-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 30 Nov 2025 13:33:55 +0300 Source: unbound Binary: libunbound-dev libunbound8 libunbound8-dbgsym python3-unbound python3-unbound-dbgsym unbound unbound-anchor unbound-anchor-dbgsym unbound-dbgsym unbound-host unbound-host-dbgsym Architecture: ppc64el Version: 1.17.1-2+deb12u4 Distribution: bookworm Urgency: medium Maintainer: ppc64el Build Daemon (ppc64el-osuosl-01) Changed-By: Michael Tokarev Description: libunbound-dev - static library, header files, and docs for libunbound libunbound8 - library implementing DNS resolution and validation python3-unbound - library implementing DNS resolution and validation (Python3 bindi unbound - validating, recursive, caching DNS resolver unbound-anchor - utility to securely fetch the root DNS trust anchor unbound-host - reimplementation of the 'host' command Closes: 1100870 1121446 Changes: unbound (1.17.1-2+deb12u4) bookworm; urgency=medium . * CVE-2024-33655.patch: remove unrelated change testdata/fwd_udptmout.tdir/fwd_udptmout.conf is not modified by the upstream commit in question (c3206f4568f6) * fix-823-Response-change-to-NODATA-for-some-ANY-queries.patch Fixes: https://github.com/NLnetLabs/unbound/issues/823 * fix-not-following-cleared-RD-flags-amplification.patch fix potential amplification DDoS attacks * replace combined CVE-2023-50387_CVE-2023-50868_1.16.1-1.17.1.patch with 2 separate upstream commits, add patch descriptions, and add missing changes for testdata files: o CVE-2023-50387-DNSSEC-verification-complexity.patch o CVE-2023-50387_CVE-2023-50868_1.16.1-1.17.1.patch * 3 changes to fix CVE-2025-11411 (possible domain hijacking attack): o 1-iterator-iter_scrub.c-pass-module_env-parameter-to-s.patch (a change from "Add harden-unknown-additional option" upstream patch) o 2-possible-domain-hijacking-attack.patch o 3-additional-fix-for-possible-domain-hijacking.patch (Closes: #1121446) * fix-595-unbound-anchor-cannot-deal-with-full-disk.patch Fixes: https://github.com/NLnetLabs/unbound/issues/595 (Closes: #1100870) * d/gbp.conf: set default branch to debian/bookworm Checksums-Sha1: 18e426b6abc9d5eea255c6a4c099a90bc7a54a1a 687504 libunbound-dev_1.17.1-2+deb12u4_ppc64el.deb d14847cbbcb2093f8695df6b5a11f8bdb16b5f23 1280256 libunbound8-dbgsym_1.17.1-2+deb12u4_ppc64el.deb 8a8a5511145df3062ec16524fc3a0d6bb9fc9e68 578236 libunbound8_1.17.1-2+deb12u4_ppc64el.deb 0c9596daf319c4a98889e9dd6ab990b2e5bf242f 176452 python3-unbound-dbgsym_1.17.1-2+deb12u4_ppc64el.deb 4b52f443cc4c5017e3c2952ea593e7ae3f1008aa 205116 python3-unbound_1.17.1-2+deb12u4_ppc64el.deb 83c16a0ab5ec5da6307ee3ee47786ea668b3f931 61572 unbound-anchor-dbgsym_1.17.1-2+deb12u4_ppc64el.deb d7c50db5741e5505191e87bd239e4b2519677985 181924 unbound-anchor_1.17.1-2+deb12u4_ppc64el.deb 634ae579f5ed4eacfdef1b85767d912e6f3992ac 4599292 unbound-dbgsym_1.17.1-2+deb12u4_ppc64el.deb 4b99766691d60b031e3a8ed8b351809ddc708804 133820 unbound-host-dbgsym_1.17.1-2+deb12u4_ppc64el.deb 31848180dca5e509d63230e4f74ede36b0d8ea8b 207988 unbound-host_1.17.1-2+deb12u4_ppc64el.deb 4c16a767c9129f4ebb27ed87d89c4c7d071a0662 10978 unbound_1.17.1-2+deb12u4_ppc64el-buildd.buildinfo d4533c6a7765773a311c4b0413370e3965a2d03b 964488 unbound_1.17.1-2+deb12u4_ppc64el.deb Checksums-Sha256: 77f26a016eebbd83fb691551a97e734605d34e1149f7e72416a72b275e898a96 687504 libunbound-dev_1.17.1-2+deb12u4_ppc64el.deb 