knot-resolver - Debian Package Tracker

general

source: knot-resolver (main)
version: 5.5.0-1
maintainer: knot-resolver packagers (DMD)
uploaders: Jakub Ružička [DMD] [DM] – Santiago Ruano Rincón [DMD] – Ondřej Surý [DMD] – Daniel Kahn Gillmor [DMD]
arch: all amd64 arm64 armel armhf i386 mips mips64el mipsel ppc64 ppc64el
std-ver: 4.6.0
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

o-o-bpo: 3.2.1-3~bpo9+1
oldstable: 3.2.1-3
stable: 5.3.1-1
unstable: 5.5.0-1

versioned links

2.3.0-3~bpo9+1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
3.2.1-3~bpo9+1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
3.2.1-3: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
5.3.1-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
5.4.4-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
5.5.0-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

knot-resolver (2 bugs: 0, 2, 0, 0)
knot-resolver-doc
knot-resolver-module-http (1 bugs: 0, 1, 0, 0)

action needed

The package has not entered testing even though the delay is over normal

The package has not entered testing even though the 5-day delay is over. Check why.

Created: 2022-03-23 Last update: 2022-05-23 23:35

1 new commit since last upload, is it time to release? normal

vcswatch reports that this package seems to have new commits in its VCS but has not yet updated debian/changelog. You should consider updating the Debian changelog and uploading this new version into the archive.

Here are the relevant commit logs:

commit 23e253d778925d0d7d6f8acfbe532421d7801713
Author: Jakub Ružička <jakub.ruzicka@nic.cz>
Date:   Thu Mar 17 19:18:38 2022 +0100

    d/salsa-ci.yml: allow lintian fail in CI
    
    There are many harmless lintian warnings mostly related to bundled docs:
    
    * embedded-javascript-library
    * source-is-missing
    * font-in-non-font-package
    
    I don't have cycles to clean this mess at the moment, but it should be
    done sooner or later.
    
    Until then there is no point in marking whole CI run as failed due to
    lintian's pedantic cries alone, so I'm allowing lintian fail in the CI.

Created: 2021-10-18 Last update: 2022-05-22 01:11

lintian reports 12 warnings normal

Lintian reports 12 warnings about this package. You should make the package lintian clean getting rid of them.

Created: 2021-10-13 Last update: 2022-01-01 04:32

4 low-priority security issues in buster low

There are 4 open security issues in buster.

4 issues left for the package maintainer to handle:

CVE-2019-10190: (needs triaging) A vulnerability was discovered in DNS resolver component of knot resolver through version 3.2.0 before 4.1.0 which allows remote attackers to bypass DNSSEC validation for non-existence answer. NXDOMAIN answer would get passed through to the client even if its DNSSEC validation failed, instead of sending a SERVFAIL packet. Caching is not affected by this particular bug but see CVE-2019-10191.
CVE-2019-10191: (needs triaging) A vulnerability was discovered in DNS resolver of knot resolver before version 4.1.0 which allows remote attackers to downgrade DNSSEC-secure domains to DNSSEC-insecure state, opening possibility of domain hijack using attacks against insecure DNS protocol.
CVE-2019-19331: (needs triaging) knot-resolver before version 4.3.0 is vulnerable to denial of service through high CPU utilization. DNS replies with very many resource records might be processed very inefficiently, in extreme cases taking even several CPU seconds for each such uncached message. For example, a few thousand A records can be squashed into one DNS message (limit is 64kB).
CVE-2020-12667: (needs triaging) Knot Resolver before 5.1.1 allows traffic amplification via a crafted DNS answer from an attacker-controlled server, aka an "NXNSAttack" issue. This is triggered by random subdomains in the NSDNAME in NS records.

You can find information about how to handle these issues in the security team's documentation.

Created: 2021-02-19 Last update: 2022-03-18 01:00

Build log checks report 1 warning low

Build log checks report 1 warning

Created: 2020-02-28 Last update: 2020-02-28 17:07

Standards version of the package is outdated. wishlist

The package should be updated to follow the last version of Debian Policy (Standards-Version 4.6.1 instead of 4.6.0).

