-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 30 Nov 2025 13:33:55 +0300 Source: unbound Binary: libunbound-dev libunbound8 libunbound8-dbgsym python3-unbound python3-unbound-dbgsym unbound unbound-anchor unbound-anchor-dbgsym unbound-dbgsym unbound-host unbound-host-dbgsym Architecture: mips64el Version: 1.17.1-2+deb12u4 Distribution: bookworm Urgency: medium Maintainer: mipsel Build Daemon (mipsel-osuosl-05) Changed-By: Michael Tokarev Description: libunbound-dev - static library, header files, and docs for libunbound libunbound8 - library implementing DNS resolution and validation python3-unbound - library implementing DNS resolution and validation (Python3 bindi unbound - validating, recursive, caching DNS resolver unbound-anchor - utility to securely fetch the root DNS trust anchor unbound-host - reimplementation of the 'host' command Closes: 1100870 1121446 Changes: unbound (1.17.1-2+deb12u4) bookworm; urgency=medium . * CVE-2024-33655.patch: remove unrelated change testdata/fwd_udptmout.tdir/fwd_udptmout.conf is not modified by the upstream commit in question (c3206f4568f6) * fix-823-Response-change-to-NODATA-for-some-ANY-queries.patch Fixes: https://github.com/NLnetLabs/unbound/issues/823 * fix-not-following-cleared-RD-flags-amplification.patch fix potential amplification DDoS attacks * replace combined CVE-2023-50387_CVE-2023-50868_1.16.1-1.17.1.patch with 2 separate upstream commits, add patch descriptions, and add missing changes for testdata files: o CVE-2023-50387-DNSSEC-verification-complexity.patch o CVE-2023-50387_CVE-2023-50868_1.16.1-1.17.1.patch * 3 changes to fix CVE-2025-11411 (possible domain hijacking attack): o 1-iterator-iter_scrub.c-pass-module_env-parameter-to-s.patch (a change from "Add harden-unknown-additional option" upstream patch) o 2-possible-domain-hijacking-attack.patch o 3-additional-fix-for-possible-domain-hijacking.patch (Closes: #1121446) * fix-595-unbound-anchor-cannot-deal-with-full-disk.patch Fixes: https://github.com/NLnetLabs/unbound/issues/595 (Closes: #1100870) * d/gbp.conf: set default branch to debian/bookworm Checksums-Sha1: e75df5c11cfc3788fdb5fefbcd910e19bbd0d667 673352 libunbound-dev_1.17.1-2+deb12u4_mips64el.deb 803abd0436ada916d16389cc9e3d04ce27f2d2ed 1318080 libunbound8-dbgsym_1.17.1-2+deb12u4_mips64el.deb b2dd54746d482f9c1a1046c5783d410ec7977f27 504104 libunbound8_1.17.1-2+deb12u4_mips64el.deb 1cd5c00955b315e4854df874a13f0e9fae074c15 172984 python3-unbound-dbgsym_1.17.1-2+deb12u4_mips64el.deb ac61c0a176d6afd31937666eed47de062622576a 197104 python3-unbound_1.17.1-2+deb12u4_mips64el.deb 77162a0b844de186b99e350f569fc470b1fca153 63428 unbound-anchor-dbgsym_1.17.1-2+deb12u4_mips64el.deb a6bf56abc48b0d2f28ef5438fd3efaf64ea7f0a0 179864 unbound-anchor_1.17.1-2+deb12u4_mips64el.deb 4ba531fb0ab113533f80a256e50c4732596f9253 4689356 unbound-dbgsym_1.17.1-2+deb12u4_mips64el.deb 02ddc21b78f414fb760bbe5645e4562518646d01 138636 unbound-host-dbgsym_1.17.1-2+deb12u4_mips64el.deb 6676635a5e7e7b46d2ffb0319db7d595302d3295 202580 unbound-host_1.17.1-2+deb12u4_mips64el.deb f36b2ea1bc7c821b9a0431768423256fb574d3fe 10797 unbound_1.17.1-2+deb12u4_mips64el-buildd.buildinfo 7707167c119a1834604e3da5cad2713f5e707ede 904016 unbound_1.17.1-2+deb12u4_mips64el.deb Checksums-Sha256: c4ec3ad5500c41bf2faff6832bcf25517c3659ca1cea15fe21a342231b556373 673352 libunbound-dev_1.17.1-2+deb12u4_mips64el.deb