-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 30 Nov 2025 13:33:55 +0300 Source: unbound Binary: libunbound-dev libunbound8 libunbound8-dbgsym python3-unbound python3-unbound-dbgsym unbound unbound-anchor unbound-anchor-dbgsym unbound-dbgsym unbound-host unbound-host-dbgsym Architecture: armhf Version: 1.17.1-2+deb12u4 Distribution: bookworm Urgency: medium Maintainer: arm Build Daemon (arm-conova-01) Changed-By: Michael Tokarev Description: libunbound-dev - static library, header files, and docs for libunbound libunbound8 - library implementing DNS resolution and validation python3-unbound - library implementing DNS resolution and validation (Python3 bindi unbound - validating, recursive, caching DNS resolver unbound-anchor - utility to securely fetch the root DNS trust anchor unbound-host - reimplementation of the 'host' command Closes: 1100870 1121446 Changes: unbound (1.17.1-2+deb12u4) bookworm; urgency=medium . * CVE-2024-33655.patch: remove unrelated change testdata/fwd_udptmout.tdir/fwd_udptmout.conf is not modified by the upstream commit in question (c3206f4568f6) * fix-823-Response-change-to-NODATA-for-some-ANY-queries.patch Fixes: https://github.com/NLnetLabs/unbound/issues/823 * fix-not-following-cleared-RD-flags-amplification.patch fix potential amplification DDoS attacks * replace combined CVE-2023-50387_CVE-2023-50868_1.16.1-1.17.1.patch with 2 separate upstream commits, add patch descriptions, and add missing changes for testdata files: o CVE-2023-50387-DNSSEC-verification-complexity.patch o CVE-2023-50387_CVE-2023-50868_1.16.1-1.17.1.patch * 3 changes to fix CVE-2025-11411 (possible domain hijacking attack): o 1-iterator-iter_scrub.c-pass-module_env-parameter-to-s.patch (a change from "Add harden-unknown-additional option" upstream patch) o 2-possible-domain-hijacking-attack.patch o 3-additional-fix-for-possible-domain-hijacking.patch (Closes: #1121446) * fix-595-unbound-anchor-cannot-deal-with-full-disk.patch Fixes: https://github.com/NLnetLabs/unbound/issues/595 (Closes: #1100870) * d/gbp.conf: set default branch to debian/bookworm Checksums-Sha1: 3f7e68329d08fff5c9f76ac517528c3d831eba14 587188 libunbound-dev_1.17.1-2+deb12u4_armhf.deb 344e053a21d8b2fc16dc207232ec6fe30ddf6532 1230164 libunbound8-dbgsym_1.17.1-2+deb12u4_armhf.deb c7d62ebd2234f9a770974e8d44c598896752f8a9 493108 libunbound8_1.17.1-2+deb12u4_armhf.deb 4daf148b2eae417859df7710cc37a4de899fa889 192948 python3-unbound-dbgsym_1.17.1-2+deb12u4_armhf.deb 1f5e421a56f570425f46dc49b745f3e43680d97c 200048 python3-unbound_1.17.1-2+deb12u4_armhf.deb a214173d31ca6cb35c26c45d7a2b4a6fb5cccc8d 61240 unbound-anchor-dbgsym_1.17.1-2+deb12u4_armhf.deb 315ecce57dc6fbcdfaf06fdd049671ec555a9eb4 179400 unbound-anchor_1.17.1-2+deb12u4_armhf.deb 1972c3107cacac54ec39b3e886072814968c91da 4549408 unbound-dbgsym_1.17.1-2+deb12u4_armhf.deb 728f598a71ce1dce8a134744c7ea3ca110b7bc94 130468 unbound-host-dbgsym_1.17.1-2+deb12u4_armhf.deb 989b0cc460a1926d445e4c9dcf4d4ac8519d174c 194096 unbound-host_1.17.1-2+deb12u4_armhf.deb 4593121c64949d7a5280354e870926cd853a9fa0 10755 unbound_1.17.1-2+deb12u4_armhf-buildd.buildinfo 5474015a9f513519779a827dd9aec532b1ff6f5b 835036 unbound_1.17.1-2+deb12u4_armhf.deb Checksums-Sha256: 31157b317f71f3b5fa975876439c672d6e160ceebcbbd1568816788adfbb1062 587188 