-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 21 Oct 2026 23:39:19 +0300 Source: unbound Binary: libunbound-dev libunbound8 libunbound8-dbgsym python3-unbound python3-unbound-dbgsym unbound unbound-anchor unbound-anchor-dbgsym unbound-dbgsym unbound-host unbound-host-dbgsym Architecture: armel Version: 1.26.2-0+deb13u1 Distribution: trixie-security Urgency: medium Maintainer: armel Build Daemon (arm-conova-01) Changed-By: Michael Tokarev Description: libunbound-dev - static library, header files, and docs for libunbound libunbound8 - library implementing DNS resolution and validation python3-unbound - library implementing DNS resolution and validation (Python3 bindi unbound - validating, recursive, caching DNS resolver unbound-anchor - utility to securely fetch the root DNS trust anchor unbound-host - reimplementation of the 'host' command Changes: unbound (1.26.2-0+deb13u1) trixie-security; urgency=medium . * new upstream security/bugfix release: o CVE-2026-97206 - severity: HIGH DoQ path-migration can lead to use-after-free on multi-threaded deployments o CVE-2026-50106 - severity: MEDIUM Possible insecure NXDOMAIN for non-existing records under a configured island trust anchor underneath an insecure parent o CVE-2026-96405 - severity: MEDIUM Aggregate DNS name chained pointer decompression work leads to degradation of service o CVE-2026-109125 - severity: MEDIUM Possible cache poisoning vulnerability via a cache side-channel exposed by 'unwanted-reply-threshold' o CVE-2026-35501 - severity: LOW Bypass of a configured island trust anchor underneath an insecure parent from an atacker-controlled NSEC record Checksums-Sha1: b0613f5f0c56d8974ae27442072ed979a433b92f 213832 libunbound-dev_1.26.2-0+deb13u1_armel.deb 545b223d50fcc05df72a2d483f7575478c2dc188 1374320 libunbound8-dbgsym_1.26.2-0+deb13u1_armel.deb 47fe903341b6571df7adddb5baf32665848ac402 576540 libunbound8_1.26.2-0+deb13u1_armel.deb 1cc105c525aa231c3de47c6e78cb212a33e507ed 179296 python3-unbound-dbgsym_1.26.2-0+deb13u1_armel.deb c22fb0416caf5de1da56cf82775ba17147dfffc3 242324 python3-unbound_1.26.2-0+deb13u1_armel.deb 66b8fedc0882945e87b717f1078a703220b2c89f 58920 unbound-anchor-dbgsym_1.26.2-0+deb13u1_armel.deb 43f2827bcfcc49cccf1d20e57f0514e605d64296 220244 unbound-anchor_1.26.2-0+deb13u1_armel.deb 956202ecad05b9547d0fb90af1629f91ecf15ed1 5130156 unbound-dbgsym_1.26.2-0+deb13u1_armel.deb e5dd37d396426ce1ac1fa5742e48a01ce3f1f2f5 131672 unbound-host-dbgsym_1.26.2-0+deb13u1_armel.deb 3a03534ec19cadef6c14cdd97922af058fbe0ef7 237704 unbound-host_1.26.2-0+deb13u1_armel.deb cf5cf2d38c4ebcad37acb205ede104ac128d542e 10449 unbound_1.26.2-0+deb13u1_armel-buildd.buildinfo 98cc1967711f7683fd851149e8e3b3b7953c9c8b 972600 unbound_1.26.2-0+deb13u1_armel.deb Checksums-Sha256: 2e5751414b23fed9856b7ecfc261905a08fe568fafaf93b85ee6110909b8e393 213832 libunbound-dev_1.26.2-0+deb13u1_armel.deb af289234ba26d2dd5fb9485645af279b4e7de23557018cd121d27e8237f5eb9b 1374320 libunbound8-dbgsym_1.26.2-0+deb13u1_armel.deb 7bc59e3a492c61b489f4b4337eec71a2afaafd2d9c46343f5b99b69f900dba16 576540 