-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 21 Oct 2026 23:26:10 +0300 Source: unbound Architecture: source Version: 1.26.2-1 Distribution: unstable Urgency: medium Maintainer: Unbound Packagers <[email protected]> Changed-By: Michael Tokarev <[email protected]> Changes: unbound (1.26.2-1) unstable; urgency=medium . * d/control: drop now-redundant Priority: optional and Rules-Requires-Root: no * d/control: Capitalize Maintaier * d/control: Standards-Version: 4.7.4 (no changes) * new upstream security/bugfix release: - CVE-2026-97206 - severity: HIGH DoQ path-migration can lead to use-after-free o n multi-threaded deployments. - CVE-2026-50106 - severity: MEDIUM Possible insecure NXDOMAIN for non-existing records under a configured island trust anchor underneath an insecure parent. - CVE-2026-96405 - severity: MEDIUM Aggregate DNS name chained pointer decompression work leads to degradation of service. - CVE-2026-109125 - severity: MEDIUM Possible cache poisoning vulnerability via a cache side-channel exposed by 'unwanted-reply-threshold'. - CVE-2026-35501 - severity: LOW Bypass of a configured island trust anchor underneath an insecure parent from an atacker-controlled NSEC record. Checksums-Sha1: ef2ebc4df4bd748360261324764dd1dd5a808588 3221 unbound_1.26.2-1.dsc aaab049b0719a7646958a7f2e2254f19f533d451 6949796 unbound_1.26.2.orig.tar.gz 331dabcbcf7bfca5e0b382c83074b32aac54b6b9 659 unbound_1.26.2.orig.tar.gz.asc 36ae7d2453beeb72f6e133ead55e21f113f13a9b 31760 unbound_1.26.2-1.debian.tar.xz 6f1e73d3d4d756b9d6d2dadd13a38d9912b54c6e 5877 unbound_1.26.2-1_source.buildinfo Checksums-Sha256: e38ffe6d162c8efff86f02ba637f3e34e95688583d8a8f91ca420783bcc193e4 3221 unbound_1.26.2-1.dsc d8ee7aa6bbb3ff1be7d9e57637d0d0ec2f18273a8efff1a0afe2c665858b96f7 6949796 unbound_1.26.2.orig.tar.gz 0f128cf96c9bd86be12a45082e6f518c5dc09d1c3bd93dccbdc53627e6c5cdf9 659 unbound_1.26.2.orig.tar.gz.asc 2cd9607c0888920302edc7ab37ebd5f050f89eb64381cf46df1b616836185658 31760 unbound_1.26.2-1.debian.tar.xz 5165672bc7d1ca293aa079528dc752336a64e7662201b7067e865a1d0714d973 5877 unbound_1.26.2-1_source.buildinfo Files: 44ac3d04f5f3ae386c49cfa258f45140 3221 net optional unbound_1.26.2-1.dsc 4e6e12ff9a7ce64844d270276df5a3a0 6949796 net optional unbound_1.26.2.orig.tar.gz 9b9a74979ea82f7c10acc0b074f670d0 659 net optional unbound_1.26.2.orig.tar.gz.asc 113c354703c65abb2b5046b3100cc91e 31760 net optional unbound_1.26.2-1.debian.tar.xz c01ea45cc364b3e9ce6a3294850e974a 5877 net optional unbound_1.26.2-1_source.buildinfo
-----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEZKoqtTHVaQM2a/75gqpKJDselHgFAmrZIAkACgkQgqpKJDse lHgZ7hAAgV1bubNqEJHhrLGISvqU5IXIHeyUPFxrfddW76rcjZWIiRRen1Sofa6i pfoeb/FCs0TNCnCJ/PtAOO83XJV1/9ykr5NjFBs55YiNunkRnwWEp+7BlK2CgApT ChPKEa6LQIRWqS5JMag4yvBQy639DKjBSnLqdXIZcCgMrGI62s0ycbXhPHFnzCq1 kIj0BWPR/5ndiEY3UmjWbMVWTJOqQg5WIagEqS/HTIm3flq7X8y7uZHNRz3YDcj1 w6JX9HS/HaFkG8ne1o7qzEDt15GIfJLm0chyBYu6qGXJF1wmLEoDeN4LoIZV9IsM Dx19F5tFG0ndDiei+BVw6aIZ8dRYN9pG+duDv2j+ll8NlfEfAUxgQzmlxlXs/cn0 PwNhsZghFv5g10Yc14pY08qrsCApbMxhCZ7aEJ+NcbxxsBNCl7tEy/I9KujeAR64 NgC7wOs4I8PmzbvjpwtmbORvzh96yJEoW7HGCOdodmk+QkqYX40dAo8rtk+M/M1Z nF0g6O0Bqw76dmERQV4wSK1Y6ilgef32vUAu/7EYfEcBL+eNZcdoVtIgelbQaS/c 5RBDJm0eiT+Ya3KHIVlMrKDPoimGQeeV5UCUBihBqovP80Mv87ikV8rW/XP9WPiX zPnq2RECudPqDbV2hCdTq/iMeyvCtmqusRqPtasRfEyrqqsldtc= =DKDl -----END PGP SIGNATURE-----
pgpkR2mppxN8R.pgp
Description: PGP signature
