-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 13 Feb 2024 21:00:13 +0100 Source: unbound Binary: libunbound-dev libunbound8 libunbound8-dbgsym python3-unbound python3-unbound-dbgsym unbound unbound-anchor unbound-anchor-dbgsym unbound-dbgsym unbound-host unbound-host-dbgsym Architecture: armhf Version: 1.17.1-2+deb12u2 Distribution: bookworm-security Urgency: high Maintainer: arm Build Daemon (arm-ubc-05) Changed-By: Salvatore Bonaccorso Description: libunbound-dev - static library, header files, and docs for libunbound libunbound8 - library implementing DNS resolution and validation python3-unbound - library implementing DNS resolution and validation (Python3 bindi unbound - validating, recursive, caching DNS resolver unbound-anchor - utility to securely fetch the root DNS trust anchor unbound-host - reimplementation of the 'host' command Closes: 1063845 Changes: unbound (1.17.1-2+deb12u2) bookworm-security; urgency=high . * Non-maintainer upload by the Security Team. * Address DNSSEC protocol vulnerabilities (Closes: #1063845) - Fix CVE-2023-50387, DNSSEC verification complexity can be exploited to exhaust CPU resources and stall DNS resolvers. - Fix CVE-2023-50868, NSEC3 closest encloser proof can exhaust CPU. Checksums-Sha1: 3bd4e91f80d3f8e655df7fd2e759a0b41159a87f 584448 libunbound-dev_1.17.1-2+deb12u2_armhf.deb 544afcc85c37a015fdf751e26ceba41716ad8c38 1226296 libunbound8-dbgsym_1.17.1-2+deb12u2_armhf.deb d0a4add18b78bd5acc4c09ed7589d3320b7e47fc 490072 libunbound8_1.17.1-2+deb12u2_armhf.deb 4a164121fbb241e4ee2e5ce309870f7c32f28432 192852 python3-unbound-dbgsym_1.17.1-2+deb12u2_armhf.deb 78d5b8d1c0bd5eb015d0a496253d845b85b72379 198908 python3-unbound_1.17.1-2+deb12u2_armhf.deb bbd413adc1b90de1e3df3bae55040f36a60a5def 60560 unbound-anchor-dbgsym_1.17.1-2+deb12u2_armhf.deb 62a7ff05f5e2f8d52be0d2bad8ca577fca38df2d 177984 unbound-anchor_1.17.1-2+deb12u2_armhf.deb 230f083bd1ed2ad948ff8e926018170603d79e93 4527904 unbound-dbgsym_1.17.1-2+deb12u2_armhf.deb 3b6b3fbee65102e7584e7a47e215efcc57e9753e 130392 unbound-host-dbgsym_1.17.1-2+deb12u2_armhf.deb 5ddf28b661993fd851cb3a2af9742c010d32fbda 192996 unbound-host_1.17.1-2+deb12u2_armhf.deb 6a2fdb58f34acf95ab8ed1439bb1a0c0cd00adca 10484 unbound_1.17.1-2+deb12u2_armhf-buildd.buildinfo b7a2703570534260d15fd4505b7eb99c4d3df50b 831068 unbound_1.17.1-2+deb12u2_armhf.deb Checksums-Sha256: cc57cb5c38778f35b1cea3007fd869bf8e17d49bfbeecf3a47eac873d6b6c05b 584448 libunbound-dev_1.17.1-2+deb12u2_armhf.deb b3ba702f43133ec9f7e13c05075031bd30291fc16e2a0ace7aeb919b2651a5f8 1226296 libunbound8-dbgsym_1.17.1-2+deb12u2_armhf.deb b065f227ff8aff1ccf7940d935e7552ce81c363db5ab79a13112a8a88efb88c3 490072 libunbound8_1.17.1-2+deb12u2_armhf.deb 5e820ec9283113a46f15a3010db604168e901d8e4189d744455ed8641ec82398 192852 python3-unbound-dbgsym_1.17.1-2+deb12u2_armhf.deb 939e6bfd7a0c5987728593d1ab5b8c484228fc367d8d3bb7e5ca3c8deaf2ecae 