-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 26 Nov 2025 23:12:47 +0300
Source: unbound
Binary: libunbound-dev libunbound8 libunbound8-dbgsym python3-unbound python3-unbound-dbgsym unbound unbound-anchor unbound-anchor-dbgsym unbound-dbgsym unbound-host unbound-host-dbgsym
Architecture: amd64
Version: 1.22.0-2+deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: amd64 / i386 Build Daemon (x86-ubc-02) <buildd_amd64-x86-ubc-02@buildd.debian.org>
Changed-By: Michael Tokarev <mjt@tls.msk.ru>
Description:
 libunbound-dev - static library, header files, and docs for libunbound
 libunbound8 - library implementing DNS resolution and validation
 python3-unbound - library implementing DNS resolution and validation (Python3 bindi
 unbound    - validating, recursive, caching DNS resolver
 unbound-anchor - utility to securely fetch the root DNS trust anchor
 unbound-host - reimplementation of the 'host' command
Closes: 1121446
Changes:
 unbound (1.22.0-2+deb13u1) trixie-security; urgency=high
 .
   [ Guilhem Moulin ]
   * Fix CVE-2025-11411: Cache poisoning vulnerability via NS RRSet injection
   * debian/salsa-ci.yml: Disable reprotest and lintian jobs, set RELEASE=trixie
 .
   [ Michael Tokarev ]
   * CVE-2025-11411-additional-nodata.patch -- additional fixes
     for CVE-2025-11411 (Closes: #1121446, CVE-2025-11411)
   * d/gbp.conf: set default branch to debian/trixie
Checksums-Sha1:
 8af5db2c9d639195a48cbe7fdc705fc996327363 685380 libunbound-dev_1.22.0-2+deb13u1_amd64.deb
 04165039e71ae8734cbd1dea93f6cd34dfd90154 1336068 libunbound8-dbgsym_1.22.0-2+deb13u1_amd64.deb
 77814a7dd7eb08ba2a6d7a865d4edfab64b47390 598072 libunbound8_1.22.0-2+deb13u1_amd64.deb
 044c856add404f8bc369918287daca1a7fbeb8e3 167852 python3-unbound-dbgsym_1.22.0-2+deb13u1_amd64.deb
 61fc6b4c2bf24a34f0ffd7c5a167ee5339cddbac 219808 python3-unbound_1.22.0-2+deb13u1_amd64.deb
 e7b821a5e18723e816e0e138d381f4d566ad7621 59268 unbound-anchor-dbgsym_1.22.0-2+deb13u1_amd64.deb
 03de1f3002750f25691ecc6ec7e7b5869e9686f8 194760 unbound-anchor_1.22.0-2+deb13u1_amd64.deb
 3c04f1ec1cab1e6b09a924994edd63d8353811f0 5465596 unbound-dbgsym_1.22.0-2+deb13u1_amd64.deb
 c3a7e5c55a3f9a6e91757b3a8742ce97072b70d1 132932 unbound-host-dbgsym_1.22.0-2+deb13u1_amd64.deb
 d6018b7f3e4ea3cd4e8a34b5d9ed286b267296ff 217804 unbound-host_1.22.0-2+deb13u1_amd64.deb
 deffaa4bedf5c0e7f6e82f76a7d7faaa29b63fdb 10254 unbound_1.22.0-2+deb13u1_amd64-buildd.buildinfo
 f614ae9f56d776046d37a7b365812d44c2c655f4 1034604 unbound_1.22.0-2+deb13u1_amd64.deb
Checksums-Sha256:
 10dbef957da473f1c2d4af3edf4c879acc9d354b53c93b96182083d882378463 685380 libunbound-dev_1.22.0-2+deb13u1_amd64.deb
 a548321edfd363b28dfd60d5135fad30ad54c218773ac326ca4d08e013fc5bd8 1336068 libunbound8-dbgsym_1.22.0-2+deb13u1_amd64.deb
 ce9810feee90e3428e0fc11355762c7a3381593b1005a5d1cfaabbc658fc4b4b 598072 libunbound8_1.22.0-2+deb13u1_amd64.deb
 2b41fe1c87298cf93346d1ce8433bd6fb5474b8b9accd6a1addd9e3c287bc1b8 167852 python3-unbound-dbgsym_1.22.0-2+deb13u1_amd64.deb
