-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 26 Nov 2025 23:12:47 +0300 Source: unbound Binary: libunbound-dev libunbound8 libunbound8-dbgsym python3-unbound python3-unbound-dbgsym unbound unbound-anchor unbound-anchor-dbgsym unbound-dbgsym unbound-host unbound-host-dbgsym Architecture: riscv64 Version: 1.22.0-2+deb13u1 Distribution: trixie-security Urgency: high Maintainer: riscv64 Build Daemon (rv-osuosl-01) Changed-By: Michael Tokarev Description: libunbound-dev - static library, header files, and docs for libunbound libunbound8 - library implementing DNS resolution and validation python3-unbound - library implementing DNS resolution and validation (Python3 bindi unbound - validating, recursive, caching DNS resolver unbound-anchor - utility to securely fetch the root DNS trust anchor unbound-host - reimplementation of the 'host' command Closes: 1121446 Changes: unbound (1.22.0-2+deb13u1) trixie-security; urgency=high . [ Guilhem Moulin ] * Fix CVE-2025-11411: Cache poisoning vulnerability via NS RRSet injection * debian/salsa-ci.yml: Disable reprotest and lintian jobs, set RELEASE=trixie . [ Michael Tokarev ] * CVE-2025-11411-additional-nodata.patch -- additional fixes for CVE-2025-11411 (Closes: #1121446, CVE-2025-11411) * d/gbp.conf: set default branch to debian/trixie Checksums-Sha1: 2ff464c07d1dc418d86f1dea3618437bf4595c5d 1412540 libunbound-dev_1.22.0-2+deb13u1_riscv64.deb 88546455101f994bb8aa3e44260c858ea11d6d99 1292856 libunbound8-dbgsym_1.22.0-2+deb13u1_riscv64.deb 2582ed7292b91c48c06d85507ae874aa072eaa02 605216 libunbound8_1.22.0-2+deb13u1_riscv64.deb 48efeb3dc6211c77d1c01e06406eae2af8eb447d 146484 python3-unbound-dbgsym_1.22.0-2+deb13u1_riscv64.deb deecf84861a0e088c61d0cd7d17e43baa9f264b7 220744 python3-unbound_1.22.0-2+deb13u1_riscv64.deb 50f33f64f46cb6462650967ccb193050d9387883 56888 unbound-anchor-dbgsym_1.22.0-2+deb13u1_riscv64.deb 62697fa30f4a028f883e29b3153eaff8ac06e6cc 194572 unbound-anchor_1.22.0-2+deb13u1_riscv64.deb 3f14488fdb218b603c6f0282074d04fb1e8530c5 5133464 unbound-dbgsym_1.22.0-2+deb13u1_riscv64.deb 554c4aa7fb66627a6c35636fa67e2929d5a2b781 128392 unbound-host-dbgsym_1.22.0-2+deb13u1_riscv64.deb 04fe05b7cfce6b84829b309f2a551840821e3395 220440 unbound-host_1.22.0-2+deb13u1_riscv64.deb 4a48ad1843be23768ee64d752a3b4a232ca90a42 10255 unbound_1.22.0-2+deb13u1_riscv64-buildd.buildinfo b799ee13284445010bd2f5b9bd353d6cccb244dd 1046060 unbound_1.22.0-2+deb13u1_riscv64.deb Checksums-Sha256: fd0cf269e4924984baa764c94bb8570636d113494eb4bd459355c02e0985100b 1412540 libunbound-dev_1.22.0-2+deb13u1_riscv64.deb 86121e43656c38196edcd60c850dbf70d340da67751fc7d377b0c00fba6700bf 1292856 libunbound8-dbgsym_1.22.0-2+deb13u1_riscv64.deb 2d90948475c24da7e61b8fcc8086b9cd7452a049f0fac1e0793773859f77e93a 605216 libunbound8_1.22.0-2+deb13u1_riscv64.deb 8ca71a6f3f63061cf2f93b06c9efb4999e1a7dc00c40e1b66edcfb06d56f5543 146484 python3-unbound-dbgsym_1.22.0-2+deb13u1_riscv64.deb 