-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 30 Nov 2025 13:33:55 +0300 Source: unbound Binary: libunbound-dev libunbound8 libunbound8-dbgsym python3-unbound python3-unbound-dbgsym unbound unbound-anchor unbound-anchor-dbgsym unbound-dbgsym unbound-host unbound-host-dbgsym Architecture: s390x Version: 1.17.1-2+deb12u4 Distribution: bookworm Urgency: medium Maintainer: s390x Build Daemon (zani) Changed-By: Michael Tokarev Description: libunbound-dev - static library, header files, and docs for libunbound libunbound8 - library implementing DNS resolution and validation python3-unbound - library implementing DNS resolution and validation (Python3 bindi unbound - validating, recursive, caching DNS resolver unbound-anchor - utility to securely fetch the root DNS trust anchor unbound-host - reimplementation of the 'host' command Closes: 1100870 1121446 Changes: unbound (1.17.1-2+deb12u4) bookworm; urgency=medium . * CVE-2024-33655.patch: remove unrelated change testdata/fwd_udptmout.tdir/fwd_udptmout.conf is not modified by the upstream commit in question (c3206f4568f6) * fix-823-Response-change-to-NODATA-for-some-ANY-queries.patch Fixes: https://github.com/NLnetLabs/unbound/issues/823 * fix-not-following-cleared-RD-flags-amplification.patch fix potential amplification DDoS attacks * replace combined CVE-2023-50387_CVE-2023-50868_1.16.1-1.17.1.patch with 2 separate upstream commits, add patch descriptions, and add missing changes for testdata files: o CVE-2023-50387-DNSSEC-verification-complexity.patch o CVE-2023-50387_CVE-2023-50868_1.16.1-1.17.1.patch * 3 changes to fix CVE-2025-11411 (possible domain hijacking attack): o 1-iterator-iter_scrub.c-pass-module_env-parameter-to-s.patch (a change from "Add harden-unknown-additional option" upstream patch) o 2-possible-domain-hijacking-attack.patch o 3-additional-fix-for-possible-domain-hijacking.patch (Closes: #1121446) * fix-595-unbound-anchor-cannot-deal-with-full-disk.patch Fixes: https://github.com/NLnetLabs/unbound/issues/595 (Closes: #1100870) * d/gbp.conf: set default branch to debian/bookworm Checksums-Sha1: ddafc96d8f895e21884952325c92f2d3480f480e 593912 libunbound-dev_1.17.1-2+deb12u4_s390x.deb 6c4d8caa888d9f4e937b058dcd2119fcad5ef43a 1227728 libunbound8-dbgsym_1.17.1-2+deb12u4_s390x.deb 74d8867ef57f84360829f0cec358c52b7bbbf79e 504360 libunbound8_1.17.1-2+deb12u4_s390x.deb f0b744cab249eb66159950ab75cea8e5a2cbaa29 164908 python3-unbound-dbgsym_1.17.1-2+deb12u4_s390x.deb 18f2c2c3f31013aaf99cebcfab1c73a14c7176df 200768 python3-unbound_1.17.1-2+deb12u4_s390x.deb 8925ce417368619723f3894ece9da5994f93e209 59332 unbound-anchor-dbgsym_1.17.1-2+deb12u4_s390x.deb 4be9fad3d4467ad0d5c4252f5a839fd0cfe7324e 179492 unbound-anchor_1.17.1-2+deb12u4_s390x.deb 6df7106a16ad87b163bf747a196f2a62e33e5d26 4399148 unbound-dbgsym_1.17.1-2+deb12u4_s390x.deb 5a1857beaf5bb6631cc0ef3884d04d76b292d33a 129596 unbound-host-dbgsym_1.17.1-2+deb12u4_s390x.deb a233e47c7c52c9ecc0d4348ee319ba3165792785 198188 unbound-host_1.17.1-2+deb12u4_s390x.deb 2c73700c308aa67315f16d111ed43276f612c42e 10799 unbound_1.17.1-2+deb12u4_s390x-buildd.buildinfo ce06acaa232feaf2786aa3d9ee629c6a9dffa3d6 875148 unbound_1.17.1-2+deb12u4_s390x.deb Checksums-Sha256: 2c003c253e946a29ee503c2e4a76329abb31f74f7cd3bdd7cf01231bf0a5e628 593912 