-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 21 Oct 2026 23:39:19 +0300
Source: unbound
Binary: libunbound-dev libunbound8 libunbound8-dbgsym python3-unbound python3-unbound-dbgsym unbound unbound-anchor unbound-anchor-dbgsym unbound-dbgsym unbound-host unbound-host-dbgsym
Architecture: ppc64el
Version: 1.26.2-0+deb13u1
Distribution: trixie-security
Urgency: medium
Maintainer: ppc64el Build Daemon (ppc64el-osuosl-02) <buildd_ppc64el-ppc64el-osuosl-02@buildd.debian.org>
Changed-By: Michael Tokarev <mjt@tls.msk.ru>
Description:
 libunbound-dev - static library, header files, and docs for libunbound
 libunbound8 - library implementing DNS resolution and validation
 python3-unbound - library implementing DNS resolution and validation (Python3 bindi
 unbound    - validating, recursive, caching DNS resolver
 unbound-anchor - utility to securely fetch the root DNS trust anchor
 unbound-host - reimplementation of the 'host' command
Changes:
 unbound (1.26.2-0+deb13u1) trixie-security; urgency=medium
 .
   * new upstream security/bugfix release:
    o CVE-2026-97206 - severity: HIGH
      DoQ path-migration can lead to use-after-free
      on multi-threaded deployments
    o CVE-2026-50106 - severity: MEDIUM
      Possible insecure NXDOMAIN for non-existing records under a
      configured island trust anchor underneath an insecure parent
    o CVE-2026-96405 - severity: MEDIUM
      Aggregate DNS name chained pointer decompression work
      leads to degradation of service
    o CVE-2026-109125 - severity: MEDIUM
      Possible cache poisoning vulnerability via a cache side-channel
      exposed by 'unwanted-reply-threshold'
    o CVE-2026-35501 - severity: LOW
      Bypass of a configured island trust anchor underneath an insecure
      parent from an atacker-controlled NSEC record
Checksums-Sha1:
 ca2dcbebef94d24f1c64276153b428b319506788 213828 libunbound-dev_1.26.2-0+deb13u1_ppc64el.deb
 c567bae6bb238b30ebfedc0ca1a4b7bbae4f5dc1 1450696 libunbound8-dbgsym_1.26.2-0+deb13u1_ppc64el.deb
 c1828e5365f3e26eb509745ade5d0674418292a9 670904 libunbound8_1.26.2-0+deb13u1_ppc64el.deb
 ee9b137980219818a0f73e9017474975454bbdfa 168704 python3-unbound-dbgsym_1.26.2-0+deb13u1_ppc64el.deb
 8b60974db1cb66977f12e8be92dd59fcdc7dedd8 248264 python3-unbound_1.26.2-0+deb13u1_ppc64el.deb
 0298c3b891a9df5ad161e7b108167afa3eec73e6 61024 unbound-anchor-dbgsym_1.26.2-0+deb13u1_ppc64el.deb
 442960464a1fe731c540aebf9fb2dadce2e1f48e 223604 unbound-anchor_1.26.2-0+deb13u1_ppc64el.deb
 eab5a25681048efe88a7a9c9fbfe7cf542b2e138 5310172 unbound-dbgsym_1.26.2-0+deb13u1_ppc64el.deb
 d66c94e43ca66ddd1204caf0054ada075e049121 137256 unbound-host-dbgsym_1.26.2-0+deb13u1_ppc64el.deb
 75334d96fef87a2e8cc8ab86a9e6b2760b081137 250908 unbound-host_1.26.2-0+deb13u1_ppc64el.deb
 f52c168b03e184cd131205ea67cdceacd35f3030 10653 unbound_1.26.2-0+deb13u1_ppc64el-buildd.buildinfo
