-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 26 Nov 2025 23:12:47 +0300 Source: unbound Binary: libunbound-dev libunbound8 libunbound8-dbgsym python3-unbound python3-unbound-dbgsym unbound unbound-anchor unbound-anchor-dbgsym unbound-dbgsym unbound-host unbound-host-dbgsym Architecture: armhf Version: 1.22.0-2+deb13u1 Distribution: trixie-security Urgency: high Maintainer: arm Build Daemon (arm-ubc-04) Changed-By: Michael Tokarev Description: libunbound-dev - static library, header files, and docs for libunbound libunbound8 - library implementing DNS resolution and validation python3-unbound - library implementing DNS resolution and validation (Python3 bindi unbound - validating, recursive, caching DNS resolver unbound-anchor - utility to securely fetch the root DNS trust anchor unbound-host - reimplementation of the 'host' command Closes: 1121446 Changes: unbound (1.22.0-2+deb13u1) trixie-security; urgency=high . [ Guilhem Moulin ] * Fix CVE-2025-11411: Cache poisoning vulnerability via NS RRSet injection * debian/salsa-ci.yml: Disable reprotest and lintian jobs, set RELEASE=trixie . [ Michael Tokarev ] * CVE-2025-11411-additional-nodata.patch -- additional fixes for CVE-2025-11411 (Closes: #1121446, CVE-2025-11411) * d/gbp.conf: set default branch to debian/trixie Checksums-Sha1: b26ce0657252997b10abfab7293b48b5e62deadc 637700 libunbound-dev_1.22.0-2+deb13u1_armhf.deb 03240d1cbb53c76a0df7978045b1a4676ef34b74 1323100 libunbound8-dbgsym_1.22.0-2+deb13u1_armhf.deb 3449ec03f8841b6d265506bd6a705807361fb23e 539064 libunbound8_1.22.0-2+deb13u1_armhf.deb 20170345b8dca02da0302a5d20239c62dd89f2fb 176812 python3-unbound-dbgsym_1.22.0-2+deb13u1_armhf.deb 76cb9a9c78289d33208d43b469db0e7f388fc1df 216824 python3-unbound_1.22.0-2+deb13u1_armhf.deb cdbaa07b90058d8bda28631387abeecc8954d944 59388 unbound-anchor-dbgsym_1.22.0-2+deb13u1_armhf.deb 6cf2e6941df017e84e3a99d0893cc607f7718ff4 192664 unbound-anchor_1.22.0-2+deb13u1_armhf.deb 2ed6be0d531d3138a4652e2e626fa63f959c23bc 4958388 unbound-dbgsym_1.22.0-2+deb13u1_armhf.deb d6ae3854d2145db8272d38fb4f7de3adfc22581c 132640 unbound-host-dbgsym_1.22.0-2+deb13u1_armhf.deb 2162e51930c9c7c7acffbcb2da7228766f130ddc 209616 unbound-host_1.22.0-2+deb13u1_armhf.deb 889117782a9930ec6a981c456279ca6512ddb283 10117 unbound_1.22.0-2+deb13u1_armhf-buildd.buildinfo afbfe62862ec70d08cf1c068ebfa353241d69e09 890888 unbound_1.22.0-2+deb13u1_armhf.deb Checksums-Sha256: e0740aadd687173e48125c37c62323b98bba22e9ab5ba07357310d2d125c9a34 637700 libunbound-dev_1.22.0-2+deb13u1_armhf.deb 52912306676bd3a07d277ed914175b08dd04ec5e92f4ed0cf10e7a4f2d3509b0 1323100 libunbound8-dbgsym_1.22.0-2+deb13u1_armhf.deb c0360629859897ca99e2863a9f2e1c0b8abba1bd2a2a7cb1278463d98916861d 539064 libunbound8_1.22.0-2+deb13u1_armhf.deb 9e34191dd29aebac2045c088ab2d3bf3c148088bf07c4eb5dfe0f9e7221ae123 176812 python3-unbound-dbgsym_1.22.0-2+deb13u1_armhf.deb 