-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 13 Feb 2024 21:15:34 +0100 Source: unbound Binary: libunbound-dev libunbound8 libunbound8-dbgsym python3-unbound python3-unbound-dbgsym unbound unbound-anchor unbound-anchor-dbgsym unbound-dbgsym unbound-host unbound-host-dbgsym Architecture: amd64 Version: 1.13.1-1+deb11u2 Distribution: bullseye-security Urgency: high Maintainer: all / amd64 / i386 Build Daemon (x86-conova-01) Changed-By: Salvatore Bonaccorso Description: libunbound-dev - static library, header files, and docs for libunbound libunbound8 - library implementing DNS resolution and validation python3-unbound - library implementing DNS resolution and validation (Python3 bindi unbound - validating, recursive, caching DNS resolver unbound-anchor - utility to securely fetch the root DNS trust anchor unbound-host - reimplementation of the 'host' command Closes: 1063845 Changes: unbound (1.13.1-1+deb11u2) bullseye-security; urgency=high . * Non-maintainer upload by the Security Team. * Address DNSSEC protocol vulnerabilities (Closes: #1063845) - Fix CVE-2023-50387, DNSSEC verification complexity can be exploited to exhaust CPU resources and stall DNS resolvers. - Fix CVE-2023-50868, NSEC3 closest encloser proof can exhaust CPU. Checksums-Sha1: be5babf05ab696d4e61bfcbd9c98cc26c4a16093 587800 libunbound-dev_1.13.1-1+deb11u2_amd64.deb 241ddbe947f5940f146523aac1353fd10b2e955b 1423436 libunbound8-dbgsym_1.13.1-1+deb11u2_amd64.deb 5df27c630c1b1808fc9bab75e5f029b0152cd97c 507676 libunbound8_1.13.1-1+deb11u2_amd64.deb afacae89171f1ad7db4e8e9fd0501a0fecf23867 163908 python3-unbound-dbgsym_1.13.1-1+deb11u2_amd64.deb e6091117ae080bbc390b25aa6d056784091b854b 189756 python3-unbound_1.13.1-1+deb11u2_amd64.deb 984356f4edfa006ddff1595e0cc1fa73251d841c 72648 unbound-anchor-dbgsym_1.13.1-1+deb11u2_amd64.deb 865d6fe9e7897f7d4aa5a78609bf09d7caa6f0dd 169852 unbound-anchor_1.13.1-1+deb11u2_amd64.deb 0a5c3b10dc4acb31ae94f7dddf859d5bf9e58fb7 5505876 unbound-dbgsym_1.13.1-1+deb11u2_amd64.deb a180a81bf37f85f15a02237b6a058026e3ad7867 127344 unbound-host-dbgsym_1.13.1-1+deb11u2_amd64.deb b61808a0b038ee29f318418fae9f9d9fb755246a 185800 unbound-host_1.13.1-1+deb11u2_amd64.deb 9ba4a6aaa14a94fc000b6105ba83edf3df93954e 10624 unbound_1.13.1-1+deb11u2_amd64-buildd.buildinfo e064cd2228d6aa1e90ac06323eb53c003290f8ad 873160 unbound_1.13.1-1+deb11u2_amd64.deb Checksums-Sha256: cbe180856c37497ff5fe5824e9985afde496aa145397a91188c08c15e3b66d42 587800 libunbound-dev_1.13.1-1+deb11u2_amd64.deb 8e853a5f6255e0f73cf14f6b1397fab50f1701833a76a131fa028829aa4b42dd 1423436 libunbound8-dbgsym_1.13.1-1+deb11u2_amd64.deb 4a81350752d6d1ab48cd74df79eedf1f4cbf1c6faecff009c04a815dfeb6b1ae 507676 libunbound8_1.13.1-1+deb11u2_amd64.deb 7caf78bf27108e5bdd845436b4fc7373b8cb6ae9a0569b8c81bb95ebe66b23d1 163908 python3-unbound-dbgsym_1.13.1-1+deb11u2_amd64.deb 9d8359fe93df0632fe4031a0d6ff02a75c7059aa93f5dff85f152a7cc93f4125 