Accepted unbound 1.4.22-3+deb8u4 (source amd64) into oldstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Thu, 14 Feb 2019 15:34:06 +0100
Source: unbound
Binary: unbound unbound-anchor unbound-host libunbound2 libunbound-dev python-unbound
Architecture: source amd64
Version: 1.4.22-3+deb8u4
Distribution: jessie-security
Urgency: high
Maintainer: Robert S. Edmonds <edmonds@debian.org>
Changed-By: Markus Koschany <apo@debian.org>
Description:
libunbound-dev - static library, header files, and docs for libunbound
libunbound2 - library implementing DNS resolution and validation
python-unbound - library implementing DNS resolution and validation (Python bindin
unbound - validating, recursive, caching DNS resolver
unbound-anchor - utility to securely fetch the root DNS trust anchor
unbound-host - reimplementation of the 'host' command
Changes:
unbound (1.4.22-3+deb8u4) jessie-security; urgency=high
.
* Non-maintainer upload by the LTS team.
* Fix CVE-2017-15105: Ralph Dolmans and Karst Koymans found a flaw
in the way unbound validated wildcard-synthesized NSEC records.
An improperly validated wildcard NSEC record could be used to prove the
non-existence (NXDOMAIN answer) of an existing wildcard record, or trick
unbound into accepting a NODATA proof. For more information please refer to
the upstream advisory at https://unbound.net/downloads/CVE-2017-15105.txt.
Checksums-Sha1:
96bb78ea0294a53ff954adb337b273d6001366a7 2470 unbound_1.4.22-3+deb8u4.dsc
a56e31e2f3a2fefa3caaad9200dd943d174ca81e 4735801 unbound_1.4.22.orig.tar.gz
8725d6ffb511b4f85c6f898e66597c40e08a183e 21752 unbound_1.4.22-3+deb8u4.debian.tar.xz
39148ac64c9ac48a02dd669ddcceffb389dbcf96 486106 unbound_1.4.22-3+deb8u4_amd64.deb
5e65a89aa3dbee8ad99b089fc7ddd2adbf3f774d 98412 unbound-anchor_1.4.22-3+deb8u4_amd64.deb
e2aa66a88c73afaa86d0464ee84eef19c624a5b2 100304 unbound-host_1.4.22-3+deb8u4_amd64.deb
54fc7466b29a13c8bfe7e3ab6d058bf9ee43c374 301226 libunbound2_1.4.22-3+deb8u4_amd64.deb
6713c3d4eeabf4de1e84761d45caa30f4834fc0d 4700464 libunbound-dev_1.4.22-3+deb8u4_amd64.deb
9420b345b36ae1b9f62f55f1f392cabea375c9fe 111124 python-unbound_1.4.22-3+deb8u4_amd64.deb
Checksums-Sha256:
ab9b06970675d273c7d5eb390591aeb5580dcebd22e527122ea455e767e90824 2470 unbound_1.4.22-3+deb8u4.dsc
1caf5081b2190ecdb23fc4d998b7999e28640c941f53baff7aee03c092a7d29f 4735801 unbound_1.4.22.orig.tar.gz
a669d24771029609fd184cd0a70294e846fd6465ba29b8dc3c0b777e54766dc7 21752 unbound_1.4.22-3+deb8u4.debian.tar.xz
faf7a5108cb6229ea3db98cf91e42bc09def02e373f7d185d81a1c359b8f9920 486106 unbound_1.4.22-3+deb8u4_amd64.deb
8799999e29492c69acb399c6fa5dc0a78369d7b85357d05a846b04b40abf81e8 98412 unbound-anchor_1.4.22-3+deb8u4_amd64.deb
7244b4851ef8704f2d5b06c76febc28ea619046dc09b368cf538d4dd5f16cb2f 100304 unbound-host_1.4.22-3+deb8u4_amd64.deb
30423da90c821a480b26007bee2c72870447080a5258cf798711a53d887aac67 301226 libunbound2_1.4.22-3+deb8u4_amd64.deb
ffbccb7167fcd29ee22bd4bd83a6465548308f9245fda188b53d726483f0a5db 4700464 libunbound-dev_1.4.22-3+deb8u4_amd64.deb
9e3b2ec2979e04e182e9e6e0164ec6513f62bda608a5172b3eac8776791885dd 111124 python-unbound_1.4.22-3+deb8u4_amd64.deb
Files:
2735bbba1c8e87a4f31134356af62730 2470 net optional unbound_1.4.22-3+deb8u4.dsc
59728c74fef8783f8bad1d7451eba97f 4735801 net optional unbound_1.4.22.orig.tar.gz
cca93940eef0283e109db149bdcb078e 21752 net optional unbound_1.4.22-3+deb8u4.debian.tar.xz
f57a4aa17dcf494f81b6c93042024b78 486106 net optional unbound_1.4.22-3+deb8u4_amd64.deb
f5e2ddfb145095ae89cf91e138fef099 98412 net optional unbound-anchor_1.4.22-3+deb8u4_amd64.deb
0bad3e4ec782eed433944cdac8927562 100304 net optional unbound-host_1.4.22-3+deb8u4_amd64.deb
b0d6c538c60f5bda685cdfda5daa8ed8 301226 libs optional libunbound2_1.4.22-3+deb8u4_amd64.deb
1b4aee5291899f9a6d625558dd0b32df 4700464 libdevel optional libunbound-dev_1.4.22-3+deb8u4_amd64.deb
1a15aded786133147785931d5deedfe0 111124 python optional python-unbound_1.4.22-3+deb8u4_amd64.deb
-----BEGIN PGP SIGNATURE-----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=YT8b
-----END PGP SIGNATURE-----