Debian Package Tracker - knot-resolver

general

source: knot-resolver (main)
version: 5.1.3-1
maintainer: knot-resolver packagers (DMD)
uploaders: Santiago Ruano Rincón [DMD] – Ondřej Surý [DMD] – Daniel Kahn Gillmor [DMD]
arch: all any
std-ver: 4.3.0
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

old-bpo: 3.2.1-3~bpo9+1
stable: 3.2.1-3
testing: 5.1.3-1
unstable: 5.1.3-1

versioned links

2.3.0-3~bpo9+1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
3.2.1-3~bpo9+1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
3.2.1-3: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
5.1.3-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

knot-resolver (3 bugs: 0, 3, 0, 0)
knot-resolver-doc
knot-resolver-module-http (1 bugs: 0, 1, 0, 0)

action needed

Debci reports failed tests high

unstable: pass (log)
The tests ran in 0:01:47
Last run: 2020-07-10 22:35:15 UTC
Previous status: fail

testing: pass (log)
The tests ran in 0:00:36
Last run: 2020-10-23 22:11:49 UTC
Previous status: pass

stable: fail (log)
The tests ran in 0:01:35
Last run: 2020-07-28 08:48:30 UTC
Previous status: fail

Created: 2020-01-03 Last update: 2020-10-26 13:08

lintian reports 4 errors and 22 warnings high

Lintian reports 4 errors and 22 warnings about this package. You should make the package lintian clean getting rid of them.

Created: 2020-09-21 Last update: 2020-09-21 06:02

4 security issues in buster high

There are 4 open security issues in buster.

4 important issues:

CVE-2019-10190: A vulnerability was discovered in DNS resolver component of knot resolver through version 3.2.0 before 4.1.0 which allows remote attackers to bypass DNSSEC validation for non-existence answer. NXDOMAIN answer would get passed through to the client even if its DNSSEC validation failed, instead of sending a SERVFAIL packet. Caching is not affected by this particular bug but see CVE-2019-10191.
CVE-2019-10191: A vulnerability was discovered in DNS resolver of knot resolver before version 4.1.0 which allows remote attackers to downgrade DNSSEC-secure domains to DNSSEC-insecure state, opening possibility of domain hijack using attacks against insecure DNS protocol.
CVE-2019-19331: knot-resolver before version 4.3.0 is vulnerable to denial of service through high CPU utilization. DNS replies with very many resource records might be processed very inefficiently, in extreme cases taking even several CPU seconds for each such uncached message. For example, a few thousand A records can be squashed into one DNS message (limit is 64kB).
CVE-2020-12667: Knot Resolver before 5.1.1 allows traffic amplification via a crafted DNS answer from an attacker-controlled server, aka an "NXNSAttack" issue. This is triggered by random subdomains in the NSDNAME in NS records.

Please fix them.

Created: 2019-07-14 Last update: 2020-09-21 05:22

Multiarch hinter reports 1 issue(s) normal

There are issues with the multiarch metadata for this package.

knot-resolver-module-http could be marked Multi-Arch: same

Created: 2020-02-28 Last update: 2020-10-26 13:30

Issues found with some translations low

Automatic checks made by the Debian l10n team found some issues with the translations contained in this package. You should check the l10n status report for more information.

Issues can be things such as missing translations, problematic translated strings, outdated PO files, unknown languages, etc.

Created: 2020-09-16 Last update: 2020-09-16 03:55

Build log checks report 1 warning low

Build log checks report 1 warning

Created: 2020-02-28 Last update: 2020-02-28 17:07

Standards version of the package is outdated. wishlist

The package should be updated to follow the last version of Debian Policy (Standards-Version 4.5.0 instead of 4.3.0).

