-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Wed, 21 Oct 2026 23:26:10 +0300
Source: unbound
Architecture: source
Version: 1.26.2-1
Distribution: unstable
Urgency: medium
Maintainer: Unbound Packagers <unbound@packages.debian.org>
Changed-By: Michael Tokarev <mjt@tls.msk.ru>
Changes:
unbound (1.26.2-1) unstable; urgency=medium
.
* d/control: drop now-redundant Priority: optional
and Rules-Requires-Root: no
* d/control: Capitalize Maintaier
* d/control: Standards-Version: 4.7.4 (no changes)
* new upstream security/bugfix release:
- CVE-2026-97206 - severity: HIGH
DoQ path-migration can lead to use-after-free o
n multi-threaded deployments.
- CVE-2026-50106 - severity: MEDIUM
Possible insecure NXDOMAIN for non-existing records under a
configured island trust anchor underneath an insecure parent.
- CVE-2026-96405 - severity: MEDIUM
Aggregate DNS name chained pointer decompression work
leads to degradation of service.
- CVE-2026-109125 - severity: MEDIUM
Possible cache poisoning vulnerability via a cache side-channel
exposed by 'unwanted-reply-threshold'.
- CVE-2026-35501 - severity: LOW
Bypass of a configured island trust anchor underneath an insecure
parent from an atacker-controlled NSEC record.
Checksums-Sha1:
ef2ebc4df4bd748360261324764dd1dd5a808588 3221 unbound_1.26.2-1.dsc
aaab049b0719a7646958a7f2e2254f19f533d451 6949796 unbound_1.26.2.orig.tar.gz
331dabcbcf7bfca5e0b382c83074b32aac54b6b9 659 unbound_1.26.2.orig.tar.gz.asc
36ae7d2453beeb72f6e133ead55e21f113f13a9b 31760 unbound_1.26.2-1.debian.tar.xz
6f1e73d3d4d756b9d6d2dadd13a38d9912b54c6e 5877 unbound_1.26.2-1_source.buildinfo
Checksums-Sha256:
e38ffe6d162c8efff86f02ba637f3e34e95688583d8a8f91ca420783bcc193e4 3221 unbound_1.26.2-1.dsc
d8ee7aa6bbb3ff1be7d9e57637d0d0ec2f18273a8efff1a0afe2c665858b96f7 6949796 unbound_1.26.2.orig.tar.gz
0f128cf96c9bd86be12a45082e6f518c5dc09d1c3bd93dccbdc53627e6c5cdf9 659 unbound_1.26.2.orig.tar.gz.asc
2cd9607c0888920302edc7ab37ebd5f050f89eb64381cf46df1b616836185658 31760 unbound_1.26.2-1.debian.tar.xz
5165672bc7d1ca293aa079528dc752336a64e7662201b7067e865a1d0714d973 5877 unbound_1.26.2-1_source.buildinfo
Files:
44ac3d04f5f3ae386c49cfa258f45140 3221 net optional unbound_1.26.2-1.dsc
4e6e12ff9a7ce64844d270276df5a3a0 6949796 net optional unbound_1.26.2.orig.tar.gz
9b9a74979ea82f7c10acc0b074f670d0 659 net optional unbound_1.26.2.orig.tar.gz.asc
113c354703c65abb2b5046b3100cc91e 31760 net optional unbound_1.26.2-1.debian.tar.xz
c01ea45cc364b3e9ce6a3294850e974a 5877 net optional unbound_1.26.2-1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=DKDl
-----END PGP SIGNATURE-----
