-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 26 Nov 2025 23:12:47 +0300 Source: unbound Binary: libunbound-dev libunbound8 libunbound8-dbgsym python3-unbound python3-unbound-dbgsym unbound unbound-anchor unbound-anchor-dbgsym unbound-dbgsym unbound-host unbound-host-dbgsym Architecture: arm64 Version: 1.22.0-2+deb13u1 Distribution: trixie-security Urgency: high Maintainer: arm Build Daemon (arm-ubc-02) Changed-By: Michael Tokarev Description: libunbound-dev - static library, header files, and docs for libunbound libunbound8 - library implementing DNS resolution and validation python3-unbound - library implementing DNS resolution and validation (Python3 bindi unbound - validating, recursive, caching DNS resolver unbound-anchor - utility to securely fetch the root DNS trust anchor unbound-host - reimplementation of the 'host' command Closes: 1121446 Changes: unbound (1.22.0-2+deb13u1) trixie-security; urgency=high . [ Guilhem Moulin ] * Fix CVE-2025-11411: Cache poisoning vulnerability via NS RRSet injection * debian/salsa-ci.yml: Disable reprotest and lintian jobs, set RELEASE=trixie . [ Michael Tokarev ] * CVE-2025-11411-additional-nodata.patch -- additional fixes for CVE-2025-11411 (Closes: #1121446, CVE-2025-11411) * d/gbp.conf: set default branch to debian/trixie Checksums-Sha1: b464168f424395f6ba3a451393806744693d412a 667860 libunbound-dev_1.22.0-2+deb13u1_arm64.deb 689420d7693e201d047e2e0e505a8d03a18ad95d 1337236 libunbound8-dbgsym_1.22.0-2+deb13u1_arm64.deb 90615b33241626f58dbeff479dc7a67274797a7c 554020 libunbound8_1.22.0-2+deb13u1_arm64.deb b24ce75b88601b4aaa7b802cf95f6d8f36dbdea8 163160 python3-unbound-dbgsym_1.22.0-2+deb13u1_arm64.deb 0b2543195ac5c077d0d31ac6bd754d7c6b6d40e8 218864 python3-unbound_1.22.0-2+deb13u1_arm64.deb fd49d325ba2cded9855ff5f522b8d535760b2971 59280 unbound-anchor-dbgsym_1.22.0-2+deb13u1_arm64.deb f3ca9384fed52c64c4f0071d885d55a49a644b37 193864 unbound-anchor_1.22.0-2+deb13u1_arm64.deb 64fc0b33f132d501dcabdabae1585d9912a59f34 5412748 unbound-dbgsym_1.22.0-2+deb13u1_arm64.deb bd67a0ed0520d033cb4746e12c8017a65f80e570 132500 unbound-host-dbgsym_1.22.0-2+deb13u1_arm64.deb d4231ff5e80786ab497e3181f2aae22851be329b 215608 unbound-host_1.22.0-2+deb13u1_arm64.deb 50c2431fea1e31a42acec25ed1148d321438878e 10238 unbound_1.22.0-2+deb13u1_arm64-buildd.buildinfo 83f78a7eba7224a562de416efe78f063bcb0bbc3 952144 unbound_1.22.0-2+deb13u1_arm64.deb Checksums-Sha256: 1c4381a4f728d4c23344040f4cf98500e2420a33e10cc5037347358d1c38457e 667860 libunbound-dev_1.22.0-2+deb13u1_arm64.deb 93f824cf05f2cff90f1d060ca7fe0a473e41eb47895524920b2dabe292b77b1f 1337236 libunbound8-dbgsym_1.22.0-2+deb13u1_arm64.deb 19bbcfe18321b6c00c944a60efa508b3f437eba9c083b73cea21423737adbefe 554020 libunbound8_1.22.0-2+deb13u1_arm64.deb 2b69cae39396c385a0b40c32bcdeb997c0f982038f7ce40cc2b03315f8b26aa9 163160 python3-unbound-dbgsym_1.22.0-2+deb13u1_arm64.deb