eeee49759b562f57b7f36c435aefbd256cd2a0a99ceb2a0022780346215b2b51 1318080 libunbound8-dbgsym_1.17.1-2+deb12u4_mips64el.deb d24140b5ad0e3af2faaa20575d39433340a3c3cbb259b837b1c5f1b95e069839 504104 libunbound8_1.17.1-2+deb12u4_mips64el.deb 222154dc31795d3fd6f6b57932695ee8e12e72f49339d3777008dfceb5d303ce 172984 python3-unbound-dbgsym_1.17.1-2+deb12u4_mips64el.deb 89217d020e1f096d68c33dcecbb4edb31d36ba8ac15748024ae234aba3c3eda4 197104 python3-unbound_1.17.1-2+deb12u4_mips64el.deb 5e7b58ed9e277d73e763399f32944e1e86c8142dcd6f67b73bf1b74253fbe2a6 63428 unbound-anchor-dbgsym_1.17.1-2+deb12u4_mips64el.deb c617fbc014bd823bfe258bc4b88ad32851f744d332fc345e4665bc8ae45377e2 179864 unbound-anchor_1.17.1-2+deb12u4_mips64el.deb ad5d797a8ae75983cb5b19646ea3d2903f64cb8370777d1a248b881db583ea7d 4689356 unbound-dbgsym_1.17.1-2+deb12u4_mips64el.deb 8464f986acd66e0dd0949abaf7a54342c2f853c1cc5646f88568d197dfbbf5ef 138636 unbound-host-dbgsym_1.17.1-2+deb12u4_mips64el.deb 80b84ef902fb54084cff1f9ab1bcb68b8b01a3dbf1f0c3039e2980a323cc2755 202580 unbound-host_1.17.1-2+deb12u4_mips64el.deb a2921731b11ca577c8286b6db7c593778e5d5a9f9119bb7074f6351ff757473c 10797 unbound_1.17.1-2+deb12u4_mips64el-buildd.buildinfo b2606ee4c5332f9a99e4c7ebf1597df40e7b0dfb2623fd619294aac43cc51f58 904016 unbound_1.17.1-2+deb12u4_mips64el.deb Files: bfd7b36aa280e730d9adefef1442a764 673352 libdevel optional libunbound-dev_1.17.1-2+deb12u4_mips64el.deb 3efaf2d7b0f6d67ca5a6b47ba4ef3127 1318080 debug optional libunbound8-dbgsym_1.17.1-2+deb12u4_mips64el.deb 24d9233725fb49d6d015b1f1ce475db6 504104 libs optional libunbound8_1.17.1-2+deb12u4_mips64el.deb 759b7df2e534836a3941b47369854f86 172984 debug optional python3-unbound-dbgsym_1.17.1-2+deb12u4_mips64el.deb 0e953c44e85db647d938a8496f43bcbb 197104 python optional python3-unbound_1.17.1-2+deb12u4_mips64el.deb 77b358aa98f59895c9b8b140fbad8170 63428 debug optional unbound-anchor-dbgsym_1.17.1-2+deb12u4_mips64el.deb 5c03f8bdbf321382398c0a3c469fbc34 179864 net optional unbound-anchor_1.17.1-2+deb12u4_mips64el.deb 29f1bee0ebf9b160ab472e34a38dd435 4689356 debug optional unbound-dbgsym_1.17.1-2+deb12u4_mips64el.deb 8a5351bf07f4c8590c388c6ce58a7aca 138636 debug optional unbound-host-dbgsym_1.17.1-2+deb12u4_mips64el.deb 43b4ba0c91316988e1dfdf89232a924d 202580 net optional unbound-host_1.17.1-2+deb12u4_mips64el.deb da0a6edac9ce3e3c6a21996dbefe1041 10797 net optional unbound_1.17.1-2+deb12u4_mips64el-buildd.buildinfo cb8b1f4f2c3b2c9748ab03fffde39af3 904016 net optional unbound_1.17.1-2+deb12u4_mips64el.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEYLhEzFkGpb3yYRVHmlVdU6AM9BUFAmk13+MACgkQmlVdU6AM 9BWe1hAAvRgF8LFQbQi/Lmc0LccBjn24fZqHJ50iL8/hDMGddBKUsiqTqIJd/fPI yr+m+YyEyK365dq9mXrbe1HzBBgPy6Y8RuEWp85ESphTwrwXvXbm2auCOgoIMOPm rf60FfFDiLrxJRw7gR6axmf20+z287KfUIZs6LwIYF1396RduJxdBOO7HGE/B4ZB 5EIuCOfEHcByFjTRY9Yok1Cjyrw/UDh06q52Zdv4uVJTgwmXcWVysO6ASXYiTABk sgRxcX/GAYsNwMAY8rHe/QRrA1IXSIYeqPNbjmGIs/X7ee6qiLuqXRUADiG98tcn IeNIfypYXtUzZHpzqSdIiRTKx6W5znTxVbofUKCDyTu3+VtVNrCl6TCvcE4dZspP yIoxvINQ3F+M2si5Ywe9yo/xNo7mNpSoulWoX0mTiZCV3GgNpITIYRbOngTdbkPJ cUHniwvvtSQWpVMjZ3pSN1Brj908/u2iYL5bVCYKB4GVj4Matt5BgJQaUWK4QADp bdDd4+Df7mQDK4GEoNM9foew9I/0mNv2zqV70AaxNr4VtjSw7EQjaAJT5AFiphFv fCtHvwDe5BhdG5K4RSRPIMAXBJ86sVY7fTvarY/0ly/AElKcOq7h0ZMdeQ1475Jn CxWNLbkYlFhq1DexJ4ejHf00LJvXfJBYyAjNPaEKk3poq5oTYd4= =7ZL+ -----END PGP SIGNATURE-----