403466fe11c4a15c940b71aec3d13828c3f0d454113d21e9957e5588da3f75de 1280256 libunbound8-dbgsym_1.17.1-2+deb12u4_ppc64el.deb fb2c11effb780c37a527e0b77e4871cf5369e9a053f574da10961d44e2fc0007 578236 libunbound8_1.17.1-2+deb12u4_ppc64el.deb 039178a6978ecaf38f82de7b3b50c245d590b823c6eb46ff97cab24148038157 176452 python3-unbound-dbgsym_1.17.1-2+deb12u4_ppc64el.deb 8da46f13f5c0669d1f5cea89f194282d4d96188264cf38961b452d11b07184a6 205116 python3-unbound_1.17.1-2+deb12u4_ppc64el.deb f48e6df7529069d642af948d1a6b71356b1e6eeca610f23ffbdbac4108a5404b 61572 unbound-anchor-dbgsym_1.17.1-2+deb12u4_ppc64el.deb 0fb1db90bdf9ba4b08a755fe06743b157647bad8d073dff06187989344865a0f 181924 unbound-anchor_1.17.1-2+deb12u4_ppc64el.deb b4406a430785b28f5a9650759520028f87ae34c56f3ff8c6e929a54dc9fa9d26 4599292 unbound-dbgsym_1.17.1-2+deb12u4_ppc64el.deb 585616672d338b0d56789310839dfad64058f8ff8d3a09daf1486d9a60889ffe 133820 unbound-host-dbgsym_1.17.1-2+deb12u4_ppc64el.deb b7d9b6abeb83f74ae97a5577cfa3f92059788d1c8a2a61a1c1ab283578e91974 207988 unbound-host_1.17.1-2+deb12u4_ppc64el.deb 46dc57cb8a696792ce49c7220d3936e58e73693fc4b40f9640a790e4673cfabc 10978 unbound_1.17.1-2+deb12u4_ppc64el-buildd.buildinfo 41339ac36952d59320a7dcb6307130467725882d16ea15e091915159a2b71fe6 964488 unbound_1.17.1-2+deb12u4_ppc64el.deb Files: 6dcf050b8a68a226b442b9ea8340c3b3 687504 libdevel optional libunbound-dev_1.17.1-2+deb12u4_ppc64el.deb 9ec81df914f0b74d0d233421c368cfe9 1280256 debug optional libunbound8-dbgsym_1.17.1-2+deb12u4_ppc64el.deb 5833ce4efcd43918287f8ea6a25cd55f 578236 libs optional libunbound8_1.17.1-2+deb12u4_ppc64el.deb 93216cc02b9e2953436ab40858a31832 176452 debug optional python3-unbound-dbgsym_1.17.1-2+deb12u4_ppc64el.deb 4179f5dace8cf059d3f001b45733fa1e 205116 python optional python3-unbound_1.17.1-2+deb12u4_ppc64el.deb 2e66729f30f576ddc599d01920ae25c7 61572 debug optional unbound-anchor-dbgsym_1.17.1-2+deb12u4_ppc64el.deb 6d74184f7bb46de1868c7c2fcff4b9b1 181924 net optional unbound-anchor_1.17.1-2+deb12u4_ppc64el.deb 3ce9bb3077a052ced0dae6b1726a37a9 4599292 debug optional unbound-dbgsym_1.17.1-2+deb12u4_ppc64el.deb 68de8b7c58663621375f8dc79b021d08 133820 debug optional unbound-host-dbgsym_1.17.1-2+deb12u4_ppc64el.deb 0523dc0c6fd5d24b47b746108d586b65 207988 net optional unbound-host_1.17.1-2+deb12u4_ppc64el.deb 8d93072426582e2d2962748a4062fe6f 10978 net optional unbound_1.17.1-2+deb12u4_ppc64el-buildd.buildinfo aacaf0bb11f0ece2e02a7d358ef78fbd 964488 net optional unbound_1.17.1-2+deb12u4_ppc64el.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEGHWM+bJZRznwgySGOrVShFbIMGEFAmk1u8gACgkQOrVShFbI MGG8Vw/7B0psHIceU6N0Megzxt2xeouWL98kfOeacxplWmg4+vY6GrIBmBNhbNq4 3FobDDax8jococ0FdIPEv0brfn1pEQ4ukDfw3/0RcwkprIlVgOttv/P/jMwgliaK BZOTN4rvP8lkHlnoq6EoatCM/L733h999IboG8Eii2n1+FoJ/fvGtu6N2rPMm+Qc OyYK/5vuTdKmbCsmJvwWosL2DMhRFHLrL/fc9ClO8skS0xI94u3dghbnyOqvr+9U +z28st4C+XTJOhUesJky+MFvuf9d/Zfj9mpRoJCx8TIZ/BgdbvUyw0l9rM+SQSVL SMTI+wA52/mtsGcob4ymj6ogdGK651PknUsRnuDMyV5cPNvCYmDbzhEWNPlxslLO W0/yKZJo/FhSJdtDqh3M5yYh16a+Be8R5UvB2o7Z9aFCVJp1MrJ8dlNVR9qryGMs s/RI23e2TKLiYyFIhzO3nBokIMb17dRD9NGE/4ULhIc1Q1l9hpXcIghmb587Tgia PLLSB3701FITvS/b6adKCNqGx3I/4YHG8AfxC8nl5A2zPF79U2yzsay4w0MwGR2h tuE/q+kbZUcRNYUKzJbobcdCU5QePK2F3Z0A3flrDoj5nPo16D+bF9DsnnyIiVpa XkYItrlEaDjIYsz7X/ZSjFT96e7NFELq8sZPLFMhJ5ceQk2lZL8= =w/Av -----END PGP SIGNATURE-----