998e8268e3660697c063d2127c51b83a1974170d6288405ccbf4cc29fe958b56 220744 python3-unbound_1.22.0-2+deb13u1_riscv64.deb e0d1d3cecd33b1eff046a1c1dca3f2152cc6cd0c6e17a286c97ddb8463c43dfd 56888 unbound-anchor-dbgsym_1.22.0-2+deb13u1_riscv64.deb 2f5e09f72ca556bad3d42c29fc21446b6157f96ec13a2c03829a4a2f76c240e1 194572 unbound-anchor_1.22.0-2+deb13u1_riscv64.deb 76c312cbba2fcee54540193157ed4e24e3d1c1f0ff4483696ee5fe5757f89dbf 5133464 unbound-dbgsym_1.22.0-2+deb13u1_riscv64.deb b7d1a13d2859300099c0972da78d737431ab50945535572824cca39c4697a34d 128392 unbound-host-dbgsym_1.22.0-2+deb13u1_riscv64.deb 764fdaa328268e69b49f708de64a6b62003fdc9bc3e6383806dbb4cc7491bd56 220440 unbound-host_1.22.0-2+deb13u1_riscv64.deb 82cb7fa54d498d45f06330d7a0d41daa564777c9487d39e404c23628b9c24f86 10255 unbound_1.22.0-2+deb13u1_riscv64-buildd.buildinfo eb8aef1d5e71e33aba70bf4a2487cdda06188172d1968e1eec16a0ed8329d9e4 1046060 unbound_1.22.0-2+deb13u1_riscv64.deb Files: e7f346ca9513199c2566092e9c35e776 1412540 libdevel optional libunbound-dev_1.22.0-2+deb13u1_riscv64.deb 866815a0de2049e58fe6e47f67a2a84c 1292856 debug optional libunbound8-dbgsym_1.22.0-2+deb13u1_riscv64.deb b7b0c44e14abd707747f323173b0f4ba 605216 libs optional libunbound8_1.22.0-2+deb13u1_riscv64.deb 713128b4a058e2a05654546c907ee819 146484 debug optional python3-unbound-dbgsym_1.22.0-2+deb13u1_riscv64.deb 6a8e27e4cf998cb48149d50013f15352 220744 python optional python3-unbound_1.22.0-2+deb13u1_riscv64.deb b80162e53785dbef1fa795365e9825a2 56888 debug optional unbound-anchor-dbgsym_1.22.0-2+deb13u1_riscv64.deb 4cd409c17af013f95ba97a45cb1bc098 194572 net optional unbound-anchor_1.22.0-2+deb13u1_riscv64.deb 0fb74b01e293a27e3897930e9ce57960 5133464 debug optional unbound-dbgsym_1.22.0-2+deb13u1_riscv64.deb 47a6dd06515bd530828943f2c5f1f222 128392 debug optional unbound-host-dbgsym_1.22.0-2+deb13u1_riscv64.deb 066f6ce8283e1912943655070b8ae84f 220440 net optional unbound-host_1.22.0-2+deb13u1_riscv64.deb a01269a1fa7c953f9927d0b7956a48e5 10255 net optional unbound_1.22.0-2+deb13u1_riscv64-buildd.buildinfo 6122b62320163920a80c5cdf305183be 1046060 net optional unbound_1.22.0-2+deb13u1_riscv64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEENK+hVnkBqfxdi5PFdFCyT2lodXwFAmkqJhoACgkQdFCyT2lo dXz5mhAAgGug4idukhq7/0EX58+79MjV7Iz+TMeT/WDL+B5ekc/wCX6qo7J2WpBc UTjFDYgn/HLr/iVXq3gQF5gSb+0nVIB5P/4FM2lE5+XwBef+kB06c78ypoRljHya H2k2sdX6Cfp6AgdsunQypQ6X1jsULahml76MSJKjwWUFb85kJcVa4iY56Wgea04Z +6/cds9IciFe14Vj/17WhoOnq2FPXO62Ifavluxl0nknOBTI5j4lDszAilesJKdE 2uLPmvmkUX/XlTe0MHNsEy3OEp5nIxgl0v/ESLISIb4vRsThy2sacMiT6SnkFppQ O+1XGIuWS4gMz2w0qsO09Wje9QUkKB9fq+K1MZrcVfqTXFowvDDoXyfh0+v/BghT KCRhUyafG4/6teozT4A+XwSzAtCTO8yTcAwhXxQlK0nSbkyfQYMAfzCYaHsWJ59t 3E4ZJI172alkVSu45Gq7JvIYmz9HSmYzZr5uzX+/cx9Fe9FqxHSR9I/jKw3Uq9vp 85nIRVG/Ad4l8NfhCkZvlQ4a7sC07p6ilW0sfok0q8HUCCtouq82CcAVjH/6ZpeM qpXuLrsJukU8ePHwm/8Mp17wqqO3Klc5Dn5PdeIIknovmDw1MvYvMjhjNeOynrU6 6ST7BoupSaT6BwrLJ8Be+u30oJZCFWof/v2jNyGFNFNp4NIdCrQ= =uGij -----END PGP SIGNATURE-----