-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 30 Nov 2025 18:26:22 +0100 Source: unbound Architecture: source Version: 1.13.1-1+deb11u7 Distribution: bullseye-security Urgency: high Maintainer: unbound packagers <unbound@packages.debian.org> Changed-By: Guilhem Moulin <guilhem@debian.org> Closes: 1121446 Changes: unbound (1.13.1-1+deb11u7) bullseye-security; urgency=high . * Non-maintainer upload by the LTS Team. * Additional fix for CVE-2025-11411: Cache poisoning vulnerability via NS RRSet injection. (Closes: #1121446) * Backport upstream fix to potential DDoS attacks. The fix stops query loops, by refusing to send RD=0 queries to a forwarder, they still get answered from cache. Checksums-Sha1: 0a2901018a81c6848a8c45a10e4de79f89bf60b1 3162 unbound_1.13.1-1+deb11u7.dsc 561522b06943f6d1c33bd78132db1f7020fc4fd1 5976957 unbound_1.13.1.orig.tar.gz f20b17d911dfa8efb58ee412207829cea2d964c4 833 unbound_1.13.1.orig.tar.gz.asc 79048c1c6fa2ba02eab6852f8ef860206f084526 70228 unbound_1.13.1-1+deb11u7.debian.tar.xz 8f9dad17320ffef063729433b09ecb4a2a80d272 6009 unbound_1.13.1-1+deb11u7_source.buildinfo Checksums-Sha256: 88ef492f454bf10e0004864972a5a90f944c3a0e92a51f7f95c137a3a3eff428 3162 unbound_1.13.1-1+deb11u7.dsc 8504d97b8fc5bd897345c95d116e0ee0ddf8c8ff99590ab2b4bd13278c9f50b8 5976957 unbound_1.13.1.orig.tar.gz 1ca1fb3db4baa3e831bc42fcecf3eaceb316abf7a2d816dc46d0efcd199f419e 833 unbound_1.13.1.orig.tar.gz.asc 42276bd154ba8466b4723369f91e2a373b547b93abf9fa3963b8f2992d08f340 70228 unbound_1.13.1-1+deb11u7.debian.tar.xz 505ef5e651df07cb4f19f79d1b1bb5cb89c1403701e5f0fa91d3f872717bf446 6009 unbound_1.13.1-1+deb11u7_source.buildinfo Files: bd117fe88fa01abf1251b5acd675eaab 3162 net optional unbound_1.13.1-1+deb11u7.dsc 0cd660a40d733acc6e7cce43731cac62 5976957 net optional unbound_1.13.1.orig.tar.gz 4c3726440d8271df13ba2189846141e6 833 net optional unbound_1.13.1.orig.tar.gz.asc 03ba52b216ec677a1dbb977296106fb6 70228 net optional unbound_1.13.1-1+deb11u7.debian.tar.xz 413a5749512abfdbcf7c036d64cb8d02 6009 net optional unbound_1.13.1-1+deb11u7_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEERpy6p3b9sfzUdbME05pJnDwhpVIFAmksvVkACgkQ05pJnDwh pVKWkA/9GW3eD0N+N410QjdornWbbO6iCvo7NPxCZcjClT1L6bwhVn/vD+gplWki zu/AALSOkRFZlUDs8ObV6Cbsl7kIu/I+dXaqfdGcAxVr2QFQehZmGRnlsSx5daIg j/FaAzqf1KESiZ/Qht2R3YKMkVNit01baR+cVvS3voTOTcs2eud7YjElKh9j/IqX NopFYExv9oz+UlknSTgxQJLPrq9lXQjtcRnjAIK1oYqAUXH4AnBV9Yww13PSQHAA LhxKUuLg2N8PXx1IDWqjcBUaCtpDRFWXqadiSuyHiSu6/cfsdAzjJrN/IqY2uNw4 JXTIVYEZoAySEK1u4pk97vBKjpqD8W43lMrgHtLfcuavbUG5x6GU3BwM5286kMKq JqLuUeGxjG2AAMrDtOFHLdx5Vj0OvmRNbRhMJ8UcCshSalv1v0sdb6l8dBsM4aGx kbjqkJhPMvrKLhepTQi+AmcfD1BW94SE87QmirhPSi2p3x2BgcG323WN6hCxzFdx KsijkQ17uj4MXmO+4Mlvsom+EMf7rstdhHyKX9VUG3Z24li33rXAXIwW/3wNFCwL K1AjAIcJmcLpjksHSK54RciWblvrvLtN/8izvYU10TWitb9gDRgpKOWJeO4Ts6bg PTp+ASTEkyF+dXrDX0T+BrqNrWNbx1okYBxfxjeDrkcKVR3mKzg= =Y9lK -----END PGP SIGNATURE-----