-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 21 Oct 2026 23:39:19 +0300
Source: unbound
Binary: libunbound-dev libunbound8 libunbound8-dbgsym python3-unbound python3-unbound-dbgsym unbound unbound-anchor unbound-anchor-dbgsym unbound-dbgsym unbound-host unbound-host-dbgsym
Architecture: s390x
Version: 1.26.2-0+deb13u1
Distribution: trixie-security
Urgency: medium
Maintainer: s390x Build Daemon (zani) <buildd_s390x-zani@buildd.debian.org>
Changed-By: Michael Tokarev <mjt@tls.msk.ru>
Description:
 libunbound-dev - static library, header files, and docs for libunbound
 libunbound8 - library implementing DNS resolution and validation
 python3-unbound - library implementing DNS resolution and validation (Python3 bindi
 unbound    - validating, recursive, caching DNS resolver
 unbound-anchor - utility to securely fetch the root DNS trust anchor
 unbound-host - reimplementation of the 'host' command
Changes:
 unbound (1.26.2-0+deb13u1) trixie-security; urgency=medium
 .
   * new upstream security/bugfix release:
    o CVE-2026-97206 - severity: HIGH
      DoQ path-migration can lead to use-after-free
      on multi-threaded deployments
    o CVE-2026-50106 - severity: MEDIUM
      Possible insecure NXDOMAIN for non-existing records under a
      configured island trust anchor underneath an insecure parent
    o CVE-2026-96405 - severity: MEDIUM
      Aggregate DNS name chained pointer decompression work
      leads to degradation of service
    o CVE-2026-109125 - severity: MEDIUM
      Possible cache poisoning vulnerability via a cache side-channel
      exposed by 'unwanted-reply-threshold'
    o CVE-2026-35501 - severity: LOW
      Bypass of a configured island trust anchor underneath an insecure
      parent from an atacker-controlled NSEC record
Checksums-Sha1:
 dc2bd0f721595a46e68b9f216c84816e4a19408e 213828 libunbound-dev_1.26.2-0+deb13u1_s390x.deb
 46552172dcf6d5bb45e7fdf6aef7ebce165dafb0 1394264 libunbound8-dbgsym_1.26.2-0+deb13u1_s390x.deb
 a5352bd282c14f038c0997f400edbb29327d01c3 617552 libunbound8_1.26.2-0+deb13u1_s390x.deb
 25b5cf08d60326d745c8bfe0ea01e9a1accb7e9b 163064 python3-unbound-dbgsym_1.26.2-0+deb13u1_s390x.deb
 880470fe802d536429b3315d929498e384016297 244860 python3-unbound_1.26.2-0+deb13u1_s390x.deb
 b2a1b8d7a850e0c6110fd1b8cfa25257b635201c 59644 unbound-anchor-dbgsym_1.26.2-0+deb13u1_s390x.deb
 e00f6674fef1b63ffed0d3b810f9fca4c187bbbb 222072 unbound-anchor_1.26.2-0+deb13u1_s390x.deb
 1c7ded77ab47df4eec927bb046ad80e40e9e7cab 5101172 unbound-dbgsym_1.26.2-0+deb13u1_s390x.deb
 5990afe780985c8089becb729db5106e8b38eb13 135108 unbound-host-dbgsym_1.26.2-0+deb13u1_s390x.deb
 9fffb59fbec91dc5f45337b0df3b1deb567dc1ae 243184 unbound-host_1.26.2-0+deb13u1_s390x.deb
 c27c27128ada1ee36c576a6210534af88a2bfafd 10462 unbound_1.26.2-0+deb13u1_s390x-buildd.buildinfo
 3847507669694be01ea2b58ec755128c2a3cdde2 1066584 unbound_1.26.2-0+deb13u1_s390x.deb
Checksums-Sha256:
 b7c3fcc9de54329c383ca8b343a3659ae79a1fc4f0ecb7c76b593d8ea1ca9fb2 213828 libunbound-dev_1.26.2-0+deb13u1_s390x.deb
 49f8701915678cb02db2b5a6452b807b0c39f87263df0d07cd07516411c4b4a8 1394264 libunbound8-dbgsym_1.26.2-0+deb13u1_s390x.deb
