-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 21 Oct 2026 23:39:19 +0300
Source: unbound
Binary: libunbound-dev libunbound8 libunbound8-dbgsym python3-unbound python3-unbound-dbgsym unbound unbound-anchor unbound-anchor-dbgsym unbound-dbgsym unbound-host unbound-host-dbgsym
Architecture: armhf
Version: 1.26.2-0+deb13u1
Distribution: trixie-security
Urgency: medium
Maintainer: armhf Build Daemon (arm-ubc-02) <buildd_arm64-arm-ubc-02@buildd.debian.org>
Changed-By: Michael Tokarev <mjt@tls.msk.ru>
Description:
 libunbound-dev - static library, header files, and docs for libunbound
 libunbound8 - library implementing DNS resolution and validation
 python3-unbound - library implementing DNS resolution and validation (Python3 bindi
 unbound    - validating, recursive, caching DNS resolver
 unbound-anchor - utility to securely fetch the root DNS trust anchor
 unbound-host - reimplementation of the 'host' command
Changes:
 unbound (1.26.2-0+deb13u1) trixie-security; urgency=medium
 .
   * new upstream security/bugfix release:
    o CVE-2026-97206 - severity: HIGH
      DoQ path-migration can lead to use-after-free
      on multi-threaded deployments
    o CVE-2026-50106 - severity: MEDIUM
      Possible insecure NXDOMAIN for non-existing records under a
      configured island trust anchor underneath an insecure parent
    o CVE-2026-96405 - severity: MEDIUM
      Aggregate DNS name chained pointer decompression work
      leads to degradation of service
    o CVE-2026-109125 - severity: MEDIUM
      Possible cache poisoning vulnerability via a cache side-channel
      exposed by 'unwanted-reply-threshold'
    o CVE-2026-35501 - severity: LOW
      Bypass of a configured island trust anchor underneath an insecure
      parent from an atacker-controlled NSEC record
Checksums-Sha1:
 837e8ff69cfb1df0385b58d5394345a32ae546c4 213828 libunbound-dev_1.26.2-0+deb13u1_armhf.deb
 b5e5ff31a8d62e78e4ba52d0a3487ce353faa849 1391132 libunbound8-dbgsym_1.26.2-0+deb13u1_armhf.deb
 edf16fd34452d752becec4211c43e944496a5835 583704 libunbound8_1.26.2-0+deb13u1_armhf.deb
 ec0e2d56a1004ed11d2fd142705ef9d4e8a339f9 180044 python3-unbound-dbgsym_1.26.2-0+deb13u1_armhf.deb
 ea555988b1f6043d3df9c4c02afdda0ddf820336 243300 python3-unbound_1.26.2-0+deb13u1_armhf.deb
 f19544b841c6200a47d7e1425e24d099b32943d7 59708 unbound-anchor-dbgsym_1.26.2-0+deb13u1_armhf.deb
 20ba97dd1843351c6e5a53836028e3ea35ed644a 220428 unbound-anchor_1.26.2-0+deb13u1_armhf.deb
 5f610199c6755fcabf243d37beab8e15dbd97f33 5224928 unbound-dbgsym_1.26.2-0+deb13u1_armhf.deb
 3237ba71d09436f52022b8dc070264249e363a00 132516 unbound-host-dbgsym_1.26.2-0+deb13u1_armhf.deb
 b27b638b3d52c44c5365d2f895c3c23bf4ad6813 235864 unbound-host_1.26.2-0+deb13u1_armhf.deb
 b2621d888eafaae4fba7a099b1b712ef28f35246 10463 unbound_1.26.2-0+deb13u1_armhf-buildd.buildinfo
