-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 30 Nov 2025 13:33:55 +0300 Source: unbound Binary: libunbound-dev libunbound8 libunbound8-dbgsym python3-unbound python3-unbound-dbgsym unbound unbound-anchor unbound-anchor-dbgsym unbound-dbgsym unbound-host unbound-host-dbgsym Architecture: mipsel Version: 1.17.1-2+deb12u4 Distribution: bookworm Urgency: medium Maintainer: mipsel Build Daemon (mipsel-osuosl-04) Changed-By: Michael Tokarev Description: libunbound-dev - static library, header files, and docs for libunbound libunbound8 - library implementing DNS resolution and validation python3-unbound - library implementing DNS resolution and validation (Python3 bindi unbound - validating, recursive, caching DNS resolver unbound-anchor - utility to securely fetch the root DNS trust anchor unbound-host - reimplementation of the 'host' command Closes: 1100870 1121446 Changes: unbound (1.17.1-2+deb12u4) bookworm; urgency=medium . * CVE-2024-33655.patch: remove unrelated change testdata/fwd_udptmout.tdir/fwd_udptmout.conf is not modified by the upstream commit in question (c3206f4568f6) * fix-823-Response-change-to-NODATA-for-some-ANY-queries.patch Fixes: https://github.com/NLnetLabs/unbound/issues/823 * fix-not-following-cleared-RD-flags-amplification.patch fix potential amplification DDoS attacks * replace combined CVE-2023-50387_CVE-2023-50868_1.16.1-1.17.1.patch with 2 separate upstream commits, add patch descriptions, and add missing changes for testdata files: o CVE-2023-50387-DNSSEC-verification-complexity.patch o CVE-2023-50387_CVE-2023-50868_1.16.1-1.17.1.patch * 3 changes to fix CVE-2025-11411 (possible domain hijacking attack): o 1-iterator-iter_scrub.c-pass-module_env-parameter-to-s.patch (a change from "Add harden-unknown-additional option" upstream patch) o 2-possible-domain-hijacking-attack.patch o 3-additional-fix-for-possible-domain-hijacking.patch (Closes: #1121446) * fix-595-unbound-anchor-cannot-deal-with-full-disk.patch Fixes: https://github.com/NLnetLabs/unbound/issues/595 (Closes: #1100870) * d/gbp.conf: set default branch to debian/bookworm Checksums-Sha1: 44217a3d1892e97f9022039bbbc168b2bed90cdc 672908 libunbound-dev_1.17.1-2+deb12u4_mipsel.deb d8568ff4e34eb81501f9930b256359334f3bfc28 1291916 libunbound8-dbgsym_1.17.1-2+deb12u4_mipsel.deb 46d1437e01aa28d8f72f008d11df6f829bd2db18 508164 libunbound8_1.17.1-2+deb12u4_mipsel.deb fa93c513489f2f10a1f6be4e291c319212ee5e86 190512 python3-unbound-dbgsym_1.17.1-2+deb12u4_mipsel.deb 4c9430af07f645228c738677ac9a3c0a4cc15171 197236 python3-unbound_1.17.1-2+deb12u4_mipsel.deb e04d9146963791a34104f3f4ecac0ad407429d26 63380 unbound-anchor-dbgsym_1.17.1-2+deb12u4_mipsel.deb 7713f41277f8264690f35dc5db7b55e91b9b3a96 182044 unbound-anchor_1.17.1-2+deb12u4_mipsel.deb 6fc9402c221ee67b5c3e5c2153ec69a45fb351b0 4750768 unbound-dbgsym_1.17.1-2+deb12u4_mipsel.deb e8bac1c2ddc1e4397dbcb8259fc96c93a1127e9b 139264 unbound-host-dbgsym_1.17.1-2+deb12u4_mipsel.deb 6ba4122dc214c50e371db586afd1cd608ec4ecf8 204648 unbound-host_1.17.1-2+deb12u4_mipsel.deb 4be22c5677bd166970e76c53585799cb5f74ff32 10720 unbound_1.17.1-2+deb12u4_mipsel-buildd.buildinfo bd64b3f8fab29c775ca614018272e7da5ddcd5d8 909896 unbound_1.17.1-2+deb12u4_mipsel.deb Checksums-Sha256: 99ccb3134d3b40ffd18f4b9e1280fe681a9b7a7e834798b1e44776068f167760 672908 