Created: 2022-05-11 Last update: 2022-05-11 23:24

testing migrations

excuses:
- Migration status for knot-resolver (- to 5.5.0-1): BLOCKED: Rejected/violates migration policy/introduces a regression
- Issues preventing migration:
- ∙ ∙ Updating knot-resolver would introduce bugs in testing: #1011299
- ∙ ∙ missing build on ppc64el
- ∙ ∙ arch:ppc64el not built yet, autopkgtest delayed there
- ∙ ∙ autopkgtest for knot-resolver/5.5.0-1: amd64: Pass, arm64: Pass, armhf: Pass, i386: Pass, s390x: No test results
- Additional info:
- ∙ ∙ Piuparts tested OK - https://piuparts.debian.org/sid/source/k/knot-resolver.html
- ∙ ∙ 67 days old (needed 5 days)
- Not considered

news

[rss feed]

[2022-03-17] Accepted knot-resolver 5.5.0-1 (source) into unstable (Jakub Ružička)
[2022-03-16] knot-resolver REMOVED from testing (Debian testing watch)
[2022-01-08] knot-resolver 5.4.4-1 MIGRATED to testing (Debian testing watch)
[2022-01-05] Accepted knot-resolver 5.4.4-1 (source) into unstable (Jakub Ružička)
[2021-12-04] knot-resolver 5.4.3-1 MIGRATED to testing (Debian testing watch)
[2021-12-01] Accepted knot-resolver 5.4.3-1 (source) into unstable (Jakub Ružička)
[2021-10-21] knot-resolver 5.4.2-1 MIGRATED to testing (Debian testing watch)
[2021-10-18] Accepted knot-resolver 5.4.2-1 (source) into unstable (Jakub Ružička)
[2021-09-08] knot-resolver 5.4.1-2 MIGRATED to testing (Debian testing watch)
[2021-09-06] Accepted knot-resolver 5.4.1-2 (source) into unstable (Jakub Ružička)
[2021-08-26] Accepted knot-resolver 5.4.1-1 (source amd64 all) into experimental (Jakub Ružička)
[2021-05-02] knot-resolver 5.3.1-1 MIGRATED to testing (Debian testing watch)
[2021-04-12] Accepted knot-resolver 5.3.1-1 (source) into unstable (Santiago Ruano Rincón)
[2021-03-03] Accepted knot-resolver 5.3.0-1 (source) into unstable (Jakub Ružička) (signed by: Santiago Ruano Rincón)
[2021-01-06] knot-resolver 5.2.1-1 MIGRATED to testing (Debian testing watch)
[2020-12-15] Accepted knot-resolver 5.2.1-1 (source) into unstable (Santiago Ruano Rincón)
[2020-12-07] Accepted knot-resolver 5.2.0-2 (source) into unstable (Santiago Ruano Rincón)
[2020-11-20] Accepted knot-resolver 5.2.0-1 (source) into experimental (Jakub Ružička) (signed by: Santiago Ruano Rincón)
[2020-09-21] knot-resolver 5.1.3-1 MIGRATED to testing (Debian testing watch)
[2020-09-21] knot-resolver 5.1.3-1 MIGRATED to testing (Debian testing watch)
[2020-09-14] Accepted knot-resolver 5.1.3-1 (source) into unstable (Santiago Ruano Rincón)
[2020-08-18] knot-resolver 5.1.2-3 MIGRATED to testing (Debian testing watch)
[2020-08-12] Accepted knot-resolver 5.1.2-3 (source) into unstable (Santiago Ruano Rincón)
[2020-07-31] Accepted knot-resolver 5.1.2-2 (source) into unstable (Santiago Ruano Rincón)
[2020-07-29] Accepted knot-resolver 5.1.2-1 (source) into unstable (Santiago Ruano Rincón)
[2020-07-10] Accepted knot-resolver 5.1.1-1 (source) into unstable (Santiago Ruano Rincón)
[2020-06-14] Accepted knot-resolver 5.1.1-0.1 (source) into unstable (Daniel Baumann)
[2020-02-28] Accepted knot-resolver 5.0.1-2 (source) into unstable (Ondřej Surý)
[2020-02-22] Accepted knot-resolver 5.0.1-1 (source) into unstable (Ondřej Surý)
[2019-08-29] knot-resolver REMOVED from testing (Debian testing watch)

bugs [bug history graph]

all: 8
RC: 1
I&N: 6
M&W: 0
F&P: 1
patch: 0

links

homepage
lintian (0, 12)
buildd: logs, checks, clang, cross
popcon
browse source code
edit tags
other distros
security tracker
screenshots
l10n (100, -)
debci

ubuntu

[Information about Ubuntu for Debian Developers]

version: 5.4.4-1
6 bugs