnsmasq-utils_2.91-1+deb13u1_amd64.deb
8a386497079a0a2abee49790f4256e83cc25d770 69688 dnsmasq_2.91-1+deb13u1_all.deb
d275611ed8d1b9df2a886823202360d58cc13419 8785 dnsmasq_2.91-1+deb13u1_amd64.buildinfo
Checksums-Sha256:
aee32c7ee792d7aff9fd35557dcdcd546d560749f1efd43b1227de286944c52e 2421 dnsmasq_2.91-1+deb13u1.dsc
2d26a048df452b3cfa7ba05efbbcdb19b12fe7a0388761eb5d00938624bd76c8 850169 dnsmasq_2.91.orig.tar.gz
df1bda70a33f15cc1cc028c640311a61b9c2b1dc6ab9f412c923359f90d1f6dc 36880 dnsmasq_2.91-1+deb13u1.debian.tar.xz
dcce786ca8fb1bb7ee81a04aa42c861f6bd4880dd9e2345eac108375b7db8aeb 596748 dnsmasq-base-dbgsym_2.91-1+deb13u1_amd64.deb
f35ede0b15daa2026420e534d31e988f5639931bcbe60bfab6d4d95bd19dc30d 599544 dnsmasq-base-lua-dbgsym_2.91-1+deb13u1_amd64.deb
4d992e2a672df7399cc5b81a8c225abd9978f20908439ff5312b2780b23e277d 509268 dnsmasq-base-lua_2.91-1+deb13u1_amd64.deb
32fe2686b0adbe31dbedfadeea7eee8e47785e0ab39ffa9f655ca1bd7ba25d55 507284 dnsmasq-base_2.91-1+deb13u1_amd64.deb
ec66a1974532e2125308aadc81bce520b7442bb0983b0ddbf7ab3aa98d4ca340 29104 dnsmasq-utils-dbgsym_2.91-1+deb13u1_amd64.deb
01deb8f1ef96ec5f44d338f081dd949629c589eac1fde828eb8279e866d8d55a 62896 dnsmasq-utils_2.91-1+deb13u1_amd64.deb
89620e344ada8405e904af3bb573ee40edb848761b79e01a9ea1f51fa9134fb8 69688 dnsmasq_2.91-1+deb13u1_all.deb
97eace96161378e9c5022232f58f2878fd51491f31f582765cd13f1cb48cd0f0 8785 dnsmasq_2.91-1+deb13u1_amd64.buildinfo
Files:
49f737555dc33d16625fa0cb0fc105dd 2421 net optional dnsmasq_2.91-1+deb13u1.dsc
66e227a971ec29299f18274251440571 850169 net optional dnsmasq_2.91.orig.tar.gz
285a883eb799c259378dedd92d88dd8e 36880 net optional dnsmasq_2.91-1+deb13u1.debian.tar.xz
c3fb1afd01773a9128d1e21979021de9 596748 debug optional dnsmasq-base-dbgsym_2.91-1+deb13u1_amd64.deb
11948ec276436e8b2bcff562794c0053 599544 debug optional dnsmasq-base-lua-dbgsym_2.91-1+deb13u1_amd64.deb
3af8f9fcb86e5853132b7e2802d7a502 509268 net optional dnsmasq-base-lua_2.91-1+deb13u1_amd64.deb
cbadc345f9b86485188e7343f25b8b04 507284 net optional dnsmasq-base_2.91-1+deb13u1_amd64.deb
ca5c84df3d3dd5b8ceef935d8549122a 29104 debug optional dnsmasq-utils-dbgsym_2.91-1+deb13u1_amd64.deb
8a3f04f6e898e0614b49e15cb05def06 62896 net optional dnsmasq-utils_2.91-1+deb13u1_amd64.deb
fa931811629a03cf5ad7c45faa8b7ae2 69688 net optional dnsmasq_2.91-1+deb13u1_all.deb
af3b14f23a62b5686bfbcaaddec4e804 8785 net optional dnsmasq_2.91-1+deb13u1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=zh55
-----END PGP SIGNATURE-----
