DSA-1963-1 unbound -- cryptographic implementation error| ID: oval:org.secpod.oval:def:600257 | Date: (C)2011-05-13 (M)2022-10-10 |
| Class: PATCH | Family: unix |
It was discovered that Unbound, a DNS resolver, does not properly check cryptographic signatures on NSEC3 records. As a result, zones signed with the NSEC3 variant of DNSSEC lose their cryptographic protection. The old stable distribution does not contain an unbound package. For the stable distribution , this problem has been fixed in version 1.0.2-1+lenny1. For the unstable distribution and the testing distribution , this problem has been fixed in version 1.3.4-1. We recommend that you upgrade your unbound package.
