-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 30 Nov 2025 13:33:55 +0300 Source: unbound Binary: libunbound-dev libunbound8 libunbound8-dbgsym python3-unbound python3-unbound-dbgsym unbound unbound-anchor unbound-anchor-dbgsym unbound-dbgsym unbound-host unbound-host-dbgsym Architecture: arm64 Version: 1.17.1-2+deb12u4 Distribution: bookworm Urgency: medium Maintainer: arm Build Daemon (arm-conova-04) Changed-By: Michael Tokarev Description: libunbound-dev - static library, header files, and docs for libunbound libunbound8 - library implementing DNS resolution and validation python3-unbound - library implementing DNS resolution and validation (Python3 bindi unbound - validating, recursive, caching DNS resolver unbound-anchor - utility to securely fetch the root DNS trust anchor unbound-host - reimplementation of the 'host' command Closes: 1100870 1121446 Changes: unbound (1.17.1-2+deb12u4) bookworm; urgency=medium . * CVE-2024-33655.patch: remove unrelated change testdata/fwd_udptmout.tdir/fwd_udptmout.conf is not modified by the upstream commit in question (c3206f4568f6) * fix-823-Response-change-to-NODATA-for-some-ANY-queries.patch Fixes: https://github.com/NLnetLabs/unbound/issues/823 * fix-not-following-cleared-RD-flags-amplification.patch fix potential amplification DDoS attacks * replace combined CVE-2023-50387_CVE-2023-50868_1.16.1-1.17.1.patch with 2 separate upstream commits, add patch descriptions, and add missing changes for testdata files: o CVE-2023-50387-DNSSEC-verification-complexity.patch o CVE-2023-50387_CVE-2023-50868_1.16.1-1.17.1.patch * 3 changes to fix CVE-2025-11411 (possible domain hijacking attack): o 1-iterator-iter_scrub.c-pass-module_env-parameter-to-s.patch (a change from "Add harden-unknown-additional option" upstream patch) o 2-possible-domain-hijacking-attack.patch o 3-additional-fix-for-possible-domain-hijacking.patch (Closes: #1121446) * fix-595-unbound-anchor-cannot-deal-with-full-disk.patch Fixes: https://github.com/NLnetLabs/unbound/issues/595 (Closes: #1100870) * d/gbp.conf: set default branch to debian/bookworm Checksums-Sha1: 5a3574d3a1589ae6f48f6a800c46d5851ad02e1d 621212 libunbound-dev_1.17.1-2+deb12u4_arm64.deb fbde284e6407f15bd75073908aa91f0bafb6e0be 1250656 libunbound8-dbgsym_1.17.1-2+deb12u4_arm64.deb 9a3f91a25344a7a6aed4a918d06d057902330455 510964 libunbound8_1.17.1-2+deb12u4_arm64.deb 34f446f70dc1b8ad6f9c29c0308f9d8caebb1680 171216 python3-unbound-dbgsym_1.17.1-2+deb12u4_arm64.deb eab241af2cfb30862dbe39770152e4c6832ddc17 201676 python3-unbound_1.17.1-2+deb12u4_arm64.deb 8631d025507cd9305a41c9ab775c2ace9c7b237c 60296 unbound-anchor-dbgsym_1.17.1-2+deb12u4_arm64.deb ed900060fcdbf67312e99904419e732afa0d8e38 179624 unbound-anchor_1.17.1-2+deb12u4_arm64.deb 9f265e4d24658084897298980a8953ac2e1d707c 5039576 unbound-dbgsym_1.17.1-2+deb12u4_arm64.deb bc0ab32384329318d8b60d4304e56726ce1a00f5 130564 unbound-host-dbgsym_1.17.1-2+deb12u4_arm64.deb 0dfefa3a26c0ff54da52f1af01dc6534d34f105c 199304 unbound-host_1.17.1-2+deb12u4_arm64.deb a031d37c5b881dbb5c09a03827df9f8d3a4b3ad7 10911 unbound_1.17.1-2+deb12u4_arm64-buildd.buildinfo 7a700dae4c762873ac4911bde9cf70314dc6e356 894944 unbound_1.17.1-2+deb12u4_arm64.deb Checksums-Sha256: e45175dda5f9d2cae56391b8e9ca00e7ae97f110fcf87164cc3bd90a00d9f57a 621212 