-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 21 Oct 2026 23:39:19 +0300
Source: unbound
Binary: libunbound-dev libunbound8 libunbound8-dbgsym python3-unbound python3-unbound-dbgsym unbound unbound-anchor unbound-anchor-dbgsym unbound-dbgsym unbound-host unbound-host-dbgsym
Architecture: riscv64
Version: 1.26.2-0+deb13u1
Distribution: trixie-security
Urgency: medium
Maintainer: riscv64 Build Daemon (rv-osuosl-04) <buildd_riscv64-rv-osuosl-04@buildd.debian.org>
Changed-By: Michael Tokarev <mjt@tls.msk.ru>
Description:
 libunbound-dev - static library, header files, and docs for libunbound
 libunbound8 - library implementing DNS resolution and validation
 python3-unbound - library implementing DNS resolution and validation (Python3 bindi
 unbound    - validating, recursive, caching DNS resolver
 unbound-anchor - utility to securely fetch the root DNS trust anchor
 unbound-host - reimplementation of the 'host' command
Changes:
 unbound (1.26.2-0+deb13u1) trixie-security; urgency=medium
 .
   * new upstream security/bugfix release:
    o CVE-2026-97206 - severity: HIGH
      DoQ path-migration can lead to use-after-free
      on multi-threaded deployments
    o CVE-2026-50106 - severity: MEDIUM
      Possible insecure NXDOMAIN for non-existing records under a
      configured island trust anchor underneath an insecure parent
    o CVE-2026-96405 - severity: MEDIUM
      Aggregate DNS name chained pointer decompression work
      leads to degradation of service
    o CVE-2026-109125 - severity: MEDIUM
      Possible cache poisoning vulnerability via a cache side-channel
      exposed by 'unwanted-reply-threshold'
    o CVE-2026-35501 - severity: LOW
      Bypass of a configured island trust anchor underneath an insecure
      parent from an atacker-controlled NSEC record
Checksums-Sha1:
 30229683456c8d03be3efac37c4b162fa2b576a6 213832 libunbound-dev_1.26.2-0+deb13u1_riscv64.deb
 64eb193971bb471f4e3d72c294b2540ab5e6de4a 1357556 libunbound8-dbgsym_1.26.2-0+deb13u1_riscv64.deb
 e57d0184331fb29cf33d0d88d861ea3d97f51b1a 650700 libunbound8_1.26.2-0+deb13u1_riscv64.deb
 eb5f5ae0307ab52956ca891233d07f4a786b8c96 149584 python3-unbound-dbgsym_1.26.2-0+deb13u1_riscv64.deb
 fb3867446a29c16940645b4e4592fd37cf81603a 247708 python3-unbound_1.26.2-0+deb13u1_riscv64.deb
 1f0144455f82e44b121c43733a29e0415f662b0f 57172 unbound-anchor-dbgsym_1.26.2-0+deb13u1_riscv64.deb
 a383b19ba146fbad021e160b5fea1b22c1009871 222284 unbound-anchor_1.26.2-0+deb13u1_riscv64.deb
 916acce89dda068523c27d76a6f2a7d43c1e64b7 5457940 unbound-dbgsym_1.26.2-0+deb13u1_riscv64.deb
 cc3e9d6e1274df4e33120bf23465c4e055aa1124 128056 unbound-host-dbgsym_1.26.2-0+deb13u1_riscv64.deb
 221322cf33b7276c0a0c0b9fa0af3fd989fb9d36 247732 unbound-host_1.26.2-0+deb13u1_riscv64.deb
 1209650af3365d477c5de21e6e067718fe960049 10598 unbound_1.26.2-0+deb13u1_riscv64-buildd.buildinfo
