-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 26 Nov 2025 23:12:47 +0300 Source: unbound Binary: libunbound-dev libunbound8 libunbound8-dbgsym python3-unbound python3-unbound-dbgsym unbound unbound-anchor unbound-anchor-dbgsym unbound-dbgsym unbound-host unbound-host-dbgsym Architecture: i386 Version: 1.22.0-2+deb13u1 Distribution: trixie-security Urgency: high Maintainer: all / amd64 / i386 Build Daemon (x86-conova-02) Changed-By: Michael Tokarev Description: libunbound-dev - static library, header files, and docs for libunbound libunbound8 - library implementing DNS resolution and validation python3-unbound - library implementing DNS resolution and validation (Python3 bindi unbound - validating, recursive, caching DNS resolver unbound-anchor - utility to securely fetch the root DNS trust anchor unbound-host - reimplementation of the 'host' command Closes: 1121446 Changes: unbound (1.22.0-2+deb13u1) trixie-security; urgency=high . [ Guilhem Moulin ] * Fix CVE-2025-11411: Cache poisoning vulnerability via NS RRSet injection * debian/salsa-ci.yml: Disable reprotest and lintian jobs, set RELEASE=trixie . [ Michael Tokarev ] * CVE-2025-11411-additional-nodata.patch -- additional fixes for CVE-2025-11411 (Closes: #1121446, CVE-2025-11411) * d/gbp.conf: set default branch to debian/trixie Checksums-Sha1: a6b898d2e78182d52792c7d82b54334ed6e4b00e 739400 libunbound-dev_1.22.0-2+deb13u1_i386.deb 525047f745681e034a49a0a7cb85304cb87d6684 1165512 libunbound8-dbgsym_1.22.0-2+deb13u1_i386.deb 3dee179af7f183f943cb40a78ea64a97383caffc 632636 libunbound8_1.22.0-2+deb13u1_i386.deb 7a50d9e84e7f73fca8955fbb20e5e359c6f15ba8 155572 python3-unbound-dbgsym_1.22.0-2+deb13u1_i386.deb 984976067d55c9c379eff33986c49b75baeae15d 221708 python3-unbound_1.22.0-2+deb13u1_i386.deb f0c9a79889b481b4b039f4959d24cf8fea2890fe 56892 unbound-anchor-dbgsym_1.22.0-2+deb13u1_i386.deb 95f7bfe2e1ee0b04601e797a3299febe54ee549f 197624 unbound-anchor_1.22.0-2+deb13u1_i386.deb 3383c744b1ab62fa9581031aed28846e312da16c 4808988 unbound-dbgsym_1.22.0-2+deb13u1_i386.deb 278718016d14cc12c6b92053d4b3b0d33125a35b 113816 unbound-host-dbgsym_1.22.0-2+deb13u1_i386.deb 9274293d39559cdc1df622457ceea1aa1cc05feb 221032 unbound-host_1.22.0-2+deb13u1_i386.deb 3cffbdb73f1a992089df3478a701638d5d3bfc1c 10128 unbound_1.22.0-2+deb13u1_i386-buildd.buildinfo 9d909de614fdb55fb7602347659a03b8f5c62e03 1072804 unbound_1.22.0-2+deb13u1_i386.deb Checksums-Sha256: cc7ecadadb6fda93574d0c341418583708476e3bda4fd0e0944b741e705d3390 739400 libunbound-dev_1.22.0-2+deb13u1_i386.deb 01fe4724cd6fa1f0209770f0d4f5d84011bfe86fe043920ab2df74c8d4e5596e 1165512 libunbound8-dbgsym_1.22.0-2+deb13u1_i386.deb 3a7153e0ea6a29d39f65383b2f063cda7f0ccd126a5a59f161c5cc50385051d9 632636 libunbound8_1.22.0-2+deb13u1_i386.deb f18d387b103356e50d87f532a5ce546a835c24b8d697617a3e32f044a27c4ba0 155572 python3-unbound-dbgsym_1.22.0-2+deb13u1_i386.deb 