-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 13 Feb 2024 21:00:13 +0100 Source: unbound Binary: libunbound-dev libunbound8 libunbound8-dbgsym python3-unbound python3-unbound-dbgsym unbound unbound-anchor unbound-anchor-dbgsym unbound-dbgsym unbound-host unbound-host-dbgsym Architecture: s390x Version: 1.17.1-2+deb12u2 Distribution: bookworm-security Urgency: high Maintainer: s390x Build Daemon (zandonai) Changed-By: Salvatore Bonaccorso Description: libunbound-dev - static library, header files, and docs for libunbound libunbound8 - library implementing DNS resolution and validation python3-unbound - library implementing DNS resolution and validation (Python3 bindi unbound - validating, recursive, caching DNS resolver unbound-anchor - utility to securely fetch the root DNS trust anchor unbound-host - reimplementation of the 'host' command Closes: 1063845 Changes: unbound (1.17.1-2+deb12u2) bookworm-security; urgency=high . * Non-maintainer upload by the Security Team. * Address DNSSEC protocol vulnerabilities (Closes: #1063845) - Fix CVE-2023-50387, DNSSEC verification complexity can be exploited to exhaust CPU resources and stall DNS resolvers. - Fix CVE-2023-50868, NSEC3 closest encloser proof can exhaust CPU. Checksums-Sha1: abdd32e5bf4b1289190eee25fcff1d0541813a74 590876 libunbound-dev_1.17.1-2+deb12u2_s390x.deb dff020e11a519e8127be46f64afa10d7545cc05d 1222868 libunbound8-dbgsym_1.17.1-2+deb12u2_s390x.deb ec2796d90dfdb08a4c87bffa5977760951570472 501324 libunbound8_1.17.1-2+deb12u2_s390x.deb eed3d78f1a48d4f349e5612d0c7cbb8e4dc5704f 164900 python3-unbound-dbgsym_1.17.1-2+deb12u2_s390x.deb afb9ff358421f736a00d7a903dab4e8cbd8a3c2f 199548 python3-unbound_1.17.1-2+deb12u2_s390x.deb 2ed5331ef2d22a4925f1429916cbe56ea1b1414d 58828 unbound-anchor-dbgsym_1.17.1-2+deb12u2_s390x.deb 4baff149d9ae783476af8548e89c5ec95d4b9017 178236 unbound-anchor_1.17.1-2+deb12u2_s390x.deb 1fb08a0cc6f0ef833a893583032a7d496b5d52de 4369684 unbound-dbgsym_1.17.1-2+deb12u2_s390x.deb 2229c50618a9b4d41dd18d28f89906701da0e60b 129656 unbound-host-dbgsym_1.17.1-2+deb12u2_s390x.deb 48700952b39caa2a46471e99b86808f62b7a86fc 197092 unbound-host_1.17.1-2+deb12u2_s390x.deb 63e85058177729aafabf28c89b27a0c392574c34 10504 unbound_1.17.1-2+deb12u2_s390x-buildd.buildinfo 32ee96917b3648c738f3b9d1eb30a1de92be93ef 873236 unbound_1.17.1-2+deb12u2_s390x.deb Checksums-Sha256: 3668e53c84bf6249d3b023b9d34161cd5a24de4c0a5aab6f79a31be53b25c0ec 590876 libunbound-dev_1.17.1-2+deb12u2_s390x.deb ce6979353105cd482fb253b54b22600d1c34336b4fa73d21692451a99063df24 1222868 libunbound8-dbgsym_1.17.1-2+deb12u2_s390x.deb 3cef3d8446183af9d298f37212f4b396323c7244e348c283ac08a4b02a065f57 501324 libunbound8_1.17.1-2+deb12u2_s390x.deb da0841beef7a38a51cbc1dbad1481b3f54a0b9aea5eac2b036c96a7d9ae34505 164900 python3-unbound-dbgsym_1.17.1-2+deb12u2_s390x.deb 2e08316e5afffa9c2a1a3dec009fd397ecdf3a97c9b73cbe5ca2fe70260388ed 