Created: 2019-07-08 Last update: 2020-09-14 16:06

testing migrations

This package will soon be part of the auto-knot transition. You might want to ensure that your package is ready for it. You can probably find supplementary information in the debian-release archives or in the corresponding release.debian.org bug.

news

[rss feed]

[2020-09-21] knot-resolver 5.1.3-1 MIGRATED to testing (Debian testing watch)
[2020-09-21] knot-resolver 5.1.3-1 MIGRATED to testing (Debian testing watch)
[2020-09-14] Accepted knot-resolver 5.1.3-1 (source) into unstable (Santiago Ruano Rincón)
[2020-08-18] knot-resolver 5.1.2-3 MIGRATED to testing (Debian testing watch)
[2020-08-12] Accepted knot-resolver 5.1.2-3 (source) into unstable (Santiago Ruano Rincón)
[2020-07-31] Accepted knot-resolver 5.1.2-2 (source) into unstable (Santiago Ruano Rincón)
[2020-07-29] Accepted knot-resolver 5.1.2-1 (source) into unstable (Santiago Ruano Rincón)
[2020-07-10] Accepted knot-resolver 5.1.1-1 (source) into unstable (Santiago Ruano Rincón)
[2020-06-14] Accepted knot-resolver 5.1.1-0.1 (source) into unstable (Daniel Baumann)
[2020-02-28] Accepted knot-resolver 5.0.1-2 (source) into unstable (Ondřej Surý)
[2020-02-22] Accepted knot-resolver 5.0.1-1 (source) into unstable (Ondřej Surý)
[2019-08-29] knot-resolver REMOVED from testing (Debian testing watch)
[2019-03-24] Accepted knot-resolver 3.2.1-3~bpo9+1 (source) into stretch-backports->backports-policy, stretch-backports (Daniel Kahn Gillmor)
[2019-03-24] knot-resolver 3.2.1-3 MIGRATED to testing (Debian testing watch)
[2019-03-08] Accepted knot-resolver 3.2.1-3 (source) into unstable (Daniel Kahn Gillmor)
[2019-03-08] Accepted knot-resolver 3.2.1-2 (source) into unstable (Daniel Kahn Gillmor)
[2019-03-07] Accepted knot-resolver 3.2.1-1~bpo9+1 (source amd64 all) into stretch-backports, stretch-backports (Daniel Kahn Gillmor)
[2019-03-03] knot-resolver 3.2.1-1 MIGRATED to testing (Debian testing watch)
[2019-02-21] Accepted knot-resolver 3.2.1-1 (source) into unstable (Ondřej Surý)
[2018-12-31] knot-resolver 3.2.0-1 MIGRATED to testing (Debian testing watch)
[2018-12-23] Accepted knot-resolver 3.2.0-1 (source amd64 all) into unstable, unstable (Daniel Kahn Gillmor)
[2018-12-01] knot-resolver 3.1.0-1 MIGRATED to testing (Debian testing watch)
[2018-11-20] Accepted knot-resolver 3.1.0-1 (source) into unstable (Daniel Kahn Gillmor)
[2018-11-06] knot-resolver 3.0.0-9 MIGRATED to testing (Debian testing watch)
[2018-09-13] knot-resolver REMOVED from testing (Debian testing watch)
[2018-09-12] Accepted knot-resolver 3.0.0-9 (source) into unstable (Daniel Kahn Gillmor)
[2018-09-12] Accepted knot-resolver 3.0.0-8 (source) into unstable (Daniel Kahn Gillmor)
[2018-09-12] Accepted knot-resolver 3.0.0-7 (source) into unstable (Daniel Kahn Gillmor)
[2018-09-05] Accepted knot-resolver 3.0.0-6 (source) into unstable (Daniel Kahn Gillmor)
[2018-09-01] Accepted knot-resolver 3.0.0-5 (source) into unstable (Daniel Kahn Gillmor)

bugs [bug history graph]

all: 7
RC: 0
I&N: 7
M&W: 0
F&P: 0
patch: 0

links

homepage
lintian (4, 22)
buildd: logs, checks, clang, reproducibility, cross
popcon
browse source code
edit tags
other distros
security tracker
screenshots
l10n (100, -)
debci

ubuntu

[Information about Ubuntu for Debian Developers]

version: 5.1.1-0.1ubuntu1
6 bugs
patches for 5.1.1-0.1ubuntu1