-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 21 Oct 2026 23:39:19 +0300 Source: unbound Architecture: source Version: 1.26.2-0+deb13u1 Distribution: trixie-security Urgency: medium Maintainer: unbound packagers <[email protected]> Changed-By: Michael Tokarev <[email protected]> Changes: unbound (1.26.2-0+deb13u1) trixie-security; urgency=medium . * new upstream security/bugfix release: o CVE-2026-97206 - severity: HIGH DoQ path-migration can lead to use-after-free on multi-threaded deployments o CVE-2026-50106 - severity: MEDIUM Possible insecure NXDOMAIN for non-existing records under a configured island trust anchor underneath an insecure parent o CVE-2026-96405 - severity: MEDIUM Aggregate DNS name chained pointer decompression work leads to degradation of service o CVE-2026-109125 - severity: MEDIUM Possible cache poisoning vulnerability via a cache side-channel exposed by 'unwanted-reply-threshold' o CVE-2026-35501 - severity: LOW Bypass of a configured island trust anchor underneath an insecure parent from an atacker-controlled NSEC record Checksums-Sha1: aae78304b0da9904f4315a7971b8be477632d3be 3201 unbound_1.26.2-0+deb13u1.dsc aaab049b0719a7646958a7f2e2254f19f533d451 6949796 unbound_1.26.2.orig.tar.gz 331dabcbcf7bfca5e0b382c83074b32aac54b6b9 659 unbound_1.26.2.orig.tar.gz.asc ffa6ac6453da50d050c94944d3c4f62e93916f5d 32552 unbound_1.26.2-0+deb13u1.debian.tar.xz 126a29fd05133ca0165af38e67ff4f612624496d 5909 unbound_1.26.2-0+deb13u1_source.buildinfo Checksums-Sha256: d0de2b0ac0bc2f0448e6a5b80f45b69236c9124f8ac09182f1b95bf02a97385b 3201 unbound_1.26.2-0+deb13u1.dsc d8ee7aa6bbb3ff1be7d9e57637d0d0ec2f18273a8efff1a0afe2c665858b96f7 6949796 unbound_1.26.2.orig.tar.gz 0f128cf96c9bd86be12a45082e6f518c5dc09d1c3bd93dccbdc53627e6c5cdf9 659 unbound_1.26.2.orig.tar.gz.asc cfa3056a5ff76815be4ff3dfeb6a117b6e31c1722f4fc954bedd4bed72d0ec9e 32552 unbound_1.26.2-0+deb13u1.debian.tar.xz dd564503403afa459ab939963f79a8a744ee5577ed99586315efaf82f01b41dd 5909 unbound_1.26.2-0+deb13u1_source.buildinfo Files: eef146bd4701e3300e0a4a78af0e08d1 3201 net optional unbound_1.26.2-0+deb13u1.dsc 4e6e12ff9a7ce64844d270276df5a3a0 6949796 net optional unbound_1.26.2.orig.tar.gz 9b9a74979ea82f7c10acc0b074f670d0 659 net optional unbound_1.26.2.orig.tar.gz.asc a9a7bb66af3a98261de3a3c4c5f01e94 32552 net optional unbound_1.26.2-0+deb13u1.debian.tar.xz a38dd9fe247cc4420cca875688e7d17b 5909 net optional unbound_1.26.2-0+deb13u1_source.buildinfo
-----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEZKoqtTHVaQM2a/75gqpKJDselHgFAmrZysIACgkQgqpKJDse lHhiAxAAkK3btC/YIE1Hg8bsJdbN7Wosetyu7qz67VIvcFCi1xzrUMfY3bZ8PbDJ 5qavYCGr6ZjPNVpty7hyK3P+0ZhcPxCggt1QZIfz+2Lew12rerqf/a5Nzg0GKTW/ QuhmruOvGh+2UQ8CoIbOPMMj37jh8ZSkC9fUe2QQbG2tcbxmpQaH/le+GlAb6Hxt mhiY9p694HNM43rvhx+rszPs/fxwuYogW4+oJZka25WLYqEqkLr26MaPbXrt3X5J NGD7D5KG3qR/XAx7aIp59iqxFx2N7lfkQuLkT4MF5oMMWutVYJf8AKCzRWFpPvRc uRGU23SQ4ho9WcA7k5a3VI0YUirFhS81JeHh9jYPtKPDd2+6AJfvgksMqG6AoASl m04elOn9EyvwOPULC5zp6FRmgZDG+iEmOy/DmeO7LXyvGovY3TPf9m/WzCPPe/JY q3uN93DtZ6tep6i29bQbXsVDMzpvzbvzlzgDT/6p3jf5UA6hnwcsU524z1Fxx9Il g85t6iSd2LagZTuLocK8qmqXVvmBHsDYrmKH4gUD1D40Tl8+7o2oGV0aVnnzIqva jE7pLn0rMfZ8cHsvvd6+KRZATMPnMd/cECjAoOvdo6vscBgKsXIihxyZ5CG+hY1W eF6QzUqYoayzrVIJvUjULD/eE8e+BsvpN/dm1hXMtMLc86g8ezs= =T/zc -----END PGP SIGNATURE-----
pgpMcyxzgqsja.pgp
Description: PGP signature
