Accepted unbound1.9 1.9.0-2+deb10u2~deb9u1 (source amd64) into oldstable, oldstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Thu, 11 Feb 2021 22:40:26 +0100
Source: unbound1.9
Binary: libunbound8 unbound unbound-anchor unbound-host
Architecture: source amd64
Version: 1.9.0-2+deb10u2~deb9u1
Distribution: stretch-security
Urgency: high
Maintainer: Debian LTS team <debian-lts@lists.debian.org>
Changed-By: Markus Koschany <apo@debian.org>
Description:
libunbound8 - library implementing DNS resolution and validation
unbound - validating, recursive, caching DNS resolver
unbound-anchor - utility to securely fetch the root DNS trust anchor
unbound-host - reimplementation of the 'host' command
Changes:
unbound1.9 (1.9.0-2+deb10u2~deb9u1) stretch-security; urgency=high
.
* Initial release of unbound1.9 maintained by the LTS team.
* Backport unbound 1.9 from Debian 10 "Buster" to Stretch.
* Fix CVE-2020-28935:
Unbound contains a local vulnerability that would allow for a local symlink
attack. When writing the PID file Unbound creates the file if it is not
there, or opens an existing file for writing. In case the file was already
present, it would follow symlinks if the file happened to be a symlink
instead of a regular file.
Checksums-Sha1:
50b16863c888f5b324714b7752950d7bfa321f11 3009 unbound1.9_1.9.0-2+deb10u2~deb9u1.dsc
a81e548852ba5cdd355a1f494a37b8a77481ec5b 5662176 unbound1.9_1.9.0.orig.tar.gz
2294591e4329747783e5d4c0f0d53092e6e4ecc0 26740 unbound1.9_1.9.0-2+deb10u2~deb9u1.debian.tar.xz
61f26281c0192d47ee6801890ddcfa87774d2996 1139662 libunbound8-dbgsym_1.9.0-2+deb10u2~deb9u1_amd64.deb
7f5be3bf715e23f13fd7b037f8b407b7111aa282 467078 libunbound8_1.9.0-2+deb10u2~deb9u1_amd64.deb
5df569de448b75710caa96d37c560d61e38a969e 69040 unbound-anchor-dbgsym_1.9.0-2+deb10u2~deb9u1_amd64.deb
69674ed70c70dd153df113ddb60394a152a79a4e 147952 unbound-anchor_1.9.0-2+deb10u2~deb9u1_amd64.deb
353a368aabb4e7e2660815c10578de00ed450760 4362492 unbound-dbgsym_1.9.0-2+deb10u2~deb9u1_amd64.deb
85d6966c5163cfdb99deb47ec5d7323e09f53e7d 106898 unbound-host-dbgsym_1.9.0-2+deb10u2~deb9u1_amd64.deb
f1c22cb58265877290935eac90149ba6551f0213 160932 unbound-host_1.9.0-2+deb10u2~deb9u1_amd64.deb
45db287cc623c879f53cab08cee5aee45cc39b62 10192 unbound1.9_1.9.0-2+deb10u2~deb9u1_amd64.buildinfo
b7b8f04ac6c2d15856c42b89267371ee00c5f479 803890 unbound_1.9.0-2+deb10u2~deb9u1_amd64.deb
Checksums-Sha256:
e66375846926c92e91936d89ed30c9a5a677254803e4ff6a95587d0adcb768cd 3009 unbound1.9_1.9.0-2+deb10u2~deb9u1.dsc
415af94b8392bc6b2c52e44ac8f17935cc6ddf2cc81edfb47c5be4ad205ab917 5662176 unbound1.9_1.9.0.orig.tar.gz
