-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 02 May 2026 18:37:29 +0200 Source: dnsmasq Binary: dnsmasq-base dnsmasq-base-dbgsym dnsmasq-base-lua dnsmasq-base-lua-dbgsym dnsmasq-utils dnsmasq-utils-dbgsym Architecture: s390x Version: 2.90-4~deb12u2 Distribution: bookworm-security Urgency: high Maintainer: s390x Build Daemon (zandonai) Changed-By: Sven Geuer Description: dnsmasq-base - Small caching DNS proxy and DHCP/TFTP server - executable dnsmasq-base-lua - Small caching DNS proxy and DHCP/TFTP server - executable, Lua-en dnsmasq-utils - Utilities for manipulating DHCP leases Changes: dnsmasq (2.90-4~deb12u2) bookworm-security; urgency=high . * d/p/*: - CVE-2026-2291.patch: Fix buffer overflow in struct bigname. - CVE-2026-4890.patch: Fix NSEC bitmap parsing infinite loop. - CVE-2026-4891.patch: Verify rdlen field in RRSIG packets. - CVE-2026-4892.patch: Fix buffer overflow in helper.c with large CLIDs. - CVE-2026-4893.patch: Fix broken client subnet validation. - CVE-2026-5172.patch: Fix buffer overflow vulnerability in extract_addresses(). Checksums-Sha1: 813925a7f515d32f3aa42eac14383831d8c03ea3 560164 dnsmasq-base-dbgsym_2.90-4~deb12u2_s390x.deb ced202db79a4c2feec8e31b753ac130c6cb40131 563360 dnsmasq-base-lua-dbgsym_2.90-4~deb12u2_s390x.deb 10e5741cf8c82e086fa1cf050dc88a7134687515 476796 dnsmasq-base-lua_2.90-4~deb12u2_s390x.deb cd2ccd9286f92483c852de0b2c8e32f52357a1ef 473248 dnsmasq-base_2.90-4~deb12u2_s390x.deb facd3d76b855b31bb26365755d086b44c1aab4b9 27116 dnsmasq-utils-dbgsym_2.90-4~deb12u2_s390x.deb 2bae97942444543363809a7d1ad3941c29b206f2 59124 dnsmasq-utils_2.90-4~deb12u2_s390x.deb 605060913ab2920850b7d0b73d831cd3b0a215d8 8575 dnsmasq_2.90-4~deb12u2_s390x-buildd.buildinfo Checksums-Sha256: 4f7f4484df8980abc5f3d1be616b4a5449899681f2f5c514e005df6b2242b2f7 560164 dnsmasq-base-dbgsym_2.90-4~deb12u2_s390x.deb 242a77f5f17c7c3429d96e83ececc26c6f6f205a099594f76cb8295862b4ebdf 563360 dnsmasq-base-lua-dbgsym_2.90-4~deb12u2_s390x.deb e927773e4e871a2a31a897847be8b5437782d22382fdfbc24e7764ddf96e3f58 476796 dnsmasq-base-lua_2.90-4~deb12u2_s390x.deb 9d50ef454172f62ce0f0c1fbeb8136135267c461d0d2bdb65898681b248168ff 473248 dnsmasq-base_2.90-4~deb12u2_s390x.deb 83de8de9d27f59eb1a002c1863bb723b41da0cb3114b0de5b96b9ebac0841c54 27116 dnsmasq-utils-dbgsym_2.90-4~deb12u2_s390x.deb 90024a18c9f667fdb5019d8e3b6403325045374d848c6b52049f0c9c7309e276 59124 dnsmasq-utils_2.90-4~deb12u2_s390x.deb a883cf9d23cc12a9717ec4ef36e0b81bc637cd9517e39dcc6e334829768bad17 8575 dnsmasq_2.90-4~deb12u2_s390x-buildd.buildinfo Files: 4bf119dd92ce3c6d5b8eca9408c017d5 560164 debug optional dnsmasq-base-dbgsym_2.90-4~deb12u2_s390x.deb 6521f1fa7ba76fc9e15e2d6d22e42b07 563360 debug optional dnsmasq-base-lua-dbgsym_2.90-4~deb12u2_s390x.deb 2cf6f3a60ce3bc6848fceb611a8e44be 476796 net optional dnsmasq-base-lua_2.90-4~deb12u2_s390x.deb a2c4088c03965a824fd5fa2677ec7274 473248 net optional dnsmasq-base_2.90-4~deb12u2_s390x.deb 6b0be71ecc93478cd9a12bf035468128 27116 debug optional dnsmasq-utils-dbgsym_2.90-4~deb12u2_s390x.deb cda16a3f5ba88dae982978dbbe155d6f 59124 net optional dnsmasq-utils_2.90-4~deb12u2_s390x.deb 2d86b473264623d4d9e41059720a158e 8575 net optional dnsmasq_2.90-4~deb12u2_s390x-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEENly2ANlpa4eeqnluvVOPI7pYNpgFAmn4hScACgkQvVOPI7pY NpgnHQ//bKmI+kXt0hkcbW4HFQpqiPNLzWs1Hwo4JiFuTclueFZf0vH2rHqkyzGq QKeQJ3U6VXFHjKtsJ74e/JYYGsK3RkTCzv0SG2d84IxK06oatB6Co4+1wK05XE56 kceHJ2Wr0eYGWwq9yUmYHxD/jE7q49jeAmHiccH/yady8wiuUU+lgLT5tkk1tGO3 PWIjBkHW66JMuTfKHbPX6LBFcXNx0HFBXgLO8vuUqWev+mHiROFMLdVkb5Tf/dMV P8wk93VxQlUiRr0tsd9OFSzkxQ0idXkL14c2oy0FULsb3LHx0GcbpckB9kQBXurE Xgjg1sJuUTRKAGwIzMn1YlONZZXD4k8eGhGY5/6maiC7KU6RwHBPKMVWYg/z1Dpe Y6HZEckEB1St7XK1/CO06N/NHcM8dA1BtGK41psXzb5u97M2pZg4FpzDHSgbas0F EufB3nA4ZFowpaa8m2x1cNXXGfCbqPnKAZDlUAZpJEvWW5JWalvA2VsfO/B3UGNv nP6Xw8ooUjYt2VLONuzVVil3i/6BZcVMb5tYa+caQZJOurZ5FYFtOnSwZ+ztcWFC ABuG6Xnll4XCGvk7erIRFoQQFSwmvXMQXhtelJnehLcVHJ44SoWIt1ncNFHaHH2t 7ill4YABjJL98mlxNZci4wDLtDPlRq9dGJuSDOQjcVh+RuBNhRc= =J9o3 -----END PGP SIGNATURE-----