199548 python3-unbound_1.17.1-2+deb12u2_s390x.deb 5a5f81e381b0e8079a791e21821b4684ab754b900fa746a5da9eb8ea55946f4f 58828 unbound-anchor-dbgsym_1.17.1-2+deb12u2_s390x.deb 8fe987b447875f03f96b9a2f844640d52c7dd08ea442782cb245d3655f4484c1 178236 unbound-anchor_1.17.1-2+deb12u2_s390x.deb a3719d369078df0a3834f69a9081a068d325727f647e573e9022086cf47368d3 4369684 unbound-dbgsym_1.17.1-2+deb12u2_s390x.deb 9c8078d3188b94bb282ea28f078d79acdd6c7582fb85a692563ca3e9324cd997 129656 unbound-host-dbgsym_1.17.1-2+deb12u2_s390x.deb a75f27c7cf6afdbe2e2a72e8920f1ae723c1afff76ff1cff00cd752fc7dae730 197092 unbound-host_1.17.1-2+deb12u2_s390x.deb 5ff7a5d59215081ac1d82cbe4f3f050a93e7429f5163d435814c313a8636357a 10504 unbound_1.17.1-2+deb12u2_s390x-buildd.buildinfo 627f7ae99ad889b324c4df69a20068bcebb082a47b3c2a6594c8f1411b71b818 873236 unbound_1.17.1-2+deb12u2_s390x.deb Files: e2015baa76e42b6b4dc7a9fd245f26c4 590876 libdevel optional libunbound-dev_1.17.1-2+deb12u2_s390x.deb a120d843402e089f61a1d61a5d08fc51 1222868 debug optional libunbound8-dbgsym_1.17.1-2+deb12u2_s390x.deb ae7476274f5caa35457aabc4653bb59a 501324 libs optional libunbound8_1.17.1-2+deb12u2_s390x.deb 5e88b6bd33319946a559f456636d51a8 164900 debug optional python3-unbound-dbgsym_1.17.1-2+deb12u2_s390x.deb 9083a1416f72abf0abc12a4994ee20f7 199548 python optional python3-unbound_1.17.1-2+deb12u2_s390x.deb 5cf6f24336da36fd95cd95ae6317d00d 58828 debug optional unbound-anchor-dbgsym_1.17.1-2+deb12u2_s390x.deb 9307351b6ccc9964c6b135a341d2991b 178236 net optional unbound-anchor_1.17.1-2+deb12u2_s390x.deb 3ced2f47b3466d959d0353f33664ef77 4369684 debug optional unbound-dbgsym_1.17.1-2+deb12u2_s390x.deb e6a8ea91bd8821648d991945188a13fb 129656 debug optional unbound-host-dbgsym_1.17.1-2+deb12u2_s390x.deb 8b59b21b40049b53e2ce7e905e236fa7 197092 net optional unbound-host_1.17.1-2+deb12u2_s390x.deb d1df58e921bd187cb85dcf2965b47c27 10504 net optional unbound_1.17.1-2+deb12u2_s390x-buildd.buildinfo a1252b3ab2b90ba90aa4da42a282c235 873236 net optional unbound_1.17.1-2+deb12u2_s390x.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEctqRAwcjFMIrbct74euoNlQ3ywQFAmXLzygACgkQ4euoNlQ3 ywRkbA//c+OV8vA5zQHvPB2uRqWuy/4M+xkmf7oUptxjnqzvfHPueI0Rzyx88eDO V6MdxEGj+9Z1fM38BMDghtb2ZJP8UGHiUtub6BA3VgsIB7sxCzqg873rXI5nc0Av ZBI+5W8QlnbZXBElCkUZqjd2Lj8SGtp8T/1oVJV4kMlTpzar5h/gXGzBL6vO6Jdp 88l6TZz6usVyhMm9yPRe/FkL5qNC50BW/wpeIxsFS22xAxURpInprDWWnF7+ohRW SGPkfc9lYQKNHa75PLLXAuR5yD4qUIlT/GPM92elS4XvVm6eZdxUdVIWmfHodZAw /kQThG89Hbuc+MSniA3ATSFvjUvfnl7yBrzg2jvUr2j5DH7j+VymbuIRHMB01wkw XqpU3JML+SjMMLhjSvCbN1wOJcI1mzL8fRcpZ6mVVS+OOoshAQj1tkE/zzQxE+rQ uMjMC5+4AkC9eId3DQZxPmEXeYP8yiyZVCuauB3GSMcfwcgo7QeTkWNiKE9uBgVB hdLdyoFrZqed+jhb+ks39tjiasQ6jsq3gYZKXaxVx2hGC0M4X5bK293kqgqGLq+7 LeSwtP3BuS/01BXT78BHlnFSEzINgSahRuqmBJ9FETePN6rBEmQd3kg/fS8cBqkg gCf5dm8lDg2VeHlyksMgrPFmUlyG8xaq33pGPnJnIS7yq5ZK8VY= =RX8/ -----END PGP SIGNATURE-----