-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 21 Oct 2026 23:39:19 +0300
Source: unbound
Binary: libunbound-dev libunbound8 libunbound8-dbgsym python3-unbound python3-unbound-dbgsym unbound unbound-anchor unbound-anchor-dbgsym unbound-dbgsym unbound-host unbound-host-dbgsym
Architecture: amd64
Version: 1.26.2-0+deb13u1
Distribution: trixie-security
Urgency: medium
Maintainer: amd64 Build Daemon (x86-grnet-01) <buildd_amd64-x86-grnet-01@buildd.debian.org>
Changed-By: Michael Tokarev <mjt@tls.msk.ru>
Description:
 libunbound-dev - static library, header files, and docs for libunbound
 libunbound8 - library implementing DNS resolution and validation
 python3-unbound - library implementing DNS resolution and validation (Python3 bindi
 unbound    - validating, recursive, caching DNS resolver
 unbound-anchor - utility to securely fetch the root DNS trust anchor
 unbound-host - reimplementation of the 'host' command
Changes:
 unbound (1.26.2-0+deb13u1) trixie-security; urgency=medium
 .
   * new upstream security/bugfix release:
    o CVE-2026-97206 - severity: HIGH
      DoQ path-migration can lead to use-after-free
      on multi-threaded deployments
    o CVE-2026-50106 - severity: MEDIUM
      Possible insecure NXDOMAIN for non-existing records under a
      configured island trust anchor underneath an insecure parent
    o CVE-2026-96405 - severity: MEDIUM
      Aggregate DNS name chained pointer decompression work
      leads to degradation of service
    o CVE-2026-109125 - severity: MEDIUM
      Possible cache poisoning vulnerability via a cache side-channel
      exposed by 'unwanted-reply-threshold'
    o CVE-2026-35501 - severity: LOW
      Bypass of a configured island trust anchor underneath an insecure
      parent from an atacker-controlled NSEC record
Checksums-Sha1:
 b8eabddc2553c0a8e5ba779ccc7d1d7acaa21c7c 213828 libunbound-dev_1.26.2-0+deb13u1_amd64.deb
 5b94a243e52ede4ebc749713c5a1c283611c89c9 1401012 libunbound8-dbgsym_1.26.2-0+deb13u1_amd64.deb
 2e6702fc4bd2529b1e3f2fd7986e36e469b9f3ec 644244 libunbound8_1.26.2-0+deb13u1_amd64.deb
 6891a88ad009efab30d5a460bcc63287ae1da58d 171424 python3-unbound-dbgsym_1.26.2-0+deb13u1_amd64.deb
 638411fc5ea06205c07657d58ef30c5971ed9822 247020 python3-unbound_1.26.2-0+deb13u1_amd64.deb
 64746140a41144174a100c6318c9f5d5d1407def 59460 unbound-anchor-dbgsym_1.26.2-0+deb13u1_amd64.deb
 647595fc640dadfafc5a1740b45d166a235cca07 222512 unbound-anchor_1.26.2-0+deb13u1_amd64.deb
 3f81d1e71e03b56e4d74d5e9d93bb9379de11d3d 5772588 unbound-dbgsym_1.26.2-0+deb13u1_amd64.deb
 004fea132cfe455fb1eefa8e199dc2bb3dd4fbe9 132916 unbound-host-dbgsym_1.26.2-0+deb13u1_amd64.deb
 b71d8b026b82b6a25c4ad9f3471697f6d5a47dbd 244224 unbound-host_1.26.2-0+deb13u1_amd64.deb
 67926f66bb59eae8ef59de2a7e85cc9764ec4997 10600 unbound_1.26.2-0+deb13u1_amd64-buildd.buildinfo
 daa95d9ee59da3a376c2d8d0fab7a3126baa1281 1127932 unbound_1.26.2-0+deb13u1_amd64.deb
Checksums-Sha256:
 544d35986d9b31eae17e85ef63ed05c518cc5a8234374427ea085758dbc19139 213828 libunbound-dev_1.26.2-0+deb13u1_amd64.deb
 6892c89baf99732487c6daa14ada053dbc2e96393816e29f58a129c4814d6f31 1401012 libunbound8-dbgsym_1.26.2-0+deb13u1_amd64.deb
