-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 13 Feb 2024 21:00:13 +0100 Source: unbound Binary: libunbound-dev libunbound8 libunbound8-dbgsym python3-unbound python3-unbound-dbgsym unbound unbound-anchor unbound-anchor-dbgsym unbound-dbgsym unbound-host unbound-host-dbgsym Architecture: amd64 Version: 1.17.1-2+deb12u2 Distribution: bookworm-security Urgency: high Maintainer: amd64 / i386 Build Daemon (x86-ubc-01) Changed-By: Salvatore Bonaccorso Description: libunbound-dev - static library, header files, and docs for libunbound libunbound8 - library implementing DNS resolution and validation python3-unbound - library implementing DNS resolution and validation (Python3 bindi unbound - validating, recursive, caching DNS resolver unbound-anchor - utility to securely fetch the root DNS trust anchor unbound-host - reimplementation of the 'host' command Closes: 1063845 Changes: unbound (1.17.1-2+deb12u2) bookworm-security; urgency=high . * Non-maintainer upload by the Security Team. * Address DNSSEC protocol vulnerabilities (Closes: #1063845) - Fix CVE-2023-50387, DNSSEC verification complexity can be exploited to exhaust CPU resources and stall DNS resolvers. - Fix CVE-2023-50868, NSEC3 closest encloser proof can exhaust CPU. Checksums-Sha1: 79cf1b6dc2c188476f006de7e1cb9b754625534c 634404 libunbound-dev_1.17.1-2+deb12u2_amd64.deb 39df69bbbc03e528ab2e275b710f7b20ba47e510 1248936 libunbound8-dbgsym_1.17.1-2+deb12u2_amd64.deb 726880080261499acd4b8165923e6f4e9cd22f21 550316 libunbound8_1.17.1-2+deb12u2_amd64.deb e80ac55c5f35dc317141ec15f6063c471adf261c 170496 python3-unbound-dbgsym_1.17.1-2+deb12u2_amd64.deb 92e8c2fecc5fc6da2d80626fbf03ac1e5fdfc9d9 202656 python3-unbound_1.17.1-2+deb12u2_amd64.deb 0568817d62dacf46025fcfaba7823c9734458cbc 60236 unbound-anchor-dbgsym_1.17.1-2+deb12u2_amd64.deb b132e0a59b9ee7ed3ed8360b11f6348e45e04a88 179224 unbound-anchor_1.17.1-2+deb12u2_amd64.deb 3a0221233f79ead215b3be0a9298f1e91123a248 5019788 unbound-dbgsym_1.17.1-2+deb12u2_amd64.deb b2decf97e153b9a1cbafb5a4521f3246dfd00126 132212 unbound-host-dbgsym_1.17.1-2+deb12u2_amd64.deb f34ee9f2ac878eae2a9c45c81d9028d6828f318e 200604 unbound-host_1.17.1-2+deb12u2_amd64.deb c81a238eae2e9e41655a0e23fa995003aa66fd03 10609 unbound_1.17.1-2+deb12u2_amd64-buildd.buildinfo ad51f2713282afc67255ce7fc613fa3cca390835 948904 unbound_1.17.1-2+deb12u2_amd64.deb Checksums-Sha256: 90fa35618b0db1e02876c7bb04e9e535f4180cde43d670eea0a9e95eb31aa066 634404 libunbound-dev_1.17.1-2+deb12u2_amd64.deb 3ab03f2e12f115947108c794b235893d75bbe22dc23dc9e637214663bd6a9835 1248936 libunbound8-dbgsym_1.17.1-2+deb12u2_amd64.deb 873ed1d2a896f5949b18b0ff1907c8c5b9418adcde0ca0cb758cd6f465ccc4c4 550316 libunbound8_1.17.1-2+deb12u2_amd64.deb 9a36c07b3b87f7454ac1ed0eec6ac791ad966c45e83113385a441ac9a65d4267 170496 python3-unbound-dbgsym_1.17.1-2+deb12u2_amd64.deb 284bce0681b0552edded473b59b35189d5540d3c58fef8fd5ee86962366df919 