libunbound8_1.26.2-0+deb13u1_armel.deb 2a5826ebd94e8e4eaa407a846176686a0e2f18a5ae5b31857cb44cdaa651436e 179296 python3-unbound-dbgsym_1.26.2-0+deb13u1_armel.deb ce1502267a1e299ccff81d794f15047c3b259e4bf8ea751674816dbc846416bc 242324 python3-unbound_1.26.2-0+deb13u1_armel.deb 563974767c5e4dbd7fb0ff26abcec0d25c554b2d82071f950a5c7a4c42ba312c 58920 unbound-anchor-dbgsym_1.26.2-0+deb13u1_armel.deb 2704f85ee53755b946ef5e0ff5858f02aa312784d556adb8321815116e2c4f2a 220244 unbound-anchor_1.26.2-0+deb13u1_armel.deb 1e129493c16571d7f7d41013facff56daf15f6122e8ec8fad356b0ebadbe0859 5130156 unbound-dbgsym_1.26.2-0+deb13u1_armel.deb 36736f810955a2ecf674228acef752b2d7a29f8ded10332cd02de2eaa8390164 131672 unbound-host-dbgsym_1.26.2-0+deb13u1_armel.deb 5693454591c99abd1e932c1151a3f5bcb6873188f0be93e0ea49ee8ecc632c8b 237704 unbound-host_1.26.2-0+deb13u1_armel.deb 8084435b2aa59fa585158d7de191d42bc175e931980833db4a1d4b28153646af 10449 unbound_1.26.2-0+deb13u1_armel-buildd.buildinfo 84afc569aefb752eeb794a9fb6f01e906bb998be997321db1a640f3950711c23 972600 unbound_1.26.2-0+deb13u1_armel.deb Files: 5dfe37c1d9467d8bb48659f36e4cf916 213832 libdevel optional libunbound-dev_1.26.2-0+deb13u1_armel.deb 374fa0a6761c9f2d263dc3d7c29c9224 1374320 debug optional libunbound8-dbgsym_1.26.2-0+deb13u1_armel.deb 2aadd76be8e9e41c3be25fe055207c2e 576540 libs optional libunbound8_1.26.2-0+deb13u1_armel.deb 820bd016d87f02feb45da09b935b8112 179296 debug optional python3-unbound-dbgsym_1.26.2-0+deb13u1_armel.deb 9a62cd5cfecec4f5ea60c0426f197523 242324 python optional python3-unbound_1.26.2-0+deb13u1_armel.deb 8a26e6b806edc545fd0625c6681790d5 58920 debug optional unbound-anchor-dbgsym_1.26.2-0+deb13u1_armel.deb 0a62e549aab85c51e292b5391adc29b5 220244 net optional unbound-anchor_1.26.2-0+deb13u1_armel.deb bac06c733e83ee7cff931d9ec5b33086 5130156 debug optional unbound-dbgsym_1.26.2-0+deb13u1_armel.deb 4ae5441db0adeeedb8a6884f78868328 131672 debug optional unbound-host-dbgsym_1.26.2-0+deb13u1_armel.deb a91ee1c83859db8f39bf3b7f62edc277 237704 net optional unbound-host_1.26.2-0+deb13u1_armel.deb 3074be30477f5e3e24c22e82d2676c86 10449 net optional unbound_1.26.2-0+deb13u1_armel-buildd.buildinfo 66ca33bd79a793e8b222f15e415ed1d1 972600 net optional unbound_1.26.2-0+deb13u1_armel.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEdK9iafpA71gaFfL5MLZgEo1cLWsFAmrZ07cACgkQMLZgEo1c LWtaJQ//fPHk6oJbbvz5Clepa1laKl/59gW/L2ybcBTJuFAa7y/xlcYy2MgZrBQ9 1gO0U1YHaYYtFdmZGcLcl53O1CebpEeq2i/SHIDQTsRDgVXVSBi1jQ9SWQP20LFy 2KxYBttSDQs2TjSqKPGSgo0lSuLa59o3A6Pj+pSJqZatWyVx1bXqIXodqqxcwlw+ Lgpy73sMS763aW8+Tru8KTPofeN2KxfXPtmptrgwtuw5Y0ar6uzHBdf6pbek86Wm W6GJvKxrkAc+UygLKVRTwS50hFvT8KqflfOGNdYnfTnwloh8ojyAmqGNj7saDMkR yCmNoVqFnJwYCmdkE1DDKEI3WqBRqcFxYyJa01ofUJzX0zAx6DV1z6DlbrXJ2W45 Ok9AVtOOIOvhfkCGNq0ulCe754xXHXhq1sHXYgy4Jh8kqL+/i5p51h1tmFst+yiL zn0mWslHKWzg4plzWc+y4GFjB/lS8wgL7JYcfU7sZS9XQDS6e63SbZFHkJ13Cdeu w5gdZRAcr1zAWcNUKOCUFrse4lReLchoXmrkr0dPEaQjmBHAJeML6wITyxQm+dli JaRub3rYs+DDDRjDDPbuyKEjORrC1kTTLcQmXikod7vezR6HSSVdx3RWvr37bfJO VsPRWSlGFtP/Q4WeLGzkVRiTDVYl3GEUSEHLV0J2B9jxsi4JQYY= =mGfK -----END PGP SIGNATURE-----