-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 21 Oct 2026 23:39:19 +0300 Source: unbound Binary: libunbound-dev libunbound8 libunbound8-dbgsym python3-unbound python3-unbound-dbgsym unbound unbound-anchor unbound-anchor-dbgsym unbound-dbgsym unbound-host unbound-host-dbgsym Architecture: i386 Version: 1.26.2-0+deb13u1 Distribution: trixie-security Urgency: medium Maintainer: i386 Build Daemon (x86-grnet-01) Changed-By: Michael Tokarev Description: libunbound-dev - static library, header files, and docs for libunbound libunbound8 - library implementing DNS resolution and validation python3-unbound - library implementing DNS resolution and validation (Python3 bindi unbound - validating, recursive, caching DNS resolver unbound-anchor - utility to securely fetch the root DNS trust anchor unbound-host - reimplementation of the 'host' command Changes: unbound (1.26.2-0+deb13u1) trixie-security; urgency=medium . * new upstream security/bugfix release: o CVE-2026-97206 - severity: HIGH DoQ path-migration can lead to use-after-free on multi-threaded deployments o CVE-2026-50106 - severity: MEDIUM Possible insecure NXDOMAIN for non-existing records under a configured island trust anchor underneath an insecure parent o CVE-2026-96405 - severity: MEDIUM Aggregate DNS name chained pointer decompression work leads to degradation of service o CVE-2026-109125 - severity: MEDIUM Possible cache poisoning vulnerability via a cache side-channel exposed by 'unwanted-reply-threshold' o CVE-2026-35501 - severity: LOW Bypass of a configured island trust anchor underneath an insecure parent from an atacker-controlled NSEC record Checksums-Sha1: bc2457c7973c915dbb42e0825809615eee98bf8e 213836 libunbound-dev_1.26.2-0+deb13u1_i386.deb 32b319148bc6ffe6dea93c5762ebc7f04710b559 1225880 libunbound8-dbgsym_1.26.2-0+deb13u1_i386.deb d11a9b885e2dd7d2ff74f43c3c805feda37d433e 680188 libunbound8_1.26.2-0+deb13u1_i386.deb f488757504b0cecaded49d9be4bc614eab3bcc8b 158680 python3-unbound-dbgsym_1.26.2-0+deb13u1_i386.deb 6005f99f687cbf7045be310965b680a1926b3023 248720 python3-unbound_1.26.2-0+deb13u1_i386.deb d5a73310d2828a92b1118d616f77bfc5e048aa6a 56712 unbound-anchor-dbgsym_1.26.2-0+deb13u1_i386.deb d20c657fa103a4b9655748a1d73249807729b260 225432 unbound-anchor_1.26.2-0+deb13u1_i386.deb b2abb7ccbaff90a23fcf018c5ad40ecb5988bb82 5093900 unbound-dbgsym_1.26.2-0+deb13u1_i386.deb 7082047406c6120231ffba84722540c8eb87b072 113756 unbound-host-dbgsym_1.26.2-0+deb13u1_i386.deb 7ce15fc85e7bca14ed3019d7c65115793ab07082 248112 unbound-host_1.26.2-0+deb13u1_i386.deb 3a24eb79ecddf9628cb958bc86b471a33a62517e 10474 unbound_1.26.2-0+deb13u1_i386-buildd.buildinfo d735968147ef306938618f206eca2ca3333abca5 1169592 unbound_1.26.2-0+deb13u1_i386.deb Checksums-Sha256: f5a53036351ee1bb3ea06846ee360eb1b89df4d7a0a042ffbfeb914eb95c0843 213836 libunbound-dev_1.26.2-0+deb13u1_i386.deb 58f698cc1ce6f2099b177b2c4a1d3ca4b8f7547047a40e27068867e748ca6920 1225880 libunbound8-dbgsym_1.26.2-0+deb13u1_i386.deb 9a20a8e48b9a71b24636f185e5f13da2fd33fc72bd84b7894682e26baa1dad6c 680188 