Your message dated Wed, 14 Feb 2024 00:15:13 +0300
with message-id <[email protected]>
and subject line Re: Bug#1063845: unbound: Package 1.19.1 to fix CVE-2023-50387
and CVE-2023-50868
has caused the Debian Bug report #1063845,
regarding unbound: Package 1.19.1 to fix CVE-2023-50387 and CVE-2023-50868
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1063845: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1063845
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: unbound
Version: 1.18.0-2
Severity: important
Tags: security
X-Debbugs-Cc: Debian Security Team <[email protected]>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Today 2 remote exploitable High Severity CVE's were published and
unbound has released version 1.19.1 to fix those.
Relevant links:
https://fosstodon.org/@nlnetlabs/111924266007688683
https://nlnetlabs.nl/news/2024/Feb/13/unbound-1.19.1-released/
https://kb.isc.org/docs/cve-2023-50387
https://kb.isc.org/docs/cve-2023-50868
I think a Release Critical Severity is more appropriate, but none of
the (by reportbug) presented options were applicable. It seems reportbug
then changed it to 'normal', which I manually changed to 'important'.
Fixing this bug would also fix bug #1051817, #1051818 and #1056631.
Link: https://bugs.debian.org/1051817
Link: https://bugs.debian.org/1051818
Link: https://bugs.debian.org/1056631
- -- System Information:
Debian Release: trixie/sid
APT prefers unstable
APT policy: (500, 'unstable'), (500, 'testing'), (101, 'experimental')
Architecture: amd64 (x86_64)
Kernel: Linux 6.6.13-amd64 (SMP w/16 CPU threads; PREEMPT)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8),
LANGUAGE=en_US:en
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
-----BEGIN PGP SIGNATURE-----
iHUEARYIAB0WIQT1sUPBYsyGmi4usy/XblvOeH7bbgUCZcuATAAKCRDXblvOeH7b
buedAP0QEqqGjjN4ZP8nu+WdKqrUWupLtsaN6FqEyNOd5OSp3QD/Wfh/sE5azFqf
99HKnBGhNVhrnxlNYIPlEjIns5pVDQs=
=thcd
-----END PGP SIGNATURE-----
--- End Message ---
--- Begin Message ---
Version: 1.19.1-1
On Tue, 13 Feb 2024 15:44:35 +0100 Diederik de Haas <[email protected]>
wrote:
Source: unbound
Version: 1.18.0-2
Severity: important
Tags: security
X-Debbugs-Cc: Debian Security Team <[email protected]>
Today 2 remote exploitable High Severity CVE's were published and
unbound has released version 1.19.1 to fix those.
I uploaded 1.19.1 earlier today but I haven't seen this bug report.
Closing it now.
/mjt
--- End Message ---