f596955f0d692284103eddd28556349db2f3f4782499ea9f42c84da892cb6fe4 26740 unbound1.9_1.9.0-2+deb10u2~deb9u1.debian.tar.xz
101bbc6f2ca10728db14bd72cc2d0f5f568c48e6a10fb5b5dba42077c6f7c72e 1139662 libunbound8-dbgsym_1.9.0-2+deb10u2~deb9u1_amd64.deb
f08e170500db34f673e17bec857e5652f924ef62d53955107e5eb77c6bd46ef1 467078 libunbound8_1.9.0-2+deb10u2~deb9u1_amd64.deb
9618911e3dff0dd280e2e99542ab99f16d9fab5066ac5c3ef078207e2a97b790 69040 unbound-anchor-dbgsym_1.9.0-2+deb10u2~deb9u1_amd64.deb
99765cac77e3fa5ebb3c91425f6506159ed04f8759bd68bdb53e1e88a9af5acd 147952 unbound-anchor_1.9.0-2+deb10u2~deb9u1_amd64.deb
5382e4fcda3e247de2c3dd47c6d14688b6424334a91bc51f631a34bffaf3faec 4362492 unbound-dbgsym_1.9.0-2+deb10u2~deb9u1_amd64.deb
c663c560e5a26c59b536fa243a04158704018318a2bba886fb6943d2c08268b8 106898 unbound-host-dbgsym_1.9.0-2+deb10u2~deb9u1_amd64.deb
30d24a63e8e153ef5d5e144afecfef0c96950269553008f3ea4c24d821542701 160932 unbound-host_1.9.0-2+deb10u2~deb9u1_amd64.deb
0e656c0c2a3ea37a12c704018c36d1855991153a368383be0c3eaecf14192d70 10192 unbound1.9_1.9.0-2+deb10u2~deb9u1_amd64.buildinfo
f4566d2378fefde81972b7c06d70dd2621b5b7f6aa1ac558ecd0e11e1ab45547 803890 unbound_1.9.0-2+deb10u2~deb9u1_amd64.deb
Files:
9c1718b91de9cc36f011d9e7e3073b8b 3009 net optional unbound1.9_1.9.0-2+deb10u2~deb9u1.dsc
1026159991a3883518525bc18e25582f 5662176 net optional unbound1.9_1.9.0.orig.tar.gz
bfa2c987316629d08e255f6fb2e3ea22 26740 net optional unbound1.9_1.9.0-2+deb10u2~deb9u1.debian.tar.xz
5cdf8bce9d8517c4ce5c727db4c3f942 1139662 debug extra libunbound8-dbgsym_1.9.0-2+deb10u2~deb9u1_amd64.deb
9e5b781bffb3d81c2bf2837decab8137 467078 libs optional libunbound8_1.9.0-2+deb10u2~deb9u1_amd64.deb
cbedf3c3401f5f357b325c484ae44eaf 69040 debug extra unbound-anchor-dbgsym_1.9.0-2+deb10u2~deb9u1_amd64.deb
a6bf61c9cc9d34bbc880d8f00b2d060d 147952 net optional unbound-anchor_1.9.0-2+deb10u2~deb9u1_amd64.deb
c627d80e0bf8cdbbd8650dc227ec173d 4362492 debug extra unbound-dbgsym_1.9.0-2+deb10u2~deb9u1_amd64.deb
bce38956d3ca3ad816bd3139ffd56da2 106898 debug extra unbound-host-dbgsym_1.9.0-2+deb10u2~deb9u1_amd64.deb
d8228daf670ea590a058887c7820205a 160932 net optional unbound-host_1.9.0-2+deb10u2~deb9u1_amd64.deb
674d28b91fd80a41886210c3050fdf95 10192 net optional unbound1.9_1.9.0-2+deb10u2~deb9u1_amd64.buildinfo
77bfa11b79765d605cdf7c1fabd2f9a1 803890 net optional unbound_1.9.0-2+deb10u2~deb9u1_amd64.deb
-----BEGIN PGP SIGNATURE-----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=XH7g
-----END PGP SIGNATURE-----
Reply to: