From: ftpmaster@ftp-master.debian.org   
      
   -----BEGIN PGP SIGNED MESSAGE-----   
   Hash: SHA512   
      
   Format: 1.8   
   Date: Wed, 26 Nov 2025 23:12:47 +0300   
   Source: unbound   
   Architecture: source   
   Version: 1.22.0-2+deb13u1   
   Distribution: trixie-security   
   Urgency: high   
   Maintainer: unbound packagers    
   Changed-By: Michael Tokarev    
   Closes: 1121446   
   Changes:   
    unbound (1.22.0-2+deb13u1) trixie-security; urgency=high   
    .   
      [ Guilhem Moulin ]   
      * Fix CVE-2025-11411: Cache poisoning vulnerability via NS RRSet injection   
      * debian/salsa-ci.yml: Disable reprotest and lintian jobs, set   
   RELEASE=trixie   
    .   
      [ Michael Tokarev ]   
      * CVE-2025-11411-additional-nodata.patch -- additional fixes   
        for CVE-2025-11411 (Closes: #1121446, CVE-2025-11411)   
      * d/gbp.conf: set default branch to debian/trixie   
   Checksums-Sha1:   
    1f4e467b5226f3430831490826aa346b1860cfb3 3299 unbound_1.22.0-2+deb13u1.dsc   
    0dcb1b90126eb244aca1ce01c60da8aa62e0f314 6682466 unbound_1.22.0.orig.tar.gz   
    d8f1d3eb62b83aa4d2a05963f443bb60bf0c3f3a 833 unbound_1.22.0.orig.tar.gz.asc   
    d05804c97198236aabf1b759c45dfef94bc71a44 41960 unbound_1.22.0-2   
   deb13u1.debian.tar.xz   
    29901bb072c81abfd6d0cbad87e96a7a4da1b1ac 6481 unbound_1.22.0-2+   
   eb13u1_source.buildinfo   
   Checksums-Sha256:   
    4dcd956ac3740c8fae0b0ad5b9332f90317c44dace0e899e05fab18ae7b2f1a8 3299   
   unbound_1.22.0-2+deb13u1.dsc   
    c5dd1bdef5d5685b2cedb749158dd152c52d44f65529a34ac15cd88d4b1b3d43 6682466   
   unbound_1.22.0.orig.tar.gz   
    1b5d91ad040b1f1c0351b8f6fe288b4123fc63b887152463512be69bc687f915 833   
   unbound_1.22.0.orig.tar.gz.asc   
    ddf9aa2085d3ab1db05719f78ec5581b5d759758b34b43aaaa7d654a065e7347 41960   
   unbound_1.22.0-2+deb13u1.debian.tar.xz   
    34d4a0ec59ca66cf3f6b18e622eb772f6d4ab6f7b8273bbb64926b3225b4869d 6481   
   unbound_1.22.0-2+deb13u1_source.buildinfo   
   Files:   
    40daa7bcad0d281f0e2de4b0e0a37d3d 3299 net optional unbound_1.22   
   0-2+deb13u1.dsc   
    be0e5ae64c6619a638c116addd4da670 6682466 net optional unbound_1   
   22.0.orig.tar.gz   
    4e435494ea5757d1ea1f89aca2bb0be0 833 net optional unbound_1.22.   
   .orig.tar.gz.asc   
    f7a7aa96b7447993c87dba4aa658b3ff 41960 net optional unbound_1.2   
   .0-2+deb13u1.debian.tar.xz   
    f2a8a4d33b4487bfab014c150f279348 6481 net optional unbound_1.22   
   0-2+deb13u1_source.buildinfo   
      
   -----BEGIN PGP SIGNATURE-----   
      
   wsG7BAEBCgBvBYJpKhAcCRCCqkokOx6UeEcUAAAAAAAeACBzYWx0QG5vdGF0aW9u   
   cy5zZXF1b2lhLXBncC5vcmc3jYmvJrhXtvdHIwrxmR9e8Y2Inx21LnHRIcAOdkQs   
   OhYhBGSqKrUx1WkDNmv++YKqSiQ7HpR4AACZfw/7B1ulFI+NoLPsNtGQeN0h2DCV   
   4jbBo+mL8aEUYXChUmN1c7giX02AahJ7Y4Zevc0dSU673xFRgQTLEz2YzoLKqLRy   
   QO1qYfy1iCaEbkiuf5cg37FpeaHF7zGyV7TsP1Tpw4Ahd1NWC39e4xOb4Yqk3oqx   
   pHZSuGyXPI7GFsEvDy0o+7ESQVruDUcDenxwxfLIpNB4qMLc6G0VQuBfqfmdIg1H   
   s/hsaiF0h2hSpQK3tE2yn/wj5y8UG7batb/sOcclTMBzk+E+UsrC7ewhA98Hzyu5   
   JgBUpiMAO0Ex2rramTxltkslMLKKaPuuepg4e37uVk0Irk6JXlRgY/CIR+ocCoCu   
   f39zjf0gWj4mqOPpoD8RjF+BQl8MKNGuNW5m6wCQYYxcv3HIePQol0eRO9TjHmQ/   
   SWa/m7ApOfX/wfn1vZi23302zrqxeX1fPRHiTIoz4MQwlkzrQlcABq5o9jvSpI7O   
   MkDH2JVdDBAyq2i4CatIumPdqE65hvIKY1Awyhs0GxcL/DPOsghi0skgaeLRLIdf   
   KyBziIsy8Fk2ihS/uT1X5QBoyJjeAb1mzS/u5nGpE9gIHogzR84J0y3Qn2jYe4s7   
   yGxeMwctKFf/1TyY68k0yD8dwrPjxDX/OyLLgnTUhHVmsuLj5uEDav7YHaHNunUc   
   zVJ2ym2q9QBbfHJij8o=   
   =CpC9   
   -----END PGP SIGNATURE-----   
      
      
   --==============X75923827742235951=Content-Type: application/pgp-signature   
      
   -----BEGIN PGP SIGNATURE-----   
      
   iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCaTL7AwAKCRCb9qggYcy5   
   IchsAQDtt/ZUjdxzfxqhB0YYWUE7D1EXT6dOu0em4iBoWXpLwAD+NeX+2ksb85eU   
   kk8T4CA8CRsTt8nt3MyimTEijI8TmwY=ni9d   
   -----END PGP SIGNATURE-----   
      
   --- SoupGate-Win32 v1.05   
    * Origin: you cannot sedate... all the things you hate (1:229/2)