189756 python3-unbound_1.13.1-1+deb11u2_amd64.deb 7bde985c43aa1b4086e15267b5e3774a155558338b51909d244797cf9ed162e5 72648 unbound-anchor-dbgsym_1.13.1-1+deb11u2_amd64.deb 0098e90a3886dd941fe87db4d461a72dba21778856b384a2cae2020ecad32447 169852 unbound-anchor_1.13.1-1+deb11u2_amd64.deb 9f1c5eae4783bbf6c134afe97e5d1789d2225c97d0379cf3f1bd4f0e8d3b8f4d 5505876 unbound-dbgsym_1.13.1-1+deb11u2_amd64.deb 2fc4f547670c9e16349e92da1c11f87b05eae653b305c32709300c315cf819c7 127344 unbound-host-dbgsym_1.13.1-1+deb11u2_amd64.deb 1d00658b6207124e2cc67c020bc568b6e78dd154d39c2eff0b3d027706c2421e 185800 unbound-host_1.13.1-1+deb11u2_amd64.deb 9f44ef5798d1435b1a3d5dcb516a8ece149ca95ae45204caed243e22ed3dede3 10624 unbound_1.13.1-1+deb11u2_amd64-buildd.buildinfo 0f85f13527b2b0c8f05995d3a11b61245e7e15af9c02a72505feca69f7fa86f4 873160 unbound_1.13.1-1+deb11u2_amd64.deb Files: 2236e3e4005d7729923577d5e8f15152 587800 libdevel optional libunbound-dev_1.13.1-1+deb11u2_amd64.deb b46800942165afd0c1c3ec781f48d854 1423436 debug optional libunbound8-dbgsym_1.13.1-1+deb11u2_amd64.deb 6c8ba9b440541c6b65f3de948b90b4d1 507676 libs optional libunbound8_1.13.1-1+deb11u2_amd64.deb cce40f4dbb60d6d0ae410e585586c03c 163908 debug optional python3-unbound-dbgsym_1.13.1-1+deb11u2_amd64.deb 6db9c74974591a37e39e4cd535b99a5a 189756 python optional python3-unbound_1.13.1-1+deb11u2_amd64.deb 6db2212f32bbb1d3179d0af6921e30fe 72648 debug optional unbound-anchor-dbgsym_1.13.1-1+deb11u2_amd64.deb c704528e7a38cb00f45ba8c5222e3483 169852 net optional unbound-anchor_1.13.1-1+deb11u2_amd64.deb eb4706377c558732aa8ea9e8ce4aa9af 5505876 debug optional unbound-dbgsym_1.13.1-1+deb11u2_amd64.deb 0967393cce4bd7e525c5dd145dd144da 127344 debug optional unbound-host-dbgsym_1.13.1-1+deb11u2_amd64.deb 66b4f2f29e172b5a9c2b312da0e0f558 185800 net optional unbound-host_1.13.1-1+deb11u2_amd64.deb afc58ffb6161c8c06a9bf1a06343525c 10624 net optional unbound_1.13.1-1+deb11u2_amd64-buildd.buildinfo 7e23a293f7c9b71dbb2947ba2f2db7c8 873160 net optional unbound_1.13.1-1+deb11u2_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEi/TVpVg0yb7dq8QfDZWW6X29YdoFAmXL2DgACgkQDZWW6X29 YdqMxw/+Lnxv2PvtB6R0H8oBhsDYeGRjniSRiWU8HFjxS6inZ1xuatm/nBh91pS2 2Mjl1Dgp3dt8b+MwA9PseNx7mzvi4fJ397oevpbT8/w+9ZNenFuIUW+8STuHPTwt iRoaBIgoaPcggUZz0su0SM5ohIIdUqCGOKWpQuHeJplDPHnu5TMVmHBWfReIE8Jk TvduFDh9meaFQ/sfFUXcIFfkDTFT2bXrBmfNTPFzT95fR+m/FQ/wsC+dKMm36DTt 7L3vl4zgf57tOavmoRAxrJzbL1a6tLbTxFAmn0EbqSCgey8kjDz1KWoS6RpNv9Tp BBwe6gVVCS9PgugdbxgHQ8oTJaWL37TvsU0aYjKj9EToNjkRPu1JXgdRwn0v19Hn Dz1SsTQVnvOHI0/JrwmOLblWtNg2JSWdNYK0dbZVqSvLWgwNyj34XWV4lVd46Ksm dtUmRCSSEHoapEXCJczNmY1ZttZEpL+QsGEwlaOWwnIIyG3L5VTMQlgJg1MWOQcD qrDE73RwjJzsNs0yVQ/ojUzwf1Bsg+4CaQa+YZe3R/9D6d2TQZd8Yn0sXy4bFw44 cZqfFBflLQkpSJeWriCQi9bb0Hh7l+1e8rYVmKSm0rNLey1nA/1wekrl+W+SBrru 82uNpdFNu75hlhXgN0vP78lwPqyT3rVXEZQGLrBnMiLKIGlN0J8= =OaDO -----END PGP SIGNATURE-----