libunbound-dev_1.17.1-2+deb12u4_armhf.deb 62185eaf7c68fea7cc3c344b5b39e77423798032312f64e7c5aad33a9c54921a 1230164 libunbound8-dbgsym_1.17.1-2+deb12u4_armhf.deb e98c3551fd6f4c47af8fb2c69f28b00f97bc0f0d56f28366f2012d651d1d5981 493108 libunbound8_1.17.1-2+deb12u4_armhf.deb 29a58cfbce17b7e1c3607445023cc052600d774f2074614fc180e4d8959a4b3c 192948 python3-unbound-dbgsym_1.17.1-2+deb12u4_armhf.deb b3798ae3a10a8cd79c6a0cc5b3343d5fcceb9b5d6b2f1e74b669c46c64a2b338 200048 python3-unbound_1.17.1-2+deb12u4_armhf.deb ebd42b4152add76c6b34706a88b95af1057bc152580fcf27898a72313a9727b3 61240 unbound-anchor-dbgsym_1.17.1-2+deb12u4_armhf.deb 2cd1d08bd630fe253238d3256478f4e2d98d09a0cb5b1512721964ec2dc30d84 179400 unbound-anchor_1.17.1-2+deb12u4_armhf.deb 784eb1b6ce666f5839c02788225ed22817cc9d896d669c1e3f8fb13b2c63adcd 4549408 unbound-dbgsym_1.17.1-2+deb12u4_armhf.deb 5a3109efa18a7c2b3a72640d22a6a6c60f2a569fce98f21f56ab59e5287828fa 130468 unbound-host-dbgsym_1.17.1-2+deb12u4_armhf.deb 793bd84fa3f1ee502b7a2a29e13a526aa89d6c9c20584bf7e63f684042d7fa3e 194096 unbound-host_1.17.1-2+deb12u4_armhf.deb 91cb7feba13c14ccccf7d2bf7c598b59d89fe55ef0476a91fff97f697a7f3576 10755 unbound_1.17.1-2+deb12u4_armhf-buildd.buildinfo 75a863b403ce24f42dc1ee793be196ec0dc3982dc831130511fb6d5947b4e7f3 835036 unbound_1.17.1-2+deb12u4_armhf.deb Files: 72589aa618eaa9ce4c532f392b16f1db 587188 libdevel optional libunbound-dev_1.17.1-2+deb12u4_armhf.deb 7ee851431ebd871028ed3ac0370cf1fa 1230164 debug optional libunbound8-dbgsym_1.17.1-2+deb12u4_armhf.deb f7a39acfab9f8dacb2d66f9a2cce3ba7 493108 libs optional libunbound8_1.17.1-2+deb12u4_armhf.deb f69a708ccb32a9af891127f4ac0886a3 192948 debug optional python3-unbound-dbgsym_1.17.1-2+deb12u4_armhf.deb 5b174cdbaa342a1773c71a484b9b1fc4 200048 python optional python3-unbound_1.17.1-2+deb12u4_armhf.deb 459833132d4159b3761d33faf1b82311 61240 debug optional unbound-anchor-dbgsym_1.17.1-2+deb12u4_armhf.deb 8bbb3207cd92364fe77b4db904668717 179400 net optional unbound-anchor_1.17.1-2+deb12u4_armhf.deb df41280cbebdad6658a5d50f268dbde3 4549408 debug optional unbound-dbgsym_1.17.1-2+deb12u4_armhf.deb 7ce39bbe2789e01ee828ffd1f943abd3 130468 debug optional unbound-host-dbgsym_1.17.1-2+deb12u4_armhf.deb 5fdab55da96dd4afc99b02ba6c4cc2b8 194096 net optional unbound-host_1.17.1-2+deb12u4_armhf.deb ac04126ec1bdbf87bf1cd29530e317b4 10755 net optional unbound_1.17.1-2+deb12u4_armhf-buildd.buildinfo 2d34772fa19f807be6abd062f71184d2 835036 net optional unbound_1.17.1-2+deb12u4_armhf.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEO4qAQUSIo2p/kVRf8U6eOZMpj68FAmk1vukACgkQ8U6eOZMp j697YRAAwxM6Qnv4V4Z7ddpmknYijmDLbiAmvNSfinuLqF4cy3J5gNEZL82PJh0h fM/1RLBM/YsAqhqOVfyY+KofA5pQtljvNrGxTHmvWgbRW7Yf0aaF/oBlpOt1x43Q NAUxDTgDmcdtwW8vX3iCp1O/P1pT57+eEnQb3EJ59iTSE6wKSjb8kXUFuhwbNNpy XFL5urN3+oyuuj5H3i8/qhVl49G3Wzk7Fw6uYqCHdaj/Z9kTv8rP+qjRhC5tW9I2 /nS+wvOj64VcIleoCkKGW7YWE1mnr9KqWrg/o7Hbyh1LkRVRAUGmGpfZDg1U3Yim Tq4kgw3sYS6H6LexIcyOskkReWGUhYXgAuV14Wxhqn+IrG7JLb78e1sbvWJeJdT3 E2bkGwRmzWrn795dOs6MlqrB9O8du+QZQjIAaxcE2aUFH+qoiPH9dljkwQ1aEc8a 3iuKNyhktdCOQFAb7Q/+X9fyb1dJt/k1tLhsMvslp2f7qt0ukQDQSZc1AjdVpCvw mvLnQGpdeSlOs4SQylqUFlOYK2TJI8Zfl06TzBc2CcsBGp1T5u/nVZ8ksO7YG3E5 6bLX7yrFLXQmibHN/s3OLhW4ykKq1YDJK8+Tk6+7epozQ4uO2Gfth7/0EFCJZ8Cz LI+/38mmocpRH93Jxv4DFc9aaPZR650abPjpvo/ygMQjHm0p3FM= =d9Gu -----END PGP SIGNATURE-----