libunbound8_1.26.2-0+deb13u1_i386.deb 6af06a6bc3e97e05cfa9a7815f00a6e2647b7f8d7f1f9233ceab45c78a69dd5f 158680 python3-unbound-dbgsym_1.26.2-0+deb13u1_i386.deb 6af381bcce7515d7d77bb3be72a159c9f8afadbd482cd6af2fb8b244e35e78d3 248720 python3-unbound_1.26.2-0+deb13u1_i386.deb c8b68d9a5c53d044b2f1bde8ee2722433f2c5d11c56fc3c8a61951895874d0e2 56712 unbound-anchor-dbgsym_1.26.2-0+deb13u1_i386.deb 4fbd7c018705edafd6cdf161d4ef5f94ab7730dd2369519e17a8ebd02bb811c8 225432 unbound-anchor_1.26.2-0+deb13u1_i386.deb cfbaf4186b61e4972523b60a3812babb8af07e4e98dbf72a28f6ce35e7d511b1 5093900 unbound-dbgsym_1.26.2-0+deb13u1_i386.deb 9e9ef98a616624ad22b000d76559629eaac7eaac10e1a9c983ffe130077c631c 113756 unbound-host-dbgsym_1.26.2-0+deb13u1_i386.deb 3722c588d73636be10a3a8466aaec51b1e1c4ababa47914d65750fc86bdae888 248112 unbound-host_1.26.2-0+deb13u1_i386.deb 6561d285ac04bef8bf7c64e65f8e2ecab6efaed41a663c271378660dbd3687e6 10474 unbound_1.26.2-0+deb13u1_i386-buildd.buildinfo 5861644a9935f04dc4a6b2e3b41f655accce1ef2bfa921376bcb2775a53ad441 1169592 unbound_1.26.2-0+deb13u1_i386.deb Files: 751cfc71e414864eb2875ea33781e8de 213836 libdevel optional libunbound-dev_1.26.2-0+deb13u1_i386.deb c8f6fb47e6e0393cc9fcef88fcc8a1c9 1225880 debug optional libunbound8-dbgsym_1.26.2-0+deb13u1_i386.deb b4893f81808ee9acd732ab0e740dea14 680188 libs optional libunbound8_1.26.2-0+deb13u1_i386.deb 7de47241c0a8bcce09f6a3457844558e 158680 debug optional python3-unbound-dbgsym_1.26.2-0+deb13u1_i386.deb 2cf640346b153cd581a872c3be1a171a 248720 python optional python3-unbound_1.26.2-0+deb13u1_i386.deb ceafdb4cdd993844ae4bfb720f80dfc1 56712 debug optional unbound-anchor-dbgsym_1.26.2-0+deb13u1_i386.deb 89f588e3031f7c034c341267f8dcc455 225432 net optional unbound-anchor_1.26.2-0+deb13u1_i386.deb 04bb4c936eb08e6daeb2405d9bc6a550 5093900 debug optional unbound-dbgsym_1.26.2-0+deb13u1_i386.deb 43528f4e6276013525ff022680b18a63 113756 debug optional unbound-host-dbgsym_1.26.2-0+deb13u1_i386.deb 36c2bcb8b7c7d81871d53f665a13f2c7 248112 net optional unbound-host_1.26.2-0+deb13u1_i386.deb d04e6ae487a77015dd088b5fe8a0396b 10474 net optional unbound_1.26.2-0+deb13u1_i386-buildd.buildinfo 399885b725a6dd970955f3a8019677c8 1169592 net optional unbound_1.26.2-0+deb13u1_i386.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEPAUaMA0H0rOy6qBWf2INRiCdaWIFAmrZ1nkACgkQf2INRiCd aWJRCQ//fNU+DntrR5/lEVEvDD68iwHLctdEscnQPa7zU5nnKx8no3MtjjV1TZ7c SHJNT8d0+ZbO0HjN5BzOfU2379IcD1+3Wh2WbgcPrzp/Cx8NW1EyT6TgtR0r1bQE 0hbLuwOuooh8Pkp5pw+92Ug7spT2sTtNi9s8TNgAwFIAv9jHVJ898V+oHnG6n1Mu tgLZ9ULSHraorYbOAdamgc8Y3JRzchmRGZtRIoNmWJ475/okfREFWiEdfhy2OyTd q4hm5tn8KPkW5huAyAhfEvavJvfKnKkodB3L9z23FbivF20HllkizqbDg2scHFDK 37mLK6798TyF6JnuFjcfrMLM8qwka/nn9Zp6Y/7dyvwHvBPg4H8B6Uncvb570eLU qUH4mLwHUFVwHxQ9xuFr9FPL9LGTJBSNLyte4Kf1pmBUZqe5XaN1nEaRuWQCmMNV WpJqSh7tyx41RGOq2xic5/5JMJl8xDp3GQCJ1TJGHljaNrL4A5f15FgdkP8f7dw7 pN2D4Tf0UqLUE1Vdn0BOci0r3896rSqZVn9vNC3fNXBr4FvDODEbnxt+2QI9ZM/l R/HpdT1a1g22LVaBxIkftba5tVb69kSD/oqJTalPpS65m+hCnw7NwUfWeTBe7YRi dfxvSTu7ZGXK/O370Z+ZRQmg0/HtTorFm1PMO61AR5MIU/o4DmE= =h+1a -----END PGP SIGNATURE-----