-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Wed, 21 Oct 2026 23:39:19 +0300
Source: unbound
Architecture: source
Version: 1.26.2-0+deb13u1
Distribution: trixie-security
Urgency: medium
Maintainer: unbound packagers <unbound@packages.debian.org>
Changed-By: Michael Tokarev <mjt@tls.msk.ru>
Changes:
unbound (1.26.2-0+deb13u1) trixie-security; urgency=medium
.
* new upstream security/bugfix release:
o CVE-2026-97206 - severity: HIGH
DoQ path-migration can lead to use-after-free
on multi-threaded deployments
o CVE-2026-50106 - severity: MEDIUM
Possible insecure NXDOMAIN for non-existing records under a
configured island trust anchor underneath an insecure parent
o CVE-2026-96405 - severity: MEDIUM
Aggregate DNS name chained pointer decompression work
leads to degradation of service
o CVE-2026-109125 - severity: MEDIUM
Possible cache poisoning vulnerability via a cache side-channel
exposed by 'unwanted-reply-threshold'
o CVE-2026-35501 - severity: LOW
Bypass of a configured island trust anchor underneath an insecure
parent from an atacker-controlled NSEC record
Checksums-Sha1:
aae78304b0da9904f4315a7971b8be477632d3be 3201 unbound_1.26.2-0+deb13u1.dsc
aaab049b0719a7646958a7f2e2254f19f533d451 6949796 unbound_1.26.2.orig.tar.gz
331dabcbcf7bfca5e0b382c83074b32aac54b6b9 659 unbound_1.26.2.orig.tar.gz.asc
ffa6ac6453da50d050c94944d3c4f62e93916f5d 32552 unbound_1.26.2-0+deb13u1.debian.tar.xz
126a29fd05133ca0165af38e67ff4f612624496d 5909 unbound_1.26.2-0+deb13u1_source.buildinfo
Checksums-Sha256:
d0de2b0ac0bc2f0448e6a5b80f45b69236c9124f8ac09182f1b95bf02a97385b 3201 unbound_1.26.2-0+deb13u1.dsc
d8ee7aa6bbb3ff1be7d9e57637d0d0ec2f18273a8efff1a0afe2c665858b96f7 6949796 unbound_1.26.2.orig.tar.gz
0f128cf96c9bd86be12a45082e6f518c5dc09d1c3bd93dccbdc53627e6c5cdf9 659 unbound_1.26.2.orig.tar.gz.asc
cfa3056a5ff76815be4ff3dfeb6a117b6e31c1722f4fc954bedd4bed72d0ec9e 32552 unbound_1.26.2-0+deb13u1.debian.tar.xz
dd564503403afa459ab939963f79a8a744ee5577ed99586315efaf82f01b41dd 5909 unbound_1.26.2-0+deb13u1_source.buildinfo
Files:
eef146bd4701e3300e0a4a78af0e08d1 3201 net optional unbound_1.26.2-0+deb13u1.dsc
4e6e12ff9a7ce64844d270276df5a3a0 6949796 net optional unbound_1.26.2.orig.tar.gz
9b9a74979ea82f7c10acc0b074f670d0 659 net optional unbound_1.26.2.orig.tar.gz.asc
a9a7bb66af3a98261de3a3c4c5f01e94 32552 net optional unbound_1.26.2-0+deb13u1.debian.tar.xz
a38dd9fe247cc4420cca875688e7d17b 5909 net optional unbound_1.26.2-0+deb13u1_source.buildinfo
-----BEGIN PGP SIGNATURE-----
iQIzBAEBCgAdFiEEZKoqtTHVaQM2a/75gqpKJDselHgFAmrZysIACgkQgqpKJDse
lHhiAxAAkK3btC/YIE1Hg8bsJdbN7Wosetyu7qz67VIvcFCi1xzrUMfY3bZ8PbDJ
5qavYCGr6ZjPNVpty7hyK3P+0ZhcPxCggt1QZIfz+2Lew12rerqf/a5Nzg0GKTW/
QuhmruOvGh+2UQ8CoIbOPMMj37jh8ZSkC9fUe2QQbG2tcbxmpQaH/le+GlAb6Hxt
mhiY9p694HNM43rvhx+rszPs/fxwuYogW4+oJZka25WLYqEqkLr26MaPbXrt3X5J
NGD7D5KG3qR/XAx7aIp59iqxFx2N7lfkQuLkT4MF5oMMWutVYJf8AKCzRWFpPvRc
uRGU23SQ4ho9WcA7k5a3VI0YUirFhS81JeHh9jYPtKPDd2+6AJfvgksMqG6AoASl
m04elOn9EyvwOPULC5zp6FRmgZDG+iEmOy/DmeO7LXyvGovY3TPf9m/WzCPPe/JY
q3uN93DtZ6tep6i29bQbXsVDMzpvzbvzlzgDT/6p3jf5UA6hnwcsU524z1Fxx9Il
g85t6iSd2LagZTuLocK8qmqXVvmBHsDYrmKH4gUD1D40Tl8+7o2oGV0aVnnzIqva
jE7pLn0rMfZ8cHsvvd6+KRZATMPnMd/cECjAoOvdo6vscBgKsXIihxyZ5CG+hY1W
eF6QzUqYoayzrVIJvUjULD/eE8e+BsvpN/dm1hXMtMLc86g8ezs=
=T/zc
-----END PGP SIGNATURE-----