ab0341b8335c5d6d9a646513a1c8a70ae0b5dd3114ca9d2e8335fbd6cc484b6b 218864 python3-unbound_1.22.0-2+deb13u1_arm64.deb 84f06b45e23a92ef4efd23390d4d5adf69bc4ddf3ff8b420eaa75b469d9c017f 59280 unbound-anchor-dbgsym_1.22.0-2+deb13u1_arm64.deb 7607f293e8c9a7438442d9b2e4bb9f93d00ea9c87119387cf23f78610c6ee10b 193864 unbound-anchor_1.22.0-2+deb13u1_arm64.deb 2badf3e2edcded7f9dde3740890e308f9bf94f36bd2fbd78fc30e7142848fe6b 5412748 unbound-dbgsym_1.22.0-2+deb13u1_arm64.deb a29c442702b6ae804cf121a26c94230195d72b399036f0e5bea62950a94658e0 132500 unbound-host-dbgsym_1.22.0-2+deb13u1_arm64.deb 67dbd91dbc3712c9ca3f36e3acd344a32fd30899c56dbb1c92ba68d813a5d21d 215608 unbound-host_1.22.0-2+deb13u1_arm64.deb c68952429c690f69938b3c3834a6dec886e6a59d1001db39278b947f8fc65b61 10238 unbound_1.22.0-2+deb13u1_arm64-buildd.buildinfo 257eb626187ab76070f11e09c184794ea4d692015bde4eec38140f9d351ef596 952144 unbound_1.22.0-2+deb13u1_arm64.deb Files: d1b6f61547bd9a39d2f522e91764a6b9 667860 libdevel optional libunbound-dev_1.22.0-2+deb13u1_arm64.deb db0efdfca5dea62cbe2f6135cab32dde 1337236 debug optional libunbound8-dbgsym_1.22.0-2+deb13u1_arm64.deb 376a7f6932269a350c47663cd5843392 554020 libs optional libunbound8_1.22.0-2+deb13u1_arm64.deb c587e18e5bf9fc55885f7d831683334b 163160 debug optional python3-unbound-dbgsym_1.22.0-2+deb13u1_arm64.deb 41cc10af80f8c7068be9ff0d8f5bb39d 218864 python optional python3-unbound_1.22.0-2+deb13u1_arm64.deb 5a83f0c135dd935a16403b3e13443981 59280 debug optional unbound-anchor-dbgsym_1.22.0-2+deb13u1_arm64.deb a517289266ba05788c2018d7dd687692 193864 net optional unbound-anchor_1.22.0-2+deb13u1_arm64.deb 7a694dd66394f3d7876593bdf3c87490 5412748 debug optional unbound-dbgsym_1.22.0-2+deb13u1_arm64.deb d9d79f3cd19c077399622871e1015820 132500 debug optional unbound-host-dbgsym_1.22.0-2+deb13u1_arm64.deb 1636a9f03a690ecb3290a77cfc722bb9 215608 net optional unbound-host_1.22.0-2+deb13u1_arm64.deb 49bd717c6a913f603f9e0c7cbad9eea1 10238 net optional unbound_1.22.0-2+deb13u1_arm64-buildd.buildinfo 970d47aba12a98328e497a3a3b3aed80 952144 net optional unbound_1.22.0-2+deb13u1_arm64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEbIns2iWsAAdAqh2MS/ZIXkV8oLAFAmkqFsUACgkQS/ZIXkV8 oLDPig//fTqjrDFCV4l1XfwPR9hFV2MAYJXopc0yI3V5enELLyh8VZZeQTo861Yk b+CzjAraIa7Y7nxPIxtKTO8F8Z3EKB/sLHphwQ3sd+m9zuSXDye7v+0ucF6dmHC/ SxtIYVONVsdencLcU605Wwje6sDSGbD4BykQQ+XACvA2DBogj8zP0jvNVbcwFVkg DdhOLJHCFq9TTHUP6LZyPqxRSG2O694/1aTtGc6mdMIl2QDKDYmiWKnwvw94HQuZ MtPHB+tiNiS/tA4VS9GZ21R0elyqAoqyu9R0cZn1O8ZMoP3so+SDoUVINPoxFs7q 5/9rs72WyGzV+jQO+ubLLKV2UNEdlhf8y3R5/myT6sZlMpnEHgkJgngutqkteEkX apOiySqIAm9Yt6neEESKLwwxQZ2Vpxz9XXPxRQjqjJYrQHTT4r9cgTp/ubBA61yl FZNDAGWQJU723dHl6taqyqIXfTM29OMkgIJhCzJXZbhs2IaBrORcxeObtWvfZuEX 7X5vEGlNQdz+XdzzPOhm/5xi9MORtkH+abxUm1Gqjm7eCr2M9aNgD7yHpk4Vniqx PDvpso1Rv66IO7Nm6bxMCXcYWxbiB4+aCYJkYcQEcbvlTP+N2LjK+YN4t1jCfX9S sLcTRDTFn0JCb4gtSvv3JmthADteJcisRJP2PtF8Ycf4Hh0fqiM= =Y54f -----END PGP SIGNATURE-----