Debian Package Tracker
Register | Log in
Subscribe

dnsjava

Implementation of DNS in Java

Choose email to subscribe with

general
  • source: dnsjava (main)
  • version: 3.6.2-2
  • maintainer: Debian Java Maintainers (archive) (DMD)
  • uploaders: Graziano Obertelli [DMD] – Chris Grzegorczyk [DMD] – Kyo Lee [DMD]
  • arch: all
  • std-ver: 4.7.0
  • VCS: Git (Browse, QA)
versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]
[pool directory]
  • o-o-stable: 2.1.8-2
  • oldstable: 2.1.8-2
  • stable: 2.1.8-2
  • testing: 3.6.2-2
  • unstable: 3.6.2-2
versioned links
  • 2.1.8-2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
  • 3.6.2-2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
binaries
  • libdnsjava-java
action needed
A new upstream version is available: 3.6.3 high
A new upstream version 3.6.3 is available, you should consider packaging it.
Created: 2025-01-28 Last update: 2025-05-29 05:31
Multiarch hinter reports 1 issue(s) normal
There are issues with the multiarch metadata for this package.
  • libdnsjava-java could be marked Multi-Arch: foreign
Created: 2016-09-14 Last update: 2025-05-29 05:01
3 low-priority security issues in bookworm low

There are 3 open security issues in bookworm.

3 issues left for the package maintainer to handle:
  • CVE-2023-50387: (needs triaging) Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote attackers to cause a denial of service (CPU consumption) via one or more DNSSEC responses, aka the "KeyTrap" issue. One of the concerns is that, when there is a zone with many DNSKEY and RRSIG records, the protocol specification implies that an algorithm must evaluate all combinations of DNSKEY and RRSIG records.
  • CVE-2023-50868: (needs triaging) The Closest Encloser Proof aspect of the DNS protocol (in RFC 5155 when RFC 9276 guidance is skipped) allows remote attackers to cause a denial of service (CPU consumption for SHA-1 computations) via DNSSEC responses in a random subdomain attack, aka the "NSEC3" issue. The RFC 5155 specification implies that an algorithm must perform thousands of iterations of a hash function in certain situations.
  • CVE-2024-25638: (needs triaging) dnsjava is an implementation of DNS in Java. Records in DNS replies are not checked for their relevance to the query, allowing an attacker to respond with RRs from different zones. This vulnerability is fixed in 3.6.0.

You can find information about how to handle these issues in the security team's documentation.

Created: 2024-07-23 Last update: 2025-02-27 05:02
Standards version of the package is outdated. wishlist
The package should be updated to follow the last version of Debian Policy (Standards-Version 4.7.2 instead of 4.7.0).
Created: 2025-02-21 Last update: 2025-02-27 13:25
news
[rss feed]
  • [2025-02-06] dnsjava 3.6.2-2 MIGRATED to testing (Debian testing watch)
  • [2025-02-01] Accepted dnsjava 3.6.2-2 (source) into unstable (tony mancill)
  • [2025-01-25] dnsjava 3.6.2-1 MIGRATED to testing (Debian testing watch)
  • [2025-01-19] Accepted dnsjava 3.6.2-1 (source) into unstable (Andreas Tille)
  • [2024-09-14] dnsjava REMOVED from testing (Debian testing watch)
  • [2018-03-18] dnsjava 2.1.8-2 MIGRATED to testing (Debian testing watch)
  • [2018-03-12] Accepted dnsjava 2.1.8-2 (source) into unstable (Emmanuel Bourg)
  • [2017-01-19] dnsjava 2.1.8-1 MIGRATED to testing (Debian testing watch)
  • [2017-01-08] Accepted dnsjava 2.1.8-1 (source all) into unstable (Emmanuel Bourg)
  • [2016-01-11] dnsjava 2.1.7+dfsg-1 MIGRATED to testing (Debian testing watch)
  • [2016-01-05] Accepted dnsjava 2.1.7+dfsg-1 (source all) into unstable (Emmanuel Bourg)
  • [2016-01-03] dnsjava REMOVED from testing (Debian testing watch)
  • [2015-04-27] dnsjava 2.1.7-0.1 MIGRATED to testing (Britney)
  • [2015-04-13] Accepted dnsjava 2.1.7-0.1 (source all) into unstable (Damian Minkov) (signed by: Raphaël Hertzog)
  • [2013-08-06] dnsjava 2.1.5-0.1 MIGRATED to testing (Debian testing watch)
  • [2013-07-26] Accepted dnsjava 2.1.5-0.1 (source all) (Damian Minkov) (signed by: Raphaël Hertzog)
  • [2013-07-08] dnsjava REMOVED from testing (Debian testing watch)
  • [2013-05-05] dnsjava 2.1.4-0.1 MIGRATED to testing (Debian testing watch)
  • [2013-03-26] Accepted dnsjava 2.1.4-0.1 (source all) (Damian Minkov) (signed by: Raphaël Hertzog)
  • [2010-01-08] dnsjava 2.0.8-1 MIGRATED to testing (Debian testing watch)
  • [2009-12-28] Accepted dnsjava 2.0.8-1 (source all) (Chris Grzegorczyk)
bugs [bug history graph]
  • all: 0
links
  • homepage
  • lintian
  • buildd: logs, reproducibility
  • popcon
  • browse source code
  • edit tags
  • other distros
  • security tracker
  • debian patches
ubuntu Ubuntu logo [Information about Ubuntu for Debian Developers]
  • version: 3.6.2-2
  • 1 bug

Debian Package Tracker — Copyright 2013-2025 The Distro Tracker Developers
Report problems to the tracker.debian.org pseudo-package in the Debian BTS.
Documentation — Bugs — Git Repository — Contributing