-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 21 Oct 2026 23:39:19 +0300
Source: unbound
Binary: libunbound-dev libunbound8 libunbound8-dbgsym python3-unbound python3-unbound-dbgsym unbound unbound-anchor unbound-anchor-dbgsym unbound-dbgsym unbound-host unbound-host-dbgsym
Architecture: arm64
Version: 1.26.2-0+deb13u1
Distribution: trixie-security
Urgency: medium
Maintainer: arm64 Build Daemon (arm-ubc-02) <buildd_arm64-arm-ubc-02@buildd.debian.org>
Changed-By: Michael Tokarev <mjt@tls.msk.ru>
Description:
 libunbound-dev - static library, header files, and docs for libunbound
 libunbound8 - library implementing DNS resolution and validation
 python3-unbound - library implementing DNS resolution and validation (Python3 bindi
 unbound    - validating, recursive, caching DNS resolver
 unbound-anchor - utility to securely fetch the root DNS trust anchor
 unbound-host - reimplementation of the 'host' command
Changes:
 unbound (1.26.2-0+deb13u1) trixie-security; urgency=medium
 .
   * new upstream security/bugfix release:
    o CVE-2026-97206 - severity: HIGH
      DoQ path-migration can lead to use-after-free
      on multi-threaded deployments
    o CVE-2026-50106 - severity: MEDIUM
      Possible insecure NXDOMAIN for non-existing records under a
      configured island trust anchor underneath an insecure parent
    o CVE-2026-96405 - severity: MEDIUM
      Aggregate DNS name chained pointer decompression work
      leads to degradation of service
    o CVE-2026-109125 - severity: MEDIUM
      Possible cache poisoning vulnerability via a cache side-channel
      exposed by 'unwanted-reply-threshold'
    o CVE-2026-35501 - severity: LOW
      Bypass of a configured island trust anchor underneath an insecure
      parent from an atacker-controlled NSEC record
Checksums-Sha1:
 5e091a20e15d7ed22dad04cf2e293b4e8d316972 213812 libunbound-dev_1.26.2-0+deb13u1_arm64.deb
 5d48d2f0a44315596fbc0a849ee7ab65cbbce1a9 1402896 libunbound8-dbgsym_1.26.2-0+deb13u1_arm64.deb
 0d59b0c61db61b0be9044333238e42976cbdce3a 597116 libunbound8_1.26.2-0+deb13u1_arm64.deb
 6368ee411268bef6210bab5b07ea23d0f788ba94 166344 python3-unbound-dbgsym_1.26.2-0+deb13u1_arm64.deb
 21cdab9563e9123a872461a7ac909d8921bf36a1 244912 python3-unbound_1.26.2-0+deb13u1_arm64.deb
 3d0ede9944dab3e3d8dca4c703be0eed649e02c9 59580 unbound-anchor-dbgsym_1.26.2-0+deb13u1_arm64.deb
 ddbdf880a7324c1ded87655a3915c56b2a2e8c1c 221568 unbound-anchor_1.26.2-0+deb13u1_arm64.deb
 94221f62e8b101a7bcfbc1e5307741541d5b537f 5744944 unbound-dbgsym_1.26.2-0+deb13u1_arm64.deb
 21c3c5912edd4c28908343307d4d333b5dd02911 131992 unbound-host-dbgsym_1.26.2-0+deb13u1_arm64.deb
 e81dc81a87d63bd7c3fd926869d21da1304d103d 242100 unbound-host_1.26.2-0+deb13u1_arm64.deb
 1ec4499a4d676af1edcbbf8d2c87ebf18db8a3f2 10584 unbound_1.26.2-0+deb13u1_arm64-buildd.buildinfo
