-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 13 Feb 2024 21:15:34 +0100 Source: unbound Architecture: source Version: 1.13.1-1+deb11u2 Distribution: bullseye-security Urgency: high Maintainer: unbound packagers <unbound@packages.debian.org> Changed-By: Salvatore Bonaccorso <carnil@debian.org> Closes: 1063845 Changes: unbound (1.13.1-1+deb11u2) bullseye-security; urgency=high . * Non-maintainer upload by the Security Team. * Address DNSSEC protocol vulnerabilities (Closes: #1063845) - Fix CVE-2023-50387, DNSSEC verification complexity can be exploited to exhaust CPU resources and stall DNS resolvers. - Fix CVE-2023-50868, NSEC3 closest encloser proof can exhaust CPU. Checksums-Sha1: c0201ed9b8890d8fe94e29ca4104fcfd68bf283e 3198 unbound_1.13.1-1+deb11u2.dsc 561522b06943f6d1c33bd78132db1f7020fc4fd1 5976957 unbound_1.13.1.orig.tar.gz f20b17d911dfa8efb58ee412207829cea2d964c4 833 unbound_1.13.1.orig.tar.gz.asc c6ed27f27987beb1550ac25e4c292fae4d3da1f7 44472 unbound_1.13.1-1+deb11u2.debian.tar.xz Checksums-Sha256: 4594320d0d1c8997ce17530763637ae96dcf72ce5d9412a01a9fd71806ac6afe 3198 unbound_1.13.1-1+deb11u2.dsc 8504d97b8fc5bd897345c95d116e0ee0ddf8c8ff99590ab2b4bd13278c9f50b8 5976957 unbound_1.13.1.orig.tar.gz 1ca1fb3db4baa3e831bc42fcecf3eaceb316abf7a2d816dc46d0efcd199f419e 833 unbound_1.13.1.orig.tar.gz.asc 2c0289540d8530d2a7cf377d4fe2ba87f4998a37e452d5b8b4f8d353b89dd2e7 44472 unbound_1.13.1-1+deb11u2.debian.tar.xz Files: 2d1aa1cfbd128149d6432ae421327e31 3198 net optional unbound_1.13.1-1+deb11u2.dsc 0cd660a40d733acc6e7cce43731cac62 5976957 net optional unbound_1.13.1.orig.tar.gz 4c3726440d8271df13ba2189846141e6 833 net optional unbound_1.13.1.orig.tar.gz.asc 93f94d93ed156ca1ede8b9b2aae75d53 44472 net optional unbound_1.13.1-1+deb11u2.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQKmBAEBCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAmXLz2NfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk ZWJpYW4ub3JnAAoJEAVMuPMTQ89EpgAP/R+s8jPMGZF47V1jOg1kaSvjtK/5nDhy ZhvxBBW+JOIMJKluDTHy5T6w7eACTevhuvMDRGUMVcA+tYx0rB1iJQpkkonrsvyk EhkEmmeYVnFlhhYg6atknakAy63bFlV+cIKfT2a2FkA1ZXh1eN88XqHV4zAYk9pe RtnLkaQWgd+myHjIfRKVGWbsV7dJ0FPKogo0rct/y9tzk5ndC0YT5JmDS/8X5dI/ pciFu3yNIBqRdI4MLBzExB4pAKv6TVvDkoJ3T8+3i9ZP+2cjgDDQfFTxBcOUKYd7 1Zgz2Us9ij7ov/iFmSE6EFrxQqWoFKaVvCoqLhV+1l9paeF1i942qZujfpkEuzpm 2bFbfKRsyc6p4MJZImI9mizWxhGpL3AyC8hUHDJeBSUbH/CEl84V4UpIN+8UbihD Wjiik5RP+UjqCDjGHJEc1fat/8J1lOarTwzFX/wI0/bxfyW4pLlciLRzK1FrP3pa gPeb5hVQ4d6WvWnnSnrb1Kd1dX1Hsty2vFFpvto9NuEKHnTx2LbzYR+hS0kn31RL vzi9/jB3ND0ztN+dr8uwLaeTvTq69ssuLjlGOZeqTSwzWhM5t2VEiHkFOt+URVol iEalYs5jmmbbfvqR0INMBfDQW7P7a/Q7/nO1tXT0S1i7OYv0KKqsl21e8k6VwvWA 8+SujWaIIuAN =/SSJ -----END PGP SIGNATURE-----