 851448838459d27ecc3760731daa7d055dfc4a6a 1145580 unbound_1.26.2-0+deb13u1_riscv64.deb
Checksums-Sha256:
 7a1a6b29c14fc4008d9eef2bac90c6860e4dbb4d5f0c7e64e4f3f6dd2729b577 213832 libunbound-dev_1.26.2-0+deb13u1_riscv64.deb
 eed34b95309b750269e897d6fa0bbed7471a66faa27330644781e6b1a53068ed 1357556 libunbound8-dbgsym_1.26.2-0+deb13u1_riscv64.deb
 ffabb9cca5caf90d02126fb26265cc3e124ae9d604705840d9f360d6202b6212 650700 libunbound8_1.26.2-0+deb13u1_riscv64.deb
 e28309119e1923a49f44a7fbfdd51c58c538f9c71908d6276618a66c6f57b601 149584 python3-unbound-dbgsym_1.26.2-0+deb13u1_riscv64.deb
 def15e134f77f6c25799c2d101d0c294317126d7ca8ca2c3b5eb552ca36b59f9 247708 python3-unbound_1.26.2-0+deb13u1_riscv64.deb
 dee0aed057404760f67ff1468f47eb57b741bfa35f2821111141d57b99e3c5c7 57172 unbound-anchor-dbgsym_1.26.2-0+deb13u1_riscv64.deb
 1195f76c8ed8ae50c4abaa8a359c2d254f00922a3c4116a80da896d194e14acc 222284 unbound-anchor_1.26.2-0+deb13u1_riscv64.deb
 e2d3fa24cffdf7cfef8e301dc9b0c59d69c85dffc0e7ba4cc2dc580e05d94349 5457940 unbound-dbgsym_1.26.2-0+deb13u1_riscv64.deb
 739bd1864ab3fd9612d373d6c9134b1272dd8712dcf074125195ef9e54ad1a9a 128056 unbound-host-dbgsym_1.26.2-0+deb13u1_riscv64.deb
 06157eee2a7a48599abbe84a4b58699c1087512118e273ce1e2b7a5db371c3eb 247732 unbound-host_1.26.2-0+deb13u1_riscv64.deb
 76e1437f8939b47e4aaed4431d2a055c85e46727d2b216bda37d611479a2ea43 10598 unbound_1.26.2-0+deb13u1_riscv64-buildd.buildinfo
 57a77e5da02d94bfb5be0dd3068cc67868c004179c3e3403c5cd74359a96f191 1145580 unbound_1.26.2-0+deb13u1_riscv64.deb
Files:
 de8bd1d34eade44eecc18a801c1939a2 213832 libdevel optional libunbound-dev_1.26.2-0+deb13u1_riscv64.deb
 bf223651e49a26761ca2b20a4fd4fd7f 1357556 debug optional libunbound8-dbgsym_1.26.2-0+deb13u1_riscv64.deb
 7793a431c4fd6a363e5d7ca5c039c8fa 650700 libs optional libunbound8_1.26.2-0+deb13u1_riscv64.deb
 307d11c1b5a363eac7318139c622e7f2 149584 debug optional python3-unbound-dbgsym_1.26.2-0+deb13u1_riscv64.deb
 7649494733ecf1ffd5eba5b23134deec 247708 python optional python3-unbound_1.26.2-0+deb13u1_riscv64.deb
 08461bd56f67f4b3f36a6b3ad3b6db6a 57172 debug optional unbound-anchor-dbgsym_1.26.2-0+deb13u1_riscv64.deb
 87241f82db11448f303df0c7ad349d70 222284 net optional unbound-anchor_1.26.2-0+deb13u1_riscv64.deb
 0034c4e668400cc42f5d8ab1b7683722 5457940 debug optional unbound-dbgsym_1.26.2-0+deb13u1_riscv64.deb
 ef992c2183d47bd9012314ee16450d82 128056 debug optional unbound-host-dbgsym_1.26.2-0+deb13u1_riscv64.deb
 5defc08d217264fc01b0cd9e3fa6c996 247732 net optional unbound-host_1.26.2-0+deb13u1_riscv64.deb
 e71b34e644e54ebe33a6a4b360cf02cb 10598 net optional unbound_1.26.2-0+deb13u1_riscv64-buildd.buildinfo
 d7b07dab7c7eb75e32d2c16932b764b1 1145580 net optional unbound_1.26.2-0+deb13u1_riscv64.deb

-----BEGIN PGP SIGNATURE-----
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=8ur+
-----END PGP SIGNATURE-----