libunbound-dev_1.17.1-2+deb12u4_s390x.deb c93fa6c343748266343706a7a3c8d3972bf75b2c5b38e38987479a1ea603ee67 1227728 libunbound8-dbgsym_1.17.1-2+deb12u4_s390x.deb 9955d425d40c9323a2985ad1b51bb00d75c01a9bd3901bf2854c04462aa628cf 504360 libunbound8_1.17.1-2+deb12u4_s390x.deb e8172278a47a48462c5bd6199f1ebeb1ede3c13691760c73d8cebc7078434224 164908 python3-unbound-dbgsym_1.17.1-2+deb12u4_s390x.deb 63331d86adb01698f1acf406c16222b6ab4e509c1cec7483158007f9d36d02ce 200768 python3-unbound_1.17.1-2+deb12u4_s390x.deb 98eca8684319190225920daae2762bc1d6aa5bb5553358957c7dfeb7577b0fa6 59332 unbound-anchor-dbgsym_1.17.1-2+deb12u4_s390x.deb 349ff63feb093b6db6a800be50ca13e3e27b43ec089b263f41d9d45446115562 179492 unbound-anchor_1.17.1-2+deb12u4_s390x.deb 0287813d62b84c27eac702a728cd9653b3dc6a73c3255335adfda1cd8e6b9267 4399148 unbound-dbgsym_1.17.1-2+deb12u4_s390x.deb c2e67878e0ec24fa5cb31a9f41623bdad19b8953ef8549d4467eef9470ef0e28 129596 unbound-host-dbgsym_1.17.1-2+deb12u4_s390x.deb 1cd4218703b1476d863dcb1d6ab6d501321cab68201ce915029f86e00325dfcd 198188 unbound-host_1.17.1-2+deb12u4_s390x.deb 5929a029e1153744b511dcecdea433ef23e407f8b8cb76c2cc4657d1f6655aa7 10799 unbound_1.17.1-2+deb12u4_s390x-buildd.buildinfo 01d46c391e9fbd69bf0a2e6db1e72d3f3e291178e34299eff7eaba3de3fce9b8 875148 unbound_1.17.1-2+deb12u4_s390x.deb Files: ff79e98661948548c55546e414012f7b 593912 libdevel optional libunbound-dev_1.17.1-2+deb12u4_s390x.deb 230a4454ec092d8aa03575a049e88319 1227728 debug optional libunbound8-dbgsym_1.17.1-2+deb12u4_s390x.deb 50a4296cc0b5e63bc84e41e8d7c5fb37 504360 libs optional libunbound8_1.17.1-2+deb12u4_s390x.deb 1006b7cc94b3c96301c8d604f3017a66 164908 debug optional python3-unbound-dbgsym_1.17.1-2+deb12u4_s390x.deb 63df407cfd53fdc629553d32e4a9b475 200768 python optional python3-unbound_1.17.1-2+deb12u4_s390x.deb 11c66f68323749345ea8888f3708b12d 59332 debug optional unbound-anchor-dbgsym_1.17.1-2+deb12u4_s390x.deb a6472d846aa4b3a505c169ee2d47779e 179492 net optional unbound-anchor_1.17.1-2+deb12u4_s390x.deb d3f5d2b4c17ce171b5a0cebc224a2928 4399148 debug optional unbound-dbgsym_1.17.1-2+deb12u4_s390x.deb c638e7b05a7eb399e28b4c77335dedcc 129596 debug optional unbound-host-dbgsym_1.17.1-2+deb12u4_s390x.deb ebe5cf8ce3fd922efe4a8c568e0a25ee 198188 net optional unbound-host_1.17.1-2+deb12u4_s390x.deb 7ed776d01da7f4542fb4dbfe4ab9ec5e 10799 net optional unbound_1.17.1-2+deb12u4_s390x-buildd.buildinfo c4ebde471bc9a59bb3dc96d25259f47f 875148 net optional unbound_1.17.1-2+deb12u4_s390x.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEgh4msZ+e2PZfd5KckaCrxAR3BY0FAmk1xa4ACgkQkaCrxAR3 BY0CaA/+KtsRwpCJdmX4Ip7jRbgPiTaO59S4cJe7kbumW/+zPgbeFMq1Ab+4vi2j ioYnWBLBYfw9FbAlO6umo+x7vcv3TtLYoVpJFi5xxRt3Mg3gi4m4bmCejegd2zZN nrrUO5RgTSCh8d+jRixz2oNFCkb1K+dsH1XUAkAFcjnNLeeYr3viDPryo23+/PAm YkqE75q9oJvYYt2FqOMRWsxh08jmCVVtlNPMyYE/EefLaWATrbn1kZEFqEmzrcIK 5Wa1oedav+0FmrUGJNHpe211jJCCPvu19G9nJEtFQNvQhtVUYKpICad1JGQ7FsRH 7biwB3bO4WqFpG4LY/8P2EHIyXrRk1w5ODQV1gCS7l2s6ZZMEnw6FnVtH/KQYCkV GZ+9GnTGLzE+tjmeB3Oc3kVbtfmYoxkTno8QYeNx/7N3qEQaus72ZeQ6R0io/JnV B8JIbyardy20eLeVNBd4l39L2h6L4fU7W8HSgNwT5J7KvsOdUQxuKZwKzc/rPld3 mCQgEsu0ZzbEqE2Phg+BcmiVUXVZKrqGBI6KfG54HDggJ53j10g1yRD5EDTUz+lA Oaarielv69gYCg+LsylEw+mQ+UfyccH1C/A7rp4bb/Gle7N2w47eqdZNVc7mFt5/ H5FoQkIF521rIWD6kqlE0JJcWN6cKbxObg83Pc0HGVO0840J+9g= =9YqJ -----END PGP SIGNATURE-----