libunbound-dev_1.17.1-2+deb12u4_arm64.deb 2cebc5eac143951481a1f616ef152e8ff87cc915584227e400642ae9087705e1 1250656 libunbound8-dbgsym_1.17.1-2+deb12u4_arm64.deb 1f697b9179aee25422c94334897c335170d1e86f5b52f5d8a44cb6f2add273e6 510964 libunbound8_1.17.1-2+deb12u4_arm64.deb 79a1e91b97fadcd50e1f9fdcc7b6ac7f7892dfa187953a8b5dfa866a94873b49 171216 python3-unbound-dbgsym_1.17.1-2+deb12u4_arm64.deb 67cc365dd4d585d196753a8307a9f8316028a59336a56c9131a3ba66069d7e61 201676 python3-unbound_1.17.1-2+deb12u4_arm64.deb db920c3b333e153a3f495648efe29c7a069761764e58df20cb72e79f904100ce 60296 unbound-anchor-dbgsym_1.17.1-2+deb12u4_arm64.deb b64a22803082bb7485c2a0641a25fc4ecc02db2ef5bc296be7c368b69368501e 179624 unbound-anchor_1.17.1-2+deb12u4_arm64.deb 969a873091d75dc0d58e182b55c083dc146dc92cf9da3504e299b2c3556a9056 5039576 unbound-dbgsym_1.17.1-2+deb12u4_arm64.deb 8e2171045d96ae50af32eea6afca298c728fc64e0ec988e49937ab7d0ba27936 130564 unbound-host-dbgsym_1.17.1-2+deb12u4_arm64.deb f5f0dd5f71b570577032d20e6b594d3c12721c5434d9a00664f10f4d39cfa045 199304 unbound-host_1.17.1-2+deb12u4_arm64.deb 3e88c509dca126e1abca8599c0527e3b98c44470b6499a12938f739290573a19 10911 unbound_1.17.1-2+deb12u4_arm64-buildd.buildinfo 4bf6276bf3726ba07db70851cf050ff5926e975befaa427162db2584e14f4092 894944 unbound_1.17.1-2+deb12u4_arm64.deb Files: c5756159d19ec3c9efc75f09527b8d0e 621212 libdevel optional libunbound-dev_1.17.1-2+deb12u4_arm64.deb 6c11eed174c3b25c4ce3862326257be6 1250656 debug optional libunbound8-dbgsym_1.17.1-2+deb12u4_arm64.deb 8f9a3984b3ca12c9ff78b6253e1ab9bd 510964 libs optional libunbound8_1.17.1-2+deb12u4_arm64.deb 3d855762b43417725eee879bb870b82c 171216 debug optional python3-unbound-dbgsym_1.17.1-2+deb12u4_arm64.deb 6de717a37e03e3f35d5a976f10c481c0 201676 python optional python3-unbound_1.17.1-2+deb12u4_arm64.deb 2894df6263a88ce22f0c821810a84dce 60296 debug optional unbound-anchor-dbgsym_1.17.1-2+deb12u4_arm64.deb 840e88fd171e95e8c60a4df179115da6 179624 net optional unbound-anchor_1.17.1-2+deb12u4_arm64.deb 69f6b09ba9e3b49ab254cec25ae60695 5039576 debug optional unbound-dbgsym_1.17.1-2+deb12u4_arm64.deb 32bdc16269bd7a6e8f36bae62618d328 130564 debug optional unbound-host-dbgsym_1.17.1-2+deb12u4_arm64.deb 60c8aa58c324603b18039e54e0ec59d8 199304 net optional unbound-host_1.17.1-2+deb12u4_arm64.deb 8edf85565435bd680b853720a5a6db74 10911 net optional unbound_1.17.1-2+deb12u4_arm64-buildd.buildinfo 2b6d2ced1ff710506d93d5418aee3f3d 894944 net optional unbound_1.17.1-2+deb12u4_arm64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEYxmcRLDHP0tCCM0oScpU3dYulLgFAmk1vcsACgkQScpU3dYu lLhr6g//bL+ZP5/eFROacioqMSnvA+7gJKZyZoiseyoK9OTnx1VxWahMUECA+rn8 /4GfqVNo+aMmB6A2xLp9FjYjMPUPUzw6RLwmMNTCt+OuxEI2KidhJKwVO9brkr/u tgoyF2WfihPUDIra40lhqmFIp+xhKWTqSHpPJYhM2ktfuZyn4ErelIbPnWs4tH27 KVhgHWJ66LcmzlXUS0y4UFaF1yYTuGjnsGdUcDTfr9r0FIb2p4+toPKK5tFymmOQ P4VF87Ai9yxowBzat8mi+S1EnAWqR35+yL+9eUCp81YsXqXq3l1BNVuG29iw7dEC NBnlhZGoDRMVuWs3/ZSWIKnB8J+Z1KjBTtx+UYGbP8TS3lpZ/czrYdBCQpfDCnrG UbaHMMbfv9xr4jJCGxuNxlu7G6c1Th6bnvz+mtw41J0c9X2t4ywwi3VrbPJqsZ3k mJPWIEXnO9YcQB3oyLWqS/Yx07YInabuPTv/I+Eoden3j51ginv4xZj9fz3PeKH9 VVcSj9HXALsR+1KIQiBvqKe3QXrtLNNaklQ0HcTs8n13l7KeCrNkPplyYDxNPaWu lj9qeuu+U7Xs1oOryfZ2oXD782/l9QhlZQxTIDpHub2sNtvX103bOFaCnu5mjS0b caX23dL5p9mlyCuZ4l2lHu+uwkReq8M96fC1d0KFqmvvDsET/M8= =7w/J -----END PGP SIGNATURE-----