7593565a480667fc6fe6281cca07dbf68564d24fd6a393e12c2db6607f7ce9f8 216824 python3-unbound_1.22.0-2+deb13u1_armhf.deb e1941a79b6172287cd3b173ae7e694fea5eab9c8b9b55cec76fb393f38bc3301 59388 unbound-anchor-dbgsym_1.22.0-2+deb13u1_armhf.deb f2e05a9dfec92a623c9e52be56d24570b288f7503f4eac4c712807af8fbbfed3 192664 unbound-anchor_1.22.0-2+deb13u1_armhf.deb b2a19a585f99809e217071abba101b31be1aff4a24bd3c107ebf6c1b04dda101 4958388 unbound-dbgsym_1.22.0-2+deb13u1_armhf.deb 464f5d27bf5e019b8a35bf8adfe2b3088c46c8519f2de479c969e1fd2fc938cf 132640 unbound-host-dbgsym_1.22.0-2+deb13u1_armhf.deb 0dc8d33d7381670f6bb9c5a28bbf4b536187f8b971a816c7e24a7734847789f7 209616 unbound-host_1.22.0-2+deb13u1_armhf.deb 8720ce09e3d777143119698641a76f7de1598247495f17abde67e0333193cec9 10117 unbound_1.22.0-2+deb13u1_armhf-buildd.buildinfo 16d3b366ccb2c967da64fe6bb6c18628a7309721062126c29689cde333223107 890888 unbound_1.22.0-2+deb13u1_armhf.deb Files: c89cd668a647176d551523f53a7e7e74 637700 libdevel optional libunbound-dev_1.22.0-2+deb13u1_armhf.deb e51576db1963a7358751487580c9ba2d 1323100 debug optional libunbound8-dbgsym_1.22.0-2+deb13u1_armhf.deb ff05f38aff80d4bb799d4278c071f5f4 539064 libs optional libunbound8_1.22.0-2+deb13u1_armhf.deb 89586ed355f91adf01a124e2689732ff 176812 debug optional python3-unbound-dbgsym_1.22.0-2+deb13u1_armhf.deb 9297616af22c6ea7cdad6f7ee5dc8dba 216824 python optional python3-unbound_1.22.0-2+deb13u1_armhf.deb 0dd7a14afa843b366e4b8069efcfd8dc 59388 debug optional unbound-anchor-dbgsym_1.22.0-2+deb13u1_armhf.deb 3ce070397ce693b36e48c7c6aa4ea43b 192664 net optional unbound-anchor_1.22.0-2+deb13u1_armhf.deb 2e1e0c4ee90dfb399b6980390e4d5d8d 4958388 debug optional unbound-dbgsym_1.22.0-2+deb13u1_armhf.deb 99857b7ae37ba6a0ddfbd9ec8d4eb41b 132640 debug optional unbound-host-dbgsym_1.22.0-2+deb13u1_armhf.deb cc55f7b8d7cb9fbe302578e9ec5a4372 209616 net optional unbound-host_1.22.0-2+deb13u1_armhf.deb 0b9ebe92627b11ebe0aaff7bc1fb6002 10117 net optional unbound_1.22.0-2+deb13u1_armhf-buildd.buildinfo 81d041d60b3578eb1a6fa0df44a89c4d 890888 net optional unbound_1.22.0-2+deb13u1_armhf.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEUPFH3FhY8nQZGtLwVLd4YzMSDKEFAmkqFvEACgkQVLd4YzMS DKGZzA//eGus+GhXY+nWM4p/XaRZceC3CN1XjpPBAqwH/Z5mQ/naiZ6cbqaJsSjA qe8lHBnwtZWyzqusZrleK4rd4nlGLqgQukUzFW1RhaEKhsi/jQr0tcgi9qdneFXQ 9qFiYcF/EFreixhSbJJbg4fS3IYYIc3x5EdxLR4gvAqMxezmAuUVjd9c7yT2mBr5 3ZPE0g31bWDZjuwo7oGcTAvpOAmEjD+R8cP2OHncgNgSF9zZStrjHLftKeEFoRUE MDrP4iCBlD8CORk2a6aXUu0eTWMKw+uSpzSf+VHqfo7DT0SLPHIACjocK0uSP14R ol31QoSqYrC4tsR12Lv8SRNVIMB+zF5tpRHnyCNo9HLl5TpfuEbwc5MiTg3cLWCn clemVI0kLtBd0XArjUaWN0/BronIFWX5qRmMjc9pNBJPnJjjkr3PevYe2Bwfjaxt 3ZPJ9zgMo8yG4LBhSr2I7z2vcP9SvUetWTcZhvru5vcKphDgs0svTuOpcefJd3oX KjIzNq5MZEHHlNXBhN//AoyheZAz1UovSThKpogs7FrruKwooJqsaXy7m/rbmJjJ 6osdj0Nswx68DnAeADb7kOv1RiUVeWJKFgWkQfrBDE84diQSVXrYUFul8K9Zyxjr nxXbGqtwpUWRwP21fPJaL5X2Yzowd6PzsgyM5PN3miQ3vhbAPmM= =GmHU -----END PGP SIGNATURE-----