04785bb882a50a78832e106da7053bc66f5db7bd58caca3bb31729beacfa7d51 221708 python3-unbound_1.22.0-2+deb13u1_i386.deb d885c54da96fb047f44b4a4ba2d8d2b2be4471094e5c086093744e13f43cb0b9 56892 unbound-anchor-dbgsym_1.22.0-2+deb13u1_i386.deb 56ebf4e08a45b3ae09809aa4338c189b8a2a98bbb675471e837d1ae66e0c2d6e 197624 unbound-anchor_1.22.0-2+deb13u1_i386.deb 568f400da13acbd3316272dbd1727c1d8bb7621a899659e0d547cc13dffc4d4d 4808988 unbound-dbgsym_1.22.0-2+deb13u1_i386.deb 9a4d9b5367bacdbdc9896c9298d7cbf4053afbd012423d6a3ac712084e26fdef 113816 unbound-host-dbgsym_1.22.0-2+deb13u1_i386.deb 9170b915e151fefc0057d178f81bd5e68adc1fe6047a48e09ad2f1a39af22583 221032 unbound-host_1.22.0-2+deb13u1_i386.deb 099f950de4997ef64c26bd365ea378495cefa2e8fb00d451a92187f1346c0119 10128 unbound_1.22.0-2+deb13u1_i386-buildd.buildinfo 21c5454ce7bb3023d309a78b2337dff50cc0e6b840095111b9e640ae27dc6dca 1072804 unbound_1.22.0-2+deb13u1_i386.deb Files: 16e4228f3e252119e5ea2de888323315 739400 libdevel optional libunbound-dev_1.22.0-2+deb13u1_i386.deb 419f8ae27da6c1bedd614ca937082392 1165512 debug optional libunbound8-dbgsym_1.22.0-2+deb13u1_i386.deb aa4f38161064e75d2050e389caba503a 632636 libs optional libunbound8_1.22.0-2+deb13u1_i386.deb 4c8938616bb3144ee0d195eefa307f92 155572 debug optional python3-unbound-dbgsym_1.22.0-2+deb13u1_i386.deb d386d7d3879fbc39569e6661b5b81fae 221708 python optional python3-unbound_1.22.0-2+deb13u1_i386.deb 816c0c220b9e79fdf760d175dd90a564 56892 debug optional unbound-anchor-dbgsym_1.22.0-2+deb13u1_i386.deb 252a1d497618fe5eed4ca5ee1b4dd502 197624 net optional unbound-anchor_1.22.0-2+deb13u1_i386.deb febb057a93187a2de4ff8ba642196ea5 4808988 debug optional unbound-dbgsym_1.22.0-2+deb13u1_i386.deb b34cb4a8530db44f22675c480dd51462 113816 debug optional unbound-host-dbgsym_1.22.0-2+deb13u1_i386.deb 4265fa35e2d4e72ad92c1f50f14eb89e 221032 net optional unbound-host_1.22.0-2+deb13u1_i386.deb 8007bab1de34aa631b2534dd07c7239b 10128 net optional unbound_1.22.0-2+deb13u1_i386-buildd.buildinfo 141ab2d068d1b930a49cbee5230c36b5 1072804 net optional unbound_1.22.0-2+deb13u1_i386.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEErwLLVsiCiGZggzpHJuP6X4A0XeIFAmkqFvgACgkQJuP6X4A0 XeK9vRAA0TDHIguVoiTgoG+85LQg1f9NgLgJo7uzgpUajcl3PeRFnxO4W+GGB8an SWbOpNNAWEVosupN9Yon7elYny5dooHhLXvlfKaMrf3fA0VkPL08fKI/r3e/fV24 Z+Eld8Mw5DSWsvsMvcaaU0AK5eiRb5lxktJDgpqmh7y7arzwzu4uh0EYg87eyue0 HT7LUDv/V/NU8LZCKnq7QUHqUYc/JEmop3loVKe3jdS+lxdf+ZUeuRTER+LkPb4+ nAYKOf0qAUzJ/lcz7s/meEl6nJ5JN5j58eGyeoubszPhG3PCMNXN9TWpNNJkwUff b+ni0FS314xAIAejwz6uAJbej1hcYaZVkDAJ3DTtF2Da/qPOstNwUK8SI3HbHECf /lWo0m9vI8fZrXFjg7BY/ja4bk7DPEUq/tR8zbaGQTN4b1GtqUcTCHgBZ9M8E6yZ j6LuRDhDFyDPLR2XI44OKe4kE5nLIOAEY2rGP8o/aWNp1+XNbXneERVn3glAUDtZ jivKeaaN46NevfzrSpc4bHVVA7Q9NZYUXIAfatvA2+dufyRXRbnQ94ywMAwYOVFG 1MyrfeEC13filG5M1LpWfOW0UV9xIsT1sqSzfjgV1JZJoondm70/+4/IMNozS7AZ fxCcSyK9OgZQK2bq0l9wKX3qxCmaacUaJrgas95sxg2NXSNHN2U= =8m0/ -----END PGP SIGNATURE-----