Skip to content

[Deepin Integration]~[v25-Release] feat: update unbound to 1.25.1-1 by deepin-community-bot[bot]@deepin-community/unbound by deepin-community-ci-bot[bot] #13321

@deepin-bot

Description

@deepin-bot

Package information | 软件包信息

包名 版本
unbound 1.25.1-1

Package repository address | 软件包仓库地址

deb [trusted=yes] https://ci.deepin.com/repo/obs/deepin:/CI:/TestingIntegration:/test-integration-pr-4055/testing/ ./

Changelog | 更新信息

unbound (1.25.1-1) unstable; urgency=medium

  • new upstream security/bugfix release (Closes: #1137187):
    • Fix CVE-2026-33278, Possible remote code execution during DNSSEC
      validation
    • Fix CVE-2026-42944, Heap overflow and crash with multiple nsid, cookie,
      padding EDNS options
    • Fix CVE-2026-42959, Crash during DNSSEC validation of malicious content
    • Fix CVE-2026-32792, Packet of death with DNSCrypt
    • Fix CVE-2026-40622, "Ghost domain name" variant
    • Fix CVE-2026-41292, Parsing a long list of incoming EDNS options degrades
      performance
    • Fix CVE-2026-42534, Jostle logic bypass degrades resolution performance
    • Fix CVE-2026-42923, Degradation of service with unbounded NSEC3
      hash calculations
    • Fix CVE-2026-42960, Possible cache poisoning attack while following
      delegation
    • Fix CVE-2026-44390, Unbounded name compression in certain cases
      causes degradation of service
    • Fix CVE-2026-44608, Use after free and crash in RPZ code

Metadata

Metadata

Assignees

Type

No type
No fields configured for issues without a type.

Projects

Status

In progress

Milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions