-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 30 Nov 2025 13:33:55 +0300 Source: unbound Binary: libunbound-dev libunbound8 libunbound8-dbgsym python3-unbound python3-unbound-dbgsym unbound unbound-anchor unbound-anchor-dbgsym unbound-dbgsym unbound-host unbound-host-dbgsym Architecture: armel Version: 1.17.1-2+deb12u4 Distribution: bookworm Urgency: medium Maintainer: arm Build Daemon (arm-conova-02) Changed-By: Michael Tokarev Description: libunbound-dev - static library, header files, and docs for libunbound libunbound8 - library implementing DNS resolution and validation python3-unbound - library implementing DNS resolution and validation (Python3 bindi unbound - validating, recursive, caching DNS resolver unbound-anchor - utility to securely fetch the root DNS trust anchor unbound-host - reimplementation of the 'host' command Closes: 1100870 1121446 Changes: unbound (1.17.1-2+deb12u4) bookworm; urgency=medium . * CVE-2024-33655.patch: remove unrelated change testdata/fwd_udptmout.tdir/fwd_udptmout.conf is not modified by the upstream commit in question (c3206f4568f6) * fix-823-Response-change-to-NODATA-for-some-ANY-queries.patch Fixes: https://github.com/NLnetLabs/unbound/issues/823 * fix-not-following-cleared-RD-flags-amplification.patch fix potential amplification DDoS attacks * replace combined CVE-2023-50387_CVE-2023-50868_1.16.1-1.17.1.patch with 2 separate upstream commits, add patch descriptions, and add missing changes for testdata files: o CVE-2023-50387-DNSSEC-verification-complexity.patch o CVE-2023-50387_CVE-2023-50868_1.16.1-1.17.1.patch * 3 changes to fix CVE-2025-11411 (possible domain hijacking attack): o 1-iterator-iter_scrub.c-pass-module_env-parameter-to-s.patch (a change from "Add harden-unknown-additional option" upstream patch) o 2-possible-domain-hijacking-attack.patch o 3-additional-fix-for-possible-domain-hijacking.patch (Closes: #1121446) * fix-595-unbound-anchor-cannot-deal-with-full-disk.patch Fixes: https://github.com/NLnetLabs/unbound/issues/595 (Closes: #1100870) * d/gbp.conf: set default branch to debian/bookworm Checksums-Sha1: bc9a48c1258b8852235ef96025a3ede95d48600f 584256 libunbound-dev_1.17.1-2+deb12u4_armel.deb 48c06e199b1fca4ea88be4ba8b6cde84e2e631b6 1213144 libunbound8-dbgsym_1.17.1-2+deb12u4_armel.deb 5be42b4154f385dbbeb9383b1201005eadfe8f13 487948 libunbound8_1.17.1-2+deb12u4_armel.deb f9e19922a3ecf8dbd4347a367b088a21838ea752 185084 python3-unbound-dbgsym_1.17.1-2+deb12u4_armel.deb 62c59fe6d780c564272404d30f1f90b297773282 199368 python3-unbound_1.17.1-2+deb12u4_armel.deb ca02d4fa13f78ea7415895575fed0bc3315b0266 60304 unbound-anchor-dbgsym_1.17.1-2+deb12u4_armel.deb de14a1a48cfe39076fb8519b5a3c6d68f9559e1f 179240 unbound-anchor_1.17.1-2+deb12u4_armel.deb e84d45b79a18e8e639f1cb6e4981e4793abbc76e 4459500 unbound-dbgsym_1.17.1-2+deb12u4_armel.deb 2381d7745fc107d7bf3f22f1293b5966b5ba634e 129784 unbound-host-dbgsym_1.17.1-2+deb12u4_armel.deb 4473cc5026ec726c0c72ae9a15647c1f33f0da8f 195776 unbound-host_1.17.1-2+deb12u4_armel.deb 40d346daba331b55f9aa2e77b11cbd121c81f554 10753 unbound_1.17.1-2+deb12u4_armel-buildd.buildinfo 224cc77203662ddc6882082236838206e0f14198 816576 unbound_1.17.1-2+deb12u4_armel.deb Checksums-Sha256: 206595360a0a9f192fcf3eaab41fbbbeaa7ead958cf9536b0edd68ffde69ff7b 584256 