 3fce6a0e1dc00799ed5d5ed3f1831bf57310a9f400ce4e6c42a02eeafe1a1930 617552 libunbound8_1.26.2-0+deb13u1_s390x.deb
 2745276120ffe0c4bc61f59080e001c59d71fb9df228e3a6fd4060e91d2f89e0 163064 python3-unbound-dbgsym_1.26.2-0+deb13u1_s390x.deb
 e12382e2f71f85cade2d4b4d0b3d3166a9b21b7fbfaaf59b326f5903a7f7d2e7 244860 python3-unbound_1.26.2-0+deb13u1_s390x.deb
 8a03af244afef158398cae284961eba5a5f421ddabdcda6ace2391f26279b37c 59644 unbound-anchor-dbgsym_1.26.2-0+deb13u1_s390x.deb
 b03792149c2e10f3692dd9fbc825e8718807ab089d656b86931d228808394973 222072 unbound-anchor_1.26.2-0+deb13u1_s390x.deb
 febd52e394f6d0932c40c205a5c8e798082fb2684de9eae4175814e386fc5f0a 5101172 unbound-dbgsym_1.26.2-0+deb13u1_s390x.deb
 98d4a75a25ec8d72cfd85d6dd121e61349f6cc7126e9ee27c222b7f08b7ef202 135108 unbound-host-dbgsym_1.26.2-0+deb13u1_s390x.deb
 f5fff6a8db87665baac532281f722f2a63199fec56ce3ebd5c63fe68b704a85a 243184 unbound-host_1.26.2-0+deb13u1_s390x.deb
 3a144677ac47aeb4419b5f1cf3aa072385ad7c6d6049a7c635868a2e415c00b9 10462 unbound_1.26.2-0+deb13u1_s390x-buildd.buildinfo
 f4738d645d3b5beeea878556b6b9ef2c046454a55f63c50353ee7baa72d03039 1066584 unbound_1.26.2-0+deb13u1_s390x.deb
Files:
 4fa4515b3f3857db61a0e800727b2bb1 213828 libdevel optional libunbound-dev_1.26.2-0+deb13u1_s390x.deb
 a2707303ecad67f79e3e3da5a9a76ec1 1394264 debug optional libunbound8-dbgsym_1.26.2-0+deb13u1_s390x.deb
 1695737e0e1746a39451edf694b013ec 617552 libs optional libunbound8_1.26.2-0+deb13u1_s390x.deb
 cd4cde39bc17575033b780503ff4a984 163064 debug optional python3-unbound-dbgsym_1.26.2-0+deb13u1_s390x.deb
 572ccc7eb3d47322de9ed84990fb6aec 244860 python optional python3-unbound_1.26.2-0+deb13u1_s390x.deb
 23e84350ac38469209aebae13188f35d 59644 debug optional unbound-anchor-dbgsym_1.26.2-0+deb13u1_s390x.deb
 7068d376a08613a78795073241f74206 222072 net optional unbound-anchor_1.26.2-0+deb13u1_s390x.deb
 d942e9db2492709710a0fe9be1e71936 5101172 debug optional unbound-dbgsym_1.26.2-0+deb13u1_s390x.deb
 6c8f7972c8bcdde544765f74f1b7d709 135108 debug optional unbound-host-dbgsym_1.26.2-0+deb13u1_s390x.deb
 904e86c6f47977a681bfbba3ade0a53f 243184 net optional unbound-host_1.26.2-0+deb13u1_s390x.deb
 99416175d59a245e755106ad02166498 10462 net optional unbound_1.26.2-0+deb13u1_s390x-buildd.buildinfo
 4857a8db8992e4b701fc70bf39e30338 1066584 net optional unbound_1.26.2-0+deb13u1_s390x.deb

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEfUKc1SwkyxlVJBiWHOd5r2LlPicFAmrZ7fgACgkQHOd5r2Ll
PicRhxAAtos7UmEJT34LIwgZXPCPKKCN/qvza41jJzPkq3t9Tkg6W0CiFeoZ8gZn
BcPAZQpmLnN8JCYQXLqEQ0Mc7ZmmFhOPQU3OYHHN3GCC0nbnErffjiAgcQy8IBbs
WYcFVT0H1p0cOTaXKYSCCo4BlOlryl2fppbRYxduOS9FTNr/FXhpz02zUnUJkfcG
jlzAcWycMv+8M/yImcQL+gGE9X/Srg4QQmH7gh5wXNYoiLDm2xfwqfi+tkm3+SRU
Fvm07pKFelVgo2Z+jMMcsj4UfvWY+x5RCIdFCP0imWHbTvlOaSFj8olLb/6rwbDD
mKTR7SnJPmvZfhfMvYx0omiDQlS8VlGCtzvtdEN7XmpOFUxenWnYFQm5LI/BFIdK
XzBi4d6LlkrMvIN0E1JpsW2aDCAg6LmNzA1X+RRFnw71sPU324oiyluksrdkJC/7
FmIw7MRuPFvMvDwungoeyAC9OlpibLMptDBGiD4miufp2odrHoQPMuYl42eBU5bq
yxFqrS9uHfOo83uM6BkaWnbXbxcu5WYMO1osFz8H82GjXx0DBG1h81jefnC32F3h
YpNrrldmpAKe/OU4qsAP5hhG9QR8lg7ettrUd1/9tnQxRvmm0atWzMUNxFf4u6lu
DWFNvfMmqvbPJ//kXOT9lY5c2WpIPAZZCizkhqU9xBchooQCwa0=
=aw6o
-----END PGP SIGNATURE-----