-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Thu, 07 May 2026 20:16:52 +0200
Source: dnsmasq
Architecture: source
Version: 2.92-5
Distribution: unstable
Urgency: medium
Maintainer: Simon Kelley <simon@thekelleys.org.uk>
Changed-By: Sven Geuer <sge@debian.org>
Changes:
dnsmasq (2.92-5) unstable; urgency=medium
.
* d/p/*:
- CVE-2026-2291.patch: Fix buffer overflow in struct bigname.
- CVE-2026-4890.patch: Fix NSEC bitmap parsing infinite loop.
- CVE-2026-4891.patch: Verify rdlen field in RRSIG packets.
- CVE-2026-4892.patch: Fix buffer overflow in helper.c with large CLIDs.
- CVE-2026-4893.patch: Fix broken client subnet validation.
- CVE-2026-5172.patch: Fix buffer overflow vulnerability in
extract_addresses().
Checksums-Sha1:
6f10b9f986088e37465446a3c2dde29f9f5610b5 2611 dnsmasq_2.92-5.dsc
f1a57555278cd7b87d428daeb17e00e0a825ddfb 36220 dnsmasq_2.92-5.debian.tar.xz
4b91fb613c51e3cf89631d0480a823cf39d3195f 8242 dnsmasq_2.92-5_amd64.buildinfo
Checksums-Sha256:
e3a340cd79e724e56159fd477cb2a1da0ba7cf7a096179ad9c7d5464c635bcd5 2611 dnsmasq_2.92-5.dsc
6522a824aab5283f4ee73120ba0ff7ff01dff0af13d0f3fb3633cdc91fbcc6f5 36220 dnsmasq_2.92-5.debian.tar.xz
cab95fb35d7d737f8d3062b984d5173a893cdf396613b1c2f8a78e6823ca4257 8242 dnsmasq_2.92-5_amd64.buildinfo
Files:
c1f4b422610ab7b50c77746a9f6f598f 2611 net optional dnsmasq_2.92-5.dsc
63542783e575d0bf1aa89a1342d2648f 36220 net optional dnsmasq_2.92-5.debian.tar.xz
47046bd6200190cfe8031776c0f2a3a4 8242 net optional dnsmasq_2.92-5_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----
iQJDBAEBCgAtFiEEPfXoqkP8n9/QhvGVrfUO2vit1YUFAmoCMscPHHNnZUBkZWJp
YW4ub3JnAAoJEK31Dtr4rdWFyrsQAIzDGsrCdNGR/EEnBTo4ZD5n+ePOWjwwifp/
NaKQ/dXgVYSWrryw2PFnq6RqdCqHlgO/WWzXSLOhS7QwJ8QLlCdqXYs3l0KEsUEN
4OGrYqbNCBwkF7IWl1Efv7vu9Vfwo4+zt75GdHUMf8IdHqflHkNsSVpduO4ALOES
9alTtulIns1XNR8l+YHllrCfh6CcfbL6iaz95pMiSBQ9jZXkFeJXSrU9ls2oj6C9
Hg2sszsjd1qYZWX5q6VelQMvbA8BjDk6XGHvkyx8peA5rQ3mwLEcHzkr4vZxc90g
z2Wq9jpw7uFEkTV/LY3ezoXCKQofEcmV7N0a0Pqlt80nFwM4e1KEgN2lj89Rbkrb
DMAbYxgNQ66keKqr1EjyPQD/YHaCGCLRRR1JABXD8q32Bp39daSy9Ega+rixF86b
zpyRggtaovrNk39aiSljhkVhvcBembuiTL/IT/c65vFRjdSPML2OLHeFaFu2lCGu
uDLYTAYOX4D/bdDNLMZJbgDDoSzZdWKBOhw6BB4k3KpdxKbrrTTZS4RjxvdgAzal
+MKOylyGIa6NF/1wZFCCd4rW6yE33v+XwAXVmmj9frXZI8nfr2VXu2p3zGmb4hKx
+nQo/rP6VXRUM6aeFGLmckJmTvcYFRCyGVR/1Q/p2r/hHzXSQUacs3ip4XNZFQ4W
hnkN2vWD
=51XT
-----END PGP SIGNATURE-----