202656 python3-unbound_1.17.1-2+deb12u2_amd64.deb c0e349b32be23c6fb567d265c09c348b3c1d78f7511f13223fce8c902258d7bc 60236 unbound-anchor-dbgsym_1.17.1-2+deb12u2_amd64.deb fa0667aa6601df05ef8573be9a6af736ba5ca31a025bdc234e54385cffdd2951 179224 unbound-anchor_1.17.1-2+deb12u2_amd64.deb 37b500f849764a6e417de2db5527e338fa713a58dc05b9fea9afdef0f41aa8a8 5019788 unbound-dbgsym_1.17.1-2+deb12u2_amd64.deb eeb07452df63e42aa007ab8b39499676f248000c0bd65d02e8c86856407638f3 132212 unbound-host-dbgsym_1.17.1-2+deb12u2_amd64.deb d7423ff10304c3bd02b65748f7ecf2b1dd55658c99295fefed5971f995e81e16 200604 unbound-host_1.17.1-2+deb12u2_amd64.deb c5e20f419545871804200d001200ced3721cf79bb3a741c29fa733df4b9c5b7b 10609 unbound_1.17.1-2+deb12u2_amd64-buildd.buildinfo dd147241a03b7609993fd60d1efe8526aae40b0d2b80937bc93da5a69541b686 948904 unbound_1.17.1-2+deb12u2_amd64.deb Files: cfefbda71c7a8c542628673b77b94266 634404 libdevel optional libunbound-dev_1.17.1-2+deb12u2_amd64.deb c769f278feb365f3c76af31e3d30f051 1248936 debug optional libunbound8-dbgsym_1.17.1-2+deb12u2_amd64.deb fd8523dfc5eaca34c30d124912ccdd5b 550316 libs optional libunbound8_1.17.1-2+deb12u2_amd64.deb 91625958664ea651f49bca6ed03af654 170496 debug optional python3-unbound-dbgsym_1.17.1-2+deb12u2_amd64.deb ff495ca78b7499957ca1714d9fbbac12 202656 python optional python3-unbound_1.17.1-2+deb12u2_amd64.deb 67fa0b5e3c64b467c3ceb57fd91fb3a2 60236 debug optional unbound-anchor-dbgsym_1.17.1-2+deb12u2_amd64.deb 53acf451b99ad2ee8da81025bf132552 179224 net optional unbound-anchor_1.17.1-2+deb12u2_amd64.deb d7b0d3b4f8217099e484a75e50e0c4fb 5019788 debug optional unbound-dbgsym_1.17.1-2+deb12u2_amd64.deb 857a9d3df2178491ef69ad0f0c04be41 132212 debug optional unbound-host-dbgsym_1.17.1-2+deb12u2_amd64.deb 738f2b6c75d7364faf20af609719aeb1 200604 net optional unbound-host_1.17.1-2+deb12u2_amd64.deb ddbc67ce2543a65f9a901fa2ab13c0b5 10609 net optional unbound_1.17.1-2+deb12u2_amd64-buildd.buildinfo c15da5cb2e87ebfa2f700c0dfa512d9b 948904 net optional unbound_1.17.1-2+deb12u2_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEfSHphWe6nwpTFrNNZXl/6h5+iU4FAmXLz5wACgkQZXl/6h5+ iU71FxAAnAu46UxLMg09cGATa3Uj9Ms9QBtTtQTvky6UkJQqXeVzLCauypoB6Yjq jv4qXBYQEjql+gklgirHuQZjouBXxMFbPZXrx1lVvOx5f4FoTOXbjj792pH1XJdr MQLEt3+7/tGTYhFkp841KfKoadd17VSKN2b9gv2PQLdjzx7awHPxZ79Nc0M88ynJ CFb1I8zY3nrUUWHkq8XDt03m7fAeuAvritG1pdM2oLzGgR5i16wI0GsMm16QJwbx nN3/xOguanmEpHHTLGmHB+sPSGr4JJFaOGgGwA0UeWJo0y1xscIPvT0WIJxRy84R ZOHwLPmCe+ooEHgcF4Lk1nvq+RvyYOl2SzInsmi4BlVI1tpnKfYbrkuHqmHeMna6 eKjQkxZl0Mci3yihpavNGF3qe4n/3eR3Rw0CH3EHc/eSWIiHY9QGiHGtpabj8sTI cImstfS0z4uQ+tJ+H6Cowsfe3wkld6n7eLjcMp/nDphLlvJckUdLZ/4FEinDg32N gYtJfJuN/PsAgjZROce7CqSIGqtK2evjZDjYL67xI+90eACFYmGLqL495/bvW14n xmBrru21YESVvjieLJNme5o74KoUBOBphH4UkeZtdijkgWR0e8IoJ3GC5zgS32M2 Stc9F1Ffn5gniMoYhyM1w3GYhKXHB83bzRXXCWonCUP5FdtZp8I= =C9El -----END PGP SIGNATURE-----