 b98651e290913a226ce3f4d325596233164a7d7b 976940 unbound_1.26.2-0+deb13u1_armhf.deb
Checksums-Sha256:
 d8309e46921a4bac69b843a488862926c5516b45159639e04b56669477c29405 213828 libunbound-dev_1.26.2-0+deb13u1_armhf.deb
 6092e3e15aad803719d6f31c7b8d5cb8dfffc38c8f720a28b8c17e6aaf60a7dd 1391132 libunbound8-dbgsym_1.26.2-0+deb13u1_armhf.deb
 20eb719f37e9191f5b2a85f6482a03c2db61071a644031ec4941d9fa047c56a8 583704 libunbound8_1.26.2-0+deb13u1_armhf.deb
 a63fd315718e9d777ab8332b59bc18aa160836c8a4b9849f5096ce3b0b76e16a 180044 python3-unbound-dbgsym_1.26.2-0+deb13u1_armhf.deb
 325e657f72a207a3b7b8ddef7e68de6954b79612cd716fded3df64f32bd54c6c 243300 python3-unbound_1.26.2-0+deb13u1_armhf.deb
 4f4a3b1176fbbf7d1f5514e28c22746ecb6d3f497c5ef2ddc6f59a7a94c481f4 59708 unbound-anchor-dbgsym_1.26.2-0+deb13u1_armhf.deb
 d07048d490c9166688d4d9e41c694ec68d46143626a7cd0b365c754fc1d3401c 220428 unbound-anchor_1.26.2-0+deb13u1_armhf.deb
 8865aa041649b9fef797d18137701c3b4fd3833a479e5cc31fbf49de5b356231 5224928 unbound-dbgsym_1.26.2-0+deb13u1_armhf.deb
 3767a25d1492c944c9d9ea571f066a5b52b284f2df909973c0e77c977d27517e 132516 unbound-host-dbgsym_1.26.2-0+deb13u1_armhf.deb
 f731f4b0d52e8e7e0fe5d65a23cce5f9d319dd6aca3db5f6b133fc961f773860 235864 unbound-host_1.26.2-0+deb13u1_armhf.deb
 a1a0686e0aa668ffddb1a414175e79258405d340505f4e8e0493c6fa2659995b 10463 unbound_1.26.2-0+deb13u1_armhf-buildd.buildinfo
 a1a2a5bee2c3a7d7c0a096707f9a70cff9f9214b75133b8218bc5212492b9884 976940 unbound_1.26.2-0+deb13u1_armhf.deb
Files:
 8c49a7e801f52e53cb8c47e6155ce24c 213828 libdevel optional libunbound-dev_1.26.2-0+deb13u1_armhf.deb
 4c5034e5b32128f4d685b6918801437e 1391132 debug optional libunbound8-dbgsym_1.26.2-0+deb13u1_armhf.deb
 564f81578fb690a526f881a78b55e808 583704 libs optional libunbound8_1.26.2-0+deb13u1_armhf.deb
 c820c53dfe97d3a366dfe08db6ad8f90 180044 debug optional python3-unbound-dbgsym_1.26.2-0+deb13u1_armhf.deb
 f133f899f31036e2d62269a2528fca82 243300 python optional python3-unbound_1.26.2-0+deb13u1_armhf.deb
 87221c4e8db25e9bf1d5c1ab796f69f2 59708 debug optional unbound-anchor-dbgsym_1.26.2-0+deb13u1_armhf.deb
 4ffaf1f6121c85c8dfc6f492c13dff4c 220428 net optional unbound-anchor_1.26.2-0+deb13u1_armhf.deb
 846ea1990f4aa8897e0383d6af6d6317 5224928 debug optional unbound-dbgsym_1.26.2-0+deb13u1_armhf.deb
 8d9bdc65423d29a0e4581b8bf1818bbb 132516 debug optional unbound-host-dbgsym_1.26.2-0+deb13u1_armhf.deb
 76fc76ebe6fe578290a4d2e2c06bfaaf 235864 net optional unbound-host_1.26.2-0+deb13u1_armhf.deb
 eb722969325a9c3c3db79158b342fa06 10463 net optional unbound_1.26.2-0+deb13u1_armhf-buildd.buildinfo
 ffcb02626b5602e5dcef99a8078d64b7 976940 net optional unbound_1.26.2-0+deb13u1_armhf.deb

-----BEGIN PGP SIGNATURE-----
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=bYf1
-----END PGP SIGNATURE-----