libunbound-dev_1.17.1-2+deb12u4_armel.deb 0b2fab042c28aca338fb1994b46c949c4dd342f5c53882d297bbafbaab506bcd 1213144 libunbound8-dbgsym_1.17.1-2+deb12u4_armel.deb 4b0c5b1e60e81fbd4a90065c2a73911017b48b1466588d9b6014abdb414fd2f1 487948 libunbound8_1.17.1-2+deb12u4_armel.deb d40b74fcaf63e414957d9f9ffcae9704cad3a9497994957ad68e9da0d44d191b 185084 python3-unbound-dbgsym_1.17.1-2+deb12u4_armel.deb 770aabfcb39c7d50d7c9cd60ea8f789fb4a0e684af86b9420b45b4da82d4096d 199368 python3-unbound_1.17.1-2+deb12u4_armel.deb 9c5b3c48a8a870b2f786aed4ad2b5577bf868f62c1b9df7d443e0bfcda0f9616 60304 unbound-anchor-dbgsym_1.17.1-2+deb12u4_armel.deb 775846e30106c1bd0c445ea638369f8a830f7b17403481e620a961a9ea116e90 179240 unbound-anchor_1.17.1-2+deb12u4_armel.deb ad618e51846e0aefe697f711e84002688269dd708ccec01615ef0e11b145ef37 4459500 unbound-dbgsym_1.17.1-2+deb12u4_armel.deb e99d5edd4429c2e2fcf5774ef8d4c471edf4a7bb9f9c72f5581be0dc13ffe247 129784 unbound-host-dbgsym_1.17.1-2+deb12u4_armel.deb bc5f62d702bb5ba57feeb1a1929869b90d569d9122f09e4c9d030745056bb13d 195776 unbound-host_1.17.1-2+deb12u4_armel.deb 32832dd7f34b43ec7e73bb20b03d31550f7c07e475d89e6f9d76fb63e50876af 10753 unbound_1.17.1-2+deb12u4_armel-buildd.buildinfo 2f2d0fab1b074255c59cabdd16b626f64a48b458732a168acfc730ff66fd26d3 816576 unbound_1.17.1-2+deb12u4_armel.deb Files: a76562f76ec12c63a6b9a145adc2f857 584256 libdevel optional libunbound-dev_1.17.1-2+deb12u4_armel.deb d76068563debbdfd6066982ac85908b8 1213144 debug optional libunbound8-dbgsym_1.17.1-2+deb12u4_armel.deb 07020966bb91ec6b08975a49946b7ae3 487948 libs optional libunbound8_1.17.1-2+deb12u4_armel.deb 3cd2ff1d13035b8802d4956db1594b2c 185084 debug optional python3-unbound-dbgsym_1.17.1-2+deb12u4_armel.deb 8df7e6f291bc6be4ec1c09c1b2e0ba89 199368 python optional python3-unbound_1.17.1-2+deb12u4_armel.deb c0d4855600f99239bb34a686f5037ca9 60304 debug optional unbound-anchor-dbgsym_1.17.1-2+deb12u4_armel.deb c2c3664e7f3145fcf3f74ab34a07e0b4 179240 net optional unbound-anchor_1.17.1-2+deb12u4_armel.deb e6eeb366d6787a7bbf573e059c7faf86 4459500 debug optional unbound-dbgsym_1.17.1-2+deb12u4_armel.deb 63aff8f91c95ab6644397daf958c88be 129784 debug optional unbound-host-dbgsym_1.17.1-2+deb12u4_armel.deb f3dafcd19eb91ba788ae86d65534ee71 195776 net optional unbound-host_1.17.1-2+deb12u4_armel.deb 0c620a16681ee7c8491130f773d55613 10753 net optional unbound_1.17.1-2+deb12u4_armel-buildd.buildinfo 0a085ff2b92649579bb189ad9c01983f 816576 net optional unbound_1.17.1-2+deb12u4_armel.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEWHj9K9pO9l4btbD1OQKMdMnEH5MFAmk1vwIACgkQOQKMdMnE H5Pf0Q//c5BuRkF/FH0olWfOI0k6nD/uDTwY2x+KL6jG9iMT3SbiPoqBpTh3g78z gb1oAJSDvB9YLu6HMol3lHGy2ImXzjgfAZ2arCjx4r++OkU3SwV2c8jQco6fRo9N 10Xjo8llXkK4K0V0vq5uNHCDY95Qe9H+Cd/9EHoFlfkfgSUU4vpiOIqiHc9YxX0S h9ZW2H9oI7E6DCyV1NO2uL4vnC86Bpkq3lfnQPXrjGeZjCwV2grr5MDIAvubsjir 5enXjAIFCuoJbH4ryMedRUqkvnspr5+vGXy0ewlBxASfe98BsawCzA7AswIHwa2n 6Nel+1AA2M0tJXbp2ukHRoNrM1K9jxklHz+yqbcuApKtF1RCyzz3u3CZ+cYBwObW t1AKUoXR+VmKYW2G/Aqf7HR8i6gnCO1Y/gxRp9kbPsu9yA7tBK+0Py2+IRW+OSKi aBKkZO1i6aEJ87E/q5FRi98fgHvg8xNngcW20tBPSsndB/v5HVvLZ1fvDngJFi3I 9526vsoRWRQwhn+vtkFH2Fj+SPS6fJL6YaWbSOYPu9ESmZPIrv7yurBgwbUYdSLY 0lPqhUceiTKbcQeh5d+zMCS8dL8RP507zA7p5zdZwgrh/5SX0IDtLLws7tZvi2xp XAgNI/dqhjZW3ShmhMtOYy4W97wONy8rfq7FDxy5yq5eLe2WaOU= =Q3yl -----END PGP SIGNATURE-----