198908 python3-unbound_1.17.1-2+deb12u2_armhf.deb 9b95821adf37ceadd09ca148c8870d8aeb322b5410839489a3d491efde4b2f36 60560 unbound-anchor-dbgsym_1.17.1-2+deb12u2_armhf.deb 3693e8d6c85913027d4593956778dbe6b6aefcb7759faaf03ea45ffd868e67f0 177984 unbound-anchor_1.17.1-2+deb12u2_armhf.deb ab1053ff3218de4694cdabbea9a94d594c51dd0422b4e3f629e3f079f93f7035 4527904 unbound-dbgsym_1.17.1-2+deb12u2_armhf.deb ca2043f2510e72ec95bb56345ca06e412ee1f6390be106831c791dc4ff317976 130392 unbound-host-dbgsym_1.17.1-2+deb12u2_armhf.deb 789792455b7fbf09c97ac47d2bd512d724cb59a295f6869d02ab545e141d6924 192996 unbound-host_1.17.1-2+deb12u2_armhf.deb 072c3656133a2336478e90380f8ba60be5ca79bdb78edb5853941969fe800461 10484 unbound_1.17.1-2+deb12u2_armhf-buildd.buildinfo ef0baff142980783c8dc044a854ddfe49061b5d41c638e4496e10b95f7d809e2 831068 unbound_1.17.1-2+deb12u2_armhf.deb Files: f6c9a2cd46c0f60fcde4d6d8d66538b5 584448 libdevel optional libunbound-dev_1.17.1-2+deb12u2_armhf.deb a20772b7bbabd30f90ed69d6ada5175c 1226296 debug optional libunbound8-dbgsym_1.17.1-2+deb12u2_armhf.deb b8120c88f596154a7b704ba3c6bfae9a 490072 libs optional libunbound8_1.17.1-2+deb12u2_armhf.deb f7a3a677213d5fb63e7a0d48aa647607 192852 debug optional python3-unbound-dbgsym_1.17.1-2+deb12u2_armhf.deb ebc14d3663f6cba0369383c5c301db25 198908 python optional python3-unbound_1.17.1-2+deb12u2_armhf.deb ff1ca2e0cefb3acd476bdc27f8a56a9c 60560 debug optional unbound-anchor-dbgsym_1.17.1-2+deb12u2_armhf.deb 2f975929589911ad4bc78cffef95447e 177984 net optional unbound-anchor_1.17.1-2+deb12u2_armhf.deb a99f1c1e86ada8a86e94ec2a50b1f87f 4527904 debug optional unbound-dbgsym_1.17.1-2+deb12u2_armhf.deb 0b45a419452b9a9c70f25779cffd973e 130392 debug optional unbound-host-dbgsym_1.17.1-2+deb12u2_armhf.deb 8286c9e8084c301b4c5230acf4c10d48 192996 net optional unbound-host_1.17.1-2+deb12u2_armhf.deb c7269849242a0e877c58e96f15b3085c 10484 net optional unbound_1.17.1-2+deb12u2_armhf-buildd.buildinfo dee4140f326c0b61acde8b1ef193c281 831068 net optional unbound_1.17.1-2+deb12u2_armhf.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEKGUG2wrbdK8nNLJy1gmokJM6hDEFAmXL0jMACgkQ1gmokJM6 hDHY3xAAlivAjPxsirmKXgiHp1xyOlmYmGyrN3kQCDRPRxRlS+x+8KEo+3FBaCsx EiOe2lBdiSxVBRzxpUHiNmWjoz7d1MDyWVEeR78Xf9g+Jpr1IRoRUuxXl92r57Yi K63PxTtEm8nUAEXTD8qH+EMXjURU+RMuS6mfZ5QW/nqQ4U1Let7+P0C2A3FeVLYg ooTSTMV2nJk24np13OxDEqTxl9AIc6saYhoHsDwkFuatSrpUMqWCyPRPUWpLuoaa TScd/3kEcUNCZFdX7uX6wkwXV95sfix7fLIvfOPJZznDG+Kej1zyIAmSwq6enhR1 k01CEwwlxiYjbwaiAUJaksri+Fxax8vhuNmYoxvOdz47IuioQ04Zquzs7a4RMvT6 UAEYJUu7zHJyjDuARVKXnPZlsqnRGCr4fWrguSXvaEQfuWImtzLKspJVOuEO/cJD OarPYR/4DqV2lFrZOomAqP6DHSZp7O5bllaS1SzjAgMH8TpK7Ojd1yAyT1ES1wVH cVk38yMuBoShrDhJqZ4y+g+UcMw8/xzqxuV4q0LfXbw/CDaKnA0BC2bb0s+lGK9j jlco/mvLfnhyxx9xv4Ob2fIuEMD0Td9J8aQIonvILDh3wcUobXLbct7+fMCnZYE1 ovli2N0G2Qq47QKegHC4CPViPdCFZAIEQXlsOe9b5C5NfDIta8c= =7cWA -----END PGP SIGNATURE-----