 def6fc75eb2d810ba320e6d29ea324f24dcc95ecefbfc2bc9934b10af36784a7 219808 python3-unbound_1.22.0-2+deb13u1_amd64.deb
 1d086a56aae416d02c3941e349b8414dad4243b01e8e893b729ec8fd47c61b44 59268 unbound-anchor-dbgsym_1.22.0-2+deb13u1_amd64.deb
 92ae9fd243ba1ab8aa2ed3194a56a2cea0500ef384f5eab6b5a08ba8f84ffa80 194760 unbound-anchor_1.22.0-2+deb13u1_amd64.deb
 2f5e35339e1496bdcd9440aace1944f98c0d583834dc937d87ba8a8509e978ff 5465596 unbound-dbgsym_1.22.0-2+deb13u1_amd64.deb
 dfedc04b53430810fec4507b465c01276c73c0a39e1d20d55dc8de42538dca99 132932 unbound-host-dbgsym_1.22.0-2+deb13u1_amd64.deb
 4aadc09f511d56de2be1f8951f2ce939a43fd59176a8975f7457f36d0881617c 217804 unbound-host_1.22.0-2+deb13u1_amd64.deb
 0f0d5fb1f3d7b355a11dca3df608f2542c7fb93ac37903e9eddd9d91649334ed 10254 unbound_1.22.0-2+deb13u1_amd64-buildd.buildinfo
 3b06ee96653f47e3eedb30a7d15a4ee4cb3c5d58745fae85540a3f42fce146f5 1034604 unbound_1.22.0-2+deb13u1_amd64.deb
Files:
 dba34951127688ad817f432e6a9c6b60 685380 libdevel optional libunbound-dev_1.22.0-2+deb13u1_amd64.deb
 a7c13b93dd74fb4670dfcf59271702e6 1336068 debug optional libunbound8-dbgsym_1.22.0-2+deb13u1_amd64.deb
 84379fdc4354c1615734d205a3795221 598072 libs optional libunbound8_1.22.0-2+deb13u1_amd64.deb
 8ed7295d37973170fa9f1e14a40fc16d 167852 debug optional python3-unbound-dbgsym_1.22.0-2+deb13u1_amd64.deb
 7bf0a1be82c666770e7694f446fb0609 219808 python optional python3-unbound_1.22.0-2+deb13u1_amd64.deb
 2b278da9b67e5bacf5f75338d3717973 59268 debug optional unbound-anchor-dbgsym_1.22.0-2+deb13u1_amd64.deb
 f6aff4d673c52dae5328fec8c6a742ed 194760 net optional unbound-anchor_1.22.0-2+deb13u1_amd64.deb
 15fad2b71a7067eae9fcd5985d700436 5465596 debug optional unbound-dbgsym_1.22.0-2+deb13u1_amd64.deb
 ca9d232ab42d031812ea6f7bfc645380 132932 debug optional unbound-host-dbgsym_1.22.0-2+deb13u1_amd64.deb
 ccda578f53d64df9a3c8b45404a9bcdb 217804 net optional unbound-host_1.22.0-2+deb13u1_amd64.deb
 448e3d0a33f53116afaa9eb547933dfa 10254 net optional unbound_1.22.0-2+deb13u1_amd64-buildd.buildinfo
 faa98e3e6336a4db36d3a820d4010f80 1034604 net optional unbound_1.22.0-2+deb13u1_amd64.deb

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEc5vuvf2HND40bnI+8IREj/cRiTMFAmkqFtUACgkQ8IREj/cR
iTPULg/+J+EaWLb6jX+hgddJgVFQaQHonQm8uvLYYzDxJAhdwz2eU56IOntUTdEj
h0x+3U3kHKg1lfzgJBB0FprTQIO0upp0o+vVgFZLzC0PN4c4pdX8rdVGRWiEUSeL
J1Y7sa1bpBQIbaARMOOrU1O6bDczJva4lnWtGKxT9/oNqixDICXr7wm+WUpg7WQu
5BvwMXU34eb0mkfzYY5YC5eAdDWtw0YhEoyoFCSrgCV37TUg8sl3EF77wcirZL25
IMbLJqDTSpjGezYNmWj1OOUmyLMG6/ivWC6OAoINKlr1FAWMcpS8KMVfQsdFxx4e
Pyj/PXyt2K9dFKdw6vUa/hbvzB6umcArZ9vNOrBwiFggfMX716djSAQXDGghY6yW
K0fqjUdr4b/HUvERPDLm+D+zjXnfM65dzVDkaOhF6rtAWejBk3VGqU3dckusiFHo
8WJ1jnEqGRHrdNpUs6sGnTc28X4O9f6ytbVViUt6VSAts6S8hUMl3jXarzgqOMUU
ygN7TfpF5WdNCR8D/6DiwsahvtHYhFSq0mDH2MS7NYJFpvvGb2kgAVgTp7OFPApH
TOzW2S/WISul88Hzalt2GiFy5KxeS+7CWOFnLBARh+HxUwos/QGyOPWCEUCH2kdL
lOaBowmezqznD1Jk+SClKYSTnyB/0vhGWQhs+GwXEM0c+O894gI=
=bJMo
-----END PGP SIGNATURE-----