Latest Changelogs for all releases

  unbound (1.13.1-1ubuntu5.15) jammy-security; urgency=medium

  * SECURITY UPDATE: Packet of death with DNSCrypt (feasibility very low)
    - debian/patches/CVE-2026-32792.patch: validate len in
      dnscrypt/dnscrypt.c.
    - CVE-2026-32792
  * SECURITY UPDATE: Parsing a long list of incoming EDNS options degrades
    performance
    - debian/patches/CVE-2026-41292.patch: limit parsed edns options in
      util/data/msgparse.c.
    - CVE-2026-41292
  * SECURITY UPDATE: Jostle logic bypass degrades resolution performance
    - debian/patches/CVE-2026-42534.patch: properly handle jostle aging in
      services/mesh.c, services/mesh.h.
    - CVE-2026-42534
  * SECURITY UPDATE: Degradation of service with unbounded NSEC3 hash
    calculations
    - debian/patches/CVE-2026-42923.patch: limit salt length in
      validator/val_neg.c, validator/val_nsec3.c, validator/val_nsec3.h.
    - CVE-2026-42923
  * SECURITY UPDATE: Crash during DNSSEC validation of malicious content
    - debian/patches/CVE-2026-42959.patch: fix calculations in
      validator/val_utils.c.
    - CVE-2026-42959
  * SECURITY UPDATE: Possible cache poisoning attack while following
    delegation
    - debian/patches/CVE-2026-42960.patch: only mark glue as allowed for
      type NS in the authority section in iterator/iter_scrub.c.
    - CVE-2026-42960
  * SECURITY UPDATE: Unbounded name compression in certain cases causes
    degradation of service
    - debian/patches/CVE-2026-44390.patch: fix counting in
      util/data/msgencode.c.
    - CVE-2026-44390

 -- Marc Deslauriers <email address hidden> Tue, 19 May 2026 08:30:28 -0400

  linux-restricted-signatures (7.0.0-15.15+2) resolute; urgency=medium

  * Packaging resync (LP: #1786013)
    - [Packaging] debian/dkms-versions -- update from kernel-versions
      (adhoc/d2026.04.20)

 -- Andy Whitcroft <email address hidden> Mon, 18 May 2026 12:00:42 +0100

  linux-restricted-signatures-nvidia (7.0.0-1006.6+2) resolute; urgency=medium

  * Packaging resync (LP: #1786013)
    - [Packaging] debian/dkms-versions -- update from kernel-versions
      (adhoc/d2026.04.13)

 -- Andy Whitcroft <email address hidden> Mon, 18 May 2026 12:03:53 +0100

  linux-restricted-signatures-ibm (7.0.0-1005.5+1) resolute; urgency=medium

  * Packaging resync (LP: #1786013)
    - [Packaging] debian/dkms-versions -- update from kernel-versions
      (adhoc/d2026.04.13)

 -- Andy Whitcroft <email address hidden> Mon, 18 May 2026 12:02:59 +0100

  linux-restricted-signatures-azure-fde (7.0.0-1004.4+1) resolute; urgency=medium

  * Packaging resync (LP: #1786013)
    - [Packaging] debian/dkms-versions -- update from kernel-versions
      (adhoc/d2026.04.13)

 -- Andy Whitcroft <email address hidden> Mon, 18 May 2026 12:02:14 +0100

  linux-restricted-signatures-azure (7.0.0-1004.4+1) resolute; urgency=medium

  * Packaging resync (LP: #1786013)
    - [Packaging] debian/dkms-versions -- update from kernel-versions
      (adhoc/d2026.04.13)

 -- Andy Whitcroft <email address hidden> Mon, 18 May 2026 12:01:48 +0100

  linux-restricted-signatures-aws (7.0.0-1004.4+1) resolute; urgency=medium

  * Packaging resync (LP: #1786013)
    - [Packaging] debian/dkms-versions -- update from kernel-versions
      (adhoc/d2026.04.13)

 -- Andy Whitcroft <email address hidden> Mon, 18 May 2026 12:01:16 +0100

  linux-restricted-signatures-oracle (7.0.0-1003.3+1) resolute; urgency=medium

  * Packaging resync (LP: #1786013)
    - [Packaging] debian/dkms-versions -- update from kernel-versions
      (adhoc/d2026.04.13)

 -- Andy Whitcroft <email address hidden> Mon, 18 May 2026 12:03:28 +0100

  linux-restricted-signatures-gcp (7.0.0-1003.3+1) resolute; urgency=medium

  * Packaging resync (LP: #1786013)
    - [Packaging] debian/dkms-versions -- update from kernel-versions
      (adhoc/d2026.04.13)

 -- Andy Whitcroft <email address hidden> Mon, 18 May 2026 12:02:39 +0100

  linux-restricted-modules-oracle (7.0.0-1003.3+1) resolute; urgency=medium

  * Packaging resync (LP: #1786013)
    - [Packaging] debian/dkms-versions -- update from kernel-versions
      (adhoc/d2026.04.13)

 -- Andy Whitcroft <email address hidden> Mon, 18 May 2026 12:03:28 +0100

  linux-restricted-modules-nvidia (7.0.0-1006.6+2) resolute; urgency=medium

  * Packaging resync (LP: #1786013)
    - [Packaging] debian/dkms-versions -- update from kernel-versions
      (adhoc/d2026.04.13)

 -- Andy Whitcroft <email address hidden> Mon, 18 May 2026 12:03:53 +0100

  linux-restricted-modules-ibm (7.0.0-1005.5+1) resolute; urgency=medium

  * Packaging resync (LP: #1786013)
    - [Packaging] debian/dkms-versions -- update from kernel-versions
      (adhoc/d2026.04.13)

 -- Andy Whitcroft <email address hidden> Mon, 18 May 2026 12:02:59 +0100

  linux-restricted-modules (7.0.0-15.15+2) resolute; urgency=medium

  * Packaging resync (LP: #1786013)
    - [Packaging] debian/dkms-versions -- update from kernel-versions
      (adhoc/d2026.04.20)

 -- Andy Whitcroft <email address hidden> Mon, 18 May 2026 12:00:42 +0100

  linux-restricted-modules-gcp (7.0.0-1003.3+1) resolute; urgency=medium

  * Packaging resync (LP: #1786013)
    - [Packaging] debian/dkms-versions -- update from kernel-versions
      (adhoc/d2026.04.13)

 -- Andy Whitcroft <email address hidden> Mon, 18 May 2026 12:02:39 +0100

  linux-restricted-modules-azure-fde (7.0.0-1004.4+1) resolute; urgency=medium

  * Packaging resync (LP: #1786013)
    - [Packaging] debian/dkms-versions -- update from kernel-versions
      (adhoc/d2026.04.13)

 -- Andy Whitcroft <email address hidden> Mon, 18 May 2026 12:02:14 +0100