libunbound-dev_1.17.1-2+deb12u4_mipsel.deb eef7ac50fd6c9620bffffd70ba2b2954e74c5892c6617a3c605367c5a9e38e38 1291916 libunbound8-dbgsym_1.17.1-2+deb12u4_mipsel.deb b2f324b4394904aabe8dfa81c338efc3fedfdf3fd6eb759ef050a5b4269baf38 508164 libunbound8_1.17.1-2+deb12u4_mipsel.deb 57feaa1cd6fa724eeec5e0e2b2e47447d51a9e374333c2d26f0e44121b171bdf 190512 python3-unbound-dbgsym_1.17.1-2+deb12u4_mipsel.deb b1fa2b26fbcf040caa82b5951ff4ffc6eddd694e0a405cd591b493613c66d356 197236 python3-unbound_1.17.1-2+deb12u4_mipsel.deb 62ee057bc7af3ce65bc8aff366ad750a9729bbd53813953e9fc80f2c6b18f826 63380 unbound-anchor-dbgsym_1.17.1-2+deb12u4_mipsel.deb 7e15589f144a058316fc3ce2d31dbcad2a778ae490fae4473473b06527005821 182044 unbound-anchor_1.17.1-2+deb12u4_mipsel.deb 718ef9b43c30462cea3ee9fe036dc128a8084f99b58c4e6ab66de2b0c96ae905 4750768 unbound-dbgsym_1.17.1-2+deb12u4_mipsel.deb a8d0b2e6dcc7db2ae00fa9532192629cfbff7fa882bb676c7f3ed08e2918783c 139264 unbound-host-dbgsym_1.17.1-2+deb12u4_mipsel.deb 025e4ca3c4d1412094cfc1b57d31a6e6609f3b678771541c66328d90f0a33c3d 204648 unbound-host_1.17.1-2+deb12u4_mipsel.deb 2099d66f0648815c34f810a86e1733631d4d2c93ff1bad77fcd7d516822d2c02 10720 unbound_1.17.1-2+deb12u4_mipsel-buildd.buildinfo 41b65c4bf9d21dae3e09600a7a9f4b36136f515a7f6ff4d854503385f348db1b 909896 unbound_1.17.1-2+deb12u4_mipsel.deb Files: c3397f4e2c9a1f6833e4d3a0e93ca926 672908 libdevel optional libunbound-dev_1.17.1-2+deb12u4_mipsel.deb ce442d9449639ec288207f1d00e5e662 1291916 debug optional libunbound8-dbgsym_1.17.1-2+deb12u4_mipsel.deb c3ff84829b38a0b82a51e412784a56e0 508164 libs optional libunbound8_1.17.1-2+deb12u4_mipsel.deb cf74fcce575166eca74c6feeddb4ac99 190512 debug optional python3-unbound-dbgsym_1.17.1-2+deb12u4_mipsel.deb d57213b34712caf88db08214e5f62ed3 197236 python optional python3-unbound_1.17.1-2+deb12u4_mipsel.deb 0500323b5ac4162f51303676daa1a681 63380 debug optional unbound-anchor-dbgsym_1.17.1-2+deb12u4_mipsel.deb bc39bfaed8954b12dccd74cbdda931cf 182044 net optional unbound-anchor_1.17.1-2+deb12u4_mipsel.deb c4cad50b165c5d26a16a8005f7ca7abf 4750768 debug optional unbound-dbgsym_1.17.1-2+deb12u4_mipsel.deb 9046e7eb9d37e27836a4d98a0fb45cad 139264 debug optional unbound-host-dbgsym_1.17.1-2+deb12u4_mipsel.deb de4d3f2f699c6edcf86087e7338b94db 204648 net optional unbound-host_1.17.1-2+deb12u4_mipsel.deb 7aadabeb54fd453e9540146e60352241 10720 net optional unbound_1.17.1-2+deb12u4_mipsel-buildd.buildinfo 24f8e8e8d836b0f194b3f7c7352411f2 909896 net optional unbound_1.17.1-2+deb12u4_mipsel.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEyYUQCyzsgu940OiVpwP2OD8jZaoFAmk11V0ACgkQpwP2OD8j Zar1mQ//cgyounvmPcocya3rZvhm0AGt3TGnO9umUFoUbqnXEdqzn1eQFKNEYQg1 rCfQzBCAgNKF6bRYwFnrSIuVu5ouThRPu58tKiBDtAvwnjuMdUu57/VtsvRrIT+m CzbE5K4aInTBXUjEUvHBmsYXIAphLGaNp5lzhywT6R67VtIqt8tCjRP9Bgr2jIqI zcfmiDc89n3kTWNEQtR2/QEhxJErs1tEqEhB3IZPErtl0PU5hoSXy+/Ue8oGces2 53adbwvM546B7FrDhVYgk4XpnleVgbi1TfZR4BELx5S9Q4nLUW8EWPDC5kKddWoy XS+JtQvOfFfBtxKrYFNSRZmr5qmMqj53tgeNTzEMB3EXpxl/h1FthfqUi1pr8f4g JtlUfGD9IUVOwdZU4mL7I74I/7wupwxCgXgWQb6voewFHyia34DSLRUED6XiBgzd KpZ0MMEEUYf41b23BtcxW28+aQ+ABMrPGaNYSJv/4pEkj2i0eaKV7kR/cpuy0G5m k7wQNm+P1mzT3ka1CfSuM4wXC5DKQFNMl7PbJNJHgHXQE1govPSj0ipkfj95DFSy ltoCZ/6C9QhBenR1I7sGNPJb31p0fYEqII9WOtVqQ4XZrjhnbKCWePgUZHMTC3Mv gR3PV3NOr384vuAVdctZUgptQ75AQijhTuGINeoK1RtIlmrGgTU= =/xwq -----END PGP SIGNATURE-----