 5b057b041a39f40208ddf9aeff1b5581a6c3af68c9a96c784a0d6270f1943a1a 644244 libunbound8_1.26.2-0+deb13u1_amd64.deb
 854f16379e006bb81942985d40e99de6d5fc8bcf1efd36bca52d5ad9594cedfc 171424 python3-unbound-dbgsym_1.26.2-0+deb13u1_amd64.deb
 4392c1c2e2b269141a9ec1043853693ce85a26668c7daca5a996259713a297f5 247020 python3-unbound_1.26.2-0+deb13u1_amd64.deb
 60f5fc3df444821a130255b3fc4edb226f084fa728b5aabbd739372dea269a6c 59460 unbound-anchor-dbgsym_1.26.2-0+deb13u1_amd64.deb
 a4c50ed3818f938a71dafc9466c25cd0c4a219347044b51e9d94684e723ba1d6 222512 unbound-anchor_1.26.2-0+deb13u1_amd64.deb
 3aeb8d1d6455b8faebb52fa02c299d0cf1a7e9c7fed6d89c627dd905b518e952 5772588 unbound-dbgsym_1.26.2-0+deb13u1_amd64.deb
 e7b3fca4fe2ddd82ceb4cee0c1f8b4c276d82c3b56d44bbb7129c3f4cd3ec9f1 132916 unbound-host-dbgsym_1.26.2-0+deb13u1_amd64.deb
 1318b37ff8e93a744d753007be0519251f8b2edf4413a494049251516770b801 244224 unbound-host_1.26.2-0+deb13u1_amd64.deb
 77799366c3782c480f02137db9a51a1f4a8622faa8aaa41118434ca0fcb1eb9d 10600 unbound_1.26.2-0+deb13u1_amd64-buildd.buildinfo
 dd151cc98f4f570bf5f816f6e263229ba1cf499ebe3a44e9d7bea289619aafd6 1127932 unbound_1.26.2-0+deb13u1_amd64.deb
Files:
 98dfebe3a0727c00d2dc5d029aaf8b5c 213828 libdevel optional libunbound-dev_1.26.2-0+deb13u1_amd64.deb
 745d4e18160a9ef1c00800db66b69885 1401012 debug optional libunbound8-dbgsym_1.26.2-0+deb13u1_amd64.deb
 fe54aac8679c12344b7e2eb7505a80c2 644244 libs optional libunbound8_1.26.2-0+deb13u1_amd64.deb
 3e7d5444960ad7012748451a0eb0d245 171424 debug optional python3-unbound-dbgsym_1.26.2-0+deb13u1_amd64.deb
 39dfcd98a69626f5154a2479544c8618 247020 python optional python3-unbound_1.26.2-0+deb13u1_amd64.deb
 73a678511b14c08ec6c9111555aa6bfa 59460 debug optional unbound-anchor-dbgsym_1.26.2-0+deb13u1_amd64.deb
 f964b8dbdb4a39ce6b6bdeecdf53e34a 222512 net optional unbound-anchor_1.26.2-0+deb13u1_amd64.deb
 f90e7853684acd8f80110f5766e46902 5772588 debug optional unbound-dbgsym_1.26.2-0+deb13u1_amd64.deb
 8dc5135bda4ac7d16c213768b0c7928c 132916 debug optional unbound-host-dbgsym_1.26.2-0+deb13u1_amd64.deb
 6aa68035bdbe732825b903d2f3c172c8 244224 net optional unbound-host_1.26.2-0+deb13u1_amd64.deb
 974306d17fa73de7cd7545043163fb25 10600 net optional unbound_1.26.2-0+deb13u1_amd64-buildd.buildinfo
 5612b41f84f6d72968155d8220c95c88 1127932 net optional unbound_1.26.2-0+deb13u1_amd64.deb

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEPAUaMA0H0rOy6qBWf2INRiCdaWIFAmrZ11AACgkQf2INRiCd
aWKG6g/8D1Euzpqvxvaq4OA0vS+Z55IIdY+WN1En3R776L5SFbIQLtzNfWsdGe3P
z+CcDC7M3+KNpclWA6OkNvXuzZR6e4q4D7kBxjfU5lsdN7W1X2a4AoPBiElZkJpJ
GkGRtvvH/w5jImiYsAhzTxy03np5/xK3gcoWzreZLUwCKZDAyed0PlfzWBAEFkr6
YCZJ8PXlbayegmmBDcc2hsT92+uahM1dzWwAMf3w5bs3FeEnqXyYJkQEYxr2fgS5
BHgEY+b0heeY0K4y1zS8PuQWDNCQ2pUWNFDNgPnDtJTUL2HNfu3L34qWHKV3XW9X
Cs5f46VNES/OENo7jPcStbnQ0yLbxG1OQQqpYCSWwJechkwviW+5OrOSRv3wdMzz
fwmsO8UFYqckAS1omZGq2rDxLB0C+8L7rU79odCMg5paO3qx3+QORNZ5BEAev4Kd
9aP2mDVQJo9Hs7aJZPGkk+L10OWBNsyH6i29TX/m2U2n1GRIjeupFZFPISPgoavh
XXHxuFyAQnldNyktx7BDKKMUKYFV+DX2wOfRYs920FcQWG4Aijjif9+oBh4FCNMj
otj/fShALYXJqpkHXgSlFMRUJlQRU+0EAl2CtJCRU0FMlr/c6Av7CfKGdFVXP0pG
nL7XU8+8D5kLQP0M8CSjlVBaXDMbf1H5QZ6iX/275IMirWh7kA8=
=3JZs
-----END PGP SIGNATURE-----