 073e53469a30143af99490fb1aeef885efaf3499 1051848 unbound_1.26.2-0+deb13u1_arm64.deb
Checksums-Sha256:
 42fc733b9d65621a580e6eddca925bfa93921bc0daecdd0d984e60e1f4bbe8dc 213812 libunbound-dev_1.26.2-0+deb13u1_arm64.deb
 d7376c9e7e3f0649153e4e5da3c266c22adb3e3b17842bb3c5d32962fa2aed73 1402896 libunbound8-dbgsym_1.26.2-0+deb13u1_arm64.deb
 68de01ff17c1f39ade474c53f2bdf75eff92072493dc28eb0dceaffa177fc20c 597116 libunbound8_1.26.2-0+deb13u1_arm64.deb
 dc25f602f6b6a87421f6c341b3727baba4bcd8acb853b80a8455c4865f9fc01b 166344 python3-unbound-dbgsym_1.26.2-0+deb13u1_arm64.deb
 5b6e61f94c8a89558a6238cc484ea3ad5e68ceaa7e1939c3faa21e22add3ed3d 244912 python3-unbound_1.26.2-0+deb13u1_arm64.deb
 032401b4c529aa902eca131e3959786d192f0b38d055fe3b52b2d7861da7c790 59580 unbound-anchor-dbgsym_1.26.2-0+deb13u1_arm64.deb
 2181598d3e4a315d26caa3473c70a5794a9281cf13e86d1f18213499da3d9b7b 221568 unbound-anchor_1.26.2-0+deb13u1_arm64.deb
 df06beff80b5710f4e7625b50543e9e738b867fc81cb21c05d18fd37f6c55ae7 5744944 unbound-dbgsym_1.26.2-0+deb13u1_arm64.deb
 d617852e09efcf303e496bb0e7d75d1375d02ad60dea9a22a0c723029970f849 131992 unbound-host-dbgsym_1.26.2-0+deb13u1_arm64.deb
 912b58885bb98d8c699a28b02ca23418b91f26af86c28b7d14dd3034ad0d0829 242100 unbound-host_1.26.2-0+deb13u1_arm64.deb
 949a810d0e59029e48c474cb433fa2929f9cafabfb59bcdb52fb0589b8fd3a22 10584 unbound_1.26.2-0+deb13u1_arm64-buildd.buildinfo
 d049d82b4b618764aafa909399ad01ad99b46ff6f1a60716bfee7a6571520ee9 1051848 unbound_1.26.2-0+deb13u1_arm64.deb
Files:
 6050098b62ef373f486bd44c7f59aa89 213812 libdevel optional libunbound-dev_1.26.2-0+deb13u1_arm64.deb
 9ba993c1cc7588490111244b793f29ef 1402896 debug optional libunbound8-dbgsym_1.26.2-0+deb13u1_arm64.deb
 5e382e7677ab0ab8c25dc0f31e8278fd 597116 libs optional libunbound8_1.26.2-0+deb13u1_arm64.deb
 fb616066ccb66b04a5f28807c5ae6ed1 166344 debug optional python3-unbound-dbgsym_1.26.2-0+deb13u1_arm64.deb
 7e657fb419d48e90ca464edcd0fc82d4 244912 python optional python3-unbound_1.26.2-0+deb13u1_arm64.deb
 d576a6a2fdff36ec94d475c1ac078406 59580 debug optional unbound-anchor-dbgsym_1.26.2-0+deb13u1_arm64.deb
 f9277a72d24d2bff825d2b309ecbda92 221568 net optional unbound-anchor_1.26.2-0+deb13u1_arm64.deb
 dda7969b0f93fc494c90fa9cba8a06e8 5744944 debug optional unbound-dbgsym_1.26.2-0+deb13u1_arm64.deb
 d01e8d12852200aaf791b9ad0e8aa7b8 131992 debug optional unbound-host-dbgsym_1.26.2-0+deb13u1_arm64.deb
 950075a8e897917aa937447bbf73dba5 242100 net optional unbound-host_1.26.2-0+deb13u1_arm64.deb
 5fd5a45181d3ccf5d13318ec5b019682 10584 net optional unbound_1.26.2-0+deb13u1_arm64-buildd.buildinfo
 62a162f04202924ca85ba7cfb49b079b 1051848 net optional unbound_1.26.2-0+deb13u1_arm64.deb

-----BEGIN PGP SIGNATURE-----
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=ujUk
-----END PGP SIGNATURE-----