 c133dac45275dd6a0910ca57e94fad7b25ffd913 1136580 unbound_1.26.2-0+deb13u1_ppc64el.deb
Checksums-Sha256:
 b7536f6d4124b564815d4553c8b88ee952670746551d9e482dd61728ac7d87b8 213828 libunbound-dev_1.26.2-0+deb13u1_ppc64el.deb
 008be5bb1096bc4400fd761125d2d9d4e902ddd84eedcdece1dd9d4ced7a7f7d 1450696 libunbound8-dbgsym_1.26.2-0+deb13u1_ppc64el.deb
 f56bce2717f00140f6b6cd303b4a9c68b7d6178f3834feb88b1e5f5ec5d42f58 670904 libunbound8_1.26.2-0+deb13u1_ppc64el.deb
 bddf79bba97a94c1779ad76eafc5c0cab5d8f1990a93c01535fee6f55b32e9c8 168704 python3-unbound-dbgsym_1.26.2-0+deb13u1_ppc64el.deb
 2d1ee862f06ea78648e29dfa4911a0eaec4180bfa71ad0d6e55753900ca22399 248264 python3-unbound_1.26.2-0+deb13u1_ppc64el.deb
 f24f8d03535f14a13d9d2f9f231dac7ac5a04cc1639ba03985b3d2406aad298e 61024 unbound-anchor-dbgsym_1.26.2-0+deb13u1_ppc64el.deb
 fc5f2b129d09eaefa6a8767478e587f9c81a8065a16aa17b735740b49bfb4318 223604 unbound-anchor_1.26.2-0+deb13u1_ppc64el.deb
 d8906f33e35e9efc1b00cabda4a426194407ccde6bd99f12c79693c68bc83a9f 5310172 unbound-dbgsym_1.26.2-0+deb13u1_ppc64el.deb
 c40788b802fe44abed736a4e855f8b7e31e7e3f1abd1d7615d99a68e004eff75 137256 unbound-host-dbgsym_1.26.2-0+deb13u1_ppc64el.deb
 14b505add5db6361ae7336b608bf270e120063df135f30f81d03bf3037eb6ae8 250908 unbound-host_1.26.2-0+deb13u1_ppc64el.deb
 e3de8a8bd072e4f1cdaa49143c78fb52e416ddd79a07b8665ef0492059083d29 10653 unbound_1.26.2-0+deb13u1_ppc64el-buildd.buildinfo
 63f6734d5c441e612cf42d66c1cebf0b7f83c97078f9c1d457d9280c58f72e84 1136580 unbound_1.26.2-0+deb13u1_ppc64el.deb
Files:
 93629d131ba0e6040ba5f4b90420a468 213828 libdevel optional libunbound-dev_1.26.2-0+deb13u1_ppc64el.deb
 dbafe06ef4738e7448dec49a6c64675d 1450696 debug optional libunbound8-dbgsym_1.26.2-0+deb13u1_ppc64el.deb
 dd0eeb1fc62770e7721aa4d98382e099 670904 libs optional libunbound8_1.26.2-0+deb13u1_ppc64el.deb
 736464107e88e8183148a417707a8c05 168704 debug optional python3-unbound-dbgsym_1.26.2-0+deb13u1_ppc64el.deb
 5ee312d321862a4364bbbc5b2f2b6d23 248264 python optional python3-unbound_1.26.2-0+deb13u1_ppc64el.deb
 fc459eda01b13b951bf79e7f1454bf5f 61024 debug optional unbound-anchor-dbgsym_1.26.2-0+deb13u1_ppc64el.deb
 1f01c4714d1435fdc56b7707c7c7fd4f 223604 net optional unbound-anchor_1.26.2-0+deb13u1_ppc64el.deb
 c62b97e76a4159862ca2e794b48a69e3 5310172 debug optional unbound-dbgsym_1.26.2-0+deb13u1_ppc64el.deb
 cba99ae76083e21f369b15684082600b 137256 debug optional unbound-host-dbgsym_1.26.2-0+deb13u1_ppc64el.deb
 50e0a4a62cf996f4cf65cac34cb3bb3a 250908 net optional unbound-host_1.26.2-0+deb13u1_ppc64el.deb
 9fc0bc0ceb30e46f1c3f35f00216a2f4 10653 net optional unbound_1.26.2-0+deb13u1_ppc64el-buildd.buildinfo
 5ac6b626d0a68ebaeeb4ab9986024f22 1136580 net optional unbound_1.26.2-0+deb13u1_ppc64el.deb

-----BEGIN PGP SIGNATURE-----
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=H66Y
-----END PGP SIGNATURE-----